This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/4mtxApph_9MS77mo7dnRYHNzv98.roa
File: 4mtxApph_9MS77mo7dnRYHNzv98.roa (raw, json)
Hash identifier: PhPkJXgdPNKURqwnzEUMiajtjEnbJmXFdFqDd1kopb0=
Subject key identifier: E2:6B:71:02:9A:61:FF:D3:12:EF:B9:A8:ED:D9:D1:60:73:73:BF:DF
Certificate issuer: /CN=587f5478d1e94f240705722c3789076daf553757
Certificate serial: 019B7E373FF0F8133A2D11A9C277467ED589
Authority key identifier: 58:7F:54:78:D1:E9:4F:24:07:05:72:2C:37:89:07:6D:AF:55:37:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WH9UeNHpTyQHBXIsN4kHba9VN1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/4mtxApph_9MS77mo7dnRYHNzv98.roa
Signing time: Fri 02 Jan 2026 10:18:28 +0000
ROA not before: Fri 02 Jan 2026 10:18:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199933
IP address blocks: 45.144.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/WH9UeNHpTyQHBXIsN4kHba9VN1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/WH9UeNHpTyQHBXIsN4kHba9VN1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/WH9UeNHpTyQHBXIsN4kHba9VN1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Feb 2026 00:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:37:3f:f0:f8:13:3a:2d:11:a9:c2:77:46:7e:d5:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=587f5478d1e94f240705722c3789076daf553757
Validity
Not Before: Jan 2 10:18:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e26b71029a61ffd312efb9a8edd9d1607373bfdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c1:76:fc:d6:71:97:8f:d3:43:c3:53:22:63:
df:24:07:44:c5:42:d6:de:a3:cc:26:5b:6e:7d:cf:
29:40:a7:a0:1e:c2:1b:1e:3f:78:22:04:65:3d:5b:
da:cc:ea:b3:75:61:89:4f:26:18:7e:b4:8a:10:51:
fa:57:66:6c:04:f4:5c:d5:fa:3a:92:97:f1:33:79:
52:67:54:a9:f0:75:f7:25:c7:ee:aa:05:b3:ca:a7:
ab:59:99:79:d2:db:f7:4e:e9:41:10:97:be:e8:d3:
89:b1:cd:be:45:bd:8d:38:68:46:d4:3b:97:2d:e4:
9c:08:79:46:ff:67:c4:2b:08:eb:d9:39:fa:de:32:
b2:80:21:f2:77:c7:fe:7f:b5:12:7d:da:98:6c:63:
88:c5:c3:ed:7b:69:b6:16:f9:49:ba:74:cb:0d:3c:
d3:ff:57:5b:75:7a:44:94:4b:86:da:09:57:17:df:
76:32:d7:08:83:1b:dd:1b:0f:91:ea:38:b2:4c:32:
b1:f6:41:f3:84:40:6c:e2:16:d4:a4:7c:7a:f3:dc:
e5:e0:84:74:c7:22:76:02:64:c1:d8:c6:d0:06:7e:
e9:86:0f:1b:0b:e5:ff:5a:4a:53:f6:c9:65:88:66:
4e:13:56:ea:44:69:2d:34:e6:ac:1a:f4:1b:44:9b:
8c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:6B:71:02:9A:61:FF:D3:12:EF:B9:A8:ED:D9:D1:60:73:73:BF:DF
X509v3 Authority Key Identifier:
keyid:58:7F:54:78:D1:E9:4F:24:07:05:72:2C:37:89:07:6D:AF:55:37:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WH9UeNHpTyQHBXIsN4kHba9VN1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/4mtxApph_9MS77mo7dnRYHNzv98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/WH9UeNHpTyQHBXIsN4kHba9VN1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.223.0/24
Signature Algorithm: sha256WithRSAEncryption
00:7c:7a:1a:f4:53:10:9b:36:72:88:36:43:01:9d:fd:0f:e0:
b2:ca:84:68:8a:53:24:9c:55:5b:ff:61:0d:64:3b:ab:45:b4:
fa:01:99:23:00:33:c8:2e:46:87:33:5a:68:9a:ba:86:12:fa:
3d:7c:8b:17:4a:b8:03:2a:c8:5f:c4:98:3d:0a:a3:1d:62:e3:
8a:2f:e4:0d:ee:9f:38:7f:09:9a:c0:27:95:dc:21:78:c0:76:
2b:d6:cf:03:96:57:7a:41:7d:5b:84:9f:ec:16:79:8a:04:53:
c8:bc:b9:9c:7d:99:45:ba:57:c7:2f:2f:51:dd:ac:72:d5:42:
ad:53:07:5c:8a:c0:e2:1e:80:08:4a:f5:4e:24:cc:0f:34:67:
c3:5d:d2:8d:8b:46:a9:ac:8d:ec:c5:df:9c:40:80:c1:14:74:
18:43:37:e9:45:13:c2:50:52:15:63:25:62:8b:b9:4f:6c:c0:
b3:27:78:87:96:e8:ee:2b:cd:49:23:73:33:bd:e5:cd:96:35:
b1:66:6b:56:b9:9d:72:0c:26:c9:99:34:f1:26:82:4d:c2:5a:
57:b1:ac:6d:6f:1a:e6:bd:99:89:8b:3b:23:0c:3c:f3:20:50:
6f:21:09:30:a8:49:3a:79:b3:36:2d:b1:6e:15:92:da:8d:8a:
a3:59:a1:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 08:37:32 2026 by rpki-client