This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/L55PmI1ZwuVHZV5rEFCMSx-UH0I.roa
File: L55PmI1ZwuVHZV5rEFCMSx-UH0I.roa (raw, json)
Hash identifier: ei+lXL7zHDyqioDmtKobrd7etumhhT8ybyaaw4DRriM=
Subject key identifier: 2F:9E:4F:98:8D:59:C2:E5:47:65:5E:6B:10:50:8C:4B:1F:94:1F:42
Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial: 019B7FF2AEF934B1ACD21BAFA32A70FD6904
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/L55PmI1ZwuVHZV5rEFCMSx-UH0I.roa
Signing time: Fri 02 Jan 2026 18:22:49 +0000
ROA not before: Fri 02 Jan 2026 18:22:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211440
IP address blocks: 212.46.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 15:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:f2:ae:f9:34:b1:ac:d2:1b:af:a3:2a:70:fd:69:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
Validity
Not Before: Jan 2 18:22:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2f9e4f988d59c2e547655e6b10508c4b1f941f42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:7b:3f:c7:25:0c:32:d3:80:8a:da:d8:95:92:
85:72:14:92:33:a1:16:71:81:e2:e9:92:89:d4:af:
c9:e6:b9:0a:21:81:ce:f4:af:a8:86:49:14:90:90:
03:3f:c5:9c:7c:4b:52:ed:89:8d:a6:cc:3c:78:44:
87:56:8f:eb:cf:74:14:35:75:84:ea:a5:e3:2c:20:
d2:d9:5e:61:4f:e6:13:6b:7b:9c:3a:a6:20:c2:2b:
c1:a1:cb:63:02:80:05:30:8f:4a:3e:6c:63:8a:59:
a4:08:2e:1f:ba:91:12:70:b1:e0:1f:2b:34:91:97:
64:8c:ef:7f:41:b7:75:ba:40:4b:28:9f:64:21:d9:
53:46:9d:2c:d0:da:cc:d2:87:57:99:c7:52:6a:75:
06:f4:81:93:4f:25:4e:84:33:4d:e7:a9:31:8f:96:
38:8e:96:b4:95:b0:14:e5:c2:dc:94:8d:2d:cd:ab:
55:dd:0f:73:2c:cd:bf:23:ec:7e:2d:f1:9e:bd:05:
f7:1b:02:a2:6d:f3:dd:cb:1c:43:5c:15:1d:03:a5:
bd:e0:e7:cc:60:00:0e:e0:a7:fa:d7:53:46:1a:d9:
95:a6:6f:9c:92:47:aa:5e:b4:be:f3:8e:ae:5f:6a:
54:f8:bb:bf:ab:e0:dc:c3:9b:ae:ae:0d:15:9c:90:
db:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:9E:4F:98:8D:59:C2:E5:47:65:5E:6B:10:50:8C:4B:1F:94:1F:42
X509v3 Authority Key Identifier:
keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/L55PmI1ZwuVHZV5rEFCMSx-UH0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.46.39.0/24
Signature Algorithm: sha256WithRSAEncryption
72:a0:1a:91:ea:7f:52:a9:ee:bb:c6:86:f6:e5:0d:0c:a7:db:
88:55:dc:a9:a8:49:ea:49:af:63:e1:34:ff:0b:09:a2:6f:d2:
96:e2:f1:0d:de:a3:d2:36:4c:cb:82:d7:c9:d2:82:15:ec:24:
6a:3c:7b:f5:ef:26:0a:37:03:05:b6:34:27:d3:54:d5:e6:b6:
09:b2:22:51:ff:f6:c1:16:57:d1:10:48:f3:a5:14:4e:d9:2c:
0b:7e:b9:8b:e4:47:14:7e:87:77:1f:17:6c:50:0f:f9:ce:5d:
92:fd:0c:2c:be:ea:7b:7d:24:1b:38:6f:c1:39:60:1b:0a:ca:
91:ff:dd:d6:cb:bd:b4:7e:3a:d7:67:68:d9:23:94:ae:67:75:
e5:b4:ac:e8:31:fc:db:6b:f1:13:6b:e6:8f:49:26:4a:64:fc:
6b:63:5c:85:13:1e:90:cd:ef:82:16:45:0d:14:a3:49:3b:38:
b2:15:96:ce:69:29:d1:a1:f3:a6:90:c1:59:4e:e9:94:08:55:
ba:99:51:d0:e1:3d:4e:09:c5:ee:bc:9e:5d:59:40:b1:9c:ba:
05:27:43:e2:ff:86:db:07:c1:a9:82:26:0c:19:09:07:55:dd:
9d:74:27:d3:5c:11:e7:d5:da:97:b3:74:46:ee:e6:6b:f5:75:
2c:08:61:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 20:29:26 2026 by rpki-client