This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/wOU9aMdER98sPekS4MEPyEOSZUM.roa
File: wOU9aMdER98sPekS4MEPyEOSZUM.roa (raw, json)
Hash identifier: fyP1+WfbQMjBodG1sjfQbuHrnmZod0aoG3fzD6DGcYA=
Subject key identifier: C0:E5:3D:68:C7:44:47:DF:2C:3D:E9:12:E0:C1:0F:C8:43:92:65:43
Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Certificate serial: 019A822E831C5197BD6E6B9A248BFEF8B629
Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/wOU9aMdER98sPekS4MEPyEOSZUM.roa
Signing time: Fri 14 Nov 2025 11:44:37 +0000
ROA not before: Fri 14 Nov 2025 11:44:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42431
IP address blocks: 46.233.0.0/19 maxlen: 24
46.233.36.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:82:2e:83:1c:51:97:bd:6e:6b:9a:24:8b:fe:f8:b6:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Validity
Not Before: Nov 14 11:44:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c0e53d68c74447df2c3de912e0c10fc843926543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:94:60:03:d9:3a:48:61:36:e7:44:9e:a7:1f:
09:f4:93:77:81:05:1e:a2:0d:9b:ec:2b:00:b5:0e:
c2:16:34:9f:df:18:3f:b5:5d:60:2b:e7:db:5a:1c:
44:4a:9e:dc:e1:e6:3e:3f:fb:e5:e7:8a:5f:2e:fd:
3f:e2:0d:11:4d:f8:24:d6:3a:8a:80:97:9b:68:f0:
d7:45:ae:65:9a:a0:e6:02:22:95:a3:84:ae:31:d1:
53:01:88:f5:92:34:a1:f3:a7:26:b9:5d:72:71:54:
93:c6:b0:eb:88:f8:2f:1a:cf:08:f7:4e:5a:12:65:
31:a6:7f:a5:75:73:62:63:e2:bb:c7:3d:73:f8:fb:
8d:72:47:0f:9e:94:c4:4d:34:5f:12:f7:46:12:3e:
a6:1d:00:dd:08:f4:a7:3e:99:ce:17:1c:f3:05:1e:
4f:58:1b:cb:e8:cb:71:db:af:52:38:bf:71:c1:93:
45:e7:ba:25:a8:5a:c8:e4:b3:65:d8:20:dc:6f:59:
79:0f:45:4e:c5:bb:1f:83:38:4a:41:18:92:cf:83:
f4:c8:fe:54:67:39:6c:9b:53:07:05:10:67:13:f5:
16:75:73:77:79:d7:bc:a0:5d:cc:09:58:13:ab:7a:
2c:c0:f9:f7:73:a2:16:f2:e3:7a:fe:a4:ca:0a:67:
35:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:E5:3D:68:C7:44:47:DF:2C:3D:E9:12:E0:C1:0F:C8:43:92:65:43
X509v3 Authority Key Identifier:
keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/wOU9aMdER98sPekS4MEPyEOSZUM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.233.0.0/19
46.233.36.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:37:b1:ed:3c:85:97:88:ef:e6:c4:62:73:46:86:b0:3d:c2:
13:29:03:7a:eb:ea:f1:9b:e9:e0:c8:00:1b:de:65:27:40:dd:
fd:c6:a7:a2:6d:6e:12:80:5e:cc:e1:37:ce:6c:22:9a:84:1f:
6a:a7:91:44:22:13:1d:a6:5d:b1:75:2f:0e:2a:68:2a:f1:e2:
1e:f6:a2:60:06:b8:51:d8:b6:63:ff:e4:7a:b7:d8:d2:a8:69:
97:0e:97:8c:86:44:62:6e:1b:05:5c:c1:c7:48:74:b0:62:5b:
47:80:a8:7f:e4:fd:bf:e4:5b:2e:42:72:0f:dd:53:d5:74:8a:
65:3a:3f:26:71:06:39:9e:62:93:d6:f9:5f:28:a5:c0:68:f2:
3b:e2:f4:96:50:8c:25:2e:31:e4:ec:07:f3:42:89:72:40:c3:
ee:64:45:95:c8:48:e7:20:8c:0b:7b:bb:04:aa:e1:d0:57:b8:
66:7e:87:b8:f3:55:f6:2d:52:1b:c5:bf:79:82:8b:5b:b3:58:
5f:4c:79:c0:13:7d:97:ed:86:c2:df:c6:dd:fb:a0:c9:98:82:
3f:f6:48:01:9d:dc:8d:97:df:b6:88:5a:fe:c7:b6:72:be:0f:
45:38:d5:c2:70:9f:ec:b4:78:0b:1e:da:e5:d9:8b:89:f1:43:
4d:73:c6:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:07:09 2025 by rpki-client