This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/x_aZfes3cLbw9Iat1attYpGOZAA.roa
File: x_aZfes3cLbw9Iat1attYpGOZAA.roa (raw, json)
Hash identifier: 13g6IVGM+RPq/stRgyLewUE9rj4ZFrFESny74sHay48=
Subject key identifier: C7:F6:99:7D:EB:37:70:B6:F0:F4:86:AD:D5:AB:6D:62:91:8E:64:00
Certificate issuer: /CN=07fa540a25432e2aa4dca057845c359d214886f7
Certificate serial: 019B7A5AD0C23CAF8C6C6CACC5E2F2FCFBDA
Authority key identifier: 07:FA:54:0A:25:43:2E:2A:A4:DC:A0:57:84:5C:35:9D:21:48:86:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_pUCiVDLiqk3KBXhFw1nSFIhvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/x_aZfes3cLbw9Iat1attYpGOZAA.roa
Signing time: Thu 01 Jan 2026 16:18:50 +0000
ROA not before: Thu 01 Jan 2026 16:18:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213300
IP address blocks: 46.232.187.0/26 maxlen: 26
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/B_pUCiVDLiqk3KBXhFw1nSFIhvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:5a:d0:c2:3c:af:8c:6c:6c:ac:c5:e2:f2:fc:fb:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07fa540a25432e2aa4dca057845c359d214886f7
Validity
Not Before: Jan 1 16:18:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c7f6997deb3770b6f0f486add5ab6d62918e6400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:94:2b:af:cf:67:ce:a1:14:00:b8:ff:94:04:
b2:a2:b3:ef:61:db:fb:50:59:5b:de:89:1a:04:05:
06:ab:f4:4f:18:75:ac:a1:b7:dc:d6:67:47:32:61:
94:4c:2e:0b:18:1a:d5:fe:c0:e5:6d:94:38:24:24:
a2:65:eb:49:21:87:55:f0:20:50:fc:a4:a5:60:93:
dd:b6:21:b0:f6:0e:e2:e9:b0:d8:ca:e4:ea:6b:51:
c7:c3:47:55:9f:de:d3:2b:b5:f9:af:bb:b9:52:0f:
b7:52:63:72:96:aa:70:de:bb:69:dd:c9:0d:5d:f8:
ad:2b:51:39:be:a7:b1:75:22:03:77:5f:51:56:17:
61:20:69:9d:a6:63:e5:b7:93:bd:4d:9b:38:b8:e6:
da:96:be:32:4b:75:f1:27:7c:9f:14:ea:d1:41:3f:
1c:0d:9b:a0:9f:ee:36:61:82:5a:6b:51:f3:bf:8b:
01:34:52:5b:ce:56:19:9b:2b:b4:c6:6c:da:68:49:
4b:d4:55:da:c0:6c:3a:a9:4d:48:63:6e:85:2f:db:
b8:99:1d:98:ce:ed:bd:dc:02:28:fb:e5:0c:ca:d5:
9a:cb:77:ca:df:cc:0b:d3:a4:ce:76:c7:62:04:48:
1b:e2:9b:ca:8d:8b:3a:1d:26:1c:a4:ff:31:df:3d:
43:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:F6:99:7D:EB:37:70:B6:F0:F4:86:AD:D5:AB:6D:62:91:8E:64:00
X509v3 Authority Key Identifier:
keyid:07:FA:54:0A:25:43:2E:2A:A4:DC:A0:57:84:5C:35:9D:21:48:86:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_pUCiVDLiqk3KBXhFw1nSFIhvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/x_aZfes3cLbw9Iat1attYpGOZAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.232.187.0/26
Signature Algorithm: sha256WithRSAEncryption
7c:dc:97:f1:92:d9:1f:15:00:e0:fd:92:73:ab:3a:ac:53:1a:
02:c7:e8:89:38:74:c4:35:b4:5d:1f:79:7f:28:23:bc:2e:34:
10:d7:5c:6f:45:ab:15:19:59:f9:e7:ba:19:b6:b9:aa:1a:2e:
b7:76:a4:c5:65:10:76:d3:39:6e:e7:71:72:03:17:eb:89:3e:
38:c5:62:c9:db:09:67:21:02:82:aa:6e:fd:30:78:40:b0:f9:
f3:fa:b1:7f:93:61:db:29:25:56:be:d9:1d:c1:4c:7b:75:8d:
a8:8e:d2:90:fd:43:c5:ba:43:87:41:a8:02:e5:2a:2c:bc:05:
d9:40:a5:e2:57:f8:12:69:a6:52:38:a4:15:58:9d:be:cb:fa:
e1:3b:a9:b3:55:60:a6:fb:6d:30:c8:b1:ce:81:f7:ef:a0:75:
36:83:a7:dd:58:4a:c7:e4:00:21:45:db:2a:df:3d:8c:5b:be:
39:69:86:da:12:9c:e1:0d:96:5f:65:3e:89:24:34:bb:73:ef:
60:fd:a7:dc:ab:9b:fe:07:97:1c:b6:12:ac:32:9c:87:57:ed:
c3:b4:db:33:d9:3f:2f:7c:a8:65:de:89:7c:07:b6:0c:7c:ca:
d7:69:6c:8c:ce:a7:94:2d:a6:fa:95:38:39:b6:c3:15:e0:f6:
13:c9:e6:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:35:59 2026 by rpki-client