This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/b769e3-e215-44a5-8a2e-0e9df99d9339/1/4iNI26R-dGov0Tl2yDZjMNRLbfA.roa
File: 4iNI26R-dGov0Tl2yDZjMNRLbfA.roa (raw, json)
Hash identifier: Mbs7tF0S261BkHnLQzWDasyVwFU+7wR+ArpU3P29zD8=
Subject key identifier: E2:23:48:DB:A4:7E:74:6A:2F:D1:39:76:C8:36:63:30:D4:4B:6D:F0
Certificate issuer: /CN=6837a2fa4b78773a66200fea4c58507a92f31203
Certificate serial: 019B7C80CCCA779F71AEB2753468ACE4B328
Authority key identifier: 68:37:A2:FA:4B:78:77:3A:66:20:0F:EA:4C:58:50:7A:92:F3:12:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aDei-kt4dzpmIA_qTFhQepLzEgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/b769e3-e215-44a5-8a2e-0e9df99d9339/1/4iNI26R-dGov0Tl2yDZjMNRLbfA.roa
Signing time: Fri 02 Jan 2026 02:19:34 +0000
ROA not before: Fri 02 Jan 2026 02:19:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25400
IP address blocks: 185.246.80.0/22 maxlen: 22
185.246.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/b769e3-e215-44a5-8a2e-0e9df99d9339/1/aDei-kt4dzpmIA_qTFhQepLzEgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/b769e3-e215-44a5-8a2e-0e9df99d9339/1/aDei-kt4dzpmIA_qTFhQepLzEgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aDei-kt4dzpmIA_qTFhQepLzEgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 01:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:80:cc:ca:77:9f:71:ae:b2:75:34:68:ac:e4:b3:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6837a2fa4b78773a66200fea4c58507a92f31203
Validity
Not Before: Jan 2 02:19:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e22348dba47e746a2fd13976c8366330d44b6df0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:04:43:4c:8e:81:b8:87:45:63:ca:95:a5:b3:
eb:31:4a:df:e2:44:2a:89:6c:12:8c:15:ea:ea:83:
9d:79:34:14:05:a5:99:80:bb:54:bc:63:be:d5:62:
57:98:34:94:2b:93:9e:44:f8:86:26:e0:18:3b:77:
ac:b9:de:a3:9f:7a:b9:62:4e:bc:44:06:f7:2c:3c:
6a:28:f4:a7:33:70:7d:a8:1e:e1:83:c9:89:6f:08:
7a:40:6b:33:f6:f4:09:66:e6:5f:f1:42:9d:2e:5e:
25:91:78:22:63:93:58:b0:8c:e3:8b:46:38:d5:dc:
50:87:f2:26:f4:d9:f1:f8:f7:9a:ea:2c:37:9a:a9:
ab:96:b6:35:b3:f0:a7:d8:9e:2a:3a:b0:11:c8:1b:
5d:15:83:a8:66:64:b9:c1:a8:52:d5:29:90:d7:fc:
55:5c:a1:42:22:ff:68:e4:84:a9:76:71:d7:59:80:
03:6d:86:60:7b:4c:cb:56:74:21:61:65:23:3f:0e:
9d:97:0b:75:8b:b9:e6:22:35:39:40:35:50:89:19:
77:d7:6c:89:6e:1d:6f:81:14:e2:7a:25:02:38:61:
28:7b:ae:46:ea:ed:cb:9a:bd:36:0a:9f:35:b9:ec:
d4:4d:74:eb:63:8a:6c:7a:bd:04:53:5d:92:be:c8:
05:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:23:48:DB:A4:7E:74:6A:2F:D1:39:76:C8:36:63:30:D4:4B:6D:F0
X509v3 Authority Key Identifier:
keyid:68:37:A2:FA:4B:78:77:3A:66:20:0F:EA:4C:58:50:7A:92:F3:12:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDei-kt4dzpmIA_qTFhQepLzEgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b769e3-e215-44a5-8a2e-0e9df99d9339/1/4iNI26R-dGov0Tl2yDZjMNRLbfA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b769e3-e215-44a5-8a2e-0e9df99d9339/1/aDei-kt4dzpmIA_qTFhQepLzEgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.246.80.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:67:0c:3a:04:59:d8:ac:75:99:52:bd:d1:04:69:d7:6b:11:
a1:53:aa:32:63:3c:33:6a:d1:e3:be:f3:81:34:df:80:49:bd:
1e:0d:32:d3:a0:8f:07:c7:f2:94:9a:d3:40:2c:da:59:76:24:
18:a8:85:e8:c0:c9:a6:ec:96:e1:cf:b6:19:4c:14:1b:79:b7:
c8:fe:d0:8f:18:ed:f1:cd:86:ce:87:1c:b5:bd:ae:5f:2a:a9:
d1:a3:4a:f8:fb:f2:e1:96:25:71:be:a1:d0:6c:cc:3c:ef:5c:
3d:53:12:5f:74:6a:58:ec:f7:05:78:d0:a6:35:57:ee:57:c5:
34:60:57:d2:6e:51:93:b5:78:61:bc:1f:3a:5f:0a:88:b5:c7:
92:a2:8c:29:2f:01:c2:47:ec:80:0a:d8:27:97:17:d1:62:08:
76:b9:53:1d:5c:63:51:1c:16:35:20:ec:b1:bc:5f:28:0b:86:
aa:63:4b:a8:7d:21:d0:98:b8:64:cb:97:2d:cc:76:66:1f:3e:
90:6b:05:81:0d:f0:69:f6:c5:2e:8f:43:1e:37:9f:5a:2f:94:
26:80:f6:b9:2e:1b:20:49:ee:4f:6b:75:45:ab:ec:47:59:ba:
9f:f6:9a:e1:0f:d8:98:68:9f:34:a5:8b:a7:89:8b:91:31:0a:
49:41:df:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 11:43:50 2026 by rpki-client