This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/37b362-e6b6-4b18-840e-6f88edd40248/1/0UiKB-W2Swet4yZkwt-cEISTHm8.roa
File: 0UiKB-W2Swet4yZkwt-cEISTHm8.roa (raw, json)
Hash identifier: 21qXUq6giXIzo60sm+LjiePUKIsWVBi36a4kVBUwoeE=
Subject key identifier: D1:48:8A:07:E5:B6:4B:07:AD:E3:26:64:C2:DF:9C:10:84:93:1E:6F
Certificate issuer: /CN=3be5382cf76c1c4f046454dfcb8e555cc9495c80
Certificate serial: 019B7F618BAD23A8B3630AD4DE3C9058D519
Authority key identifier: 3B:E5:38:2C:F7:6C:1C:4F:04:64:54:DF:CB:8E:55:5C:C9:49:5C:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-U4LPdsHE8EZFTfy45VXMlJXIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/37b362-e6b6-4b18-840e-6f88edd40248/1/0UiKB-W2Swet4yZkwt-cEISTHm8.roa
Signing time: Fri 02 Jan 2026 15:44:17 +0000
ROA not before: Fri 02 Jan 2026 15:44:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13113
IP address blocks: 45.82.112.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/37b362-e6b6-4b18-840e-6f88edd40248/1/O-U4LPdsHE8EZFTfy45VXMlJXIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/37b362-e6b6-4b18-840e-6f88edd40248/1/O-U4LPdsHE8EZFTfy45VXMlJXIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/O-U4LPdsHE8EZFTfy45VXMlJXIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:61:8b:ad:23:a8:b3:63:0a:d4:de:3c:90:58:d5:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3be5382cf76c1c4f046454dfcb8e555cc9495c80
Validity
Not Before: Jan 2 15:44:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d1488a07e5b64b07ade32664c2df9c1084931e6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e8:20:7c:3d:0a:a4:82:aa:62:4f:a5:d1:99:
d3:7c:ba:be:ba:95:85:3b:96:f5:e8:43:c9:21:12:
83:5a:6e:62:47:cf:d9:8b:0d:c8:0d:79:29:c7:10:
28:96:27:6e:2d:f5:6c:31:91:c1:23:38:20:f6:55:
1e:40:8d:ad:be:7b:13:c5:82:9c:f9:2f:c5:ef:74:
30:f6:52:f4:28:4e:c7:cc:99:da:69:34:20:96:56:
71:31:a1:b4:b3:ab:34:3d:44:2e:5e:28:7d:84:4f:
75:97:2f:d1:39:8d:68:08:f6:ca:d7:b9:a5:e4:0b:
e8:91:de:43:10:cb:4f:22:1a:86:f3:39:ed:09:31:
e9:89:fb:bd:b8:2d:97:95:72:c9:7e:af:64:94:a9:
77:8e:e1:fe:a3:4c:01:65:99:a7:5b:f2:91:b9:25:
99:eb:6d:69:9a:fc:c4:b0:c2:5b:2d:77:db:86:6d:
86:15:c3:dd:a1:27:df:22:dd:7b:99:cf:72:11:21:
04:b0:8b:3a:a8:51:75:79:4c:ee:95:ec:b4:ad:ac:
af:ca:2d:da:57:64:08:3e:ba:03:be:42:c8:b9:88:
f7:41:c1:48:fe:6f:d7:0d:f5:e3:b2:a4:97:43:d3:
8c:f0:6a:40:58:a8:f3:49:18:bf:13:97:62:8b:73:
2f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:48:8A:07:E5:B6:4B:07:AD:E3:26:64:C2:DF:9C:10:84:93:1E:6F
X509v3 Authority Key Identifier:
keyid:3B:E5:38:2C:F7:6C:1C:4F:04:64:54:DF:CB:8E:55:5C:C9:49:5C:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-U4LPdsHE8EZFTfy45VXMlJXIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/37b362-e6b6-4b18-840e-6f88edd40248/1/0UiKB-W2Swet4yZkwt-cEISTHm8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/37b362-e6b6-4b18-840e-6f88edd40248/1/O-U4LPdsHE8EZFTfy45VXMlJXIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.112.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:43:4c:9b:4c:84:a4:a4:7f:28:80:e2:05:27:46:e0:7d:d3:
e2:04:e7:cb:62:b0:8d:ee:c2:01:b2:4e:f9:56:0f:da:71:a0:
df:fe:f4:dc:d3:e4:02:7f:d4:56:a3:6d:ef:5e:94:3b:81:66:
eb:61:99:7b:0f:f3:cc:0b:c8:f9:ca:da:67:cc:45:c9:6b:c9:
db:9c:5a:4f:9a:6d:61:4b:1f:2f:b7:d1:44:9d:9c:4b:ef:2f:
05:ef:ab:14:d1:aa:6c:3a:4d:87:1c:a4:cd:70:df:55:6f:ff:
11:c1:c4:41:cc:76:5d:3b:1c:01:e2:3f:23:be:ff:33:37:cd:
0b:20:05:c0:56:15:2e:71:2a:fc:a0:47:c8:fe:90:8d:46:c1:
85:43:cc:09:38:a4:17:a7:9f:86:9b:6f:37:9a:56:f3:ff:01:
4e:6a:e6:b6:4b:e0:ce:40:39:78:5d:16:80:e6:51:83:6a:a1:
6a:40:39:8c:93:9e:a3:5b:cf:f2:0d:69:91:34:c9:24:2b:eb:
16:1b:aa:b1:cc:82:3f:18:d0:23:4b:37:31:6c:4d:65:08:bf:
03:41:0d:99:38:b4:b5:07:1c:b8:10:d5:72:28:8f:dc:59:a6:
20:10:80:ff:e0:fb:b5:a3:f4:f1:f8:ba:09:65:13:2c:2a:59:
e2:8c:09:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:50:52 2026 by rpki-client