This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/1-R48_q_CN35h0xlmlBh6-2XmSO4.roa
File: 1-R48_q_CN35h0xlmlBh6-2XmSO4.roa (raw, json)
Hash identifier: y+tkpuRHnjGKUwgJc3HfjgrQdhUUYTGwjBCNliuc7wU=
Subject key identifier: F9:1E:3C:FE:AF:C2:37:7E:61:D3:19:66:94:18:7A:FB:65:E6:48:EE
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 019B7BA4A4AACCED3BC17110DA7A79A46DD2
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/1-R48_q_CN35h0xlmlBh6-2XmSO4.roa
Signing time: Thu 01 Jan 2026 22:19:06 +0000
ROA not before: Thu 01 Jan 2026 22:19:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212667
IP address blocks: 45.10.109.0/24 maxlen: 24
45.11.212.0/24 maxlen: 24
45.88.208.0/24 maxlen: 24
45.88.211.0/24 maxlen: 24
176.53.187.0/24 maxlen: 24
193.56.185.0/24 maxlen: 24
193.160.211.0/24 maxlen: 24
194.32.124.0/24 maxlen: 24
194.32.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 18:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:a4:a4:aa:cc:ed:3b:c1:71:10:da:7a:79:a4:6d:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Jan 1 22:19:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f91e3cfeafc2377e61d3196694187afb65e648ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:85:f1:59:3d:6e:dd:05:19:f6:3e:24:c3:09:
ff:6c:b6:2e:12:31:db:78:ae:7c:8e:45:8b:6f:86:
b5:e7:87:88:78:1c:5f:fa:ce:d3:11:14:74:24:90:
2d:61:3c:00:f3:21:d9:51:2a:fb:d2:be:f2:fd:63:
c1:79:da:3f:55:8c:ae:bf:a5:4a:3f:26:e3:44:e2:
04:ee:cb:87:07:1f:7e:a4:f5:93:cc:06:0b:92:37:
de:58:9f:13:fe:04:51:d5:f5:32:77:55:90:41:8a:
62:96:90:d5:08:f5:b4:0b:4f:ca:60:5a:83:17:99:
0a:1c:65:60:ae:a2:53:4b:f3:49:de:1b:85:19:a4:
db:08:d3:ff:be:49:6f:65:f2:ec:94:45:47:5b:9d:
6d:5c:5c:a2:43:47:ec:ea:0c:2f:cb:36:4c:1a:f0:
b2:03:12:d0:5a:72:b6:42:7c:87:bc:68:99:43:2e:
97:65:aa:af:d5:d3:dd:97:e1:95:7f:34:df:c4:70:
e0:c8:3d:06:b5:05:43:9e:0b:5a:40:de:db:5e:16:
5b:4b:2c:31:6c:20:e1:a2:f8:e9:25:89:9a:87:73:
bc:86:0d:1a:d0:c4:56:72:bc:a4:60:d1:b4:e5:b8:
06:14:bc:77:a1:b3:cf:41:ca:bb:78:ae:b4:96:b6:
d8:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:1E:3C:FE:AF:C2:37:7E:61:D3:19:66:94:18:7A:FB:65:E6:48:EE
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/1-R48_q_CN35h0xlmlBh6-2XmSO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.109.0/24
45.11.212.0/24
45.88.208.0/24
45.88.211.0/24
176.53.187.0/24
193.56.185.0/24
193.160.211.0/24
194.32.124.0/24
194.32.126.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:c7:a6:e4:4e:df:81:bf:1e:bc:8c:3a:8e:b0:91:e0:e9:62:
