This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/x3oHSLWJTj_nRpaxfUL8ie-v564.roa
File: x3oHSLWJTj_nRpaxfUL8ie-v564.roa (raw, json)
Hash identifier: rcQHEneP9Wl13Ne7TTIzTdgQDNerZYtatjj28AIQOU8=
Subject key identifier: C7:7A:07:48:B5:89:4E:3F:E7:46:96:B1:7D:42:FC:89:EF:AF:E7:AE
Certificate issuer: /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Certificate serial: 019ADF815D4A7132E9B24DF7758E9AAC01A4
Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/x3oHSLWJTj_nRpaxfUL8ie-v564.roa
Signing time: Tue 02 Dec 2025 14:39:48 +0000
ROA not before: Tue 02 Dec 2025 14:39:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44559
IP address blocks: 46.151.176.0/24 maxlen: 24
46.151.178.0/24 maxlen: 24
46.151.179.0/24 maxlen: 24
46.151.180.0/24 maxlen: 24
83.142.208.0/24 maxlen: 24
83.142.210.0/24 maxlen: 24
83.142.211.0/24 maxlen: 24
83.142.212.0/24 maxlen: 24
83.142.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Dec 2025 05:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:df:81:5d:4a:71:32:e9:b2:4d:f7:75:8e:9a:ac:01:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Validity
Not Before: Dec 2 14:39:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c77a0748b5894e3fe74696b17d42fc89efafe7ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:94:57:b6:b4:dd:44:9b:f3:7c:f5:dc:1a:63:
12:2c:6c:ff:17:36:9a:76:95:7f:56:fb:b4:77:ad:
82:9b:01:72:9f:22:12:22:86:c8:58:06:f1:62:a2:
93:f6:36:a8:16:a5:cd:9f:25:86:a6:1e:a0:c0:21:
7f:53:72:11:8f:88:fd:d8:0c:6b:81:b0:c1:f5:33:
05:99:af:4d:d5:52:90:dc:f6:e6:64:6a:4b:a8:b1:
57:3a:89:7c:a6:f0:76:99:e3:65:ea:0d:8b:5c:16:
50:d3:2a:81:f9:7b:24:53:2d:07:27:44:e1:f0:0e:
b9:aa:5f:7c:61:3f:4b:ae:da:e2:b5:2c:e1:a6:fa:
12:82:7b:62:9d:43:9d:9a:0c:52:04:3c:39:88:ba:
c2:dc:a8:4d:10:bb:6e:a4:a3:7d:c2:30:97:6b:95:
d3:9d:a9:eb:52:02:02:85:7e:29:9c:cb:7b:af:df:
60:a0:70:0a:2f:f3:0d:59:51:c0:dc:c0:c0:e7:31:
21:d2:f1:8d:f7:c5:07:c6:91:10:4d:34:ae:d2:5d:
ae:3d:f9:de:2e:d1:96:0c:f3:a8:46:88:f6:a7:91:
d0:16:fb:42:94:c3:fb:8e:80:a9:d5:03:f2:cd:39:
17:71:58:5a:28:77:e3:16:c8:39:53:92:22:e6:3f:
47:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:7A:07:48:B5:89:4E:3F:E7:46:96:B1:7D:42:FC:89:EF:AF:E7:AE
X509v3 Authority Key Identifier:
keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/x3oHSLWJTj_nRpaxfUL8ie-v564.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.151.176.0/24
46.151.178.0-46.151.180.255
83.142.208.0/24
83.142.210.0-83.142.212.255
83.142.215.0/24
Signature Algorithm: sha256WithRSAEncryption
25:b7:05:27:82:89:17:57:c5:aa:2b:af:a2:c5:0c:c1:21:f4:
