This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/a46349-1bc0-4a0b-b67f-b217a68ceaf4/1/47T0kxLhEd4mlPdqBynhQxCjwbM.roa
File: 47T0kxLhEd4mlPdqBynhQxCjwbM.roa (raw, json)
Hash identifier: cb9fk5tXmwL2Q9JhN9JW/aBJLYXV1np6zbRQN2YQZUw=
Subject key identifier: E3:B4:F4:93:12:E1:11:DE:26:94:F7:6A:07:29:E1:43:10:A3:C1:B3
Certificate issuer: /CN=5906325e34418a57ce566efc0c3e8b38a0efa5db
Certificate serial: 019C0F8527C1C1765F218E4C1FD71B9C0A13
Authority key identifier: 59:06:32:5E:34:41:8A:57:CE:56:6E:FC:0C:3E:8B:38:A0:EF:A5:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WQYyXjRBilfOVm78DD6LOKDvpds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/a46349-1bc0-4a0b-b67f-b217a68ceaf4/1/47T0kxLhEd4mlPdqBynhQxCjwbM.roa
Signing time: Fri 30 Jan 2026 15:28:30 +0000
ROA not before: Fri 30 Jan 2026 15:28:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8075
IP address blocks: 155.55.192.0/22 maxlen: 22
2001:678:2a4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/a46349-1bc0-4a0b-b67f-b217a68ceaf4/1/WQYyXjRBilfOVm78DD6LOKDvpds.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/a46349-1bc0-4a0b-b67f-b217a68ceaf4/1/WQYyXjRBilfOVm78DD6LOKDvpds.mft
rsync://rpki.ripe.net/repository/DEFAULT/WQYyXjRBilfOVm78DD6LOKDvpds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:0f:85:27:c1:c1:76:5f:21:8e:4c:1f:d7:1b:9c:0a:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5906325e34418a57ce566efc0c3e8b38a0efa5db
Validity
Not Before: Jan 30 15:28:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e3b4f49312e111de2694f76a0729e14310a3c1b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:56:fe:30:a5:f0:b5:6b:57:6d:b5:6c:4b:a4:
84:78:c6:03:ab:d6:e5:e0:ae:54:a0:7d:89:3b:e8:
f3:65:09:44:80:33:3a:8a:2f:84:04:27:24:b6:26:
1e:7c:58:3b:c8:6f:df:16:63:2a:ba:26:1a:dc:1b:
09:4c:df:d0:b6:e5:2d:79:f6:70:81:3f:ea:9d:50:
e4:74:97:1a:10:38:76:ce:7b:cf:49:af:2e:1c:34:
3c:9d:15:ee:4b:c7:40:05:83:a8:6a:d5:6a:15:69:
7f:39:e2:e3:37:f8:50:d8:34:36:70:50:4a:14:f7:
71:2b:7f:f6:6e:21:1f:e5:b4:d4:6b:b4:4a:29:80:
23:41:4a:22:67:a6:27:55:56:aa:f4:a5:7b:ef:7d:
6d:99:68:7c:22:71:fc:ef:a9:2a:b9:6a:37:f8:6e:
4a:11:ee:d7:4e:37:1e:e9:45:21:a0:be:cd:ec:18:
ed:ec:dc:f7:f3:6e:e1:2d:7a:98:0e:c0:9c:73:f0:
45:df:f7:a3:62:52:8a:62:97:76:e4:be:95:db:28:
53:c1:6a:be:82:19:dd:34:bf:1a:92:10:4f:59:47:
ce:34:d3:88:e9:31:c6:7a:e9:21:1e:b3:a1:09:9e:
b3:d1:28:1d:84:9e:28:18:ec:5b:ed:b5:72:67:10:
15:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:B4:F4:93:12:E1:11:DE:26:94:F7:6A:07:29:E1:43:10:A3:C1:B3
X509v3 Authority Key Identifier:
keyid:59:06:32:5E:34:41:8A:57:CE:56:6E:FC:0C:3E:8B:38:A0:EF:A5:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WQYyXjRBilfOVm78DD6LOKDvpds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a46349-1bc0-4a0b-b67f-b217a68ceaf4/1/47T0kxLhEd4mlPdqBynhQxCjwbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a46349-1bc0-4a0b-b67f-b217a68ceaf4/1/WQYyXjRBilfOVm78DD6LOKDvpds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.55.192.0/22
IPv6:
2001:678:2a4::/48
Signature Algorithm: sha256WithRSAEncryption
5b:93:a7:93:78:c3:11:72:74:c7:a0:67:d4:65:f7:5e:7b:c6:
8b:3d:ea:8d:f6:44:1e:65:52:95:9e:37:7a:b8:20:64:71:17:
b6:87:63:b9:95:c9:63:46:34:61:40:2f:75:ab:78:ea:06:ea:
c5:24:ed:d5:74:93:f8:5f:da:8b:13:62:f7:fd:a4:fd:8c:4a:
b4:2a:ce:1d:af:eb:e4:72:43:f2:d2:8b:f6:5f:f8:d3:a8:5f:
e8:5b:49:52:10:b8:67:e6:3c:96:6d:5e:c3:94:b0:9b:0a:c4:
28:24:7a:9e:ec:5a:43:10:d5:a7:54:ae:4d:d3:05:ef:b3:9f:
4c:d0:dd:07:c8:18:43:ea:0b:1f:ef:2a:cd:d6:a4:33:37:e5:
9f:72:39:f8:17:f1:f5:a3:37:86:ab:e6:27:5e:37:c1:9a:90:
de:33:d3:0a:1c:fb:a8:a2:38:fa:2f:d3:8a:1d:3e:d4:5a:db:
5a:b0:5e:9e:17:34:ab:4f:d7:3e:ce:5d:81:cf:a8:93:a3:88:
9b:5c:36:19:b2:50:7c:c0:69:3a:fd:67:0f:8a:38:02:e3:02:
f6:9d:46:65:f0:6e:1d:7b:d5:0f:3d:0b:64:1e:b5:50:eb:be:
56:81:04:e5:01:72:bd:98:e7:c5:40:ff:45:b2:e8:68:d4:32:
89:1b:11:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:16:55 2026 by rpki-client