This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/1-V0iD9Yl79iFVm5FV86WWCZ-ms0.roa
File: 1-V0iD9Yl79iFVm5FV86WWCZ-ms0.roa (raw, json)
Hash identifier: JjVTJ884l0cZpxZfgjcy4tGgeNM677Tn9A8grYw1sW0=
Subject key identifier: F9:5D:22:0F:D6:25:EF:D8:85:56:6E:45:57:CE:96:58:26:7E:9A:CD
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 019C38D33AB6D253578606EA145ADF3B3A57
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/1-V0iD9Yl79iFVm5FV86WWCZ-ms0.roa
Signing time: Sat 07 Feb 2026 15:58:13 +0000
ROA not before: Sat 07 Feb 2026 15:58:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 45.11.186.0/24 maxlen: 24
2a05:9080:13::/48 maxlen: 48
2a05:9080:14::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Feb 2026 15:58:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:38:d3:3a:b6:d2:53:57:86:06:ea:14:5a:df:3b:3a:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Feb 7 15:58:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f95d220fd625efd885566e4557ce9658267e9acd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ee:3d:b5:9e:ba:39:53:23:b7:66:30:73:b9:
59:23:9b:46:8d:20:d7:d8:50:67:b7:25:8f:0a:10:
30:bb:55:21:82:aa:d8:2a:66:37:3b:57:e5:3b:86:
e9:62:0e:8f:00:45:43:a5:da:91:0f:fd:31:df:cb:
79:04:3c:b3:56:c5:6e:96:22:86:1c:39:59:e9:3a:
ac:21:59:37:14:0c:b3:9d:fd:d4:85:68:78:04:e6:
ec:17:34:6e:64:85:c2:26:37:42:91:08:4f:a4:bd:
c1:62:bd:5a:83:47:d7:ad:39:93:eb:7c:a3:f1:81:
fe:98:24:b3:ef:ac:ef:ad:b8:20:0a:9e:8b:6e:42:
a9:4b:f1:72:4b:5e:05:f8:76:dd:fa:b2:eb:78:01:
31:f6:c8:76:f6:ef:f5:e6:43:d3:13:48:29:3f:d7:
3c:81:69:58:23:cb:ad:f5:0b:31:da:d0:9a:01:08:
27:46:f2:4e:63:57:96:e6:57:08:7c:bd:85:cb:fc:
7e:23:fe:f1:7d:d6:ef:30:72:ef:bf:f2:08:b3:24:
9c:aa:75:c0:11:ff:45:41:5c:90:18:fd:16:1f:14:
c7:d4:f7:8a:c6:91:11:78:3b:0e:f8:ab:d7:72:aa:
a1:6d:46:0f:9b:f0:4c:4b:99:89:88:2d:0d:cc:09:
f1:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:5D:22:0F:D6:25:EF:D8:85:56:6E:45:57:CE:96:58:26:7E:9A:CD
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/1-V0iD9Yl79iFVm5FV86WWCZ-ms0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.186.0/24
IPv6:
2a05:9080:13::-2a05:9080:14:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
cd:c1:dd:c7:23:9c:b1:80:0e:1e:db:d1:f4:83:83:c8:02:1e:
e6:ca:78:bc:59:19:23:5a:68:93:a8:a8:06:91:60:7e:c5:f7:
