This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/13fsdNbOXAchalOwmEbNfHfqCJc.roa
File: 13fsdNbOXAchalOwmEbNfHfqCJc.roa (raw, json)
Hash identifier: 621q3LROOmz+26C3baN1nFldj6CbmaJCoub9IuD0vmg=
Subject key identifier: D7:77:EC:74:D6:CE:5C:07:21:6A:53:B0:98:46:CD:7C:77:EA:08:97
Certificate issuer: /CN=f3b5646b360379924cb6d9c3d99669ce7f3b2ca2
Certificate serial: 019B12D5A597FA63EE03C4CA539F5C779C10
Authority key identifier: F3:B5:64:6B:36:03:79:92:4C:B6:D9:C3:D9:96:69:CE:7F:3B:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/13fsdNbOXAchalOwmEbNfHfqCJc.roa
Signing time: Fri 12 Dec 2025 13:52:29 +0000
ROA not before: Fri 12 Dec 2025 13:52:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50949
IP address blocks: 62.181.48.0/24 maxlen: 24
62.181.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Dec 2025 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:12:d5:a5:97:fa:63:ee:03:c4:ca:53:9f:5c:77:9c:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3b5646b360379924cb6d9c3d99669ce7f3b2ca2
Validity
Not Before: Dec 12 13:52:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d777ec74d6ce5c07216a53b09846cd7c77ea0897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f2:eb:e5:26:d0:2a:ae:02:80:bf:e1:5e:fd:
d0:97:9a:5e:43:1a:d0:80:84:c9:7b:41:95:6d:1c:
5f:25:45:31:8e:5a:33:bc:66:21:58:66:40:52:f0:
57:c9:39:7d:a0:87:f8:54:01:bd:97:c8:0a:13:b7:
7a:c9:11:94:13:d1:fb:d9:1c:4c:73:b2:bb:eb:bc:
48:77:0e:6b:b4:c8:fc:25:4a:3a:07:38:de:20:83:
6b:06:f4:9b:9b:e4:32:c9:ec:d3:eb:6e:fe:71:81:
c3:e0:68:8e:81:43:da:c2:c5:87:0e:a6:38:22:c5:
89:fa:cc:87:ec:a9:61:1a:7a:54:32:c6:6a:9a:36:
2a:7d:ea:64:9b:b7:e9:c4:fe:23:9e:66:d0:93:ed:
a4:fb:5b:9d:b2:fb:b5:1d:cb:c4:3e:f7:99:90:b9:
15:d5:d5:3d:2f:e4:ed:1f:80:78:6f:05:d7:05:bb:
31:b1:6c:ec:81:ed:ae:6e:87:86:da:ac:35:f8:bc:
5c:63:e5:cb:64:fd:a1:6f:9b:9e:50:ba:73:15:f3:
47:7d:fa:83:79:02:44:03:a0:70:eb:c0:b6:81:cf:
4f:7e:0b:32:3c:4f:bd:39:7e:c6:29:5b:94:dc:ae:
b4:30:38:a3:5b:91:63:a8:79:4d:c0:0b:a7:89:47:
d3:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:77:EC:74:D6:CE:5C:07:21:6A:53:B0:98:46:CD:7C:77:EA:08:97
X509v3 Authority Key Identifier:
keyid:F3:B5:64:6B:36:03:79:92:4C:B6:D9:C3:D9:96:69:CE:7F:3B:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/13fsdNbOXAchalOwmEbNfHfqCJc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.181.48.0/23
Signature Algorithm: sha256WithRSAEncryption
08:45:6c:94:08:0a:f0:3d:84:db:c0:96:6b:e4:8f:e4:3e:ca:
4c:ba:a5:a4:3b:4e:b0:6a:df:84:4d:1a:24:f6:4a:ce:7d:97:
f7:15:7b:ed:0c:11:8a:af:00:b7:02:dc:57:ef:bd:ce:62:fa:
0b:6a:0d:23:53:1c:9c:8a:60:ab:cc:19:5a:a1:e9:0a:4b:48:
37:62:6b:68:b0:1c:67:5a:31:41:54:4a:75:29:1c:cf:81:98:
b6:b0:2d:0c:85:62:4b:64:60:4c:7a:e2:fa:38:c4:b0:d7:cf:
13:05:4c:69:bd:8f:ff:00:b1:53:da:c2:c9:a7:32:c7:0b:1c:
a7:1d:56:9d:5f:e6:7b:29:a0:d4:4f:85:57:5e:99:6c:60:42:
91:0f:7b:7d:6b:24:8a:b1:d1:42:4d:37:09:55:75:d1:10:bf:
50:7b:27:0f:45:07:7c:fa:9e:21:71:c6:a0:9b:5c:b8:4c:9d:
a6:d4:02:cf:ad:91:7b:d6:ee:73:51:1f:1c:8a:37:f9:67:c8:
22:af:7d:8c:d3:42:50:68:30:22:29:d5:d3:05:fe:00:62:e8:
70:16:fc:67:c4:50:12:25:09:1a:4c:b6:ea:c7:61:d1:77:31:
a9:9f:04:57:4d:c7:ba:24:67:b7:7b:1e:88:bd:38:27:be:8a:
90:95:ae:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 05:48:02 2025 by rpki-client