This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/566938-e2a8-48b3-816b-27b113cff53b/1/4Btuch_mvdqlltmpETzdDuAzgwM.roa
File: 4Btuch_mvdqlltmpETzdDuAzgwM.roa (raw, json)
Hash identifier: 2z3euWLD2TSP9uJ72vB+EMHErkSQoVlj0ZuGyGWWr50=
Subject key identifier: E0:1B:6E:72:1F:E6:BD:DA:A5:96:D9:A9:11:3C:DD:0E:E0:33:83:03
Certificate issuer: /CN=c1ab247c636ad389bf9f8c5074c8220230e8edcc
Certificate serial: 019B7E3798CE95379AC73DF3D43D73F24AB9
Authority key identifier: C1:AB:24:7C:63:6A:D3:89:BF:9F:8C:50:74:C8:22:02:30:E8:ED:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/waskfGNq04m_n4xQdMgiAjDo7cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/566938-e2a8-48b3-816b-27b113cff53b/1/4Btuch_mvdqlltmpETzdDuAzgwM.roa
Signing time: Fri 02 Jan 2026 10:18:51 +0000
ROA not before: Fri 02 Jan 2026 10:18:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202079
IP address blocks: 37.203.242.0/27 maxlen: 27
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/566938-e2a8-48b3-816b-27b113cff53b/1/waskfGNq04m_n4xQdMgiAjDo7cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/566938-e2a8-48b3-816b-27b113cff53b/1/waskfGNq04m_n4xQdMgiAjDo7cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/waskfGNq04m_n4xQdMgiAjDo7cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:37:98:ce:95:37:9a:c7:3d:f3:d4:3d:73:f2:4a:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1ab247c636ad389bf9f8c5074c8220230e8edcc
Validity
Not Before: Jan 2 10:18:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e01b6e721fe6bddaa596d9a9113cdd0ee0338303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:9b:a2:61:b3:6e:b1:39:bd:12:25:a5:a3:10:
54:60:c4:5a:bc:29:5a:89:54:ec:8b:17:3c:d6:80:
5e:14:c6:aa:4b:51:5d:8b:1f:c2:22:92:72:af:98:
63:fb:aa:32:62:2c:cd:72:7e:16:c9:19:f6:be:c5:
d9:2d:91:46:4b:ab:dc:25:7e:08:38:ed:8b:24:a7:
8c:3e:6b:43:68:c2:03:3a:b7:98:30:b9:5b:d9:40:
17:70:79:ca:44:ef:f2:9d:32:be:81:2c:f2:ea:15:
50:f1:58:27:5d:aa:86:7f:a6:c0:46:4c:ff:d0:85:
ae:9a:0a:79:d0:51:36:e7:ff:81:6f:90:39:81:99:
0c:f6:6e:51:d9:19:ed:bb:f5:a8:d5:d0:be:45:c1:
2f:58:2a:37:dc:48:98:8a:52:d8:de:bd:22:34:41:
bd:98:04:bf:8a:a9:f4:8d:cc:8f:a2:87:b4:8c:4b:
ed:f9:6a:60:11:cc:0e:aa:c9:ff:3a:8c:ba:91:31:
51:ed:97:b6:57:d0:51:80:a7:bd:89:1b:40:ae:bb:
4c:ef:d6:62:04:79:59:90:2f:c2:0c:d3:73:a3:54:
87:1e:5a:37:19:2b:f1:d5:92:05:0e:da:0a:e1:59:
32:1c:51:35:cb:41:f8:ce:8d:7a:c0:cb:47:e2:b6:
4b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:1B:6E:72:1F:E6:BD:DA:A5:96:D9:A9:11:3C:DD:0E:E0:33:83:03
X509v3 Authority Key Identifier:
keyid:C1:AB:24:7C:63:6A:D3:89:BF:9F:8C:50:74:C8:22:02:30:E8:ED:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/waskfGNq04m_n4xQdMgiAjDo7cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/566938-e2a8-48b3-816b-27b113cff53b/1/4Btuch_mvdqlltmpETzdDuAzgwM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/566938-e2a8-48b3-816b-27b113cff53b/1/waskfGNq04m_n4xQdMgiAjDo7cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.203.242.0/27
Signature Algorithm: sha256WithRSAEncryption
22:c5:66:de:31:ab:31:75:f2:6f:bb:ed:87:d9:f8:ed:57:ca:
bc:ab:ca:60:62:2f:d0:4a:5a:cd:16:f0:92:9e:71:d8:51:7a:
b9:e2:c3:ef:11:7a:7a:47:81:47:37:07:06:86:be:4f:09:9b:
d8:43:d1:6e:0e:97:f9:14:d8:79:cf:e8:52:a1:39:28:37:b6:
ff:71:41:88:96:fc:e2:63:9d:c8:8e:e2:e5:0a:4e:71:7c:e4:
5d:a2:c3:76:fc:87:aa:d8:cc:b3:3e:06:80:b3:07:4f:93:93:
5f:e0:52:52:d7:c7:7e:7d:f0:0b:c4:cc:bd:a2:77:d6:34:03:
bd:91:56:be:77:c0:8c:94:97:7a:96:8e:e6:b0:53:60:e6:6c:
e8:cc:93:8c:d6:79:64:c1:a9:ba:f6:91:1d:47:1c:03:0c:4d:
25:08:4f:c5:19:8c:30:cb:0f:51:0c:56:ae:f6:fb:08:46:10:
cf:db:b6:ad:6b:f7:1a:b5:34:17:12:46:f4:0c:08:b0:76:23:
94:8f:89:e6:e4:0d:e3:d1:03:e1:a3:98:5a:fc:48:19:ce:73:
80:be:29:94:25:74:fa:42:65:01:ca:2a:a3:56:47:22:d1:94:
bb:4c:d0:7e:8d:7f:14:35:97:6d:d7:c1:6c:99:ef:61:c9:ca:
e4:ec:a8:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 03:09:37 2026 by rpki-client