This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/mm9YPqzrw5zY5U3H2B6nLzTqSrA.roa
File: mm9YPqzrw5zY5U3H2B6nLzTqSrA.roa (raw, json)
Hash identifier: g53CFeW1Ry00+6lkqgMlD1le2EyIkmKgf8pBvIsao8s=
Subject key identifier: 9A:6F:58:3E:AC:EB:C3:9C:D8:E5:4D:C7:D8:1E:A7:2F:34:EA:4A:B0
Certificate issuer: /CN=aa44eb091b3a33a87beb8e004ab15ef178fbaa00
Certificate serial: 019B7B36B7603C1FEF9EEEBF071EFC986CAB
Authority key identifier: AA:44:EB:09:1B:3A:33:A8:7B:EB:8E:00:4A:B1:5E:F1:78:FB:AA:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qkTrCRs6M6h7644ASrFe8Xj7qgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/mm9YPqzrw5zY5U3H2B6nLzTqSrA.roa
Signing time: Thu 01 Jan 2026 20:19:02 +0000
ROA not before: Thu 01 Jan 2026 20:19:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209283
IP address blocks: 46.243.183.0/24 maxlen: 24
46.243.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qkTrCRs6M6h7644ASrFe8Xj7qgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:36:b7:60:3c:1f:ef:9e:ee:bf:07:1e:fc:98:6c:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa44eb091b3a33a87beb8e004ab15ef178fbaa00
Validity
Not Before: Jan 1 20:19:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9a6f583eacebc39cd8e54dc7d81ea72f34ea4ab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:db:76:75:59:a1:56:56:51:31:cd:26:dd:22:
32:ff:3e:03:55:c7:13:a5:73:64:0b:07:d3:18:76:
0f:9b:36:d5:df:e4:1a:48:93:55:eb:69:40:3e:01:
94:f2:93:a8:0e:61:e8:77:9c:a3:40:6b:2d:62:f7:
48:29:38:76:17:59:5c:d6:a4:b0:4f:6e:c1:a9:52:
64:e2:d4:61:4e:64:fb:11:5c:ba:27:b0:90:b6:f6:
a0:2e:69:ad:56:89:8b:cd:9d:c9:67:02:6b:aa:d5:
67:a8:09:c3:18:5d:94:c7:72:62:4f:29:7b:24:24:
c4:69:73:3d:75:1f:79:5f:25:85:87:d0:24:5d:77:
df:87:e3:75:2c:16:e1:27:83:f4:bc:29:bf:d4:3f:
fb:57:ac:ea:16:db:2d:da:d5:62:89:c1:f0:b5:71:
d4:92:5e:91:96:67:d3:eb:c0:bb:74:d0:66:20:ea:
08:7c:29:a6:6d:86:8f:d8:f9:52:b4:58:2c:8f:ff:
e8:4b:1e:72:f4:ac:5f:d2:74:82:28:ce:43:58:96:
4f:63:b8:dd:d0:18:b1:2a:a6:a1:f2:a3:29:f1:9d:
5d:de:af:ba:55:dd:10:34:60:83:c2:10:d0:a8:7f:
e1:ed:ce:fa:60:eb:55:c1:79:e8:a1:fc:4f:af:a0:
4e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:6F:58:3E:AC:EB:C3:9C:D8:E5:4D:C7:D8:1E:A7:2F:34:EA:4A:B0
X509v3 Authority Key Identifier:
keyid:AA:44:EB:09:1B:3A:33:A8:7B:EB:8E:00:4A:B1:5E:F1:78:FB:AA:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qkTrCRs6M6h7644ASrFe8Xj7qgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/mm9YPqzrw5zY5U3H2B6nLzTqSrA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.183.0/24
46.243.186.0/24
