This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/7a8e3c-cc02-4255-9892-c47184fdac39/1/55lJ7aRN6GIyWx76DhXMl-EsW9s.roa
File: 55lJ7aRN6GIyWx76DhXMl-EsW9s.roa (raw, json)
Hash identifier: G5fDZfDdF/UdXSzqkrIqSIBvAXZx8jiKJDU264Jekto=
Subject key identifier: E7:99:49:ED:A4:4D:E8:62:32:5B:1E:FA:0E:15:CC:97:E1:2C:5B:DB
Certificate issuer: /CN=4a2c863762ce9d996d2abab6ede1929ccedcb632
Certificate serial: 019B7B366D4234978939F43A88F56345FDB7
Authority key identifier: 4A:2C:86:37:62:CE:9D:99:6D:2A:BA:B6:ED:E1:92:9C:CE:DC:B6:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SiyGN2LOnZltKrq27eGSnM7ctjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/7a8e3c-cc02-4255-9892-c47184fdac39/1/55lJ7aRN6GIyWx76DhXMl-EsW9s.roa
Signing time: Thu 01 Jan 2026 20:18:43 +0000
ROA not before: Thu 01 Jan 2026 20:18:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62459
IP address blocks: 46.243.60.0/24 maxlen: 24
46.243.61.0/24 maxlen: 24
185.35.36.0/22 maxlen: 22
185.35.36.0/24 maxlen: 24
185.35.37.0/24 maxlen: 24
185.35.38.0/24 maxlen: 24
185.35.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/7a8e3c-cc02-4255-9892-c47184fdac39/1/SiyGN2LOnZltKrq27eGSnM7ctjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/7a8e3c-cc02-4255-9892-c47184fdac39/1/SiyGN2LOnZltKrq27eGSnM7ctjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/SiyGN2LOnZltKrq27eGSnM7ctjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:36:6d:42:34:97:89:39:f4:3a:88:f5:63:45:fd:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a2c863762ce9d996d2abab6ede1929ccedcb632
Validity
Not Before: Jan 1 20:18:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e79949eda44de862325b1efa0e15cc97e12c5bdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:23:a1:37:de:ca:4b:ee:37:5c:b8:e1:89:1f:
b8:de:e7:33:e7:51:cb:e2:03:ed:fb:d2:3a:b2:ca:
40:33:23:ae:0d:2a:84:d2:64:ee:2f:b9:f9:6f:64:
73:b5:7b:78:be:76:94:bf:22:00:72:00:f8:e1:c9:
b8:e2:73:d7:34:f9:98:c3:6a:f8:0a:86:da:60:c3:
75:f0:50:bd:00:11:91:77:63:01:82:d6:27:b2:cc:
4e:05:28:f7:f6:53:d8:a2:df:53:fb:fd:25:a7:77:
3b:8d:e3:cc:60:7f:eb:67:a6:ec:78:76:80:a7:af:
ac:e0:44:a3:41:86:9d:34:79:2e:1c:22:6b:91:e8:
e1:91:fe:a8:08:57:f4:8e:2c:63:cd:18:be:3b:d8:
34:ce:89:1f:ca:83:60:14:9e:e7:8d:75:8c:77:82:
a3:11:00:58:0e:98:40:a1:52:b8:8b:44:89:1e:eb:
02:04:98:f3:a7:73:67:65:5c:b2:b4:7c:bd:99:f1:
de:e7:60:a6:44:3e:41:24:85:98:12:fe:41:16:e5:
8c:4a:03:83:8e:bb:b3:fd:ff:16:3a:eb:41:cb:f5:
b6:98:b5:8a:f1:16:13:00:20:8d:63:60:bc:c6:14:
94:4a:1b:a4:7e:4a:7b:91:33:84:d1:29:26:0d:a9:
6a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:99:49:ED:A4:4D:E8:62:32:5B:1E:FA:0E:15:CC:97:E1:2C:5B:DB
X509v3 Authority Key Identifier:
keyid:4A:2C:86:37:62:CE:9D:99:6D:2A:BA:B6:ED:E1:92:9C:CE:DC:B6:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SiyGN2LOnZltKrq27eGSnM7ctjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a8e3c-cc02-4255-9892-c47184fdac39/1/55lJ7aRN6GIyWx76DhXMl-EsW9s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a8e3c-cc02-4255-9892-c47184fdac39/1/SiyGN2LOnZltKrq27eGSnM7ctjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.60.0/23
185.35.36.0/22
Signature Algorithm: sha256WithRSAEncryption
22:48:3e:4a:52:c2:19:8d:36:cd:8e:89:21:45:58:ef:49:ac:
a1:64:a1:22:b1:b7:22:9a:83:04:b8:50:69:4a:94:29:6c:65:
3c:c9:c0:b1:74:8f:85:78:4c:bd:56:e5:fc:17:40:34:15:fd:
25:15:6e:bb:98:1e:59:03:7f:8d:0a:9c:65:7d:cf:44:a0:b4:
4c:4d:13:ca:a7:17:d8:d0:eb:08:c9:9d:b2:e1:46:4d:c6:d5:
42:61:93:c2:6f:3a:02:a9:19:5b:bd:f7:a5:41:5a:e4:80:e9:
86:d8:78:91:9b:79:87:36:89:9a:37:6b:6f:a2:a5:0a:7b:44:
82:b4:ea:84:23:14:37:f9:51:1d:ed:6f:a3:29:96:ab:4e:3e:
c6:cf:7a:67:da:35:b4:8d:19:0b:ac:75:d1:a8:5f:6b:0d:66:
f4:66:c4:5a:e1:d6:68:50:a1:a6:4b:34:29:37:ee:bb:d8:cb:
69:dd:e7:f4:d9:c2:23:78:77:a9:05:e6:ab:5e:45:10:46:a7:
8d:56:9c:84:16:c9:e9:9f:b0:12:ec:dc:c7:6d:54:ca:c4:6c:
ce:e3:08:7e:69:8c:12:7e:6a:35:f3:c6:fc:87:6e:c4:51:df:
da:36:bd:00:6e:d9:80:a6:11:5e:8e:a3:64:65:6e:d7:1b:af:
a8:b8:9a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:14:31 2026 by rpki-client