This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/3twgvlIVw9ptEB7T2KZnUnT8VVo.roa
File: 3twgvlIVw9ptEB7T2KZnUnT8VVo.roa (raw, json)
Hash identifier: fPO1pNSlozDtIQbWzDpZh46V++UWThYLa+YUUwdLOVQ=
Subject key identifier: DE:DC:20:BE:52:15:C3:DA:6D:10:1E:D3:D8:A6:67:52:74:FC:55:5A
Certificate issuer: /CN=bdb83e99bf7254f948057a5e981be6fa5c2054dd
Certificate serial: 019B7AC7F35E1F3331045AFE9A622E6717B3
Authority key identifier: BD:B8:3E:99:BF:72:54:F9:48:05:7A:5E:98:1B:E6:FA:5C:20:54:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vbg-mb9yVPlIBXpemBvm-lwgVN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/3twgvlIVw9ptEB7T2KZnUnT8VVo.roa
Signing time: Thu 01 Jan 2026 18:18:02 +0000
ROA not before: Thu 01 Jan 2026 18:18:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61317
IP address blocks: 45.81.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vbg-mb9yVPlIBXpemBvm-lwgVN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Jan 2026 03:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:c7:f3:5e:1f:33:31:04:5a:fe:9a:62:2e:67:17:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdb83e99bf7254f948057a5e981be6fa5c2054dd
Validity
Not Before: Jan 1 18:18:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dedc20be5215c3da6d101ed3d8a6675274fc555a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4c:dd:6f:90:dd:ad:2f:1c:36:d1:f6:2e:28:
40:10:a5:8c:fa:83:b3:6d:05:0e:ca:98:85:a1:e7:
bc:8e:37:8f:ab:c2:45:5c:25:00:f9:54:86:be:c8:
6c:dc:ba:88:01:b2:89:5d:d9:41:84:c7:8c:4e:a0:
4a:30:13:69:f2:04:0e:25:26:f2:41:6b:03:cb:3b:
71:68:00:b4:33:51:1f:6d:8f:42:59:08:b3:d9:8c:
ed:2b:23:92:e3:b5:68:bd:73:57:e5:f1:7d:e0:b8:
6f:08:3a:20:50:3e:4b:bd:35:b5:d7:ed:d8:03:c3:
5f:3e:03:15:f9:e8:6a:9c:97:d1:d6:4e:9b:7e:50:
0e:f4:2b:0e:8c:48:b6:97:d3:a7:49:ac:e2:dc:34:
42:43:24:ee:97:4d:bc:2b:40:41:7a:e4:86:1c:2f:
08:ec:f9:e4:fd:72:60:a8:08:d3:19:a0:6c:73:e1:
e5:a6:3c:44:28:b1:72:21:f3:55:e7:25:dc:83:86:
f2:cd:81:0c:47:6a:78:76:2d:c7:60:20:8a:9d:62:
02:55:ee:b0:ad:20:c9:25:93:5d:9c:53:47:47:67:
0f:77:6a:3b:b3:1e:0a:28:3d:71:a6:64:65:c3:00:
b5:42:fa:ed:cb:1c:46:29:ab:ff:b5:2c:02:d0:e7:
33:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:DC:20:BE:52:15:C3:DA:6D:10:1E:D3:D8:A6:67:52:74:FC:55:5A
X509v3 Authority Key Identifier:
keyid:BD:B8:3E:99:BF:72:54:F9:48:05:7A:5E:98:1B:E6:FA:5C:20:54:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vbg-mb9yVPlIBXpemBvm-lwgVN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/3twgvlIVw9ptEB7T2KZnUnT8VVo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.116.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:0c:7d:00:ce:fa:ed:47:d5:2f:b8:62:66:ea:a0:ea:e6:7f:
