This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/xXeawBG_yUvvaYYX8ShJw2DTIFc.roa
File: xXeawBG_yUvvaYYX8ShJw2DTIFc.roa (raw, json)
Hash identifier: agbjA58w70h103XlBAZlTq9j1vRUXq9ifmDEs9EN9qQ=
Subject key identifier: C5:77:9A:C0:11:BF:C9:4B:EF:69:86:17:F1:28:49:C3:60:D3:20:57
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 019B2D4E6144C1C559D45DEB359B2BFB2A93
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/xXeawBG_yUvvaYYX8ShJw2DTIFc.roa
Signing time: Wed 17 Dec 2025 17:14:30 +0000
ROA not before: Wed 17 Dec 2025 17:14:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214943
IP address blocks: 45.132.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Dec 2025 07:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:2d:4e:61:44:c1:c5:59:d4:5d:eb:35:9b:2b:fb:2a:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Dec 17 17:14:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c5779ac011bfc94bef698617f12849c360d32057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:35:10:34:52:5e:64:8c:36:2a:6d:50:b2:b9:
8a:d6:0a:ff:64:aa:5a:1e:7d:90:63:fa:25:eb:bd:
32:0f:ab:a7:13:fa:56:fd:29:b3:bd:fa:3a:11:b8:
0c:19:86:7e:d3:e5:7b:99:b5:a4:d2:c9:74:89:7b:
01:f1:d4:c2:5e:85:0e:c1:1a:3d:77:0b:fd:49:85:
5d:3c:c9:fc:8b:a5:c3:08:4b:26:85:94:af:bb:1d:
ed:3d:52:e4:c2:ce:33:c4:fa:4f:86:17:d5:5f:a9:
46:0b:b9:2b:93:91:64:12:23:30:6d:25:8d:f6:4e:
d1:e6:fe:e4:bd:97:30:ad:61:90:ce:06:4f:8c:60:
33:2a:d0:58:02:4b:4a:61:10:cb:10:cf:21:07:36:
47:35:34:b1:be:b9:6e:35:14:ae:20:88:cf:0a:14:
1c:2b:6e:02:17:24:c6:3c:00:4c:7e:c8:c4:67:62:
0b:11:e0:da:3a:36:6a:1c:00:ca:e8:02:ad:71:88:
9b:04:4a:dd:09:5a:8e:c3:86:d7:fd:75:ff:d1:21:
46:88:6d:92:40:20:fe:f6:c3:5a:90:ce:84:95:91:
1f:3c:ed:64:c3:10:df:bc:88:c5:1e:80:27:38:03:
37:59:41:b2:69:97:07:86:41:04:c8:b1:1f:88:b0:
dc:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:77:9A:C0:11:BF:C9:4B:EF:69:86:17:F1:28:49:C3:60:D3:20:57
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/xXeawBG_yUvvaYYX8ShJw2DTIFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.180.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:08:9d:7b:8c:31:0e:6f:2d:5e:10:0a:77:77:cd:1b:a0:08:
2e:5d:28:71:43:17:ae:0d:45:8e:ef:41:b7:c7:51:04:45:29:
39:b0:6b:f9:69:d3:4b:d3:35:d4:93:7f:87:7f:e0:43:52:41:
52:df:77:1c:cd:f6:11:6d:b3:27:f1:17:c0:af:a3:d4:67:4b:
c1:10:e4:ea:ea:4e:6d:9c:20:25:0b:3b:f8:0d:45:43:5f:3d:
7a:73:42:b0:5b:84:59:86:bc:8a:fc:87:08:44:11:13:36:d1:
4e:97:f1:ac:7e:45:55:12:65:b9:59:a3:5d:50:c2:e5:03:eb:
53:4f:0b:44:6a:f8:25:6d:5e:24:3d:ef:a1:ed:28:c3:11:f1:
bd:e9:a7:e2:fb:fe:93:28:59:4a:f6:e9:ae:9b:b8:0f:fb:d7:
e8:0f:93:d2:14:04:5f:a0:8a:b3:4d:14:11:c2:10:5b:8d:15:
63:1a:3c:fb:75:30:b3:d6:93:24:cc:59:c0:e4:91:42:58:44:
83:6c:cc:fb:9a:de:78:34:43:20:27:86:8f:7e:cc:e0:84:82:
59:39:95:d5:21:d6:06:76:6f:35:32:9a:34:5e:66:45:3f:26:
59:0b:22:e2:9f:90:50:03:3f:7e:b1:27:fa:9a:68:b5:5d:46:
93:4a:d7:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 15:42:13 2025 by rpki-client