This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/17d0ad-801c-4814-b891-e0a652004878/1/46SpZkulob1qI8XSQosdiJhHEWo.roa
File: 46SpZkulob1qI8XSQosdiJhHEWo.roa (raw, json)
Hash identifier: HfmlNEm+q4mKiMwfDLGAB9WzmcIjE5Zp5Gvj/U9yVns=
Subject key identifier: E3:A4:A9:66:4B:A5:A1:BD:6A:23:C5:D2:42:8B:1D:88:98:47:11:6A
Certificate issuer: /CN=794f6b59b439d1769932059d198428cb806ae753
Certificate serial: 019BC6845157D79B046F55D66328A46AAC74
Authority key identifier: 79:4F:6B:59:B4:39:D1:76:99:32:05:9D:19:84:28:CB:80:6A:E7:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eU9rWbQ50XaZMgWdGYQoy4Bq51M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/17d0ad-801c-4814-b891-e0a652004878/1/46SpZkulob1qI8XSQosdiJhHEWo.roa
Signing time: Fri 16 Jan 2026 11:15:18 +0000
ROA not before: Fri 16 Jan 2026 11:15:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206663
IP address blocks: 185.208.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/17d0ad-801c-4814-b891-e0a652004878/1/eU9rWbQ50XaZMgWdGYQoy4Bq51M.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/17d0ad-801c-4814-b891-e0a652004878/1/eU9rWbQ50XaZMgWdGYQoy4Bq51M.mft
rsync://rpki.ripe.net/repository/DEFAULT/eU9rWbQ50XaZMgWdGYQoy4Bq51M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:c6:84:51:57:d7:9b:04:6f:55:d6:63:28:a4:6a:ac:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=794f6b59b439d1769932059d198428cb806ae753
Validity
Not Before: Jan 16 11:15:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e3a4a9664ba5a1bd6a23c5d2428b1d889847116a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c6:09:fa:a8:fe:a8:13:db:89:04:5b:f5:7e:
81:bf:79:4c:fa:14:aa:04:1d:d4:a8:6e:6f:2e:93:
ed:35:11:a9:4d:1c:fb:88:72:7f:da:f7:85:eb:bb:
d7:a8:3a:b9:ea:8f:24:93:25:24:9c:90:4f:02:cb:
4e:ec:4c:5f:aa:63:d1:ae:8e:af:2f:1b:da:30:7d:
c7:6f:ca:f6:88:c1:27:57:af:f7:84:3b:5b:70:e7:
11:d4:c0:72:80:de:18:a6:69:d3:71:1f:97:62:56:
2e:5f:87:f9:19:b9:5f:84:59:59:c6:ad:dc:8a:85:
be:a5:f0:f7:4c:12:79:43:db:29:93:0d:c6:97:44:
66:30:8e:2a:95:13:80:73:c7:5a:6d:6e:71:75:11:
99:93:0a:1d:ae:fa:e8:6a:66:7b:53:ce:73:90:b0:
b9:fc:c6:ab:d0:a4:de:b3:5a:95:84:7f:77:8a:a4:
80:a2:8c:1e:a6:7f:e3:b2:92:d4:9a:45:df:2b:d5:
d7:f7:97:e1:ff:c6:9c:7d:85:eb:33:d5:cd:d0:50:
d5:58:39:ff:85:4c:b9:e3:18:f0:3b:72:ca:e8:19:
4e:91:64:7c:e8:d2:2b:18:0e:c9:1d:68:e7:a7:da:
f1:b9:96:3d:6a:49:89:34:8d:20:73:1b:9b:6b:75:
1f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:A4:A9:66:4B:A5:A1:BD:6A:23:C5:D2:42:8B:1D:88:98:47:11:6A
X509v3 Authority Key Identifier:
keyid:79:4F:6B:59:B4:39:D1:76:99:32:05:9D:19:84:28:CB:80:6A:E7:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eU9rWbQ50XaZMgWdGYQoy4Bq51M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/17d0ad-801c-4814-b891-e0a652004878/1/46SpZkulob1qI8XSQosdiJhHEWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/17d0ad-801c-4814-b891-e0a652004878/1/eU9rWbQ50XaZMgWdGYQoy4Bq51M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.208.7.0/24