d5:fc:63:2b:16:57:e4:86:d8:67:6d:0f:30:f8:ac:37:56:ad:
f7:a0:ca:61:8f:25:0a:2f:6c:b8:bf:e4:98:1d:84:0d:1c:d0:
10:ea:72:6b:ac:06:ec:1f:cb:98:43:fc:f5:07:8a:af:01:d3:
73:5c:83:c6:20:26:c9:1a:cf:14:74:a9:57:58:02:8f:3f:04:
16:7c:28:83:b6:f9:ab:c6:e0:87:b1:a7:5f:e2:4a:5f:ca:fc:
b6:09:ea:9e:26:85:82:bb:97:2e:6c:01:ba:79:0c:0b:13:46:
3b:2c:a1:93:14:30:6d:98:76:5a:eb:a3:f4:6b:01:ed:8d:97:
d0:27:59:af:6f:b9:76:b0:6b:a5:bd:ab:c3:88:ba:ca:e7:02:
6f:c1:74:0a:ef:b3:5c:d3:b9:62:a7:29:a1:15:55:ad:1a:3d:
f0:8c:29:94:89:88:01:7b:27:fe:b5:1e:43:68:27:3c:86:b6:
3f:94:4d:38:08:a4:b7:db:16:e5:a6:54:92:f4:f1:2b:bb:c1:
b9:1a:26:dc:c0:bf:2c:76:e5:ad:96:41:7d:41:a6:5d:3b:59:
94:47:b6:39:b1:14:41:2c:e2:3f:a9:d3:ed:f1:29:2a:79:b0:
0a:fc:f9:9e
-----BEGIN CERTIFICATE-----
MIIFLjCCBBagAwIBAgISAZt7pKSqzO07wXEQ2np5pG3SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlYmJmMzE3ZTVmYWY1ZWYwMmM5Y2NlNzk1MjdkNWU3NGI4
YWJjYzUwHhcNMjYwMTAxMjIxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOTFlM2NmZWFmYzIzNzdlNjFkMzE5NjY5NDE4N2FmYjY1ZTY0OGVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0IXxWT1u3QUZ9j4kwwn/bLYuEjHb
eK58jkWLb4a154eIeBxf+s7TERR0JJAtYTwA8yHZUSr70r7y/WPBedo/VYyuv6VK
PybjROIE7suHBx9+pPWTzAYLkjfeWJ8T/gRR1fUyd1WQQYpilpDVCPW0C0/KYFqD
F5kKHGVgrqJTS/NJ3huFGaTbCNP/vklvZfLslEVHW51tXFyiQ0fs6gwvyzZMGvCy
AxLQWnK2QnyHvGiZQy6XZaqv1dPdl+GVfzTfxHDgyD0GtQVDngtaQN7bXhZbSywx
bCDhovjpJYmah3O8hg0a0MRWcrykYNG05bgGFLx3obPPQcq7eK60lrbYJQIDAQAB
o4ICOjCCAjYwHQYDVR0OBBYEFPkePP6vwjd+YdMZZpQYevtl5kjuMB8GA1UdIwQY
MBaAFO678xfl+vXvAsnM55Un1edLirzFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMt
NmZlOWJmNjA1NjFjLzEvMS1SNDhfcV9DTjM1aDB4bG1sQmg2LTJYbVNPNC5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvYmYvNmRlYzYzLWI5ZDktNDgwYi1hZWIzLTZmZTliZjYwNTYx
Yy8xLzdydnpGLVg2OWU4Q3ljem5sU2ZWNTB1S3ZNVS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjBPBggrBgEFBQcBBwEB/wRAMD4wPAQCAAEwNgMEAC0KbQME
AC0L1AMEAC1Y0AMEAC1Y0wMEALA1uwMEAME4uQMEAMGg0wMEAMIgfAMEAMIgfjAN
BgkqhkiG9w0BAQsFAAOCAQEAfMem5E7fgb8evIw6jrCR4Oli1fxjKxZX5IbYZ20P
MPisN1at96DKYY8lCi9suL/kmB2EDRzQEOpya6wG7B/LmEP89QeKrwHTc1yDxiAm
yRrPFHSpV1gCjz8EFnwog7b5q8bgh7GnX+JKX8r8tgnqniaFgruXLmwBunkMCxNG
OyyhkxQwbZh2Wuuj9GsB7Y2X0CdZr2+5drBrpb2rw4i6yucCb8F0Cu+zXNO5Yqcp
oRVVrRo98IwplImIAXsn/rUeQ2gnPIa2P5RNOAikt9sW5aZUkvTxK7vBuRom3MC/
LHblrZZBfUGmXTtZlEe2ObEUQSziP6nT7fEpKnmwCvz5ng==
-----END CERTIFICATE-----
Generated at Tue Jan 20 02:44:54 2026 by rpki-client