This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/A-kESQFgScEyFER7yotzjt_cbmI.roa
File: A-kESQFgScEyFER7yotzjt_cbmI.roa (raw, json)
Hash identifier: Sgz9hgjLc6iRR3ehOM8Ou3pQvfBdAi4xmWA93UFwJFg=
Subject key identifier: 03:E9:04:49:01:60:49:C1:32:14:44:7B:CA:8B:73:8E:DF:DC:6E:62
Certificate issuer: /CN=a634878281144a46a856003d622f6141ea4e006f
Certificate serial: 019B7E391365BAC33DC212E1E30D1898BDA0
Authority key identifier: A6:34:87:82:81:14:4A:46:A8:56:00:3D:62:2F:61:41:EA:4E:00:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjSHgoEUSkaoVgA9Yi9hQepOAG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/A-kESQFgScEyFER7yotzjt_cbmI.roa
Signing time: Fri 02 Jan 2026 10:20:28 +0000
ROA not before: Fri 02 Jan 2026 10:20:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199821
IP address blocks: 45.154.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/pjSHgoEUSkaoVgA9Yi9hQepOAG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:39:13:65:ba:c3:3d:c2:12:e1:e3:0d:18:98:bd:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a634878281144a46a856003d622f6141ea4e006f
Validity
Not Before: Jan 2 10:20:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=03e90449016049c13214447bca8b738edfdc6e62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:25:e2:79:a4:29:7d:72:57:ec:5d:d9:0d:39:
75:e4:2e:78:b2:60:03:c6:e8:e4:14:bb:a5:7f:c7:
90:f7:4c:7c:fa:f7:2c:82:d1:00:32:5c:c8:c6:30:
d1:70:1e:45:80:15:6a:d0:5e:9f:f3:97:30:04:10:
0f:d5:d3:1c:0f:1a:1c:71:16:2e:c1:a3:dc:19:a1:
65:3a:e7:eb:dd:02:8b:4b:70:46:18:a9:8a:47:8a:
7d:61:3d:9d:f5:a5:90:25:60:9c:ac:8c:f1:f2:33:
cd:70:0b:00:df:2d:4c:7d:aa:3c:2b:53:69:0d:41:
25:d7:48:cf:58:8a:97:8e:2d:d0:6a:b5:63:5a:69:
e8:0a:0c:bc:be:c4:91:a6:23:d8:b3:f0:25:eb:dc:
ba:75:b2:32:4d:8a:70:7f:07:69:03:92:c9:45:ed:
41:1d:2b:4b:25:ce:bb:41:24:84:a6:1e:73:1f:35:
22:c4:72:ac:6c:51:d0:b0:5a:a9:ef:2e:08:e8:31:
6e:a7:64:cc:16:35:43:2a:41:0a:4f:5d:7e:09:8f:
2f:0a:ad:f1:bf:60:8e:33:5c:4d:b7:ce:8a:83:68:
95:25:2f:86:c4:6a:e0:02:90:48:96:87:0b:15:74:
48:73:b3:6b:df:4e:40:4d:1a:4e:d7:fb:99:c0:1c:
0b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:E9:04:49:01:60:49:C1:32:14:44:7B:CA:8B:73:8E:DF:DC:6E:62
X509v3 Authority Key Identifier:
keyid:A6:34:87:82:81:14:4A:46:A8:56:00:3D:62:2F:61:41:EA:4E:00:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjSHgoEUSkaoVgA9Yi9hQepOAG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/A-kESQFgScEyFER7yotzjt_cbmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.234.0/24
Signature Algorithm: sha256WithRSAEncryption
34:06:6f:8e:37:de:36:b8:af:4e:4c:94:8e:c5:bd:aa:24:b0:
76:dd:e6:94:95:3c:e8:15:02:e9:11:27:ca:3c:ae:0d:c6:51:
59:9e:e1:ef:d9:38:db:75:10:1f:fb:d7:b2:69:0e:ec:3f:11:
31:24:c0:dd:97:6a:65:8b:ab:99:e3:3d:6c:05:1e:87:e8:03:
e2:8e:e7:ff:6b:69:4d:bc:bd:f1:e8:c0:ac:8b:95:5f:e3:60:
94:71:96:c5:4b:48:33:05:21:e4:8f:e3:3b:6f:79:ec:fb:8d:
3c:46:b0:89:5b:04:0b:1d:52:cc:08:c9:26:b0:8b:f6:6e:9a:
36:d0:3a:d8:66:a8:6d:43:67:22:b9:5c:ac:bf:fd:2e:73:e9:
7b:99:77:8b:28:35:ac:0d:62:f0:9a:4c:03:31:04:ab:06:1b:
36:c1:13:71:5b:8f:ab:d1:11:d3:e7:b4:eb:e7:53:e9:93:1a:
d6:54:a7:cd:9f:0b:b7:a5:fa:81:52:db:aa:bc:2f:86:f6:b3:
30:51:6e:0a:84:cc:0c:0e:4e:5c:f3:e1:43:b3:f2:ec:16:61:
79:1b:a2:1d:dd:3a:b6:97:45:5e:14:f9:96:10:ba:1e:b6:d7:
6b:9e:9d:b9:a9:be:99:21:0f:8a:b6:7c:0a:37:87:ca:51:a3:
34:9d:e8:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:25:14 2026 by rpki-client