This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/729f92-5f03-4158-90ac-6d428f1c15fd/1/abbbV0XVk995UrsAzYOq3iQxcEk.roa
File: abbbV0XVk995UrsAzYOq3iQxcEk.roa (raw, json)
Hash identifier: 4xNlKWkY5oZiKT7584PwOX/H1wHQW2fuOn1s1+Y8Eus=
Subject key identifier: 69:B6:DB:57:45:D5:93:DF:79:52:BB:00:CD:83:AA:DE:24:31:70:49
Certificate issuer: /CN=189947a9a5d88cc62cc898268f2bcafd6a7ffc5b
Certificate serial: 019B7F13D725AA39CF9E0797F9226A075F36
Authority key identifier: 18:99:47:A9:A5:D8:8C:C6:2C:C8:98:26:8F:2B:CA:FD:6A:7F:FC:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/729f92-5f03-4158-90ac-6d428f1c15fd/1/abbbV0XVk995UrsAzYOq3iQxcEk.roa
Signing time: Fri 02 Jan 2026 14:19:25 +0000
ROA not before: Fri 02 Jan 2026 14:19:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208849
IP address blocks: 45.82.212.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/729f92-5f03-4158-90ac-6d428f1c15fd/1/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/729f92-5f03-4158-90ac-6d428f1c15fd/1/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:13:d7:25:aa:39:cf:9e:07:97:f9:22:6a:07:5f:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=189947a9a5d88cc62cc898268f2bcafd6a7ffc5b
Validity
Not Before: Jan 2 14:19:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69b6db5745d593df7952bb00cd83aade24317049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a8:32:87:a1:a6:92:75:6a:0d:57:03:e7:3f:
0b:46:fe:0f:ae:38:67:5c:75:7c:79:c6:a5:39:29:
cc:c5:c5:07:98:44:66:50:10:4c:e1:3c:1c:1d:fb:
99:9f:c4:b0:74:89:5b:91:42:4a:e3:ff:34:be:87:
da:90:e3:46:d8:90:41:c3:c1:d7:9c:57:6c:a7:93:
e3:82:cd:a1:d7:ce:80:cb:80:be:4d:f3:cd:e5:b9:
df:c9:6d:8a:c1:34:d6:11:ee:ed:38:e2:28:73:c1:
a2:e0:b1:92:9b:73:b4:a8:d6:d4:d5:f4:d7:c5:6b:
5f:fc:8b:88:37:f5:3f:b5:73:75:8f:58:8c:7e:1a:
c3:9f:ef:62:35:ad:d2:83:bd:bc:35:d4:eb:36:bc:
78:32:04:18:d9:4c:89:48:6c:60:4c:ba:8c:85:2f:
70:44:bd:59:76:bc:aa:f8:62:71:6c:d0:10:17:6e:
6f:dc:45:bf:f8:7d:c8:d7:a4:c4:e1:be:77:fd:3e:
d6:f4:8f:b6:bd:39:13:f0:7f:6b:61:85:8f:9d:ec:
2d:57:b7:b3:19:3c:8d:8a:df:ac:e3:4b:13:76:67:
b6:7b:54:d4:9f:64:95:0f:c8:c8:07:d5:c8:6e:19:
5c:4c:50:75:92:87:9b:4f:fc:43:13:2e:6a:a1:f4:
eb:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:B6:DB:57:45:D5:93:DF:79:52:BB:00:CD:83:AA:DE:24:31:70:49
X509v3 Authority Key Identifier:
keyid:18:99:47:A9:A5:D8:8C:C6:2C:C8:98:26:8F:2B:CA:FD:6A:7F:FC:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/729f92-5f03-4158-90ac-6d428f1c15fd/1/abbbV0XVk995UrsAzYOq3iQxcEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/729f92-5f03-4158-90ac-6d428f1c15fd/1/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.212.0/22
