This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/63440c-3d43-458f-879e-021f50932156/1/46n2g7ewMdgKGwJHev4LZIKd-KM.roa
File: 46n2g7ewMdgKGwJHev4LZIKd-KM.roa (raw, json)
Hash identifier: WKhBSncOj3EAW5iouWLaSYsvjG5KuQBioF2eekKp43c=
Subject key identifier: E3:A9:F6:83:B7:B0:31:D8:0A:1B:02:47:7A:FE:0B:64:82:9D:F8:A3
Certificate issuer: /CN=15286f0225c141d95857fe74646949e75dd96f28
Certificate serial: 019B7F83E9C8A60FBC6C4848B9073BC6A9B6
Authority key identifier: 15:28:6F:02:25:C1:41:D9:58:57:FE:74:64:69:49:E7:5D:D9:6F:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FShvAiXBQdlYV_50ZGlJ513Zbyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/63440c-3d43-458f-879e-021f50932156/1/46n2g7ewMdgKGwJHev4LZIKd-KM.roa
Signing time: Fri 02 Jan 2026 16:21:50 +0000
ROA not before: Fri 02 Jan 2026 16:21:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 19905
IP address blocks: 193.8.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/63440c-3d43-458f-879e-021f50932156/1/FShvAiXBQdlYV_50ZGlJ513Zbyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/63440c-3d43-458f-879e-021f50932156/1/FShvAiXBQdlYV_50ZGlJ513Zbyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FShvAiXBQdlYV_50ZGlJ513Zbyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 18:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:83:e9:c8:a6:0f:bc:6c:48:48:b9:07:3b:c6:a9:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15286f0225c141d95857fe74646949e75dd96f28
Validity
Not Before: Jan 2 16:21:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e3a9f683b7b031d80a1b02477afe0b64829df8a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d4:4b:da:f6:5b:be:5c:1f:aa:02:64:6e:8a:
63:38:df:2c:87:97:c2:6d:f1:36:3b:60:40:22:78:
e2:9d:c9:bf:88:f4:22:1e:e1:51:cb:2e:dc:f9:ca:
7a:80:66:2d:e4:b3:25:51:0e:58:89:38:98:1a:72:
23:0a:4a:64:cb:b0:25:73:11:ef:1e:07:40:84:ed:
97:fa:d3:b4:9c:0d:07:1a:92:b6:1d:32:49:c5:b9:
7f:c5:b2:2c:3c:0b:08:35:70:a2:0e:b9:f1:61:69:
34:5b:33:cb:00:ad:9e:72:ef:70:50:ef:12:20:18:
b6:c6:08:df:28:27:05:97:3b:1f:f9:0f:24:3e:b7:
9f:3b:31:30:08:95:51:82:bf:49:38:4e:71:12:af:
33:e7:2d:9b:20:75:cd:38:5c:f5:7f:4e:4b:f6:9a:
65:71:c7:49:bd:c5:1d:9a:d0:11:3b:47:fe:65:96:
71:18:db:ed:18:f3:8d:5e:75:08:14:1f:cc:d3:57:
28:f4:be:85:93:4b:ac:d9:07:bf:7b:a1:7c:94:c9:
1e:48:15:9d:32:84:dc:ff:0c:b2:9c:7d:67:bc:fc:
9c:6c:85:76:53:d3:c0:29:63:ce:b7:2b:62:6f:1d:
69:34:b8:04:de:a9:52:69:d3:b1:b1:e0:83:1e:f9:
45:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:A9:F6:83:B7:B0:31:D8:0A:1B:02:47:7A:FE:0B:64:82:9D:F8:A3
X509v3 Authority Key Identifier:
keyid:15:28:6F:02:25:C1:41:D9:58:57:FE:74:64:69:49:E7:5D:D9:6F:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FShvAiXBQdlYV_50ZGlJ513Zbyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/63440c-3d43-458f-879e-021f50932156/1/46n2g7ewMdgKGwJHev4LZIKd-KM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/63440c-3d43-458f-879e-021f50932156/1/FShvAiXBQdlYV_50ZGlJ513Zbyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.250.0/24
Signature Algorithm: sha256WithRSAEncryption
69:00:7f:1d:2b:2a:fd:42:a5:54:bc:39:a2:cb:f5:98:00:9d:
f4:93:16:68:bd:b7:12:a2:09:29:97:f4:38:8e:f1:72:d6:2b:
bf:f4:47:0e:e4:f2:c5:85:85:2b:b2:6c:e5:90:03:29:8b:63:
68:aa:0f:61:ca:fa:16:6a:77:ae:f5:39:94:5a:f9:a7:b2:61:
88:34:7d:47:d6:aa:e0:c4:3a:ff:be:23:83:df:38:61:b1:11:
1f:24:11:8a:3a:ba:b5:a0:06:cf:bb:4a:ec:1e:23:46:68:03:
dd:70:8c:27:c2:54:71:21:4c:75:f9:4a:f1:ff:3b:67:8c:b0:
58:72:2b:de:bb:4e:cb:df:c7:94:d1:a9:0c:d2:7a:16:0c:bd:
89:43:aa:ca:8e:83:5c:32:3e:cb:70:a5:8c:17:78:6d:f0:1a:
45:95:d0:94:95:0c:e9:64:e8:a6:c4:01:01:32:34:64:25:b7:
1b:4b:fd:82:c7:86:e8:97:a3:67:b2:42:89:9f:cc:11:20:ff:
b8:06:08:6a:03:70:0c:9d:54:6b:6d:8a:24:3b:3e:08:42:9e:
17:62:52:bb:6b:18:c2:71:9b:be:04:b7:ff:fd:c8:60:71:2a:
3b:01:6a:b1:3a:41:32:1c:15:6e:81:38:21:5e:3d:29:e5:f2:
4f:ea:14:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 01:22:05 2026 by rpki-client