This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/PuXWOfTLPxOFTzzS6eX0SDcf-AE.roa
File: PuXWOfTLPxOFTzzS6eX0SDcf-AE.roa (raw, json)
Hash identifier: eMjOpwhTm0qWucca1AVgBlVXXRnbhsb1Guso5DSpugc=
Subject key identifier: 3E:E5:D6:39:F4:CB:3F:13:85:4F:3C:D2:E9:E5:F4:48:37:1F:F8:01
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 019B7AC7C819FC2DF93A7848470628DF7886
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/PuXWOfTLPxOFTzzS6eX0SDcf-AE.roa
Signing time: Thu 01 Jan 2026 18:17:51 +0000
ROA not before: Thu 01 Jan 2026 18:17:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30823
IP address blocks: 46.19.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 16:55:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:c7:c8:19:fc:2d:f9:3a:78:48:47:06:28:df:78:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 1 18:17:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3ee5d639f4cb3f13854f3cd2e9e5f448371ff801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9b:15:b9:e6:d9:ca:ba:0c:85:fc:a0:ed:26:
99:8f:48:06:2e:1e:01:b3:3f:cc:f1:5c:3c:3c:c2:
e1:df:87:ef:0f:f6:05:34:0b:a9:64:d4:8d:4b:22:
54:3f:eb:8b:9c:e5:0c:33:86:60:6b:a3:14:75:45:
8c:91:9c:49:ad:f0:a9:72:b3:c1:4f:42:62:54:7a:
fe:0f:bb:09:60:72:e3:f8:32:2d:75:d6:ab:f8:3b:
69:f1:f6:d9:b4:1c:80:75:03:bb:30:25:81:0f:df:
c7:2d:5b:2a:e0:00:2e:24:4c:7c:bb:fe:92:cc:70:
96:3c:aa:45:ee:8b:8d:5e:10:a7:fe:72:4e:a3:9c:
01:1c:e9:88:fc:57:7a:5c:74:43:b9:52:68:9b:2f:
3f:1f:8e:80:f0:d1:79:83:7f:4f:05:b1:92:ef:c7:
c0:9c:e5:37:de:71:10:b6:06:a6:a6:ab:d8:8d:db:
1e:76:d7:17:04:0f:fa:03:06:5a:a4:d9:e7:f9:af:
55:11:db:41:29:de:95:0a:21:42:56:71:a4:dd:97:
5a:b6:66:9e:9d:84:98:3a:94:35:b4:82:7b:10:de:
b6:1c:8a:09:fc:20:62:34:3e:e1:f0:72:8b:82:fe:
9e:9a:5f:30:ad:0a:cc:59:1e:4a:e2:dd:76:14:0c:
f3:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:E5:D6:39:F4:CB:3F:13:85:4F:3C:D2:E9:E5:F4:48:37:1F:F8:01
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/PuXWOfTLPxOFTzzS6eX0SDcf-AE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.19.207.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:b3:a9:7d:67:72:76:c1:39:a1:f6:65:6b:08:a0:e2:81:a0:
86:a6:5e:33:b5:9f:26:d4:a2:66:4b:27:8e:86:b4:fc:a4:49:
b8:b1:7d:63:0b:7c:63:6e:99:8c:bd:74:32:b1:09:24:51:fc:
b8:f7:25:ef:c8:eb:aa:a7:59:5c:10:73:ad:87:e0:b2:00:09:
46:ee:e2:b3:fb:84:e1:73:ff:38:07:3e:38:5a:fd:5f:13:95:
7c:31:08:af:5e:01:5d:2b:3d:92:ba:18:af:e6:05:93:e6:da:
de:3b:a7:22:4d:72:27:da:d5:1e:0b:31:aa:ca:fd:71:29:c0:
fc:6b:03:2b:31:da:c9:5b:f8:40:22:13:19:af:1b:c6:b4:59:
aa:3b:9f:a3:0b:3e:11:30:93:e1:5e:4a:d9:c1:ed:5f:f2:fd:
67:ec:69:b0:24:e0:5a:e4:35:80:11:51:f6:e4:99:92:89:00:
40:44:c4:2b:b1:8d:5c:44:47:13:12:39:7b:14:32:c8:5b:01:
ad:df:d2:56:50:58:ed:85:3b:3a:58:db:27:c9:38:9e:9c:1a:
57:6e:9a:a7:d9:2b:ce:50:42:f9:14:02:96:d2:02:87:0a:6f:
d2:e2:1a:67:70:a9:fb:1a:96:c4:88:bb:04:f5:ae:cb:a1:22:
3a:31:71:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 19:57:14 2026 by rpki-client