This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/fIwE913q7Z06naykIoTvGwGkXuY.roa
File: fIwE913q7Z06naykIoTvGwGkXuY.roa (raw, json)
Hash identifier: EmEG00KHS79oeuuGgXEcyv9se/C+NigaZ2i4jZMNHk4=
Subject key identifier: 7C:8C:04:F7:5D:EA:ED:9D:3A:9D:AC:A4:22:84:EF:1B:01:A4:5E:E6
Certificate issuer: /CN=e15808f3f921bc8c3eea87c7584c584c1000b051
Certificate serial: 019B77C6D86CEFFF00FBCA9934E84A8B038A
Authority key identifier: E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/fIwE913q7Z06naykIoTvGwGkXuY.roa
Signing time: Thu 01 Jan 2026 04:17:58 +0000
ROA not before: Thu 01 Jan 2026 04:17:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5650
IP address blocks: 45.83.132.0/22 maxlen: 24
45.83.152.0/22 maxlen: 24
45.139.44.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Jan 2026 01:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c6:d8:6c:ef:ff:00:fb:ca:99:34:e8:4a:8b:03:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15808f3f921bc8c3eea87c7584c584c1000b051
Validity
Not Before: Jan 1 04:17:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7c8c04f75deaed9d3a9daca42284ef1b01a45ee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6b:50:b8:ea:2c:1c:5d:4b:22:48:34:8a:cf:
07:e5:0b:aa:24:af:0a:26:9a:56:9d:e4:64:d1:58:
6a:95:e9:18:dc:44:a7:93:82:2f:c8:fd:fc:1c:5a:
41:ec:8c:da:c1:b8:8b:a1:ac:17:db:c9:9c:77:31:
76:c6:62:65:bd:af:d2:2d:0c:8a:c3:8e:6d:34:29:
9a:94:40:97:98:62:82:57:2f:c4:11:7d:97:d4:dd:
46:ac:4a:45:af:1d:c2:87:c5:f9:87:6e:9a:e8:0b:
3c:9b:05:93:d7:63:5f:e4:c7:fa:cf:06:12:51:6b:
e1:6b:75:db:67:9c:9b:20:d6:01:1e:a5:95:a8:92:
93:6f:1a:45:bd:81:cb:78:b6:8a:9d:c6:29:0e:49:
b1:db:b0:9b:23:c1:2a:0d:d7:3c:70:cc:6d:b4:83:
43:72:71:50:9b:d9:a4:2b:ea:b9:ed:f6:89:26:6b:
f8:36:13:88:26:8e:aa:1d:d5:5a:c1:33:fd:1b:6e:
2f:56:7a:dc:05:a3:9f:e0:fd:7f:22:fd:69:2d:16:
1c:ef:eb:b0:7e:ad:9f:be:4d:51:21:61:2f:87:b1:
07:de:a9:a7:18:94:53:13:25:12:48:d3:ec:b8:db:
9a:14:0a:f1:ce:e1:8e:57:6c:44:13:0d:b3:9a:33:
6d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:8C:04:F7:5D:EA:ED:9D:3A:9D:AC:A4:22:84:EF:1B:01:A4:5E:E6
X509v3 Authority Key Identifier:
keyid:E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/fIwE913q7Z06naykIoTvGwGkXuY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.132.0/22
45.83.152.0/22
45.139.44.0/22
Signature Algorithm: sha256WithRSAEncryption
30:0a:02:ee:f0:6c:1b:79:74:37:44:95:5c:c5:f4:8e:8e:b6:
b2:ea:ff:09:26:ec:aa:f0:4d:20:fe:22:8e:38:71:3a:9d:05:
