This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/TxIIRlN90qmHNpSsYrDt6T20_ak.roa
File: TxIIRlN90qmHNpSsYrDt6T20_ak.roa (raw, json)
Hash identifier: 7EyxzdyjM86gq252nfCGpb4/6kaun1QmxyxmSUqStcc=
Subject key identifier: 4F:12:08:46:53:7D:D2:A9:87:36:94:AC:62:B0:ED:E9:3D:B4:FD:A9
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 019B7C804CFF03E8F48C1E37D6B10B940FBF
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/TxIIRlN90qmHNpSsYrDt6T20_ak.roa
Signing time: Fri 02 Jan 2026 02:19:01 +0000
ROA not before: Fri 02 Jan 2026 02:19:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 19318
IP address blocks: 45.135.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Jan 2026 21:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:80:4c:ff:03:e8:f4:8c:1e:37:d6:b1:0b:94:0f:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Jan 2 02:19:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4f120846537dd2a9873694ac62b0ede93db4fda9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:26:61:f9:33:b8:85:56:15:d8:28:47:95:d1:
a2:83:cb:42:b5:34:4f:7c:4e:01:f0:18:1f:bc:1b:
6b:a7:5b:59:5e:c5:70:4c:1e:58:b5:00:29:dd:f3:
94:6a:24:30:1f:cf:1c:12:0b:ec:0f:22:b5:84:98:
05:6f:32:c3:6b:59:20:37:55:a1:88:a9:3e:d3:11:
78:a8:f6:0e:cb:3d:96:1a:e7:ee:66:d4:51:f5:b4:
94:90:4d:00:39:7f:83:62:f9:08:c2:8c:28:21:d8:
31:82:14:77:01:14:fb:36:04:7d:00:1a:b6:96:8e:
7e:5f:f4:73:a6:e6:3d:a7:55:be:2c:eb:a0:33:a9:
fc:a8:86:ee:97:93:7c:c7:19:42:c0:5c:1f:ed:d3:
fa:2b:2b:f5:5a:73:24:d0:91:4a:85:a2:d5:a9:0b:
77:40:92:2c:a7:91:a9:9f:ec:8d:20:a3:e5:5f:de:
a4:a5:95:5a:a7:bd:c2:51:65:58:61:6a:6b:df:35:
0e:0d:0b:71:e8:eb:5d:fe:66:84:df:3a:92:37:95:
8e:22:ef:ef:21:8b:a0:c8:2b:92:d3:7f:6b:ce:65:
3f:b9:3d:59:43:7e:f8:c9:68:7e:38:f0:23:db:bf:
8b:f8:42:56:71:7c:50:df:3c:b1:e6:00:e2:9b:f4:
c1:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:12:08:46:53:7D:D2:A9:87:36:94:AC:62:B0:ED:E9:3D:B4:FD:A9
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/TxIIRlN90qmHNpSsYrDt6T20_ak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.128.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:9a:23:17:ea:6b:53:2b:a7:fb:48:08:e8:b6:32:a5:c4:51:
7f:80:67:1f:68:c4:b5:ab:2c:3b:5c:3b:e5:f5:b1:38:fd:b1:
23:8f:4a:fb:74:dc:f1:92:d1:2a:87:22:fb:fe:09:a0:23:1f:
9c:2a:12:d6:35:90:42:f7:b5:b3:18:2e:20:47:24:38:7c:6a:
2c:37:cf:8e:19:7d:7b:3c:bd:fe:44:e4:70:d0:7e:c0:f3:f8:
1f:8e:f2:ee:88:88:6f:90:d0:c4:ac:5e:7d:c4:29:b5:ca:49:
bb:2b:36:c3:94:77:00:01:6b:50:6a:45:f8:13:76:8e:f5:59:
db:63:e7:0c:5e:00:0e:3f:e7:4f:d1:45:da:87:99:b3:39:5d:
07:30:a4:5c:ce:7f:de:34:fe:6f:b4:2f:89:29:b2:3b:35:08:
d9:cb:39:44:0b:b7:40:9a:58:e7:49:ad:da:ca:ec:5e:e4:5d:
a9:3d:70:52:51:e9:2d:da:23:38:0d:3d:4b:f4:1b:91:fa:73:
4c:c5:36:2e:fd:6f:9a:95:8d:f8:71:d6:13:8e:27:d5:d7:31:
aa:ed:28:51:d0:2c:3c:c1:db:63:24:44:0a:83:2b:53:04:e6:
1b:a5:6d:f6:4e:90:ce:fd:a6:8a:7c:cf:de:e1:3b:0f:98:68:
a0:a7:2b:99
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt8gEz/A+j0jB431rELlA+/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxODQ3OGYxOThmZTU2OTAxMGMzZGY2MjE5MTQyZjUzMGM0
ZjVlNTYwHhcNMjYwMTAyMDIxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZjEyMDg0NjUzN2RkMmE5ODczNjk0YWM2MmIwZWRlOTNkYjRmZGE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4yZh+TO4hVYV2ChHldGig8tCtTRP
fE4B8BgfvBtrp1tZXsVwTB5YtQAp3fOUaiQwH88cEgvsDyK1hJgFbzLDa1kgN1Wh
iKk+0xF4qPYOyz2WGufuZtRR9bSUkE0AOX+DYvkIwowoIdgxghR3ART7NgR9ABq2
lo5+X/RzpuY9p1W+LOugM6n8qIbul5N8xxlCwFwf7dP6Kyv1WnMk0JFKhaLVqQt3
QJIsp5Gpn+yNIKPlX96kpZVap73CUWVYYWpr3zUODQtx6Otd/maE3zqSN5WOIu/v
IYugyCuS039rzmU/uT1ZQ374yWh+OPAj27+L+EJWcXxQ3zyx5gDim/TBNwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE8SCEZTfdKphzaUrGKw7ek9tP2pMB8GA1UdIwQY
MBaAFGGEePGY/laQEMPfYhkUL1MMT15WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEt
YmE5OGYxMTIyMTIxLzEvVHhJSVJsTjkwcW1ITnBTc1lyRHQ2VDIwX2FrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEtYmE5OGYxMTIyMTIx
LzEvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYeAMA0G
CSqGSIb3DQEBCwUAA4IBAQCsmiMX6mtTK6f7SAjotjKlxFF/gGcfaMS1qyw7XDvl
9bE4/bEjj0r7dNzxktEqhyL7/gmgIx+cKhLWNZBC97WzGC4gRyQ4fGosN8+OGX17
PL3+RORw0H7A8/gfjvLuiIhvkNDErF59xCm1ykm7KzbDlHcAAWtQakX4E3aO9Vnb
Y+cMXgAOP+dP0UXah5mzOV0HMKRczn/eNP5vtC+JKbI7NQjZyzlEC7dAmljnSa3a
yuxe5F2pPXBSUekt2iM4DT1L9BuR+nNMxTYu/W+alY34cdYTjifV1zGq7ShR0Cw8
wdtjJEQKgytTBOYbpW32TpDO/aaKfM/e4TsPmGigpyuZ
-----END CERTIFICATE-----
Generated at Sat Jan 10 03:55:46 2026 by rpki-client