This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/YwC9pKPBjvGZtmMsz8q7-L2iwUg.roa
File: YwC9pKPBjvGZtmMsz8q7-L2iwUg.roa (raw, json)
Hash identifier: doEjRnjZRLGiYVoGRzQjHdhg1pJzAYP6ZgcVU+Bf/bE=
Subject key identifier: 63:00:BD:A4:A3:C1:8E:F1:99:B6:63:2C:CF:CA:BB:F8:BD:A2:C1:48
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 019B7C134C0124EC29CDD6526650A2FD1C08
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/YwC9pKPBjvGZtmMsz8q7-L2iwUg.roa
Signing time: Fri 02 Jan 2026 00:19:58 +0000
ROA not before: Fri 02 Jan 2026 00:19:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2914
IP address blocks: 46.34.60.0/24 maxlen: 24
46.34.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft
rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Jan 2026 15:30:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:13:4c:01:24:ec:29:cd:d6:52:66:50:a2:fd:1c:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Jan 2 00:19:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6300bda4a3c18ef199b6632ccfcabbf8bda2c148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c3:04:2b:0c:d7:35:61:01:8e:b1:7d:90:35:
ac:45:bc:01:c7:17:48:fb:ba:c1:30:16:39:03:51:
42:47:ad:cd:9e:e6:11:c2:e2:e4:af:45:78:99:3d:
1c:cd:df:85:ee:1a:dc:cf:35:19:8e:0b:39:19:94:
b0:99:b4:cc:f5:cf:d2:b8:15:8b:cc:92:ef:7d:2b:
f5:99:5d:22:77:64:4a:1d:f4:39:09:d3:0e:08:91:
67:30:a6:45:67:82:8f:78:c3:96:31:44:a4:f1:28:
00:27:a4:e6:f8:0f:1f:23:b8:fd:49:49:6d:8a:95:
4e:e0:46:f8:12:01:53:ea:ab:b9:bb:d4:36:9b:0f:
f6:95:dd:6d:f6:80:8c:6c:0d:b6:73:a7:d9:a7:c0:
11:17:0b:e3:f0:a0:f9:59:4d:d6:02:6b:30:f0:f2:
61:8f:ff:bb:a9:4e:46:50:4c:cc:bb:1a:d2:0d:71:
e6:76:0c:70:91:07:72:28:59:df:9f:c0:9c:64:7a:
7d:c1:b4:aa:f5:bd:d2:63:0c:88:d4:f2:4d:e2:ed:
ff:0e:e6:0a:ee:e0:55:5e:f6:41:58:79:db:39:cc:
12:78:40:14:a9:61:f0:5e:6a:9e:6f:aa:0b:c8:68:
20:68:b2:95:cb:b6:75:a3:03:68:e8:f9:e6:10:d0:
df:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:00:BD:A4:A3:C1:8E:F1:99:B6:63:2C:CF:CA:BB:F8:BD:A2:C1:48
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/YwC9pKPBjvGZtmMsz8q7-L2iwUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.60.0/23
Signature Algorithm: sha256WithRSAEncryption
11:8b:17:45:7f:ea:6c:8e:a7:d2:f7:60:cf:cb:5b:f7:fc:9f:
55:a1:4e:0d:6c:79:eb:8c:f0:f7:82:c8:ff:7b:25:73:11:44:
54:09:86:4f:3e:52:af:12:c4:e8:2e:74:ca:e8:06:c8:18:a5:
de:29:7a:cd:ff:3e:c8:bd:92:af:e8:f0:2c:6b:23:ea:3a:d7:
89:34:5a:18:6f:0e:0d:0d:7b:53:f0:3f:82:93:5e:37:5e:37:
b7:79:0a:7d:07:32:b8:38:37:c2:68:2e:a6:84:77:85:7e:5f:
5d:f9:d9:75:59:13:9b:42:1c:46:8f:d6:0d:76:00:35:c3:12:
15:4f:ac:11:e9:d8:b7:26:19:6c:08:ee:ee:ca:74:fd:70:06:
7b:da:d7:a7:b6:5c:7c:15:3a:d7:b0:6c:5d:75:cc:64:56:e0:
c4:eb:6c:d7:14:44:8d:ba:6a:e8:e3:70:7b:cc:7b:75:4d:56:
74:ec:a0:e7:91:28:f5:2f:f0:78:53:9b:dc:f2:7b:39:c8:22:
47:d9:a3:f5:5d:ec:c7:db:66:8a:9c:d3:20:5d:71:cb:84:eb:
e4:5f:ed:38:d7:d8:e4:f1:85:44:33:c6:30:b8:fb:34:1d:67:
40:6a:ac:d7:12:d9:92:4e:91:63:ed:c3:3e:e6:d2:af:24:ed:
07:74:d3:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 8 00:11:50 2026 by rpki-client