This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/YUsCKqNl16pDs_8KVE5VLmDFj5M.roa
File: YUsCKqNl16pDs_8KVE5VLmDFj5M.roa (raw, json)
Hash identifier: enLSqBELUYJ70Ss/6MuXxuUTa0RNR44fL5GLxYESEBg=
Subject key identifier: 61:4B:02:2A:A3:65:D7:AA:43:B3:FF:0A:54:4E:55:2E:60:C5:8F:93
Certificate issuer: /CN=ed6da9e41686d21c12799c8e84b274aa8241508c
Certificate serial: 019B7910F2500D5B1037B4F81E2BBD125A25
Authority key identifier: ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/YUsCKqNl16pDs_8KVE5VLmDFj5M.roa
Signing time: Thu 01 Jan 2026 10:18:32 +0000
ROA not before: Thu 01 Jan 2026 10:18:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51788
IP address blocks: 46.143.252.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:10:f2:50:0d:5b:10:37:b4:f8:1e:2b:bd:12:5a:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed6da9e41686d21c12799c8e84b274aa8241508c
Validity
Not Before: Jan 1 10:18:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=614b022aa365d7aa43b3ff0a544e552e60c58f93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a2:a0:17:38:69:18:bf:67:1b:9a:23:25:85:
55:a4:17:48:e9:ab:dd:53:a7:e3:5a:92:c6:21:13:
91:38:33:22:fe:82:96:74:b5:90:7f:b4:8f:f2:02:
ea:e4:e8:75:65:f7:d5:8a:48:71:fd:f6:a8:8d:7c:
50:3f:83:e6:20:fd:05:d2:46:f4:ad:3f:bf:dd:be:
12:24:cd:41:ce:bf:60:e3:7d:88:21:62:18:dd:3e:
7f:28:cd:83:99:d2:c1:da:9a:87:ee:54:a0:c9:d0:
cc:37:33:5c:04:5e:76:e4:71:b8:fd:3a:e0:97:7f:
de:3d:d5:51:59:a1:ba:80:83:47:e7:c4:54:e6:fc:
cf:f9:73:e7:b4:38:1b:34:db:ab:74:37:f2:0a:98:
f6:32:fd:ee:77:7b:6a:7f:c9:29:9d:bd:4f:ff:e8:
b1:c4:13:cd:47:11:63:7f:bc:cc:63:73:8c:01:ca:
a1:60:42:8f:e0:05:d1:9d:1c:d5:87:1c:17:b8:f4:
f5:ee:c1:9a:32:e0:34:d9:d8:65:86:d8:cd:80:cb:
9b:a8:06:8b:bd:a0:5a:73:56:7e:3d:67:a7:f1:0c:
e6:a1:93:7f:61:63:42:e0:db:a2:72:a4:d5:08:4e:
a8:ee:19:d7:be:fe:ac:62:f0:2b:b8:89:b8:46:fb:
00:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:4B:02:2A:A3:65:D7:AA:43:B3:FF:0A:54:4E:55:2E:60:C5:8F:93
X509v3 Authority Key Identifier:
keyid:ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/YUsCKqNl16pDs_8KVE5VLmDFj5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.143.252.0/22
Signature Algorithm: sha256WithRSAEncryption
65:95:4b:ad:d0:aa:62:ea:b2:47:e0:56:44:3e:41:52:61:ce:
5f:84:c8:76:4e:b8:43:39:b4:94:80:49:ba:c8:92:f0:00:47:
36:a7:c0:67:5f:04:29:d9:8f:fa:48:16:d2:ae:fb:e4:f4:50:
84:06:db:97:d4:c0:64:85:78:61:11:79:e7:0e:fa:de:c8:46:
d2:1b:b8:af:ad:51:7f:9b:07:83:c5:d2:ca:d5:5f:5c:8c:67:
e0:8b:4d:0b:6e:9b:c0:2b:1f:97:6c:f9:ab:6d:81:91:6f:53:
ef:d5:5f:1a:ef:a2:74:aa:41:16:a5:c0:15:fc:72:7d:6b:af:
2a:3b:54:e3:e1:04:38:6c:71:d2:f3:bf:83:ad:40:f6:33:b3:
13:9b:b6:26:d6:9a:af:60:e2:d0:16:01:90:eb:88:eb:69:83:
e7:a7:d0:92:ee:e1:09:29:76:29:fc:2e:9b:24:ef:e6:a3:c7:
50:ab:7c:1d:96:04:84:9c:e2:69:c4:b7:58:b9:e3:4a:3c:0d:
a4:e8:22:9a:88:9c:d6:91:6f:56:5f:8e:77:fb:60:d8:0a:89:
10:fb:a7:7e:71:a6:c5:49:37:a3:71:d1:08:fc:e3:a2:45:c0:
8f:df:f6:e7:49:73:a8:52:a3:db:14:79:fd:09:ad:c1:c1:ac:
a4:06:ea:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:07:14 2026 by rpki-client