This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/p--yuSN0LP1aF8MInaw0a0h4bcM.roa
File: p--yuSN0LP1aF8MInaw0a0h4bcM.roa (raw, json)
Hash identifier: sDylj029lXRNRGXbiEohj568oZj6iTxdiqBb3mUem68=
Subject key identifier: A7:EF:B2:B9:23:74:2C:FD:5A:17:C3:08:9D:AC:34:6B:48:78:6D:C3
Certificate issuer: /CN=468b68141796ca95e4c72f4bfa696acea5083af3
Certificate serial: 019B7DCA50DF3BACF4028431B90C86C15613
Authority key identifier: 46:8B:68:14:17:96:CA:95:E4:C7:2F:4B:FA:69:6A:CE:A5:08:3A:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RotoFBeWypXkxy9L-mlqzqUIOvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/p--yuSN0LP1aF8MInaw0a0h4bcM.roa
Signing time: Fri 02 Jan 2026 08:19:29 +0000
ROA not before: Fri 02 Jan 2026 08:19:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210560
IP address blocks: 46.243.144.0/22 maxlen: 22
46.243.146.0/23 maxlen: 23
46.243.146.0/24 maxlen: 24
2a11:f740:2::/48 maxlen: 48
2a11:f740:20::/44 maxlen: 44
2a11:f740:20::/48 maxlen: 48
2a11:f740:21::/48 maxlen: 48
2a11:f740:22::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/RotoFBeWypXkxy9L-mlqzqUIOvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/RotoFBeWypXkxy9L-mlqzqUIOvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RotoFBeWypXkxy9L-mlqzqUIOvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:ca:50:df:3b:ac:f4:02:84:31:b9:0c:86:c1:56:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=468b68141796ca95e4c72f4bfa696acea5083af3
Validity
Not Before: Jan 2 08:19:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a7efb2b923742cfd5a17c3089dac346b48786dc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:88:0e:3f:9d:4e:f5:f8:06:83:83:36:07:03:
92:9e:5e:00:65:6c:c0:a1:be:7b:21:f4:4a:c8:53:
e7:66:b4:aa:73:06:a5:aa:9d:09:33:ca:9c:10:a8:
2a:05:e1:65:f0:9e:4a:24:b4:10:0c:f9:b1:5b:a4:
45:5b:21:91:5d:5c:97:cd:66:b4:22:67:99:49:8f:
ae:3a:7a:2d:73:4d:5d:e6:4e:33:c9:84:6e:bc:1c:
d6:f5:49:04:86:26:3f:97:a9:39:19:18:f4:5c:8e:
a1:38:fc:18:3c:4a:9c:92:2d:78:43:bc:75:22:b8:
f5:4d:b4:61:5a:1d:07:5f:25:76:8f:3c:f8:34:7f:
de:16:76:93:a9:09:48:2f:e7:67:18:c7:d1:9b:bd:
c3:47:92:50:77:07:06:c5:46:fd:22:ff:23:db:45:
bd:18:00:4d:7a:41:89:b1:df:94:6b:05:f1:ee:20:
3a:02:81:d4:c4:62:77:c8:35:4a:a1:f2:d7:dd:4a:
a1:b7:29:89:66:b9:83:a2:e0:72:fe:f2:72:39:97:
e8:bb:ed:ff:e4:ea:68:3d:ff:d9:52:ea:ae:af:62:
e1:d5:0b:5e:b2:8e:8d:58:95:4b:6d:56:e2:00:df:
25:e5:23:68:9b:56:c4:a2:9c:d1:9a:c8:be:7d:b7:
8d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:EF:B2:B9:23:74:2C:FD:5A:17:C3:08:9D:AC:34:6B:48:78:6D:C3
X509v3 Authority Key Identifier:
keyid:46:8B:68:14:17:96:CA:95:E4:C7:2F:4B:FA:69:6A:CE:A5:08:3A:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RotoFBeWypXkxy9L-mlqzqUIOvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/p--yuSN0LP1aF8MInaw0a0h4bcM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/RotoFBeWypXkxy9L-mlqzqUIOvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.144.0/22
IPv6:
2a11:f740:2::/48
2a11:f740:20::/44
Signature Algorithm: sha256WithRSAEncryption
86:2b:34:29:d3:d2:c0:43:db:62:61:a8:dd:05:40:b5:04:b6:
72:eb:29:45:21:c7:2c:b0:46:13:32:8e:3f:a3:63:bf:22:d4:
92:30:f5:f1:d4:4e:06:5b:df:20:fa:50:6e:a9:98:f5:fe:52:
41:ef:18:9e:3e:e4:71:2b:08:d1:30:94:f6:1a:32:b2:9b:30:
90:03:ad:d4:86:72:c3:a0:9f:25:0c:94:c9:20:27:3d:89:05:
15:91:3a:aa:db:fa:e5:04:46:0a:91:40:c0:09:e8:75:a6:f6:
53:9d:37:9f:b9:3a:c2:06:1e:e2:f0:dc:e1:4e:b3:26:46:08:
1b:a1:9b:71:f0:c8:61:8a:25:9c:62:d2:4c:ce:9b:a2:67:72:
e9:53:c5:e0:0c:a2:e0:07:d0:02:54:cd:65:43:3c:93:e7:ce:
5e:66:b4:15:6b:04:ca:b1:43:52:b8:ce:7e:2d:50:49:90:c1:
81:26:d5:60:d4:dc:5d:6a:d2:fa:e6:41:3f:cc:71:e5:bd:c9:
34:05:40:fb:dc:d9:5f:3c:16:86:8b:ec:55:18:5d:db:d4:93:
d4:7a:c4:47:9f:9d:35:df:57:80:1a:7f:03:2f:df:f4:82:3e:
f6:9c:1c:f5:e3:2b:12:74:02:c0:8c:eb:e8:7e:f5:08:01:4e:
d9:65:84:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 09:02:43 2026 by rpki-client