This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/pVBaNjULwz0aOwWJHCR4FjSV1IM.roa
File: pVBaNjULwz0aOwWJHCR4FjSV1IM.roa (raw, json)
Hash identifier: Q5gwvnLKrWIq0+4hK9BYbVE1a8YkPxKXaiFgI8rPsJo=
Subject key identifier: A5:50:5A:36:35:0B:C3:3D:1A:3B:05:89:1C:24:78:16:34:95:D4:83
Certificate issuer: /CN=468b68141796ca95e4c72f4bfa696acea5083af3
Certificate serial: 019AFD406FE5D52ED93A956C0EA62ECE5711
Authority key identifier: 46:8B:68:14:17:96:CA:95:E4:C7:2F:4B:FA:69:6A:CE:A5:08:3A:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RotoFBeWypXkxy9L-mlqzqUIOvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/pVBaNjULwz0aOwWJHCR4FjSV1IM.roa
Signing time: Mon 08 Dec 2025 09:17:29 +0000
ROA not before: Mon 08 Dec 2025 09:17:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210560
IP address blocks: 46.243.144.0/22 maxlen: 22
46.243.146.0/23 maxlen: 23
46.243.146.0/24 maxlen: 24
2a11:f740:2::/48 maxlen: 48
2a11:f740:20::/44 maxlen: 44
2a11:f740:20::/48 maxlen: 48
2a11:f740:21::/48 maxlen: 48
2a11:f740:22::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/RotoFBeWypXkxy9L-mlqzqUIOvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/RotoFBeWypXkxy9L-mlqzqUIOvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RotoFBeWypXkxy9L-mlqzqUIOvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Dec 2025 18:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:fd:40:6f:e5:d5:2e:d9:3a:95:6c:0e:a6:2e:ce:57:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=468b68141796ca95e4c72f4bfa696acea5083af3
Validity
Not Before: Dec 8 09:17:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a5505a36350bc33d1a3b05891c2478163495d483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:36:53:88:3b:cd:5e:ee:d5:9e:f9:6e:55:93:
74:65:f1:98:56:04:f9:4c:e1:ef:b6:90:e3:73:98:
7e:40:08:80:92:22:bc:d8:ec:ce:5f:88:54:b6:11:
83:b2:de:88:10:fa:0d:f2:ec:70:73:84:6f:81:ae:
fa:6f:2f:2a:72:71:7a:88:7d:f7:7e:13:c0:53:04:
ba:08:6f:5f:cd:a8:87:96:69:37:bc:a7:c7:18:90:
e9:95:54:cd:ba:3f:34:5d:56:49:b7:b7:53:37:e0:
94:f9:73:c1:74:c8:4d:aa:aa:4a:62:1e:46:f2:55:
ad:67:0a:65:df:ff:d3:21:8d:4f:e2:bf:62:0f:84:
99:80:c7:7c:4a:00:f2:d9:e3:c4:0c:02:ec:e1:b0:
c0:53:af:a3:0d:9a:b7:dd:fa:9c:82:38:96:83:fb:
1b:fb:bf:71:c3:1e:35:e6:d5:86:ce:d4:77:32:f1:
25:f6:ec:83:36:88:72:fb:74:40:56:8e:b0:79:69:
c6:17:f4:35:24:62:52:47:ca:05:3a:ea:54:30:5e:
bb:78:cc:2e:4e:60:65:56:73:54:e7:c1:ee:01:35:
16:f5:66:24:58:6c:bd:3e:92:b6:47:6c:ae:73:d5:
ed:32:7f:88:32:f4:b7:99:16:ed:88:1f:a6:d9:a7:
83:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:50:5A:36:35:0B:C3:3D:1A:3B:05:89:1C:24:78:16:34:95:D4:83
X509v3 Authority Key Identifier:
keyid:46:8B:68:14:17:96:CA:95:E4:C7:2F:4B:FA:69:6A:CE:A5:08:3A:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RotoFBeWypXkxy9L-mlqzqUIOvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/pVBaNjULwz0aOwWJHCR4FjSV1IM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/RotoFBeWypXkxy9L-mlqzqUIOvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.144.0/22
IPv6:
2a11:f740:2::/48
2a11:f740:20::/44
Signature Algorithm: sha256WithRSAEncryption
54:57:47:61:f5:91:45:05:f7:ea:46:cc:f0:05:f3:45:37:0b:
c0:c3:d8:a1:67:6f:64:62:b6:e8:09:b3:40:49:58:a3:27:da:
e8:8f:35:de:e4:35:71:8a:d3:26:c8:94:d9:68:18:27:f1:e7:
91:0c:96:12:7a:5b:43:63:df:84:ca:91:0a:3f:d9:ee:03:b3:
97:9b:4d:a5:80:b2:0c:28:9e:b0:b7:eb:6b:3b:63:ed:72:b8:
10:d3:1a:d4:bf:9c:c4:6e:7c:fb:12:8b:ac:d3:49:cd:8f:9f:
1d:9c:99:3c:3f:2e:9d:70:80:a3:f5:58:64:80:8c:0f:a1:ca:
22:fc:db:9e:81:f2:39:c9:a9:9f:dc:39:c8:a2:47:27:f7:df:
49:99:fb:cf:50:7c:29:2a:3c:bb:f3:c7:1b:50:a2:a8:b6:63:
1c:05:fe:3a:c9:65:bb:ec:ba:22:12:6e:3c:f0:21:cb:c9:9a:
13:ff:66:11:b4:20:f7:9e:45:b6:94:bc:49:48:cd:25:8f:b4:
66:70:80:2a:5f:bc:51:7b:a7:1a:d2:f9:1f:27:eb:35:a7:4d:
29:40:87:72:e0:1c:8b:8d:e1:f9:4a:1f:f3:f8:e9:c6:e1:15:
c7:c4:d3:25:6e:d5:61:4b:b6:72:16:b8:f4:30:e8:43:77:d5:
35:a4:3b:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 23:25:49 2025 by rpki-client