This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/96a524-2e1b-4e9e-b2d8-a9c3122984c5/1/46wXiqms5HpiGBoK15ocXo29pM4.roa
File: 46wXiqms5HpiGBoK15ocXo29pM4.roa (raw, json)
Hash identifier: oBJWgh+2jPc8gknL0v2rnOXcYX3sL1PfoR3y8FKwdXQ=
Subject key identifier: E3:AC:17:8A:A9:AC:E4:7A:62:18:1A:0A:D7:9A:1C:5E:8D:BD:A4:CE
Certificate issuer: /CN=cc4d48708da5054959e618a582e28c155fef113f
Certificate serial: 019B7C80440967E6DEDEB79EFD66F8221CA3
Authority key identifier: CC:4D:48:70:8D:A5:05:49:59:E6:18:A5:82:E2:8C:15:5F:EF:11:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zE1IcI2lBUlZ5hilguKMFV_vET8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/96a524-2e1b-4e9e-b2d8-a9c3122984c5/1/46wXiqms5HpiGBoK15ocXo29pM4.roa
Signing time: Fri 02 Jan 2026 02:18:59 +0000
ROA not before: Fri 02 Jan 2026 02:18:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198927
IP address blocks: 91.239.180.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/96a524-2e1b-4e9e-b2d8-a9c3122984c5/1/zE1IcI2lBUlZ5hilguKMFV_vET8.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/96a524-2e1b-4e9e-b2d8-a9c3122984c5/1/zE1IcI2lBUlZ5hilguKMFV_vET8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zE1IcI2lBUlZ5hilguKMFV_vET8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:80:44:09:67:e6:de:de:b7:9e:fd:66:f8:22:1c:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc4d48708da5054959e618a582e28c155fef113f
Validity
Not Before: Jan 2 02:18:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e3ac178aa9ace47a62181a0ad79a1c5e8dbda4ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:25:7a:c6:89:6c:fb:64:53:97:ee:65:9c:8a:
19:a7:63:e0:5b:f7:7b:3e:67:48:30:7d:05:1a:e9:
ce:6b:7c:14:c5:8e:d2:56:4b:6f:9d:27:1a:21:08:
65:e7:14:4b:c1:c1:75:ac:e3:0d:8b:46:52:78:7a:
d3:d7:4c:06:91:09:62:d0:e4:06:1c:8d:86:d8:09:
07:67:00:c7:ba:ff:96:18:66:9b:a7:2b:ba:33:fc:
e1:9b:4a:86:96:29:7b:cf:33:4a:51:8f:83:0b:71:
90:47:aa:88:d9:2a:9b:4c:c5:03:ba:d4:4d:82:5f:
99:98:dc:77:e7:95:e8:e3:c4:66:88:ef:76:6e:eb:
fd:92:7c:70:9d:cb:a8:98:dd:e5:18:80:4e:c7:72:
03:a5:ea:98:86:35:63:4c:55:9f:12:fe:1f:aa:18:
91:11:44:ed:e2:d3:57:7a:e3:7c:7f:03:18:5f:b7:
28:f6:71:59:02:bd:50:1e:e8:41:04:02:d7:42:e2:
3a:9b:62:19:be:46:c1:13:59:c4:5a:da:36:cf:0c:
f3:88:39:84:31:c5:72:24:07:8b:bb:16:1d:de:1c:
0d:34:10:72:43:49:6e:b6:71:d7:5d:9e:fc:e7:54:
68:ca:9e:48:a6:3f:41:66:ac:0b:b8:b1:0d:64:6b:
42:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:AC:17:8A:A9:AC:E4:7A:62:18:1A:0A:D7:9A:1C:5E:8D:BD:A4:CE
X509v3 Authority Key Identifier:
keyid:CC:4D:48:70:8D:A5:05:49:59:E6:18:A5:82:E2:8C:15:5F:EF:11:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zE1IcI2lBUlZ5hilguKMFV_vET8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/96a524-2e1b-4e9e-b2d8-a9c3122984c5/1/46wXiqms5HpiGBoK15ocXo29pM4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/96a524-2e1b-4e9e-b2d8-a9c3122984c5/1/zE1IcI2lBUlZ5hilguKMFV_vET8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.180.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:6b:5d:3c:fb:75:42:27:2f:fe:c6:d1:25:2e:81:08:d3:3a:
c0:11:36:bf:a0:2d:8b:de:be:13:31:bc:3d:58:da:71:36:df:
e3:1a:0f:f4:ac:b1:11:68:32:f7:b4:e3:df:2f:1f:b5:25:c1:
19:02:65:fc:ff:28:82:d3:33:b3:2d:22:ad:a1:69:1b:1b:b9:
ee:ca:0c:45:d7:88:37:33:62:04:3d:e9:f2:0f:87:e2:01:a9:
c8:49:cb:c9:04:1a:bd:46:9b:df:ef:f3:09:e9:f3:57:9f:fc:
b1:5e:25:5b:f2:0a:7a:86:c7:9f:a0:2d:57:44:d1:4b:a8:6e:
c2:d5:18:b5:02:73:3f:bf:9e:65:bc:d2:bc:32:6b:e6:fe:fd:
a4:df:da:a3:f1:a7:16:13:2e:95:f8:99:fe:cb:b2:9a:1b:dd:
4a:71:fc:a4:0e:59:a2:ec:f6:29:78:14:84:42:cf:3c:2e:a0:
a0:1e:9e:60:5d:e6:6c:1e:65:21:17:d4:44:cd:46:4e:27:13:
73:b0:e0:c3:67:6f:42:0b:67:5b:ba:f3:1a:22:23:76:89:02:
8e:6d:21:24:02:db:00:e9:17:99:c1:b0:4d:39:b4:86:a5:22:
4f:68:87:ca:82:05:b0:1e:eb:2d:b1:f2:96:4f:37:bf:f2:d1:
c4:14:4b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:01:25 2026 by rpki-client