This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Z3qTKJ7CIGasieELz7lpIp2Yh6k.roa
File: Z3qTKJ7CIGasieELz7lpIp2Yh6k.roa (raw, json)
Hash identifier: 7cCBpyUsGDrcq8EeS5YX2uI808hKjfebRICORugyh0E=
Subject key identifier: 67:7A:93:28:9E:C2:20:66:AC:89:E1:0B:CF:B9:69:22:9D:98:87:A9
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 019B7C135239AEC30DB021A9DCA57099CA5F
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Z3qTKJ7CIGasieELz7lpIp2Yh6k.roa
Signing time: Fri 02 Jan 2026 00:19:59 +0000
ROA not before: Fri 02 Jan 2026 00:19:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204774
IP address blocks: 46.34.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft
rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Jan 2026 21:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:13:52:39:ae:c3:0d:b0:21:a9:dc:a5:70:99:ca:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Jan 2 00:19:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=677a93289ec22066ac89e10bcfb969229d9887a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:87:64:b4:a1:85:4d:bd:47:32:80:26:7a:7a:
e5:31:47:74:df:15:44:59:40:62:5d:e5:0a:34:b8:
38:4d:eb:80:0c:cc:2b:24:d3:b1:75:d6:6a:35:54:
ef:60:51:85:01:af:d3:b7:77:5a:0b:8d:9f:9d:3c:
69:d7:33:06:8e:c1:0c:3a:0b:1b:96:74:4e:e6:74:
00:d2:ae:c8:0f:84:7b:d0:79:9f:c6:ee:9a:c8:b8:
b3:17:56:56:f3:25:a4:fa:e8:bf:0d:93:bc:ca:d0:
87:24:48:d7:37:62:45:55:37:5d:a7:ce:ab:7f:ec:
7d:24:d3:9e:b5:88:ca:6d:48:95:ca:26:dc:ec:0d:
40:dd:3b:2b:b3:f9:ec:4e:b6:0f:25:ff:73:3b:22:
81:1b:89:09:ee:2a:77:76:b7:c3:27:37:31:08:40:
2c:09:35:1f:98:46:bc:82:cd:9c:b7:38:3e:2f:1a:
a9:30:1d:9d:6d:e2:42:95:51:c2:02:e9:63:07:b5:
9b:e5:8d:35:ba:c2:a4:e6:eb:98:8e:c4:b0:98:6e:
e1:eb:72:0c:6a:a6:db:c9:cd:46:fe:e6:67:18:0b:
36:f6:72:63:9f:3e:5d:29:44:c0:28:e0:0e:90:8d:
f0:bd:3e:8a:67:9f:11:37:06:a9:af:b9:31:2f:a7:
82:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:7A:93:28:9E:C2:20:66:AC:89:E1:0B:CF:B9:69:22:9D:98:87:A9
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Z3qTKJ7CIGasieELz7lpIp2Yh6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.53.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:ab:c0:eb:73:8d:18:8d:e8:03:79:d5:d5:bc:c9:08:bf:ac:
8c:87:e2:0a:55:b5:de:36:26:02:fe:bf:b5:49:6e:93:f5:ad:
b0:2c:23:14:c1:4a:4b:b8:be:4b:92:7d:cc:9f:24:af:bc:3d:
b7:ee:ac:88:7a:c7:b3:03:31:53:81:10:77:c4:8a:de:91:e3:
0e:c3:54:5f:bb:23:e1:9a:00:c8:58:e2:50:96:5b:e5:0f:af:
b8:ed:aa:c6:0f:51:b6:3b:3e:19:d5:82:7e:fe:e9:4a:e1:b9:
24:df:69:fd:4e:64:61:ba:9d:6d:fb:5f:93:19:8e:82:3a:f3:
55:b6:c2:ee:9f:f5:87:c6:7f:6a:d6:73:72:a5:54:be:be:8e:
b3:83:85:2e:d4:5d:85:23:64:f0:bf:7f:a4:9d:a0:83:5b:93:
59:15:49:11:fd:89:e9:7b:5d:50:11:27:d1:85:6f:d2:cd:a5:
2b:a5:9c:cd:b6:27:35:bc:4c:f5:06:e3:0a:06:d1:e4:21:1d:
2f:87:7e:b2:14:62:dc:ab:b1:73:e0:4a:b5:89:b6:13:36:38:
a1:23:7a:35:20:82:e7:d9:19:d8:c6:b8:4f:40:b2:d3:6a:87:
f3:95:1e:47:ee:e7:8c:96:a5:00:81:f4:7f:f8:b6:0c:2a:d6:
52:ca:22:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 01:51:57 2026 by rpki-client