Signature Algorithm: sha256WithRSAEncryption
29:6d:9a:59:9c:91:5f:72:ba:f3:be:6c:80:d8:3a:69:e7:be:
cf:5b:f6:d5:96:9c:61:c8:e2:12:76:5b:93:6d:4f:dd:6c:7f:
47:dd:b5:54:33:6a:9b:4e:a5:39:12:ce:7f:df:84:f9:6d:cc:
cd:9f:c4:34:af:f4:3d:f2:93:0d:4f:34:18:cc:08:c0:b2:74:
5d:1c:86:e8:25:5e:e9:47:a6:a8:a2:cc:58:fa:87:1a:2f:c5:
b4:83:ab:9e:f7:84:12:d6:dc:11:59:0e:ed:7e:d4:09:04:2c:
8c:67:ec:ce:c5:9a:4e:31:e9:26:80:19:a1:4a:fd:34:00:08:
d1:4a:a4:e0:d1:ed:23:84:95:6c:a5:c4:51:18:25:cb:a4:81:
3c:23:e6:f4:62:a1:e6:53:ae:65:8e:a4:1c:f2:ab:57:e8:30:
33:c5:ce:91:41:5b:ce:73:52:97:e3:c5:8b:2f:eb:3f:ea:d4:
d3:ba:80:35:e8:03:18:2e:44:a0:00:56:94:b4:dc:42:10:63:
38:6e:b4:e5:7b:99:22:aa:32:08:b3:14:19:b9:ee:90:f3:2e:
d9:08:55:dd:64:4f:40:84:85:5f:22:e0:cc:dc:a2:a3:87:a7:
96:36:cc:ce:82:9a:38:30:d9:72:7d:ca:0a:00:dd:20:5b:6b:
57:95:36:2e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt/E9clqjnPngeX+SJqB182MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4OTk0N2E5YTVkODhjYzYyY2M4OTgyNjhmMmJjYWZkNmE3
ZmZjNWIwHhcNMjYwMTAyMTQxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OWI2ZGI1NzQ1ZDU5M2RmNzk1MmJiMDBjZDgzYWFkZTI0MzE3MDQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKgyh6GmknVqDVcD5z8LRv4Prjhn
XHV8ecalOSnMxcUHmERmUBBM4TwcHfuZn8SwdIlbkUJK4/80vofakONG2JBBw8HX
nFdsp5Pjgs2h186Ay4C+TfPN5bnfyW2KwTTWEe7tOOIoc8Gi4LGSm3O0qNbU1fTX
xWtf/IuIN/U/tXN1j1iMfhrDn+9iNa3Sg728NdTrNrx4MgQY2UyJSGxgTLqMhS9w
RL1Zdryq+GJxbNAQF25v3EW/+H3I16TE4b53/T7W9I+2vTkT8H9rYYWPnewtV7ez
GTyNit+s40sTdme2e1TUn2SVD8jIB9XIbhlcTFB1koebT/xDEy5qofTrIwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGm221dF1ZPfeVK7AM2Dqt4kMXBJMB8GA1UdIwQY
MBaAFBiZR6ml2IzGLMiYJo8ryv1qf/xbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0psSHFhWFlqTVlzeUpnbWp5dktfV3BfX0ZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS83MjlmOTItNWYwMy00MTU4LTkwYWMt
NmQ0MjhmMWMxNWZkLzEvYWJiYlYwWFZrOTk1VXJzQXpZT3EzaVF4Y0VrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS83MjlmOTItNWYwMy00MTU4LTkwYWMtNmQ0MjhmMWMxNWZk
LzEvR0psSHFhWFlqTVlzeUpnbWp5dktfV3BfX0ZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVLUMA0G
CSqGSIb3DQEBCwUAA4IBAQApbZpZnJFfcrrzvmyA2Dpp577PW/bVlpxhyOISdluT
bU/dbH9H3bVUM2qbTqU5Es5/34T5bczNn8Q0r/Q98pMNTzQYzAjAsnRdHIboJV7p
R6aoosxY+ocaL8W0g6ue94QS1twRWQ7tftQJBCyMZ+zOxZpOMekmgBmhSv00AAjR
SqTg0e0jhJVspcRRGCXLpIE8I+b0YqHmU65ljqQc8qtX6DAzxc6RQVvOc1KX48WL
L+s/6tTTuoA16AMYLkSgAFaUtNxCEGM4brTle5kiqjIIsxQZue6Q8y7ZCFXdZE9A
hIVfIuDM3KKjh6eWNszOgpo4MNlyfcoKAN0gW2tXlTYu
-----END CERTIFICATE-----
Generated at Tue Feb 10 00:01:36 2026 by rpki-client