This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/RwAyPd51yPKFVoNHbXXQGuR7_EY.roa
File: RwAyPd51yPKFVoNHbXXQGuR7_EY.roa (raw, json)
Hash identifier: SJOa0Y57+2jyYSq2obqvHcjbEVfI5zAybNhvZJSsELU=
Subject key identifier: 47:00:32:3D:DE:75:C8:F2:85:56:83:47:6D:75:D0:1A:E4:7B:FC:46
Certificate issuer: /CN=49ea50a1c62082762afda007d6fc8b4bdb05749f
Certificate serial: 019B7910415E84160A315114C1F0EF8E3DF3
Authority key identifier: 49:EA:50:A1:C6:20:82:76:2A:FD:A0:07:D6:FC:8B:4B:DB:05:74:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SepQocYggnYq_aAH1vyLS9sFdJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/RwAyPd51yPKFVoNHbXXQGuR7_EY.roa
Signing time: Thu 01 Jan 2026 10:17:47 +0000
ROA not before: Thu 01 Jan 2026 10:17:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205415
IP address blocks: 2a14:5ac0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SepQocYggnYq_aAH1vyLS9sFdJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:10:41:5e:84:16:0a:31:51:14:c1:f0:ef:8e:3d:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49ea50a1c62082762afda007d6fc8b4bdb05749f
Validity
Not Before: Jan 1 10:17:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4700323dde75c8f2855683476d75d01ae47bfc46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3f:2e:ed:7c:50:cd:54:71:eb:90:d8:1c:d0:
30:a1:b2:d2:dc:92:07:49:10:8e:23:d6:fe:06:6d:
c9:1e:0f:a1:d2:9a:6c:3c:9b:40:30:49:a0:8b:21:
73:9e:8e:b8:43:0d:da:45:58:32:fa:13:76:69:16:
34:35:f4:97:08:08:f0:4d:d6:75:f6:4b:a8:5e:d5:
c5:87:96:7a:10:33:6a:43:64:41:f0:33:17:a0:42:
6d:47:40:9f:66:bd:28:0a:45:33:fd:3f:db:8b:03:
32:a4:60:5a:72:90:81:5d:84:ea:52:ad:60:ed:22:
6a:49:3e:58:1d:66:12:ed:6b:18:e6:86:81:68:62:
2c:bc:90:bc:d8:3f:e8:96:14:12:94:f0:69:29:7b:
82:5e:46:02:03:73:fc:e9:50:1c:03:f6:43:bf:b4:
5e:9d:1e:99:47:d8:78:5c:b3:60:f2:98:a3:4e:99:
26:a1:cf:90:69:e2:6b:a2:34:6f:e7:a2:9d:70:7f:
7a:7d:76:9b:9d:f5:31:45:40:68:93:dd:37:d1:ee:
e2:b6:3b:31:6b:3f:37:f4:1a:e7:20:be:3d:43:15:
4f:80:33:72:33:6c:13:78:c4:fd:08:6e:cf:b0:b9:
6d:25:d9:a0:8d:a9:22:af:0a:f5:8b:47:49:1d:87:
f7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:00:32:3D:DE:75:C8:F2:85:56:83:47:6D:75:D0:1A:E4:7B:FC:46
X509v3 Authority Key Identifier:
keyid:49:EA:50:A1:C6:20:82:76:2A:FD:A0:07:D6:FC:8B:4B:DB:05:74:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SepQocYggnYq_aAH1vyLS9sFdJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/RwAyPd51yPKFVoNHbXXQGuR7_EY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:5ac0::/32
Signature Algorithm: sha256WithRSAEncryption
0b:cc:60:0d:d2:3c:5d:78:72:2f:79:d4:bc:1e:26:90:8c:20:
f3:ff:be:2a:3a:95:fb:2c:0b:78:89:ae:b7:97:ec:9c:1d:0d:
60:1a:cd:21:46:5d:5f:34:ef:15:02:9e:be:f9:c6:a5:c3:74:
da:6f:ce:4d:a0:b5:ab:0d:94:47:4c:19:5c:6f:63:b6:9c:5b:
c2:ed:7d:09:91:59:ee:aa:15:9c:db:02:41:e4:99:89:8a:3d:
26:0a:c8:79:58:9c:ec:fa:2a:39:03:80:5a:61:ba:77:26:e5:
8a:22:74:db:6d:54:63:ba:b4:b7:d4:da:b2:bf:89:fc:35:5a:
74:e0:98:c4:62:39:f7:70:d8:2c:9d:8d:50:ed:70:45:4b:17:
7e:7a:9e:39:1f:ec:04:b9:9a:62:79:2b:5a:91:0e:d1:b5:7c:
fa:df:10:c2:a0:8a:d2:44:0f:72:cb:6d:90:9f:fc:47:8a:04:
b9:9d:89:95:52:b3:0d:8c:76:30:75:2a:54:bb:a2:75:af:c6:
00:7e:ba:64:f9:d6:88:4b:ce:e6:72:f8:bb:97:77:95:7d:61:
62:64:5d:d7:30:34:e2:2f:7d:ab:a2:dd:2b:66:78:80:f0:5a:
58:b1:b9:19:83:22:21:d3:77:fa:7b:f9:ef:3c:9e:be:f7:b9:
92:40:ee:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:30:15 2026 by rpki-client