Signature Algorithm: sha256WithRSAEncryption
36:f1:fc:98:84:71:04:31:75:93:0a:6c:8f:8f:bc:90:5c:f8:
2c:53:6a:36:b1:9e:e7:94:55:46:94:e9:24:fc:08:c8:a2:e9:
64:da:62:26:79:70:99:27:fd:d4:a6:25:5c:ca:85:27:78:51:
78:59:84:fa:5b:c3:b0:db:e5:d8:26:91:cf:c8:ac:0b:69:d8:
ae:b2:fd:63:74:e7:bd:ba:18:f0:84:0e:b8:4f:cc:2d:4d:ea:
36:a5:f5:af:0e:d9:1b:b7:b8:50:be:83:2b:fe:af:09:62:5a:
c9:7c:e2:8b:87:38:a6:4e:e2:2e:b8:79:14:b4:cc:39:db:07:
be:af:e5:07:7a:27:83:5d:e1:3e:12:b2:eb:e0:f2:86:77:74:
5e:69:2f:8e:3e:7c:10:da:1c:06:52:c2:78:de:f8:c4:c4:dc:
e3:cd:9a:77:89:36:1c:a7:c3:97:d4:4d:36:03:6f:c5:91:7d:
00:0b:da:63:fa:75:b5:a5:1c:fe:cd:1f:ac:c4:bd:e5:52:e6:
3b:a0:49:6a:e3:a7:37:54:fe:8c:41:2e:7a:f6:3a:94:96:03:
5a:35:b2:6b:bc:a8:f4:09:ca:b0:8d:bf:0e:15:82:7b:9c:03:
f6:ec:d2:4d:af:c9:94:f5:b1:86:8d:25:b5:fe:4b:a4:f1:bd:
97:11:b7:33
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZvGhFFX15sEb1XWYyikaqx0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5NGY2YjU5YjQzOWQxNzY5OTMyMDU5ZDE5ODQyOGNiODA2
YWU3NTMwHhcNMjYwMTE2MTExNTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlM2E0YTk2NjRiYTVhMWJkNmEyM2M1ZDI0MjhiMWQ4ODk4NDcxMTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAisYJ+qj+qBPbiQRb9X6Bv3lM+hSq
BB3UqG5vLpPtNRGpTRz7iHJ/2veF67vXqDq56o8kkyUknJBPAstO7ExfqmPRro6v
LxvaMH3Hb8r2iMEnV6/3hDtbcOcR1MBygN4YpmnTcR+XYlYuX4f5GblfhFlZxq3c
ioW+pfD3TBJ5Q9spkw3Gl0RmMI4qlROAc8dabW5xdRGZkwodrvroamZ7U85zkLC5
/Mar0KTes1qVhH93iqSAoowepn/jspLUmkXfK9XX95fh/8acfYXrM9XN0FDVWDn/
hUy54xjwO3LK6BlOkWR86NIrGA7JHWjnp9rxuZY9akmJNI0gcxuba3UfdwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOOkqWZLpaG9aiPF0kKLHYiYRxFqMB8GA1UdIwQY
MBaAFHlPa1m0OdF2mTIFnRmEKMuAaudTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVU5cldiUTUwWGFaTWdXZEdZUW95NEJxNTFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8xN2QwYWQtODAxYy00ODE0LWI4OTEt
ZTBhNjUyMDA0ODc4LzEvNDZTcFprdWxvYjFxSThYU1Fvc2RpSmhIRVdvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC8xN2QwYWQtODAxYy00ODE0LWI4OTEtZTBhNjUyMDA0ODc4
LzEvZVU5cldiUTUwWGFaTWdXZEdZUW95NEJxNTFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudAHMA0G
CSqGSIb3DQEBCwUAA4IBAQA28fyYhHEEMXWTCmyPj7yQXPgsU2o2sZ7nlFVGlOkk
/AjIoulk2mImeXCZJ/3UpiVcyoUneFF4WYT6W8Ow2+XYJpHPyKwLadiusv1jdOe9
uhjwhA64T8wtTeo2pfWvDtkbt7hQvoMr/q8JYlrJfOKLhzimTuIuuHkUtMw52we+
r+UHeieDXeE+ErLr4PKGd3ReaS+OPnwQ2hwGUsJ43vjExNzjzZp3iTYcp8OX1E02
A2/FkX0AC9pj+nW1pRz+zR+sxL3lUuY7oElq46c3VP6MQS569jqUlgNaNbJrvKj0
Ccqwjb8OFYJ7nAP27NJNr8mU9bGGjSW1/kuk8b2XEbcz
-----END CERTIFICATE-----
Generated at Mon Jan 26 08:37:46 2026 by rpki-client