73:bb:25:4f:88:f4:18:33:2f:9a:de:b6:55:f2:c9:29:57:7f:
a9:80:b0:1a:a1:22:8f:81:64:ac:07:0e:42:99:13:d2:30:30:
d1:b9:30:ea:46:fd:cf:38:be:b8:47:18:9c:f8:d1:c2:ff:97:
ce:ef:2d:cd:24:fd:bd:3d:29:91:8b:66:e0:57:01:d0:a0:76:
6d:69:0c:dc:f2:5a:79:98:45:62:a5:52:c1:86:11:5c:44:62:
02:4d:b4:b4:3f:03:38:6c:05:6e:1e:7f:cc:9e:35:e2:f1:75:
57:4a:cb:55:eb:42:71:36:a3:e7:8f:c5:76:19:31:94:72:78:
41:25:d2:61:aa:2f:94:ab:02:86:b2:12:45:c4:ed:0f:8b:48:
6f:74:a8:7b:b7:e4:28:b6:1d:5b:70:79:38:bb:d3:ab:7b:fa:
e5:81:a7:3a:ee:51:d6:d2:bd:3b:21:8d:8d:7b:a4:65:f6:74:
f9:43:c7:0a:17:73:69:b7:59:79:70:31:b5:45:d7:72:5b:0e:
91:7d:5f:e9:55:c2:07:60:6f:1b:d6:12:90:bd:f1:26:a4:6c:
aa:4b:4d:44:35:bb:bc:e8:3e:64:e1:5b:7b:a5:62:47:50:bf:
65:6a:d5:28
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt6x/NeHzMxBFr+mmIuZxezMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkYjgzZTk5YmY3MjU0Zjk0ODA1N2E1ZTk4MWJlNmZhNWMy
MDU0ZGQwHhcNMjYwMTAxMTgxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZWRjMjBiZTUyMTVjM2RhNmQxMDFlZDNkOGE2Njc1Mjc0ZmM1NTVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0zdb5DdrS8cNtH2LihAEKWM+oOz
bQUOypiFoee8jjePq8JFXCUA+VSGvshs3LqIAbKJXdlBhMeMTqBKMBNp8gQOJSby
QWsDyztxaAC0M1EfbY9CWQiz2YztKyOS47VovXNX5fF94LhvCDogUD5LvTW11+3Y
A8NfPgMV+ehqnJfR1k6bflAO9CsOjEi2l9OnSazi3DRCQyTul028K0BBeuSGHC8I
7Pnk/XJgqAjTGaBsc+HlpjxEKLFyIfNV5yXcg4byzYEMR2p4di3HYCCKnWICVe6w
rSDJJZNdnFNHR2cPd2o7sx4KKD1xpmRlwwC1QvrtyxxGKav/tSwC0OczxQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFN7cIL5SFcPabRAe09imZ1J0/FVaMB8GA1UdIwQY
MBaAFL24Ppm/clT5SAV6Xpgb5vpcIFTdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmJnLW1iOXlWUGxJQlhwZW1Cdm0tbHdnVk4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81ZTIwNWEtZWMwYS00ZmVlLWFlZjEt
ZTQ5NWFhYTBjYWMwLzEvM3R3Z3ZsSVZ3OXB0RUI3VDJLWm5VblQ4VlZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC81ZTIwNWEtZWMwYS00ZmVlLWFlZjEtZTQ5NWFhYTBjYWMw
LzEvdmJnLW1iOXlWUGxJQlhwZW1Cdm0tbHdnVk4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVF0MA0G
CSqGSIb3DQEBCwUAA4IBAQB9DH0AzvrtR9UvuGJm6qDq5n9zuyVPiPQYMy+a3rZV
8skpV3+pgLAaoSKPgWSsBw5CmRPSMDDRuTDqRv3POL64Rxic+NHC/5fO7y3NJP29
PSmRi2bgVwHQoHZtaQzc8lp5mEVipVLBhhFcRGICTbS0PwM4bAVuHn/MnjXi8XVX
SstV60JxNqPnj8V2GTGUcnhBJdJhqi+UqwKGshJFxO0Pi0hvdKh7t+Qoth1bcHk4
u9Ore/rlgac67lHW0r07IY2Ne6Rl9nT5Q8cKF3Npt1l5cDG1RddyWw6RfV/pVcIH
YG8b1hKQvfEmpGyqS01ENbu86D5k4Vt7pWJHUL9latUo
-----END CERTIFICATE-----
Generated at Thu Jan 8 12:59:40 2026 by rpki-client