49:ec:78:f5:0b:0c:c9:38:ec:60:3d:ea:b7:88:de:b5:d7:60:
69:8e:cc:f7:c8:69:3a:17:c8:db:76:fc:0b:8f:d3:9b:c5:82:
cf:30:c1:70:86:39:42:2e:f7:73:73:35:3a:8f:07:b8:05:7d:
32:10:dd:ad:eb:d1:b5:97:d3:cb:49:79:5f:ee:6d:51:b2:18:
0a:47:85:a2:79:7e:88:f4:c7:a8:7b:57:f5:90:3f:f3:9f:da:
bc:3c:0c:f9:9f:20:19:13:28:95:75:72:82:41:40:26:68:5f:
ed:a5:61:dd:dc:3b:c5:d9:79:e0:8b:1a:d6:3d:b4:ce:35:f7:
74:b3:09:4f:ec:a0:a3:87:68:ac:43:c3:86:dd:ad:b1:d0:a0:
ff:cb:32:7e:46:9c:40:17:8d:a1:d5:53:c5:b7:9a:94:e1:08:
51:04:2a:e9:80:cd:e1:18:d1:17:e5:82:61:b1:b4:6d:4b:e7:
d6:1e:04:94:53:fc:2f:b5:fe:ab:98:58:07:5c:18:fb:2e:41:
a7:f4:2a:34:66:99:b0:10:1f:40:21:8e:50:3d:df:be:5e:f9:
2f:28:ec:cf:82:3f:a4:c1:96:aa:4d:a7:3d:5a:e6:8d:cb:ee:
f1:5e:61:07
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgISAZrfgV1KcTLpsk33dY6arAGkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlYjQ0MWRhZGJiZWNiNjk2NWQ0ZWExZjA0NmNjNWM4ZTI4
ODE3ZmMwHhcNMjUxMjAyMTQzOTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNzdhMDc0OGI1ODk0ZTNmZTc0Njk2YjE3ZDQyZmM4OWVmYWZlN2FlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3JRXtrTdRJvzfPXcGmMSLGz/Fzaa
dpV/Vvu0d62CmwFynyISIobIWAbxYqKT9jaoFqXNnyWGph6gwCF/U3IRj4j92Axr
gbDB9TMFma9N1VKQ3PbmZGpLqLFXOol8pvB2meNl6g2LXBZQ0yqB+XskUy0HJ0Th
8A65ql98YT9LrtritSzhpvoSgntinUOdmgxSBDw5iLrC3KhNELtupKN9wjCXa5XT
nanrUgIChX4pnMt7r99goHAKL/MNWVHA3MDA5zEh0vGN98UHxpEQTTSu0l2uPfne
LtGWDPOoRoj2p5HQFvtClMP7joCp1QPyzTkXcVhaKHfjFsg5U5Ii5j9HuwIDAQAB
o4ICMTCCAi0wHQYDVR0OBBYEFMd6B0i1iU4/50aWsX1C/Invr+euMB8GA1UdIwQY
MBaAFI60QdrbvstpZdTqHwRsxcjiiBf8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanJSQjJ0dS15MmxsMU9vZkJHekZ5T0tJRl93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS85NzhkMGYtOTI5Ny00YzcxLTljZmIt
NDZiOTQ5MDkyY2JlLzEveDNvSFNMV0pUal9uUnBheGZVTDhpZS12NTY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS85NzhkMGYtOTI5Ny00YzcxLTljZmItNDZiOTQ5MDkyY2Jl
LzEvanJSQjJ0dS15MmxsMU9vZkJHekZ5T0tJRl93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEcGCCsGAQUFBwEHAQH/BDgwNjA0BAIAATAuAwQALpewMAwD
BAEul7IDBAAul7QDBABTjtAwDAMEAVOO0gMEAFOO1AMEAFOO1zANBgkqhkiG9w0B
AQsFAAOCAQEAJbcFJ4KJF1fFqiuvosUMwSH0Sex49QsMyTjsYD3qt4jetddgaY7M
98hpOhfI23b8C4/Tm8WCzzDBcIY5Qi73c3M1Oo8HuAV9MhDdrevRtZfTy0l5X+5t
UbIYCkeFonl+iPTHqHtX9ZA/85/avDwM+Z8gGRMolXVygkFAJmhf7aVh3dw7xdl5
4Isa1j20zjX3dLMJT+ygo4dorEPDht2tsdCg/8syfkacQBeNodVTxbealOEIUQQq
6YDN4RjRF+WCYbG0bUvn1h4ElFP8L7X+q5hYB1wY+y5Bp/QqNGaZsBAfQCGOUD3f
vl75Lyjsz4I/pMGWqk2nPVrmjcvu8V5hBw==
-----END CERTIFICATE-----
Generated at Fri Dec 5 11:51:57 2025 by rpki-client