This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/8JHe7AaBIPNauRvBmwgzSlc2Olk.roa
File: 8JHe7AaBIPNauRvBmwgzSlc2Olk.roa (raw, json)
Hash identifier: +p1NTN9tpOnp47raavb228o9/rb5/ylv96jkBXGbTHQ=
Subject key identifier: F0:91:DE:EC:06:81:20:F3:5A:B9:1B:C1:9B:08:33:4A:57:36:3A:59
Certificate issuer: /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Certificate serial: 019B78347B57E865190D56F43497B77FB4A1
Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/8JHe7AaBIPNauRvBmwgzSlc2Olk.roa
Signing time: Thu 01 Jan 2026 06:17:43 +0000
ROA not before: Thu 01 Jan 2026 06:17:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6762
IP address blocks: 45.149.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 13:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:34:7b:57:e8:65:19:0d:56:f4:34:97:b7:7f:b4:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Validity
Not Before: Jan 1 06:17:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f091deec068120f35ab91bc19b08334a57363a59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0b:69:f2:a9:f0:f7:fc:fa:d5:e6:35:15:ad:
c1:f2:e9:28:69:93:0d:85:65:e6:b9:2b:4c:89:71:
27:1c:55:15:9e:8b:8f:49:ab:69:03:a6:e6:1c:16:
1a:09:77:e7:16:36:dd:80:c9:e9:e6:73:f0:35:3e:
69:29:9a:0e:49:91:01:80:d9:8d:41:53:11:86:62:
fb:29:63:e1:d2:d2:3b:3e:e8:78:8a:d1:c7:6b:18:
60:c6:cf:ce:9d:6a:db:1f:4b:a0:a8:ff:36:67:5b:
21:68:ed:d6:cb:01:6f:d1:33:0f:33:3f:0f:7a:8e:
af:c7:e9:69:09:a8:0a:24:59:10:ec:03:85:00:82:
fc:9c:f1:6c:20:62:2d:05:dc:21:82:b6:f7:02:ee:
d1:c6:dd:d9:cc:f3:da:84:22:4d:c8:1f:73:4d:ac:
88:20:e2:62:b3:64:e5:b9:1c:33:6a:54:55:3d:7a:
ce:02:95:bc:78:5c:3d:a2:07:5b:c4:8b:90:7e:c1:
a6:4b:79:d6:6c:86:36:49:e8:d3:a6:4c:de:d0:fe:
de:ca:6e:e5:26:b9:5b:a8:74:73:90:9b:6b:a7:51:
71:2b:b8:eb:dc:25:ab:20:56:e2:3d:ca:21:52:24:
6d:7c:3a:4c:6c:e0:51:6b:42:70:39:9a:65:94:8c:
f0:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:91:DE:EC:06:81:20:F3:5A:B9:1B:C1:9B:08:33:4A:57:36:3A:59
X509v3 Authority Key Identifier:
keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/8JHe7AaBIPNauRvBmwgzSlc2Olk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.7.0/24
Signature Algorithm: sha256WithRSAEncryption
58:72:f5:66:b2:aa:e4:40:1a:fd:41:93:08:80:fa:f0:aa:bd:
bb:b5:8d:c9:b8:64:e2:f8:bb:76:0d:e2:49:1b:24:4c:83:83:
93:46:29:df:aa:5c:94:28:0b:42:df:06:42:7a:28:39:94:19:
15:8b:ab:7c:ed:67:3e:cb:4a:fe:92:0a:ea:ab:b6:ce:0e:16:
93:72:31:11:92:16:be:13:fa:28:15:a1:bc:a1:9a:84:e7:ba:
40:78:7f:2b:d1:e2:81:ff:7b:1d:81:3f:aa:54:7d:cd:81:57:
b0:4c:b2:c5:0a:53:93:da:9d:e5:b4:08:ac:cb:13:43:18:5c:
36:72:88:4f:33:da:31:ee:15:97:be:c0:09:f3:86:f9:ad:7d:
51:51:9d:55:80:b1:4b:ef:0f:2e:d1:8d:bd:a9:50:33:fc:3c:
b2:fd:c2:4b:f2:35:5b:bd:c9:a5:fc:e3:48:cc:61:3c:0a:aa:
ab:1e:9e:e1:30:20:51:1f:b2:95:f5:02:c7:6a:fa:ba:63:82:
5a:75:43:be:44:24:29:6f:85:aa:1b:b4:cc:e1:39:5a:4c:d2:
81:ea:8c:52:5d:8f:14:77:22:95:b5:77:ec:4b:66:43:04:4f:
0f:a5:9c:ca:33:9c:3f:12:0c:29:31:58:3b:fc:44:dd:bd:96:
39:1f:91:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 19:56:33 2026 by rpki-client