This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/pVduKYNLi9ZGPKENxhzjCULu_mc.roa
File: pVduKYNLi9ZGPKENxhzjCULu_mc.roa (raw, json)
Hash identifier: beMvbOD2JslRH8yZzo+rpcPxa4uExV22otAFa3ZuVe8=
Subject key identifier: A5:57:6E:29:83:4B:8B:D6:46:3C:A1:0D:C6:1C:E3:09:42:EE:FE:67
Certificate issuer: /CN=c2afc14dce450b05ec86c7c53070cd6bb6dbc7ee
Certificate serial: 019B7EA735867259ADB9260DA9BC12B5CE32
Authority key identifier: C2:AF:C1:4D:CE:45:0B:05:EC:86:C7:C5:30:70:CD:6B:B6:DB:C7:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wq_BTc5FCwXshsfFMHDNa7bbx-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/pVduKYNLi9ZGPKENxhzjCULu_mc.roa
Signing time: Fri 02 Jan 2026 12:20:46 +0000
ROA not before: Fri 02 Jan 2026 12:20:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207758
IP address blocks: 46.182.0.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/wq_BTc5FCwXshsfFMHDNa7bbx-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/wq_BTc5FCwXshsfFMHDNa7bbx-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wq_BTc5FCwXshsfFMHDNa7bbx-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:a7:35:86:72:59:ad:b9:26:0d:a9:bc:12:b5:ce:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2afc14dce450b05ec86c7c53070cd6bb6dbc7ee
Validity
Not Before: Jan 2 12:20:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a5576e29834b8bd6463ca10dc61ce30942eefe67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ef:82:62:86:8d:08:75:81:fb:49:4b:9d:46:
99:17:f7:82:d4:c2:ff:28:0c:63:47:44:09:ce:85:
51:52:20:33:d6:c4:8b:ae:69:d7:0c:de:42:f3:f4:
3f:17:06:80:e4:03:11:ea:5e:17:c9:1a:25:04:6f:
df:aa:a0:cf:ef:65:a9:37:29:d9:9f:94:56:df:46:
8b:5d:45:d4:ce:94:50:cf:3a:17:8f:25:d1:5c:0b:
e0:2e:e5:9f:a1:fa:09:14:bd:6f:69:5d:53:d5:2c:
94:c7:e0:ea:93:7d:b0:0a:8a:a4:03:51:62:92:7e:
9e:6b:29:a5:b1:b3:a6:f2:80:06:3d:88:e0:a5:1b:
22:af:51:46:88:1a:68:7c:42:40:31:3a:fe:8e:ef:
1f:f6:d4:a9:41:2e:34:a3:c9:aa:f4:07:9a:78:dc:
2c:a2:b0:1f:9a:ff:8d:ad:69:0d:af:84:47:a3:44:
1c:bb:56:48:bf:c1:37:eb:de:7c:a3:e9:0e:30:b7:
47:cc:d1:a9:e6:21:3a:7f:3a:40:03:88:ff:f3:36:
86:ca:07:ba:6b:76:c4:fe:f5:23:e6:49:0e:a8:80:
b3:df:fc:79:ad:cf:b8:a5:c7:5b:c9:15:20:c3:62:
d7:fa:cf:98:2c:af:a5:05:8c:8f:ec:33:59:bc:d9:
f1:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:57:6E:29:83:4B:8B:D6:46:3C:A1:0D:C6:1C:E3:09:42:EE:FE:67
X509v3 Authority Key Identifier:
keyid:C2:AF:C1:4D:CE:45:0B:05:EC:86:C7:C5:30:70:CD:6B:B6:DB:C7:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wq_BTc5FCwXshsfFMHDNa7bbx-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/pVduKYNLi9ZGPKENxhzjCULu_mc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/wq_BTc5FCwXshsfFMHDNa7bbx-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.182.0.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:84:e0:9d:f8:81:3f:77:cf:2c:dd:3b:f2:e8:4f:72:00:52:
78:a1:87:fd:06:36:05:f2:e5:f9:9a:5e:6b:7a:66:d4:d1:da:
18:c8:33:a2:6b:90:41:f2:80:a4:5e:7c:75:14:94:2a:e7:14:
86:24:9a:0d:81:46:8c:8c:6d:e1:a3:2b:26:d7:de:98:88:f9:
2d:73:b0:7d:43:17:3f:39:e0:ff:da:87:23:1c:81:72:a2:92:
5b:4d:1b:be:02:6f:d3:f6:44:60:97:f5:d4:f2:43:55:5a:a0:
c5:03:c2:7c:f9:01:2b:54:1d:7c:8b:2d:d4:96:63:7d:70:d4:
08:ce:6f:bc:92:f9:08:df:34:f1:13:31:af:a3:68:79:c5:9d:
60:54:0b:1c:a3:94:0a:f5:4a:a9:07:2e:53:98:14:09:9f:30:
d7:b1:0b:fb:a4:66:1a:5e:5a:96:63:f5:62:27:c5:91:fd:1e:
d8:3b:52:4b:ca:f5:d1:30:4e:90:9d:db:d0:53:55:48:3a:c5:
32:c2:d1:d0:84:85:74:6f:31:af:af:b8:84:ef:56:44:90:ed:
28:dd:c1:4a:ed:9c:35:c2:03:de:6e:bb:d5:ea:41:d3:c5:54:
4f:6a:ef:42:c0:e7:40:0e:66:28:87:78:3d:17:2a:7c:d6:0b:
fd:36:14:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:36:12 2026 by rpki-client