Signature Algorithm: sha256WithRSAEncryption
93:26:60:a3:cf:53:4b:2a:87:f8:bf:49:bd:ed:67:f5:84:a7:
70:61:e6:c5:66:08:36:1f:af:87:ed:20:c1:c7:bf:23:c1:c6:
45:d7:41:93:8e:83:75:a0:e7:3f:23:e0:5c:56:2e:67:42:cd:
44:e6:ec:a1:6c:81:bd:8b:1b:15:57:5c:27:13:be:fb:0d:85:
b7:e7:32:44:cf:6d:00:88:a6:4e:17:cb:8f:bb:a5:31:a4:8e:
c4:34:70:20:be:96:24:d9:29:1d:82:54:57:89:1d:68:43:ef:
9e:98:c3:64:06:d2:2c:5c:b0:4a:44:ac:de:f0:2f:85:63:0a:
f2:68:7f:40:48:e3:37:0b:37:d5:9a:dd:a0:6b:6e:ed:bc:8d:
2b:57:d2:df:29:2e:0f:29:97:fe:a7:0a:76:85:12:00:46:7c:
63:53:34:9e:19:0a:fc:6d:7c:d7:c7:c6:0f:f2:a2:fc:51:20:
c2:d0:10:3b:95:95:7d:d0:38:77:d3:7f:f2:ca:a4:74:5e:dd:
d5:d0:99:87:b9:8a:b6:8c:9f:e8:38:04:e7:fd:04:aa:3e:25:
b5:c6:c4:ec:de:93:2a:1c:65:93:85:00:f2:8d:35:fd:b0:7e:
62:a5:df:3b:3d:3f:de:9c:b5:ce:03:5d:30:d9:a7:72:df:6b:
78:fb:d0:87
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZt7NrdgPB/vnu6/Bx78mGyrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhNDRlYjA5MWIzYTMzYTg3YmViOGUwMDRhYjE1ZWYxNzhm
YmFhMDAwHhcNMjYwMTAxMjAxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YTZmNTgzZWFjZWJjMzljZDhlNTRkYzdkODFlYTcyZjM0ZWE0YWIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Nt2dVmhVlZRMc0m3SIy/z4DVccT
pXNkCwfTGHYPmzbV3+QaSJNV62lAPgGU8pOoDmHod5yjQGstYvdIKTh2F1lc1qSw
T27BqVJk4tRhTmT7EVy6J7CQtvagLmmtVomLzZ3JZwJrqtVnqAnDGF2Ux3JiTyl7
JCTEaXM9dR95XyWFh9AkXXffh+N1LBbhJ4P0vCm/1D/7V6zqFtst2tViicHwtXHU
kl6RlmfT68C7dNBmIOoIfCmmbYaP2PlStFgsj//oSx5y9Kxf0nSCKM5DWJZPY7jd
0BixKqah8qMp8Z1d3q+6Vd0QNGCDwhDQqH/h7c76YOtVwXnoofxPr6BO/wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJpvWD6s68Oc2OVNx9gepy806kqwMB8GA1UdIwQY
MBaAFKpE6wkbOjOoe+uOAEqxXvF4+6oAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWtUckNSczZNNmg3NjQ0QVNyRmU4WGo3cWdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9mYjdhN2QtMDY1NS00NTg3LThhZjkt
NzcwMGUyNWZmNzY5LzEvbW05WVBxenJ3NXpZNVUzSDJCNm5MelRxU3JBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9mYjdhN2QtMDY1NS00NTg3LThhZjktNzcwMGUyNWZmNzY5
LzEvcWtUckNSczZNNmg3NjQ0QVNyRmU4WGo3cWdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALvO3AwQA
LvO6MA0GCSqGSIb3DQEBCwUAA4IBAQCTJmCjz1NLKof4v0m97Wf1hKdwYebFZgg2
H6+H7SDBx78jwcZF10GTjoN1oOc/I+BcVi5nQs1E5uyhbIG9ixsVV1wnE777DYW3
5zJEz20AiKZOF8uPu6UxpI7ENHAgvpYk2SkdglRXiR1oQ++emMNkBtIsXLBKRKze
8C+FYwryaH9ASOM3CzfVmt2ga27tvI0rV9LfKS4PKZf+pwp2hRIARnxjUzSeGQr8
bXzXx8YP8qL8USDC0BA7lZV90Dh303/yyqR0Xt3V0JmHuYq2jJ/oOATn/QSqPiW1
xsTs3pMqHGWThQDyjTX9sH5ipd87PT/enLXOA10w2ady32t4+9CH
-----END CERTIFICATE-----
Generated at Mon Feb 9 21:26:12 2026 by rpki-client