This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/RvoB02LV3HAYyjSpTynuepFZgZQ.roa
File: RvoB02LV3HAYyjSpTynuepFZgZQ.roa (raw, json)
Hash identifier: IJ1ixOVD+h2rJ9Dsin8DqExrSUj/mMAvMHLaqQwlHdg=
Subject key identifier: 46:FA:01:D3:62:D5:DC:70:18:CA:34:A9:4F:29:EE:7A:91:59:81:94
Certificate issuer: /CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Certificate serial: 019B7D5C78EC67744C51FCDEA597A3805CF8
Authority key identifier: 6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/RvoB02LV3HAYyjSpTynuepFZgZQ.roa
Signing time: Fri 02 Jan 2026 06:19:30 +0000
ROA not before: Fri 02 Jan 2026 06:19:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 135391
IP address blocks: 46.255.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Jan 2026 11:32:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:5c:78:ec:67:74:4c:51:fc:de:a5:97:a3:80:5c:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Validity
Not Before: Jan 2 06:19:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=46fa01d362d5dc7018ca34a94f29ee7a91598194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0a:8f:13:4f:4e:0c:da:8f:e2:4b:d2:0f:6a:
8b:78:38:17:09:a4:d8:3f:4f:fb:72:de:01:34:b1:
da:bb:1d:a8:3d:e7:e9:df:be:2e:6e:ce:63:81:65:
8e:29:fe:ba:38:7b:f4:29:e9:a1:a3:be:40:c8:77:
a4:80:01:06:50:f9:1e:52:47:3e:ed:7c:d5:8b:d0:
30:84:53:b1:26:eb:66:ae:72:0d:c4:4b:47:43:5a:
b8:21:90:74:ec:10:9e:b8:e0:2a:d4:b2:f3:8f:90:
16:a6:72:fd:f1:11:9f:3c:74:c1:cc:c8:58:ed:8e:
38:67:e3:92:ce:29:92:41:83:33:f3:33:c7:4a:f2:
07:60:f6:f3:73:48:37:a0:d5:67:8e:55:54:1b:9b:
0c:c8:07:90:10:7e:74:3d:df:47:bf:aa:64:ef:6e:
6a:5b:35:4d:ce:3f:57:c1:39:7c:9e:69:01:69:77:
70:45:19:bf:86:40:0e:35:42:c7:3a:92:c7:f7:db:
4e:a6:d5:12:cd:e2:36:d6:c1:77:91:97:dd:e1:24:
19:54:bf:82:82:75:30:bb:73:d2:e2:f4:07:e2:92:
af:9f:d2:9f:65:4c:99:96:fe:c2:f5:dd:45:5f:a7:
29:15:65:29:c8:90:7a:26:37:62:81:5a:a9:83:c9:
97:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:FA:01:D3:62:D5:DC:70:18:CA:34:A9:4F:29:EE:7A:91:59:81:94
X509v3 Authority Key Identifier:
keyid:6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/RvoB02LV3HAYyjSpTynuepFZgZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.255.28.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:51:3e:c3:2a:f3:c4:28:35:83:fe:35:88:8d:a4:b5:1b:55:
68:ce:d1:fa:0d:6d:bf:85:90:46:30:7d:56:28:a8:40:68:97:
ca:51:c0:8b:43:89:a4:61:5b:b2:87:25:f2:79:57:3d:83:4f:
93:3f:7e:9c:ec:bb:bd:5a:96:05:99:1d:88:fc:11:07:26:a9:
06:09:12:08:43:b4:f5:a9:9c:fb:b7:44:c6:de:b8:3a:53:98:
33:7f:1d:93:e1:fa:ad:0b:02:1a:4a:c9:b0:08:59:c4:28:c3:
f9:38:91:5e:01:99:fd:9e:12:15:14:4f:34:89:b3:05:12:22:
58:07:8a:69:5d:04:2d:d7:8b:7a:62:c6:42:60:ce:85:d6:b9:
26:a6:85:ca:35:f1:48:ee:43:53:87:6e:27:d4:ed:4a:5e:1e:
c5:88:aa:9a:19:70:cd:6d:d6:da:7c:ec:8f:c9:f1:b7:c3:ef:
43:88:97:bf:5d:48:ba:34:ff:8e:ce:95:fb:28:61:cd:92:db:
fc:80:e1:6a:9d:b8:5b:f2:50:c7:6a:a8:45:71:dd:17:a4:83:
79:85:ba:0e:27:e6:c9:7a:9f:10:4b:83:cf:8e:85:ff:68:2b:
ea:20:88:a7:23:1a:b4:6c:6b:d9:ea:1d:fd:b5:d3:a7:5b:1d:
e8:b5:33:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 7 14:41:03 2026 by rpki-client