This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/ABBwkEzotHssFvLAUqOqZl36BVo.roa
File: ABBwkEzotHssFvLAUqOqZl36BVo.roa (raw, json)
Hash identifier: dEDcIYfYDWYKiT/mjWB6IYlv7v5dgtX5b4iPv92zXw4=
Subject key identifier: 00:10:70:90:4C:E8:B4:7B:2C:16:F2:C0:52:A3:AA:66:5D:FA:05:5A
Certificate issuer: /CN=07feb9ae0fa8927045f83423743c4a73a27a74a7
Certificate serial: 019B7D5B7D1CDBBAC68FE042E98C1CF3B5EC
Authority key identifier: 07:FE:B9:AE:0F:A8:92:70:45:F8:34:23:74:3C:4A:73:A2:7A:74:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_65rg-oknBF-DQjdDxKc6J6dKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/ABBwkEzotHssFvLAUqOqZl36BVo.roa
Signing time: Fri 02 Jan 2026 06:18:26 +0000
ROA not before: Fri 02 Jan 2026 06:18:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 40913
IP address blocks: 45.158.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/B_65rg-oknBF-DQjdDxKc6J6dKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 20:29:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:5b:7d:1c:db:ba:c6:8f:e0:42:e9:8c:1c:f3:b5:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07feb9ae0fa8927045f83423743c4a73a27a74a7
Validity
Not Before: Jan 2 06:18:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=001070904ce8b47b2c16f2c052a3aa665dfa055a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:53:72:21:5e:84:dd:55:83:8f:6d:31:72:fc:
3c:e5:61:5f:4b:1a:1e:f2:a0:11:e7:24:d9:bd:92:
f6:08:fa:ec:01:c8:9e:15:d4:cf:b6:a0:8b:20:38:
34:50:c1:df:fb:ba:99:31:7f:11:e6:92:a4:d7:a1:
e4:19:dc:7d:65:b2:c1:bb:5a:21:fc:2e:3e:74:6c:
99:e0:10:a6:78:f9:dc:98:4b:ab:55:5d:88:b5:a6:
ae:9c:85:16:10:d8:74:bf:4b:9c:30:8d:27:19:77:
54:87:11:f7:cc:31:4d:16:0d:b9:3f:11:ad:39:19:
13:be:bf:47:55:68:26:bb:e0:7d:8c:70:a3:1b:ad:
22:be:f2:6e:0d:dd:91:5c:33:75:d4:22:a5:35:ff:
52:e9:62:04:bc:92:68:03:e4:e7:9c:0a:65:df:1a:
e2:40:b1:fc:db:f8:10:43:6f:1c:09:80:79:c1:f1:
38:a3:58:b7:30:fb:ad:2b:3e:f1:d5:3f:5b:b6:8d:
38:31:27:5b:7f:a3:ee:2d:32:a5:9b:e9:4b:9a:b4:
38:bc:0b:96:54:7c:83:ad:8c:42:4f:d4:70:70:15:
2d:8e:01:51:e7:40:a3:30:8d:e9:d4:1d:a6:c4:a3:
a2:01:b7:c1:d8:f8:c2:e1:a1:62:83:ef:a5:b9:69:
13:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:10:70:90:4C:E8:B4:7B:2C:16:F2:C0:52:A3:AA:66:5D:FA:05:5A
X509v3 Authority Key Identifier:
keyid:07:FE:B9:AE:0F:A8:92:70:45:F8:34:23:74:3C:4A:73:A2:7A:74:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_65rg-oknBF-DQjdDxKc6J6dKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/ABBwkEzotHssFvLAUqOqZl36BVo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.166.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:c8:c6:a7:15:1c:44:3b:1a:83:0b:ea:8e:98:b0:af:4a:22:
ca:26:c9:d9:45:0a:7c:a6:6f:32:32:4f:ec:f0:ae:d1:7c:16:
d8:4a:29:04:42:79:e2:bb:cc:46:ad:76:c7:5a:1b:99:57:34:
db:78:0c:81:f2:67:b4:3c:43:9d:10:6e:92:be:29:37:47:a8:
e3:0f:d2:a6:2d:aa:57:01:77:a2:49:42:70:c4:f9:45:3b:94:
fb:c4:4d:3e:6d:c6:2b:f1:72:7f:3c:6c:88:80:95:3f:a2:80:
5a:9f:ae:1c:c5:8c:eb:a9:11:18:9b:36:a8:ba:35:54:e3:d1:
73:56:59:1d:7a:2d:aa:c0:61:a5:96:09:e9:98:72:9e:7c:19:
73:0e:a7:47:a8:c3:2e:d8:a0:b8:6d:a0:0d:8c:fc:33:45:16:
53:52:37:76:19:e7:98:ad:28:9f:3e:a1:23:9e:82:4a:64:de:
2e:ab:3d:3c:4d:30:3c:28:49:28:6b:d5:44:35:94:21:68:ad:
4f:d2:29:99:14:bc:de:cb:14:05:0a:87:c3:2b:25:ed:47:ad:
95:c4:be:d1:7c:27:92:81:56:b6:ae:7c:ba:11:37:45:64:5d:
b9:d8:3c:92:c4:d0:30:1e:ef:20:53:9a:1b:5e:29:78:30:31:
18:b2:6e:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 04:46:51 2026 by rpki-client