This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/Avmt7B0UPDejT6QKb4EsmR1pX0w.roa
File: Avmt7B0UPDejT6QKb4EsmR1pX0w.roa (raw, json)
Hash identifier: 4ku+grxwZOqu3+RI5WNyX4UnoohNAtJobww7qJ20FJ0=
Subject key identifier: 02:F9:AD:EC:1D:14:3C:37:A3:4F:A4:0A:6F:81:2C:99:1D:69:5F:4C
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 019C2E1E2417DF5F30DB4B437D5C90C341EB
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/Avmt7B0UPDejT6QKb4EsmR1pX0w.roa
Signing time: Thu 05 Feb 2026 14:04:13 +0000
ROA not before: Thu 05 Feb 2026 14:04:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 33993
IP address blocks: 45.153.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:2e:1e:24:17:df:5f:30:db:4b:43:7d:5c:90:c3:41:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Feb 5 14:04:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=02f9adec1d143c37a34fa40a6f812c991d695f4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:72:6e:65:8e:0b:8d:39:6e:60:c4:8a:04:05:
b3:66:f1:ec:39:36:e3:22:7f:08:94:87:f0:4d:cb:
24:91:ec:a0:d6:3d:62:cb:6d:0c:a1:12:2d:18:ef:
76:9f:1d:cc:ee:23:ac:68:85:9f:07:f1:fd:b3:31:
98:b2:38:74:4a:6a:a9:52:c2:45:96:ba:13:27:7f:
c7:ed:c0:c3:99:a2:97:9a:b7:77:63:89:b8:72:04:
e9:2e:64:a6:5e:ff:d6:89:1f:c5:e9:e4:8d:b8:9a:
ac:07:11:7a:4b:a9:c1:2a:12:97:b0:3e:a5:42:20:
49:57:49:46:92:2a:bd:3b:19:80:d1:10:99:db:b4:
6e:56:79:f5:a0:fe:3d:ae:2d:f6:3e:82:16:72:a9:
ea:ad:83:2b:79:eb:a1:69:0e:1d:e3:31:8b:5d:a9:
ae:0a:78:95:89:91:a5:83:12:f5:d0:7b:d1:b4:7c:
0b:d3:6e:4c:37:15:22:1e:73:c1:74:4c:e0:00:e3:
91:59:bc:46:2d:2e:dc:f4:e6:16:48:91:0a:a4:d6:
3f:26:2b:29:1d:83:a0:4b:9c:98:71:6b:0b:28:93:
58:89:f0:e2:7e:79:06:6f:8e:a5:99:b5:5e:0a:67:
dc:2c:1c:b8:b6:eb:7d:2a:8c:c8:2a:09:1a:fa:ec:
63:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:F9:AD:EC:1D:14:3C:37:A3:4F:A4:0A:6F:81:2C:99:1D:69:5F:4C
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/Avmt7B0UPDejT6QKb4EsmR1pX0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.231.0/24
Signature Algorithm: sha256WithRSAEncryption
45:ed:97:4e:8e:72:d4:82:b9:8e:98:ca:db:59:47:f2:ed:f3:
7c:b0:52:ec:71:67:e0:b6:eb:57:9a:fb:a3:01:a9:2e:89:0f:
9e:28:66:0d:9d:d9:d5:2e:ea:96:ca:46:51:fa:dd:e8:ed:4f:
de:d0:cb:18:46:b3:a4:1a:ea:e1:9a:a4:ec:71:78:fb:b8:f7:
f0:5e:f6:42:e7:01:9d:51:51:86:45:66:d5:70:64:e0:ba:35:
8b:66:76:ef:8c:ee:50:01:e6:ba:2e:46:3a:37:b1:62:bd:49:
6e:e0:6a:1a:12:d2:d0:69:d0:b6:4a:53:40:93:f6:ee:f4:23:
26:52:15:e1:b6:24:54:7a:ab:3f:fc:ef:5b:47:e8:1c:09:8d:
70:d1:63:9a:0c:fb:1c:7f:09:69:77:5a:70:2e:c2:b0:82:5b:
72:82:9e:78:95:5c:eb:da:eb:b2:b0:45:29:71:e8:0c:ae:4a:
8c:ea:1a:80:ca:4b:74:03:e2:68:4b:ae:8d:30:9b:43:4a:08:
ea:43:3b:7a:0f:94:87:78:69:97:65:77:fa:6a:cc:ee:bb:2b:
9b:e1:e9:f1:0c:03:2f:f3:4b:00:56:89:ff:d7:ec:89:ed:70:
2a:9c:ec:eb:5d:b0:77:4c:22:67:bc:c6:54:24:fb:36:b5:f9:
f9:db:26:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 05:33:09 2026 by rpki-client