This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/c78348-ac2e-44e4-8467-2bdd20b4823b/1/RlL6IgEXEHtlHG87R_tgHeGJuso.roa
File: RlL6IgEXEHtlHG87R_tgHeGJuso.roa (raw, json)
Hash identifier: e4pQoIrHsDZ81Hd65Er2benKsfXZs73qgjEzBGazD/4=
Subject key identifier: 46:52:FA:22:01:17:10:7B:65:1C:6F:3B:47:FB:60:1D:E1:89:BA:CA
Certificate issuer: /CN=70d13e2a16a0ee6634207a88ff0aac4eabc6693c
Certificate serial: 019B7CEE4A5DDB66725DB1A57DB87C8D2AA1
Authority key identifier: 70:D1:3E:2A:16:A0:EE:66:34:20:7A:88:FF:0A:AC:4E:AB:C6:69:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cNE-Khag7mY0IHqI_wqsTqvGaTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/c78348-ac2e-44e4-8467-2bdd20b4823b/1/RlL6IgEXEHtlHG87R_tgHeGJuso.roa
Signing time: Fri 02 Jan 2026 04:19:09 +0000
ROA not before: Fri 02 Jan 2026 04:19:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62102
IP address blocks: 185.47.176.0/22 maxlen: 22
185.47.176.0/23 maxlen: 23
185.47.176.0/24 maxlen: 24
185.47.177.0/24 maxlen: 24
185.47.178.0/23 maxlen: 23
185.47.178.0/24 maxlen: 24
185.47.179.0/24 maxlen: 24
2a01:7ce0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/c78348-ac2e-44e4-8467-2bdd20b4823b/1/cNE-Khag7mY0IHqI_wqsTqvGaTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/c78348-ac2e-44e4-8467-2bdd20b4823b/1/cNE-Khag7mY0IHqI_wqsTqvGaTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cNE-Khag7mY0IHqI_wqsTqvGaTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:ee:4a:5d:db:66:72:5d:b1:a5:7d:b8:7c:8d:2a:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70d13e2a16a0ee6634207a88ff0aac4eabc6693c
Validity
Not Before: Jan 2 04:19:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4652fa220117107b651c6f3b47fb601de189baca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e7:53:7e:1b:bf:93:b9:d2:2e:f1:ab:62:27:
19:0e:5a:20:96:be:7c:7f:e8:6d:e6:56:1b:b9:3c:
bc:6c:68:92:1a:5c:40:5e:01:c0:e3:bc:d7:d8:49:
98:ef:bf:b4:f9:d2:a0:fb:9b:80:57:4e:49:2f:ee:
11:55:5d:8b:80:7c:c3:fc:2d:e7:a8:41:76:52:a8:
21:70:89:10:96:19:c3:86:8b:bd:44:a8:5d:96:d1:
7b:4b:b1:ef:2a:cd:38:54:35:0d:46:8b:29:33:86:
75:ab:8b:c6:d3:0c:40:b5:48:8a:f4:b7:07:a0:fd:
d2:58:f5:13:8f:af:ec:41:83:57:58:78:97:52:43:
ab:d2:c4:96:fe:4d:e2:25:3f:16:ef:0a:9e:b8:ff:
02:29:13:89:8e:fb:a6:60:98:88:ac:d8:91:5f:ec:
69:ef:04:22:0b:3a:bd:6c:15:2b:0a:71:07:07:e5:
cc:6f:5e:28:d5:f3:31:5e:84:11:ce:ea:8e:52:06:
9a:3d:80:4c:59:e9:be:90:bf:c7:1e:20:1b:1c:2a:
08:16:70:ec:a6:5b:22:8f:6c:6c:04:a0:45:e3:73:
ae:95:46:53:d4:44:4a:35:f2:85:26:17:df:6d:48:
94:d0:64:6a:35:6f:bc:49:22:0f:5c:ee:4e:ce:a4:
6d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:52:FA:22:01:17:10:7B:65:1C:6F:3B:47:FB:60:1D:E1:89:BA:CA
X509v3 Authority Key Identifier:
keyid:70:D1:3E:2A:16:A0:EE:66:34:20:7A:88:FF:0A:AC:4E:AB:C6:69:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cNE-Khag7mY0IHqI_wqsTqvGaTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c78348-ac2e-44e4-8467-2bdd20b4823b/1/RlL6IgEXEHtlHG87R_tgHeGJuso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c78348-ac2e-44e4-8467-2bdd20b4823b/1/cNE-Khag7mY0IHqI_wqsTqvGaTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.47.176.0/22
IPv6:
2a01:7ce0::/32
Signature Algorithm: sha256WithRSAEncryption
b1:99:81:1a:61:08:06:d7:36:7c:ab:d6:f8:3c:23:92:e3:8b:
f9:74:36:dc:df:1d:43:4a:8a:24:d4:d1:d2:0b:a2:5a:6e:90:
22:78:c4:55:c2:68:03:75:7b:67:94:30:3c:03:78:1c:13:3e:
bd:e4:3c:17:87:e5:7a:c5:63:c0:67:0e:d6:ea:9f:e3:16:05:
73:c7:57:c2:ad:6e:c0:bb:6d:2b:3e:b4:98:55:1b:1d:2f:76:
87:b5:59:4e:c5:f1:4b:e5:0c:dd:01:be:d9:df:91:c7:d6:a2:
53:c6:05:be:81:64:c6:8a:79:1f:49:0c:ab:e9:63:4e:0f:ca:
59:41:fd:f6:e5:bd:34:70:a8:77:c7:ce:b1:f7:1d:74:90:39:
96:af:f3:17:0f:bd:af:cc:3b:c4:b8:81:53:a8:23:23:ee:7e:
99:e2:d9:74:1d:59:86:a6:46:b7:43:ba:e7:28:85:2d:ad:71:
1c:d5:28:44:65:c8:f8:b5:5c:49:d6:af:e7:df:d6:dd:f4:3c:
5c:54:36:28:db:3e:b0:cc:d7:41:7a:28:a8:f6:11:d5:0f:1e:
02:d6:0f:08:b9:20:a3:9b:b3:3c:52:3e:e1:5b:dd:ee:8c:d3:
1c:5b:5b:c2:b7:d4:e4:c8:c0:f9:6c:ef:16:06:6f:f5:f6:6f:
c0:cf:8e:45
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZt87kpd22ZyXbGlfbh8jSqhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwZDEzZTJhMTZhMGVlNjYzNDIwN2E4OGZmMGFhYzRlYWJj
NjY5M2MwHhcNMjYwMTAyMDQxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NjUyZmEyMjAxMTcxMDdiNjUxYzZmM2I0N2ZiNjAxZGUxODliYWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+dTfhu/k7nSLvGrYicZDloglr58
f+ht5lYbuTy8bGiSGlxAXgHA47zX2EmY77+0+dKg+5uAV05JL+4RVV2LgHzD/C3n
qEF2UqghcIkQlhnDhou9RKhdltF7S7HvKs04VDUNRospM4Z1q4vG0wxAtUiK9LcH
oP3SWPUTj6/sQYNXWHiXUkOr0sSW/k3iJT8W7wqeuP8CKROJjvumYJiIrNiRX+xp
7wQiCzq9bBUrCnEHB+XMb14o1fMxXoQRzuqOUgaaPYBMWem+kL/HHiAbHCoIFnDs
plsij2xsBKBF43OulUZT1ERKNfKFJhffbUiU0GRqNW+8SSIPXO5OzqRtDQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFEZS+iIBFxB7ZRxvO0f7YB3hibrKMB8GA1UdIwQY
MBaAFHDRPioWoO5mNCB6iP8KrE6rxmk8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY05FLUtoYWc3bVkwSUhxSV93cXNUcXZHYVR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9jNzgzNDgtYWMyZS00NGU0LTg0Njct
MmJkZDIwYjQ4MjNiLzEvUmxMNklnRVhFSHRsSEc4N1JfdGdIZUdKdXNvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9jNzgzNDgtYWMyZS00NGU0LTg0NjctMmJkZDIwYjQ4MjNi
LzEvY05FLUtoYWc3bVkwSUhxSV93cXNUcXZHYVR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuS+wMA0E
AgACMAcDBQAqAXzgMA0GCSqGSIb3DQEBCwUAA4IBAQCxmYEaYQgG1zZ8q9b4PCOS
44v5dDbc3x1DSook1NHSC6JabpAieMRVwmgDdXtnlDA8A3gcEz695DwXh+V6xWPA
Zw7W6p/jFgVzx1fCrW7Au20rPrSYVRsdL3aHtVlOxfFL5QzdAb7Z35HH1qJTxgW+
gWTGinkfSQyr6WNOD8pZQf325b00cKh3x86x9x10kDmWr/MXD72vzDvEuIFTqCMj
7n6Z4tl0HVmGpka3Q7rnKIUtrXEc1ShEZcj4tVxJ1q/n39bd9DxcVDYo2z6wzNdB
eiio9hHVDx4C1g8IuSCjm7M8Uj7hW93ujNMcW1vCt9TkyMD5bO8WBm/19m/Az45F
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:35:51 2026 by rpki-client