This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/pw4tYZ1pUoXtUjuAJx3TJ2e3b80.roa
File: pw4tYZ1pUoXtUjuAJx3TJ2e3b80.roa (raw, json)
Hash identifier: LQfjbHuch/cVNZvW4YbnQ4G95R60gXWCvxiIV/MPBFI=
Subject key identifier: A7:0E:2D:61:9D:69:52:85:ED:52:3B:80:27:1D:D3:27:67:B7:6F:CD
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 019B7B3579EB995028A61C694811349B721A
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/pw4tYZ1pUoXtUjuAJx3TJ2e3b80.roa
Signing time: Thu 01 Jan 2026 20:17:40 +0000
ROA not before: Thu 01 Jan 2026 20:17:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49295
IP address blocks: 85.122.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 18:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:35:79:eb:99:50:28:a6:1c:69:48:11:34:9b:72:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 20:17:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a70e2d619d695285ed523b80271dd32767b76fcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:22:c3:4e:4a:05:97:e4:bf:1c:68:33:6a:53:
48:38:5e:03:39:d1:4a:d8:31:12:22:16:21:9f:c7:
62:22:85:6b:97:4c:14:77:01:f4:f6:e6:6a:b3:1f:
46:e4:95:7f:3f:2b:0a:ac:5b:6e:7f:84:da:dc:b7:
92:67:bf:23:45:4e:fb:8f:8b:01:9d:84:e3:25:28:
9f:f2:11:b5:a7:aa:e2:8c:9a:d8:36:b7:b9:0d:29:
ae:7e:55:66:d6:d2:46:d1:31:d8:f1:73:59:37:fa:
89:a5:1d:53:2c:8b:a7:26:e4:82:62:46:61:e0:81:
7d:48:d6:dc:9d:e0:39:a1:12:0c:37:50:0e:6f:78:
43:17:1a:d8:9b:13:0b:e7:5a:cc:9f:d0:85:a5:dd:
fa:2f:8a:ed:16:96:3d:3e:37:11:2c:ad:46:63:52:
8c:a1:de:db:95:fc:e4:d9:e5:d6:68:72:d1:2c:f6:
9b:c1:92:04:ea:19:87:ab:b1:05:41:c3:52:72:37:
0c:0e:46:02:e6:34:72:10:37:64:d9:06:7f:8a:73:
44:e0:40:05:80:94:61:8e:3f:30:25:37:48:53:80:
e0:c7:51:92:00:dc:ff:4c:7b:d1:99:0d:81:26:cc:
a0:7e:f7:b6:fb:04:29:a3:d8:d9:4f:e7:c9:37:3e:
02:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:0E:2D:61:9D:69:52:85:ED:52:3B:80:27:1D:D3:27:67:B7:6F:CD
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/pw4tYZ1pUoXtUjuAJx3TJ2e3b80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.122.115.0/24
Signature Algorithm: sha256WithRSAEncryption
26:a2:f3:d8:9f:a3:74:30:42:0b:e2:36:10:63:a8:4b:0f:63:
dd:b5:2f:c5:8a:3a:34:a6:a1:23:7a:f9:24:07:42:f3:6b:3c:
8e:8d:ed:d7:c1:63:8e:0f:0e:d5:60:44:b4:d1:98:2d:72:24:
8c:ba:6e:34:3e:72:bd:2c:aa:c8:18:c1:b1:60:da:16:25:18:
e1:2f:a4:bd:e4:34:ea:83:14:95:b6:49:e9:c4:e9:fa:6c:38:
aa:c9:a1:5e:c3:5f:de:33:83:17:74:bf:a4:5f:8f:b2:02:e2:
13:df:e8:bf:7f:e1:c0:7a:e9:a9:d3:f2:d2:da:21:c5:d8:aa:
b0:fb:e3:83:06:33:53:dd:6c:67:5f:9e:c4:06:34:fb:6c:6f:
96:0a:b9:45:a1:86:d4:c8:38:4f:50:1c:d4:83:c5:ab:b3:9e:
f2:6f:6b:a4:80:ab:db:8e:26:34:47:43:fb:ad:95:37:d5:c2:
f3:c8:1f:47:1b:df:43:de:86:8a:0c:69:d4:b9:d1:4f:0d:2d:
6a:48:0f:6f:5d:e2:cf:8b:f4:5b:1d:13:bc:6a:b8:39:47:40:
16:66:85:32:a8:43:de:d1:22:f2:18:a1:d0:26:c2:48:28:59:
98:fe:1a:92:10:f6:6e:20:f4:04:8d:d2:23:44:73:8a:2f:db:
e1:1a:67:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 02:49:58 2026 by rpki-client