This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/AcV7Hrww072ovy7NLmkjo0iWjM4.roa
File: AcV7Hrww072ovy7NLmkjo0iWjM4.roa (raw, json)
Hash identifier: h4AGASdibFLsOfyjPmwKo7JqCeLdXrfVvHhvWaZofJA=
Subject key identifier: 01:C5:7B:1E:BC:30:D3:BD:A8:BF:2E:CD:2E:69:23:A3:48:96:8C:CE
Certificate issuer: /CN=e754c347d68d15493de71bb962f0a567e134d603
Certificate serial: 019B79111CBD656F64A5919127D853B61B1E
Authority key identifier: E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/AcV7Hrww072ovy7NLmkjo0iWjM4.roa
Signing time: Thu 01 Jan 2026 10:18:43 +0000
ROA not before: Thu 01 Jan 2026 10:18:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 149440
IP address blocks: 155.254.60.0/24 maxlen: 24
198.105.126.0/24 maxlen: 24
198.105.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.mft
rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Jan 2026 02:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:11:1c:bd:65:6f:64:a5:91:91:27:d8:53:b6:1b:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e754c347d68d15493de71bb962f0a567e134d603
Validity
Not Before: Jan 1 10:18:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=01c57b1ebc30d3bda8bf2ecd2e6923a348968cce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:64:25:77:0b:df:98:ae:cc:8b:13:85:39:28:
24:7a:93:bf:2d:2a:4c:6b:dd:bd:cc:71:29:43:5f:
a0:5d:3c:0e:10:3a:c8:eb:2a:dc:5a:bb:50:54:64:
68:0e:a4:f5:6e:13:13:6b:cc:21:21:5d:b0:7d:9d:
46:6b:8a:f9:95:b0:a5:e7:e7:63:1f:de:6b:b2:2b:
dc:7c:4a:86:b8:d7:3d:7d:fb:ce:42:d1:46:09:43:
3b:3f:14:95:ad:45:72:f0:09:3f:c9:57:ff:39:4f:
bc:16:41:6e:77:4d:c8:77:dd:29:c0:ca:eb:40:c8:
b8:c1:7a:46:0f:4d:01:3d:2a:b5:ce:60:70:93:c1:
be:89:e4:b1:f9:c7:01:59:92:76:0c:6c:e2:0f:b7:
86:d6:6b:d6:bf:11:ea:b8:d6:b4:32:b5:d5:77:1a:
97:71:f6:d7:c7:13:b5:18:f5:25:d1:04:d3:86:84:
af:d9:8d:72:d9:e7:70:62:03:e0:de:68:60:8e:4e:
42:4e:c3:4e:fb:2b:b6:9d:51:00:6d:64:65:74:dd:
4b:59:9d:13:3e:fd:55:df:6c:f1:c9:a9:9c:c9:34:
25:ab:95:26:65:3c:a9:84:57:a8:92:a9:6b:e3:e2:
db:06:08:7f:18:65:ab:ea:ca:28:20:b3:9f:32:b7:
c7:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:C5:7B:1E:BC:30:D3:BD:A8:BF:2E:CD:2E:69:23:A3:48:96:8C:CE
X509v3 Authority Key Identifier:
keyid:E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/AcV7Hrww072ovy7NLmkjo0iWjM4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.254.60.0/24
198.105.126.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:da:30:19:e0:eb:fd:f9:de:cc:be:63:fe:f8:83:00:0f:77:
3d:4c:3f:d9:a7:a7:1e:92:76:a3:6a:55:73:28:e6:54:69:c8:
1c:04:fe:18:97:0a:b6:ba:ec:49:ee:83:5c:cb:a6:b0:73:3c:
3e:43:28:48:af:d3:88:29:20:ca:f6:73:f2:3a:b7:51:42:4d:
3a:d8:e3:76:48:ad:e1:c8:62:e5:5f:b5:5b:2e:40:9f:c1:31:
6e:84:2b:04:13:a2:77:e3:15:16:ac:9f:80:61:e9:01:cc:fb:
07:66:ce:43:98:2d:e6:3b:e5:c9:8f:fd:51:42:30:4e:76:1c:
5a:59:4e:45:7c:90:ba:00:c3:ae:02:74:54:fa:10:fe:69:e2:
ea:b0:ee:c1:5f:4c:ec:2c:e8:c7:17:14:8a:22:8b:db:76:d3:
48:c2:92:c6:64:e3:f6:11:91:06:1e:aa:d4:c6:bd:09:e5:15:
9d:b1:87:d4:c7:b9:67:20:e4:e6:6c:1f:33:e5:33:92:b7:a3:
da:81:92:7f:b5:cb:14:b3:57:62:0c:26:ae:2e:98:08:a8:af:
9d:f4:98:10:3c:1a:1c:19:1d:e7:8d:4c:00:ed:5a:1e:4f:c8:
e5:b7:c7:59:71:45:3f:d2:6c:3e:28:37:7c:c1:60:ba:6f:c9:
d6:0d:ac:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 12:31:58 2026 by rpki-client