This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/Nt7g5ryv6Q7SL9YSozyHWMty7ZM.roa
File: Nt7g5ryv6Q7SL9YSozyHWMty7ZM.roa (raw, json)
Hash identifier: odJcI4RixknEdac0TLLhR48G7oeeWWqFVGJTQE+lK3M=
Subject key identifier: 36:DE:E0:E6:BC:AF:E9:0E:D2:2F:D6:12:A3:3C:87:58:CB:72:ED:93
Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Certificate serial: 019BF93702E60BB406838C7043BEE2CDE594
Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/Nt7g5ryv6Q7SL9YSozyHWMty7ZM.roa
Signing time: Mon 26 Jan 2026 07:31:30 +0000
ROA not before: Mon 26 Jan 2026 07:31:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9457
IP address blocks: 46.233.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Feb 2026 00:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f9:37:02:e6:0b:b4:06:83:8c:70:43:be:e2:cd:e5:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Validity
Not Before: Jan 26 07:31:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=36dee0e6bcafe90ed22fd612a33c8758cb72ed93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fd:1b:0a:78:e1:19:4d:55:04:00:7f:17:05:
e5:da:77:f4:09:35:4e:ca:fe:d1:f7:b1:64:8b:da:
fb:2e:da:a9:e2:a8:80:3d:ad:16:61:4f:83:f9:f2:
9d:46:75:75:88:8e:97:75:42:92:ad:3b:07:47:dd:
9a:a7:3b:7a:78:7f:45:51:4b:1e:db:cb:c1:f5:28:
23:e0:d9:ab:10:7d:36:5c:62:ed:6c:19:5f:22:dc:
4f:fb:c2:25:75:9c:1c:31:ae:85:da:06:63:2f:a0:
3d:7b:60:e3:c5:aa:06:42:5d:55:d9:14:03:b8:53:
43:b2:ca:a8:eb:ac:98:ef:64:fe:15:c9:c4:86:af:
91:b9:3d:0e:64:07:e3:6d:5b:e2:b4:07:33:54:78:
77:42:54:39:7f:3e:c8:ca:a1:2c:41:e8:fd:b1:93:
45:e7:ca:9b:d6:b5:79:b9:58:51:6c:a8:87:c7:a6:
2b:0f:b7:26:c0:a5:9b:9d:77:48:bf:ed:19:bf:d4:
86:d5:3c:0e:36:03:4e:f8:5a:62:62:4c:98:7e:bc:
c4:f8:5b:57:77:11:df:c0:a9:25:ae:6e:ad:50:0f:
45:ef:80:b7:b3:9f:19:9c:53:8c:38:5f:b3:dc:ff:
ff:80:bb:9f:56:ae:80:de:8c:43:99:00:43:56:0e:
65:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:DE:E0:E6:BC:AF:E9:0E:D2:2F:D6:12:A3:3C:87:58:CB:72:ED:93
X509v3 Authority Key Identifier:
keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/Nt7g5ryv6Q7SL9YSozyHWMty7ZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.233.62.0/24
Signature Algorithm: sha256WithRSAEncryption
84:8e:ab:68:ef:b5:9c:86:c4:f3:38:63:89:92:40:87:c4:c2:
1b:77:f4:ed:20:54:1f:cc:2f:4a:95:4d:d9:ca:04:09:dd:c0:
ba:91:0e:c8:09:29:af:24:ee:7b:f0:cc:20:18:8b:a7:5e:22:
fc:c0:0b:3f:6e:0c:ee:c3:bb:0a:70:4c:af:54:20:aa:d9:6d:
df:b8:c5:3a:dd:45:d4:d1:93:50:98:fb:9f:4e:6f:98:21:aa:
4a:f3:dd:c8:f9:77:62:75:bd:76:41:34:45:65:50:ca:42:c6:
63:c5:e8:b6:2a:c6:c1:a6:a3:22:72:87:6d:cb:ec:fd:e8:45:
d1:67:b1:82:4a:78:0b:17:49:53:5e:ff:9d:3c:64:45:8f:88:
2b:a0:64:3f:60:7a:15:c1:63:d4:9a:ee:99:d2:27:f0:b7:d1:
c3:ba:e0:eb:44:b5:c1:52:ca:46:3b:0b:92:6f:f3:1f:55:b2:
57:53:18:35:2f:ba:51:fd:6a:36:69:b7:69:86:b5:a9:f3:f6:
63:58:ce:1f:ed:12:6a:17:a0:06:cf:13:b8:e9:52:45:03:e0:
5f:a9:2d:98:7c:a3:a2:6d:d7:e1:42:bf:57:02:86:b4:d4:6e:
23:e2:d5:d5:59:7d:be:24:29:64:eb:9e:47:bc:9d:9b:a8:2a:
62:e8:ce:73
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZv5NwLmC7QGg4xwQ77izeWUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmYzUwZDBkNDIwNjdiNzZhYjFhMmU4ZTUzM2ZmODQ5YjY1
ZDU2ZjUwHhcNMjYwMTI2MDczMTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNmRlZTBlNmJjYWZlOTBlZDIyZmQ2MTJhMzNjODc1OGNiNzJlZDkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuv0bCnjhGU1VBAB/FwXl2nf0CTVO
yv7R97Fki9r7Ltqp4qiAPa0WYU+D+fKdRnV1iI6XdUKSrTsHR92apzt6eH9FUUse
28vB9Sgj4NmrEH02XGLtbBlfItxP+8IldZwcMa6F2gZjL6A9e2DjxaoGQl1V2RQD
uFNDssqo66yY72T+FcnEhq+RuT0OZAfjbVvitAczVHh3QlQ5fz7IyqEsQej9sZNF
58qb1rV5uVhRbKiHx6YrD7cmwKWbnXdIv+0Zv9SG1TwONgNO+FpiYkyYfrzE+FtX
dxHfwKklrm6tUA9F74C3s58ZnFOMOF+z3P//gLufVq6A3oxDmQBDVg5lXQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDbe4Oa8r+kO0i/WEqM8h1jLcu2TMB8GA1UdIwQY
MBaAFG/FDQ1CBnt2qxoujlM/+Em2XVb1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDkt
M2MxNmZmODQxYWIyLzEvTnQ3ZzVyeXY2UTdTTDlZU296eUhXTXR5N1pNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDktM2MxNmZmODQxYWIy
LzEvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALuk+MA0G
CSqGSIb3DQEBCwUAA4IBAQCEjqto77WchsTzOGOJkkCHxMIbd/TtIFQfzC9KlU3Z
ygQJ3cC6kQ7ICSmvJO578MwgGIunXiL8wAs/bgzuw7sKcEyvVCCq2W3fuMU63UXU
0ZNQmPufTm+YIapK893I+Xdidb12QTRFZVDKQsZjxei2KsbBpqMicodty+z96EXR
Z7GCSngLF0lTXv+dPGRFj4groGQ/YHoVwWPUmu6Z0ifwt9HDuuDrRLXBUspGOwuS
b/MfVbJXUxg1L7pR/Wo2abdphrWp8/ZjWM4f7RJqF6AGzxO46VJFA+BfqS2YfKOi
bdfhQr9XAoa01G4j4tXVWX2+JClk655HvJ2bqCpi6M5z
-----END CERTIFICATE-----
Generated at Tue Feb 10 10:09:29 2026 by rpki-client