This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/zgpU8TBDuJR1IQgMLNglxvcmzjo.roa
File: zgpU8TBDuJR1IQgMLNglxvcmzjo.roa (raw, json)
Hash identifier: eebzyV9XH2vwUqYsr0RG7N504biY5P6aIdAu4+l1sjQ=
Subject key identifier: CE:0A:54:F1:30:43:B8:94:75:21:08:0C:2C:D8:25:C6:F7:26:CE:3A
Certificate issuer: /CN=e754c347d68d15493de71bb962f0a567e134d603
Certificate serial: 019B79111545D47FB9B01072E0168375ED20
Authority key identifier: E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/zgpU8TBDuJR1IQgMLNglxvcmzjo.roa
Signing time: Thu 01 Jan 2026 10:18:41 +0000
ROA not before: Thu 01 Jan 2026 10:18:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 155.254.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.mft
rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Jan 2026 09:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:11:15:45:d4:7f:b9:b0:10:72:e0:16:83:75:ed:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e754c347d68d15493de71bb962f0a567e134d603
Validity
Not Before: Jan 1 10:18:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ce0a54f13043b8947521080c2cd825c6f726ce3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ce:ca:1b:40:7f:a4:03:7f:6f:35:6a:92:f6:
cb:21:7d:1c:b5:7f:49:5e:4c:f7:5f:64:36:84:e8:
11:0b:b0:4e:23:86:f6:39:f3:41:78:8b:8a:d8:53:
1b:5b:4e:27:b0:1f:d5:6c:a7:80:9a:f7:02:c6:a8:
2f:c6:22:d4:5b:8f:de:ef:f4:53:1c:b2:c1:67:b8:
54:26:9b:c8:68:33:5b:e0:31:29:25:34:2a:e9:ae:
1b:d4:fd:7a:92:ad:72:31:38:af:c2:a7:2b:c0:56:
ea:c1:2f:8a:21:2e:16:3c:fa:61:aa:87:22:ef:88:
78:a7:e7:81:a1:ad:88:8f:4a:a9:d5:bc:a4:35:11:
b4:46:8f:51:b7:03:4c:c2:7c:54:6a:1a:67:40:cf:
86:31:11:99:f1:06:e5:cc:26:b2:b4:0f:8d:5c:9d:
86:4b:03:e0:e1:d5:0f:fa:46:7b:06:15:be:ab:da:
d1:c2:71:70:26:96:99:f7:21:37:2b:12:2c:be:f9:
34:c4:c5:b5:a5:06:a9:e2:75:de:90:61:95:a9:74:
0f:17:c9:87:98:6f:cf:f2:f1:4b:9c:2f:d6:94:6f:
7b:ca:e9:11:68:f0:d2:7a:44:fb:67:2d:3f:cd:67:
2b:b7:42:23:f7:67:88:f7:c5:9b:0c:00:ef:5f:53:
b8:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:0A:54:F1:30:43:B8:94:75:21:08:0C:2C:D8:25:C6:F7:26:CE:3A
X509v3 Authority Key Identifier:
keyid:E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/zgpU8TBDuJR1IQgMLNglxvcmzjo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.254.62.0/24
Signature Algorithm: sha256WithRSAEncryption
29:a4:d5:02:83:05:a3:2b:7d:5a:77:7c:c9:7b:03:c5:09:34:
d6:09:51:33:19:64:45:04:c4:8c:fe:52:d6:ff:e9:b6:35:f1:
85:13:6c:55:cc:2d:d1:3f:08:b8:78:62:6b:99:77:78:13:6b:
42:08:28:a7:e8:d3:3c:18:1d:da:55:a7:e4:ae:4b:29:2c:0f:
f4:2e:2b:b2:3e:23:5e:6f:97:ba:91:b6:27:ee:77:b1:c4:44:
30:21:28:cd:99:ce:8c:e4:b0:b7:16:8f:02:0f:ef:df:db:d2:
ee:75:7f:d6:fe:16:5a:0e:69:17:45:1d:01:46:8c:6c:f4:49:
f2:3e:e9:44:9f:b6:bb:d5:eb:56:0d:78:2c:6c:1e:76:9a:6a:
33:c4:b7:b0:71:68:54:06:a0:06:9b:7c:aa:fa:14:0f:95:b7:
37:b8:6e:1f:4d:ba:8f:96:2d:b8:2f:e5:97:10:b5:27:40:d0:
ee:fc:a0:eb:41:2e:10:c2:15:cc:61:18:47:00:a4:76:5d:40:
76:3c:28:fa:8b:88:0e:ef:4a:66:5b:38:7e:83:e6:01:90:24:
20:a0:7e:27:bc:da:47:b6:a1:cf:f2:40:98:fe:bd:92:e0:24:
83:5c:ee:62:30:31:f8:79:1b:b0:30:fe:58:8b:f4:4c:93:91:
57:89:e7:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 15:06:13 2026 by rpki-client