This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/4oagPgJG74n6HXB_8ZxEG0Z-zQQ.roa
File: 4oagPgJG74n6HXB_8ZxEG0Z-zQQ.roa (raw, json)
Hash identifier: SihbXUlI6CJuGEx9+oO0M0CfndPW0YeuEcTHzRftuKM=
Subject key identifier: E2:86:A0:3E:02:46:EF:89:FA:1D:70:7F:F1:9C:44:1B:46:7E:CD:04
Certificate issuer: /CN=b39c70f7ce3831b8f2cce89db14a27ddaa0e99c2
Certificate serial: 019B7D5C98343CA1CB4BE6194B669926BC6E
Authority key identifier: B3:9C:70:F7:CE:38:31:B8:F2:CC:E8:9D:B1:4A:27:DD:AA:0E:99:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s5xw9844MbjyzOidsUon3aoOmcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/4oagPgJG74n6HXB_8ZxEG0Z-zQQ.roa
Signing time: Fri 02 Jan 2026 06:19:38 +0000
ROA not before: Fri 02 Jan 2026 06:19:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15830
IP address blocks: 45.130.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.mft
rsync://rpki.ripe.net/repository/DEFAULT/s5xw9844MbjyzOidsUon3aoOmcI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Jan 2026 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:5c:98:34:3c:a1:cb:4b:e6:19:4b:66:99:26:bc:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b39c70f7ce3831b8f2cce89db14a27ddaa0e99c2
Validity
Not Before: Jan 2 06:19:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e286a03e0246ef89fa1d707ff19c441b467ecd04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:97:3e:2d:c7:8d:f8:63:a7:da:7e:72:78:d5:
08:47:7e:e8:ae:42:68:65:86:f5:e8:64:6f:ff:15:
bf:54:bd:02:47:82:df:a0:a8:b4:4d:20:7d:66:4d:
78:e4:a7:2e:a9:6e:8e:29:5b:c6:ea:ed:c9:07:be:
bf:c2:2d:20:b8:5d:46:c0:50:43:f4:17:ea:61:5f:
a0:c9:37:01:55:2a:ee:3b:e2:3b:3e:62:7c:d1:6b:
15:1d:26:11:00:bc:23:9a:b2:5f:39:00:05:51:82:
78:c0:1c:60:78:57:ca:5f:c7:10:93:62:f4:19:86:
77:66:a5:88:00:88:27:96:ac:5f:05:90:20:d5:60:
e2:2e:03:68:fa:5c:a9:2f:9a:91:0d:fd:72:ca:cd:
79:75:75:2d:f4:4b:60:f5:7e:f6:e6:43:07:d4:6f:
f2:c9:23:2e:f5:7e:db:53:5f:87:cd:ee:bb:69:73:
22:f3:c7:46:68:d6:9a:65:10:d9:80:26:0b:24:0e:
4c:0f:35:c8:81:57:9c:52:02:52:5d:c4:8c:a1:69:
e7:19:b9:cf:7d:f2:f7:28:b0:dd:8e:b0:71:6c:49:
62:64:84:6d:66:b0:45:48:54:95:36:56:6d:59:c7:
ad:1c:4a:c7:bb:a7:ad:72:3d:4d:c0:28:3b:a2:c6:
44:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:86:A0:3E:02:46:EF:89:FA:1D:70:7F:F1:9C:44:1B:46:7E:CD:04
X509v3 Authority Key Identifier:
keyid:B3:9C:70:F7:CE:38:31:B8:F2:CC:E8:9D:B1:4A:27:DD:AA:0E:99:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s5xw9844MbjyzOidsUon3aoOmcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/4oagPgJG74n6HXB_8ZxEG0Z-zQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.12.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:59:12:a0:1c:0b:23:c7:73:d1:c5:24:ef:84:36:c6:85:d5:
5b:5d:ae:91:4a:7a:45:38:9f:2f:93:7a:6e:14:ff:49:a8:c7:
3f:2c:cf:bd:33:72:a6:52:e3:ee:f4:4b:7c:83:d9:1a:9b:83:
fb:9c:2e:62:c6:48:31:95:7e:2c:17:a3:3f:61:a2:ce:24:70:
56:3a:a5:8d:a7:15:e7:0a:a3:d7:db:41:b5:a7:af:f1:84:4f:
b5:a4:9a:e3:8b:aa:a2:fd:44:85:89:a9:f1:76:3f:69:b2:f0:
89:2e:ad:3d:6b:c1:28:32:cb:6a:04:b3:1e:d6:27:b2:48:ee:
59:e4:6c:47:f0:29:ad:c9:45:ff:8c:5e:74:bf:d4:90:63:b3:
bb:bd:0a:04:34:26:95:08:55:39:78:0a:0b:a5:c7:38:38:b4:
65:bd:06:5d:88:a5:53:e0:86:43:9a:42:c8:f0:24:f2:7d:7d:
75:62:46:d5:a0:a5:96:50:51:a1:21:bd:1e:0b:98:b3:c0:bd:
e7:a0:6a:81:f5:38:24:78:47:1c:1c:5d:2e:3b:cb:06:ab:3e:
1a:40:ed:39:ca:da:79:e7:24:a0:70:a6:be:10:d8:05:36:9b:
08:f5:98:4f:99:5e:a2:d9:08:0a:9a:eb:ec:bf:1a:6e:dd:70:
ab:c1:07:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 3 04:59:29 2026 by rpki-client