ca:fe:d8:1b:51:a7:19:e8:4b:59:f5:74:65:7f:1b:ef:d7:19:
e0:3d:ff:a6:ea:da:da:4e:f0:0b:a9:48:74:75:26:e0:a1:ce:
b7:94:da:1e:34:7e:49:bb:17:55:42:fe:ad:be:a6:ae:db:3d:
55:27:f3:45:00:dd:d4:a8:ca:de:0f:19:cc:7a:a7:09:ba:7c:
32:2e:2a:14:b8:07:88:fc:2e:03:fa:43:88:c3:b9:18:58:be:
4e:83:17:08:7d:20:69:96:7a:02:02:93:d0:4b:9c:cd:d8:55:
17:34:c6:c5:e4:8f:5a:ca:80:51:37:d1:b4:f0:24:70:82:39:
d3:02:50:b2:92:5a:b5:38:e6:ff:f2:4a:5d:62:08:80:6e:2c:
46:ce:34:76:a5:0d:0c:4f:10:fe:f8:ac:9a:07:3c:67:bf:14:
c2:df:9c:5b:f9:67:71:50:2f:cc:38:86:5b:67:a2:18:f1:34:
45:58:43:74:20:68:7c:a9:c7:5a:31:cd:54:8b:52:06:ab:5d:
56:65:56:df:73:76:5c:ba:24:3c:14:fd:84:dc:cf:52:11:9e:
6d:13:df:b0
-----BEGIN CERTIFICATE-----
MIIFGjCCBAKgAwIBAgISAZw40zq20lNXhgbqFFrfOzpXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjM2QwMjJhMjQwY2U3MWUwYTZlMWU5YWFlMDExMmRhODQw
Y2MzNGIwHhcNMjYwMjA3MTU1ODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOTVkMjIwZmQ2MjVlZmQ4ODU1NjZlNDU1N2NlOTY1ODI2N2U5YWNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+49tZ66OVMjt2Ywc7lZI5tGjSDX
2FBntyWPChAwu1UhgqrYKmY3O1flO4bpYg6PAEVDpdqRD/0x38t5BDyzVsVuliKG
HDlZ6TqsIVk3FAyznf3UhWh4BObsFzRuZIXCJjdCkQhPpL3BYr1ag0fXrTmT63yj
8YH+mCSz76zvrbggCp6LbkKpS/FyS14F+Hbd+rLreAEx9sh29u/15kPTE0gpP9c8
gWlYI8ut9Qsx2tCaAQgnRvJOY1eW5lcIfL2Fy/x+I/7xfdbvMHLvv/IIsyScqnXA
Ef9FQVyQGP0WHxTH1PeKxpEReDsO+KvXcqqhbUYPm/BMS5mJiC0NzAnxswIDAQAB
o4ICJjCCAiIwHQYDVR0OBBYEFPldIg/WJe/YhVZuRVfOllgmfprNMB8GA1UdIwQY
MBaAFHw9AiokDOceCm4emq4BEtqEDMNLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYt
MDk0ODk4OWU2ZDU1LzEvMS1WMGlEOVlsNzlpRlZtNUZWODZXV0NaLW1zMC5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvY2YvZmQzNjJmLWFmY2ItNGNmNS05OGM2LTA5NDg5ODllNmQ1
NS8xL2ZEMENLaVFNNXg0S2JoNmFyZ0VTMm9RTXcwcy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjA7BggrBgEFBQcBBwEB/wQsMCowDAQCAAEwBgMEAC0LujAa
BAIAAjAUMBIDBwAqBZCAABMDBwAqBZCAABQwDQYJKoZIhvcNAQELBQADggEBAM3B
3ccjnLGADh7b0fSDg8gCHubKeLxZGSNaaJOoqAaRYH7F98r+2BtRpxnoS1n1dGV/
G+/XGeA9/6bq2tpO8AupSHR1JuChzreU2h40fkm7F1VC/q2+pq7bPVUn80UA3dSo
yt4PGcx6pwm6fDIuKhS4B4j8LgP6Q4jDuRhYvk6DFwh9IGmWegICk9BLnM3YVRc0
xsXkj1rKgFE30bTwJHCCOdMCULKSWrU45v/ySl1iCIBuLEbONHalDQxPEP74rJoH
PGe/FMLfnFv5Z3FQL8w4hltnohjxNEVYQ3QgaHypx1oxzVSLUgarXVZlVt9zdly6
JDwU/YTcz1IRnm0T37A=
-----END CERTIFICATE-----
Generated at Sun Feb 8 00:20:01 2026 by rpki-client