This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/itgrIp1NxpdNbAgMEeQKpbEmf5o.roa
File: itgrIp1NxpdNbAgMEeQKpbEmf5o.roa (raw, json)
Hash identifier: Js4lM2igXS9YqpQe0RjS4UXqcJs8/ISJx7M/fH+77eg=
Subject key identifier: 8A:D8:2B:22:9D:4D:C6:97:4D:6C:08:0C:11:E4:0A:A5:B1:26:7F:9A
Certificate issuer: /CN=5cf31afc36cb6955007fe97ed4a5e3185d2271ba
Certificate serial: 019BD6150B5B796E0270F3121857D624A178
Authority key identifier: 5C:F3:1A:FC:36:CB:69:55:00:7F:E9:7E:D4:A5:E3:18:5D:22:71:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPMa_DbLaVUAf-l-1KXjGF0icbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/itgrIp1NxpdNbAgMEeQKpbEmf5o.roa
Signing time: Mon 19 Jan 2026 11:47:41 +0000
ROA not before: Mon 19 Jan 2026 11:47:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211439
IP address blocks: 45.134.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/XPMa_DbLaVUAf-l-1KXjGF0icbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 09:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:d6:15:0b:5b:79:6e:02:70:f3:12:18:57:d6:24:a1:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cf31afc36cb6955007fe97ed4a5e3185d2271ba
Validity
Not Before: Jan 19 11:47:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8ad82b229d4dc6974d6c080c11e40aa5b1267f9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:55:2b:6d:dd:34:f9:53:7f:22:46:aa:23:02:
ca:3c:ea:75:46:3e:05:00:05:b4:8f:99:85:58:bd:
47:ff:c2:00:07:be:c6:35:b2:40:34:46:3b:1c:fb:
07:15:de:30:2b:71:0d:31:98:1f:aa:a1:e5:13:a6:
ad:93:9e:fe:24:51:01:51:23:e0:9d:64:96:c6:3f:
85:12:7f:95:b1:6b:91:e6:b6:0e:b0:b4:4b:4e:30:
57:c0:f1:86:aa:80:80:16:1c:5c:00:ab:a2:05:7a:
4d:16:bc:43:50:fc:50:84:da:3e:4f:ed:9b:32:f0:
3a:2b:7b:58:e0:2e:08:07:eb:bd:ec:21:1c:6c:27:
86:56:ec:63:93:94:a9:e2:7b:03:fe:49:47:a0:0d:
83:4c:35:6f:d1:42:0d:08:a8:bf:54:35:25:e3:1b:
6c:ac:fd:ef:6a:03:26:f1:7d:19:4b:3c:94:49:30:
fb:e5:13:25:be:a2:00:2b:3e:40:80:4d:de:6c:f5:
6e:1e:c6:9e:4f:c9:64:b2:d4:60:0c:70:8a:3f:7a:
2f:22:06:2f:49:99:1e:d3:89:c5:25:f6:68:38:08:
ba:3f:50:2d:1f:c9:88:49:23:bb:97:88:04:82:77:
18:c3:3e:4b:d7:63:ae:32:fd:42:f9:b4:e1:3c:74:
d2:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:D8:2B:22:9D:4D:C6:97:4D:6C:08:0C:11:E4:0A:A5:B1:26:7F:9A
X509v3 Authority Key Identifier:
keyid:5C:F3:1A:FC:36:CB:69:55:00:7F:E9:7E:D4:A5:E3:18:5D:22:71:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPMa_DbLaVUAf-l-1KXjGF0icbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/itgrIp1NxpdNbAgMEeQKpbEmf5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.75.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:5a:08:23:50:fa:72:83:c7:bf:83:26:1e:71:ad:29:37:a3:
f6:37:63:4d:6c:fc:c4:64:77:2f:18:0c:e3:5f:9b:bc:c3:b9:
18:a6:93:74:05:1f:32:1e:c6:bd:f2:ba:a0:e5:71:27:40:5b:
85:27:52:d1:11:46:4b:39:bb:71:94:1f:0d:10:ba:2b:8d:c7:
60:3d:24:27:6f:ce:01:e8:a0:bc:c9:9e:7c:4a:8f:b8:08:b9:
a7:53:a3:cb:6c:bd:31:1b:0c:f4:bf:ad:07:ce:5e:80:8c:fb:
9c:2b:6f:bb:51:5d:5d:d2:2c:3b:6a:b0:25:b3:0d:74:3a:54:
61:f0:27:4a:23:03:0c:11:bd:fb:01:97:21:f5:68:85:64:ad:
cc:e5:31:89:66:fb:20:fe:bb:59:8c:77:7d:ab:a9:98:3b:2b:
49:b4:2a:9a:27:55:d5:12:14:35:fe:06:31:fd:41:3f:17:f8:
d3:a7:93:c7:38:0a:67:c2:58:57:b9:ab:91:4d:e8:b3:4a:1c:
c5:ad:3a:0e:c7:ef:ce:f1:ee:e7:4e:3c:02:e9:8d:a7:89:56:
ee:02:a7:50:84:8e:0e:fb:76:b1:0c:7e:a4:f8:08:2d:d4:9e:
aa:bc:4e:50:40:70:0c:86:7a:aa:c9:55:ca:7f:bb:83:bd:e4:
20:40:f2:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 17:08:28 2026 by rpki-client