28:ef:8d:0b:88:66:a1:3d:fc:66:a2:39:c8:ab:2b:63:c3:ee:
bf:8d:d1:16:4c:1e:72:e2:00:41:90:e2:85:0b:32:6d:b1:79:
51:bc:53:02:8d:6b:93:d6:13:f7:a2:f6:ab:51:64:59:51:c0:
d0:87:aa:7b:fa:f7:2e:37:ea:0a:57:bf:e9:a7:4d:5b:40:91:
d3:43:fa:fb:6b:4d:89:2b:24:3d:1d:5c:b1:b3:43:3a:60:ab:
6c:88:56:31:29:d4:64:4c:37:c7:95:8c:58:ef:e9:77:2c:97:
da:9d:5a:a2:97:5e:1c:e4:20:4e:69:dc:6d:cc:2d:80:44:ea:
28:6b:a9:cb:ec:aa:8b:ef:2d:9c:60:c8:f1:41:b8:28:59:cd:
61:bb:ec:2c:da:a4:e1:3b:fb:a9:4e:77:ff:7e:bb:a4:af:f3:
f2:7a:a1:15:6d:38:f8:b8:7f:4f:e6:ba:3f:94:88:d2:20:fe:
b5:34:ad:24:e4:64:a4:ac:ae:7d:1e:17:4a:ca:4b:6b:99:e1:
f8:38:a6:f7:f4:2b:42:6d:8a:9a:83:ee:02:96:84:91:f9:29:
28:96:c6:08
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZt3xths7/8A+8qZNOhKiwOKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxNTgwOGYzZjkyMWJjOGMzZWVhODdjNzU4NGM1ODRjMTAw
MGIwNTEwHhcNMjYwMTAxMDQxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YzhjMDRmNzVkZWFlZDlkM2E5ZGFjYTQyMjg0ZWYxYjAxYTQ1ZWU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2tQuOosHF1LIkg0is8H5QuqJK8K
JppWneRk0VhqlekY3ESnk4IvyP38HFpB7IzawbiLoawX28mcdzF2xmJlva/SLQyK
w45tNCmalECXmGKCVy/EEX2X1N1GrEpFrx3Ch8X5h26a6As8mwWT12Nf5Mf6zwYS
UWvha3XbZ5ybINYBHqWVqJKTbxpFvYHLeLaKncYpDkmx27CbI8EqDdc8cMxttIND
cnFQm9mkK+q57faJJmv4NhOIJo6qHdVawTP9G24vVnrcBaOf4P1/Iv1pLRYc7+uw
fq2fvk1RIWEvh7EH3qmnGJRTEyUSSNPsuNuaFArxzuGOV2xEEw2zmjNtrwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFHyMBPdd6u2dOp2spCKE7xsBpF7mMB8GA1UdIwQY
MBaAFOFYCPP5IbyMPuqHx1hMWEwQALBRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFZnSThfa2h2SXctNm9mSFdFeFlUQkFBc0ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC84ZThlODItNTI3NC00ZDJmLThjYTAt
YWIxOWZjYjBjZTY0LzEvZkl3RTkxM3E3WjA2bmF5a0lvVHZHd0drWHVZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC84ZThlODItNTI3NC00ZDJmLThjYTAtYWIxOWZjYjBjZTY0
LzEvNFZnSThfa2h2SXctNm9mSFdFeFlUQkFBc0ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCLVOEAwQC
LVOYAwQCLYssMA0GCSqGSIb3DQEBCwUAA4IBAQAwCgLu8GwbeXQ3RJVcxfSOjray
6v8JJuyq8E0g/iKOOHE6nQUo740LiGahPfxmojnIqytjw+6/jdEWTB5y4gBBkOKF
CzJtsXlRvFMCjWuT1hP3ovarUWRZUcDQh6p7+vcuN+oKV7/pp01bQJHTQ/r7a02J
KyQ9HVyxs0M6YKtsiFYxKdRkTDfHlYxY7+l3LJfanVqil14c5CBOadxtzC2AROoo
a6nL7KqL7y2cYMjxQbgoWc1hu+ws2qThO/upTnf/frukr/PyeqEVbTj4uH9P5ro/
lIjSIP61NK0k5GSkrK59HhdKyktrmeH4OKb39CtCbYqag+4CloSR+SkolsYI
-----END CERTIFICATE-----
Generated at Sun Jan 18 11:04:35 2026 by rpki-client