This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/7434e1-7413-4f6a-a29c-cdc81db77531/1/Rlz6gCewQxlK_6mdm3r5wcJWGug.roa
File: Rlz6gCewQxlK_6mdm3r5wcJWGug.roa (raw, json)
Hash identifier: xyUcAmIySIN4cusVT6aDXyeoMypfFm7A4QhLU41m4OE=
Subject key identifier: 46:5C:FA:80:27:B0:43:19:4A:FF:A9:9D:9B:7A:F9:C1:C2:56:1A:E8
Certificate issuer: /CN=b48bd8ec4e301c9e7b0a43bef0f3ddd3a453155a
Certificate serial: 019B7F1513946E30ED5017721BCB681DBF13
Authority key identifier: B4:8B:D8:EC:4E:30:1C:9E:7B:0A:43:BE:F0:F3:DD:D3:A4:53:15:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIvY7E4wHJ57CkO-8PPd06RTFVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/7434e1-7413-4f6a-a29c-cdc81db77531/1/Rlz6gCewQxlK_6mdm3r5wcJWGug.roa
Signing time: Fri 02 Jan 2026 14:20:46 +0000
ROA not before: Fri 02 Jan 2026 14:20:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213913
IP address blocks: 46.102.234.0/24 maxlen: 24
2a0c:2780::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/7434e1-7413-4f6a-a29c-cdc81db77531/1/tIvY7E4wHJ57CkO-8PPd06RTFVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/7434e1-7413-4f6a-a29c-cdc81db77531/1/tIvY7E4wHJ57CkO-8PPd06RTFVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tIvY7E4wHJ57CkO-8PPd06RTFVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:15:13:94:6e:30:ed:50:17:72:1b:cb:68:1d:bf:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b48bd8ec4e301c9e7b0a43bef0f3ddd3a453155a
Validity
Not Before: Jan 2 14:20:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=465cfa8027b043194affa99d9b7af9c1c2561ae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2a:c0:42:67:d2:c4:17:ca:ad:61:09:f2:be:
64:ee:cb:41:8f:ad:0a:ba:13:06:64:59:99:f3:75:
f1:dd:0a:02:58:de:f5:e1:58:3f:1a:1a:f7:2e:f6:
72:78:ad:ff:4e:ba:d4:01:40:c7:bb:05:25:46:ee:
1f:75:90:49:74:81:c8:35:5d:59:f9:57:9d:48:b1:
8d:f6:06:39:86:95:b9:9b:9f:a8:60:33:25:d4:8c:
7c:f8:56:21:c9:a9:98:d8:4f:49:a0:bf:31:20:49:
76:22:96:a5:38:c5:5b:1b:f8:e6:c5:f9:11:2f:c4:
b3:84:87:2b:0d:c9:2b:1b:2b:24:e2:2f:1d:2d:40:
48:91:da:cb:7c:60:35:1f:53:6e:81:76:21:e5:e2:
e6:16:f9:b2:b5:08:d7:47:d6:c1:92:28:81:55:e5:
6f:f7:e0:fa:a7:25:59:17:6d:e4:c0:ab:a3:22:01:
e0:22:18:74:ef:c8:5e:c6:bd:9c:1e:85:09:c7:64:
a0:48:2e:02:35:a3:9a:42:59:2c:f8:0a:e7:7c:25:
3d:20:9a:db:8e:61:d4:43:c9:6e:39:cb:f0:f0:c1:
0f:e4:6c:25:3c:df:bf:93:f8:dc:aa:eb:2e:44:03:
eb:53:c9:71:f3:f0:d3:74:93:01:fc:2f:0b:7b:81:
cd:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:5C:FA:80:27:B0:43:19:4A:FF:A9:9D:9B:7A:F9:C1:C2:56:1A:E8
X509v3 Authority Key Identifier:
keyid:B4:8B:D8:EC:4E:30:1C:9E:7B:0A:43:BE:F0:F3:DD:D3:A4:53:15:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIvY7E4wHJ57CkO-8PPd06RTFVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7434e1-7413-4f6a-a29c-cdc81db77531/1/Rlz6gCewQxlK_6mdm3r5wcJWGug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7434e1-7413-4f6a-a29c-cdc81db77531/1/tIvY7E4wHJ57CkO-8PPd06RTFVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.102.234.0/24
IPv6:
2a0c:2780::/32
Signature Algorithm: sha256WithRSAEncryption
40:4a:a2:a5:ef:12:48:e8:34:eb:e8:1e:4f:8c:d6:1e:45:a9:
7a:2d:4c:1d:00:b2:cd:8b:00:66:14:98:c2:77:04:90:bd:e8:
5a:76:3c:7f:52:ab:5e:68:4e:6c:9e:02:25:39:72:d8:a5:50:
e9:93:6c:6d:30:e6:b4:7f:86:5d:be:28:ba:8f:6f:cc:b9:43:
c0:f3:58:34:37:d6:05:fa:7d:44:3f:3e:e4:00:ce:98:4a:8b:
23:fd:f9:16:96:e0:9f:f1:c2:9a:01:4f:9a:52:33:c3:19:f2:
64:fa:a6:54:8a:5d:ab:cf:17:e5:04:56:fe:30:7f:94:e1:e4:
39:ea:7a:0e:47:21:a4:67:d0:2b:2d:ea:81:43:1a:a4:c6:c0:
f7:a8:25:43:eb:37:cc:e3:70:cf:1c:b7:1e:a3:a3:fb:ed:7c:
ae:c6:9e:c5:c9:3c:b5:4f:b1:aa:49:b6:53:07:09:bc:42:15:
db:ca:38:e3:99:05:f9:ff:7a:3b:ff:16:ff:7f:d7:9e:cc:f2:
ae:44:8d:60:80:47:60:8b:10:06:7e:7d:36:11:11:31:58:18:
9f:f5:5f:48:3c:58:f1:1a:96:3d:9c:0f:bf:26:f6:55:54:67:
a3:00:40:40:67:bd:9d:7d:67:63:7a:73:73:97:06:51:1d:97:
17:09:a5:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:09:58 2026 by rpki-client