This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/1-P4ZLvB_6zGzP0MEJcjgABYhYEU.roa
File: 1-P4ZLvB_6zGzP0MEJcjgABYhYEU.roa (raw, json)
Hash identifier: ClVDt2CezCgflIGXqS6DwhrijNfqyRY8Wdh3wgVWXPo=
Subject key identifier: F8:FE:19:2E:F0:7F:EB:31:B3:3F:43:04:25:C8:E0:00:16:21:60:45
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 019B7B35603551B5CC92B4CBBA29E70C0A66
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/1-P4ZLvB_6zGzP0MEJcjgABYhYEU.roa
Signing time: Thu 01 Jan 2026 20:17:34 +0000
ROA not before: Thu 01 Jan 2026 20:17:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16157
IP address blocks: 194.176.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 18:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:35:60:35:51:b5:cc:92:b4:cb:ba:29:e7:0c:0a:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 20:17:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f8fe192ef07feb31b33f430425c8e00016216045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a5:cd:e3:56:83:62:b8:11:50:40:e4:83:6e:
c2:2b:f6:79:c5:27:dd:b2:c7:f4:6b:de:1c:60:5a:
8b:b5:21:d9:a7:33:36:69:40:d8:5e:9a:4d:b9:b3:
35:d8:7f:28:74:33:d6:9a:e2:e3:fd:3d:91:c6:55:
3b:59:b0:fd:cf:1b:c1:a2:83:dd:02:fe:06:c9:cc:
6e:6d:90:00:80:2c:0b:d6:ee:3e:62:9b:35:5f:94:
0c:db:7c:a0:88:56:56:ec:52:48:59:2e:3b:e9:c6:
9a:3b:28:02:8c:19:68:4a:dc:df:85:14:c3:e3:7e:
02:c0:9e:88:88:4b:3e:e5:67:53:88:04:11:db:00:
2c:c5:0b:d9:42:89:99:ab:32:cf:28:50:1d:d5:24:
9f:2a:17:87:f1:02:61:b8:1c:7d:c8:9b:00:09:8b:
25:67:c9:1e:bd:1e:de:c6:41:e5:bf:09:b1:7b:fa:
26:45:0c:38:91:68:fb:c1:3f:b3:4a:f3:33:bb:4b:
29:77:1d:ed:49:6e:60:e5:dd:35:24:34:64:69:e7:
88:62:61:e0:b4:1b:58:df:1a:8c:55:f6:87:42:b5:
77:c3:9a:10:56:86:42:a8:4d:67:cd:c8:28:f1:da:
86:ca:e4:d5:d4:87:8f:98:8c:12:32:2b:42:ef:1c:
a2:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:FE:19:2E:F0:7F:EB:31:B3:3F:43:04:25:C8:E0:00:16:21:60:45
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/1-P4ZLvB_6zGzP0MEJcjgABYhYEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.176.185.0/24
Signature Algorithm: sha256WithRSAEncryption
98:5f:95:ad:4f:06:ae:45:15:6c:b5:94:e7:a1:a0:1c:5c:c8:
ad:61:75:a9:8e:b0:74:17:07:f4:ca:5e:31:68:9b:49:51:d3:
35:c3:10:9f:27:16:d3:57:96:65:00:ab:13:6d:4b:14:bf:d7:
ce:eb:32:5c:e5:50:fe:d3:ed:0c:e0:b1:c6:91:33:06:4c:99:
55:fc:f9:81:6e:a4:68:41:c1:69:01:7e:f6:37:49:65:a3:5b:
62:18:40:c7:6a:0b:74:46:13:26:69:94:75:15:20:e2:76:13:
bf:50:8e:ee:0a:0a:6c:58:04:61:11:bc:e8:34:95:b0:a0:a9:
af:99:b5:0c:15:59:63:46:4e:ea:e0:6d:58:50:5a:61:06:51:
43:f2:d2:6a:2d:04:e5:66:aa:68:29:e0:43:f1:56:4c:49:bf:
be:dd:42:53:c1:b9:d6:6a:69:0a:d5:b7:0d:5c:bb:2d:ff:e5:
e0:33:b4:c0:36:72:50:b8:2a:a6:d2:66:0f:bd:64:dd:78:77:
5e:6c:90:62:3d:65:83:83:a2:86:47:ea:e3:15:db:89:f2:86:
2d:57:81:a5:b4:e4:e3:b1:eb:c2:5d:1b:87:68:a4:c4:46:92:
ef:cf:2f:e3:d3:ac:84:8b:58:d4:d4:86:7a:1f:54:2f:6f:a6:
42:b7:72:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 02:49:13 2026 by rpki-client