This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/1203d7-41ab-404c-929b-b97838c8d658/1/1n27rvaelRUykey6wf5ROwjIidI.roa
File: 1n27rvaelRUykey6wf5ROwjIidI.roa (raw, json)
Hash identifier: KBBik8Julj24P9mvYdNU35DOMzPd5tmec1o6YPTRHDE=
Subject key identifier: D6:7D:BB:AE:F6:9E:95:15:32:91:EC:BA:C1:FE:51:3B:08:C8:89:D2
Certificate issuer: /CN=447cd41d9e6ccf80306c1b46bdc0b577b1ee2cae
Certificate serial: 019B7EA7233CF0C9BB1C8752C244FB0E98DC
Authority key identifier: 44:7C:D4:1D:9E:6C:CF:80:30:6C:1B:46:BD:C0:B5:77:B1:EE:2C:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/1203d7-41ab-404c-929b-b97838c8d658/1/1n27rvaelRUykey6wf5ROwjIidI.roa
Signing time: Fri 02 Jan 2026 12:20:41 +0000
ROA not before: Fri 02 Jan 2026 12:20:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 45022
IP address blocks: 195.5.184.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/1203d7-41ab-404c-929b-b97838c8d658/1/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/1203d7-41ab-404c-929b-b97838c8d658/1/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 18:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:a7:23:3c:f0:c9:bb:1c:87:52:c2:44:fb:0e:98:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=447cd41d9e6ccf80306c1b46bdc0b577b1ee2cae
Validity
Not Before: Jan 2 12:20:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d67dbbaef69e95153291ecbac1fe513b08c889d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:65:2d:5b:3c:49:24:0e:24:3f:ae:84:2f:45:
74:ea:f0:28:51:a6:24:82:24:e5:f4:ec:3b:9a:de:
55:e6:44:72:87:a0:42:12:ba:83:07:6a:1b:d2:8c:
91:16:a8:86:c5:e2:b3:21:c0:a5:17:9c:5c:6d:6b:
ae:86:6f:fb:95:02:89:db:89:47:58:f7:ef:cc:90:
41:da:e9:84:69:02:5f:84:59:f4:f5:29:d0:b8:68:
62:71:81:09:85:01:03:82:52:8b:16:af:7b:9a:fd:
36:60:a3:98:31:96:42:58:ab:9a:a0:5e:e1:f3:7a:
7c:59:bf:66:57:4b:fd:8e:a1:5d:1f:90:f0:cb:0c:
7a:a8:4d:64:5d:b8:63:06:aa:d2:11:6b:73:24:7e:
73:d9:c3:c1:a8:df:90:3b:31:de:90:a1:77:59:f6:
6f:5f:53:98:43:58:09:c5:25:c7:df:38:4c:52:2c:
82:29:f8:6d:e7:30:31:a9:72:cb:57:ca:a8:de:2e:
e7:63:8a:33:ab:08:79:02:c9:9f:ef:ca:9a:4e:7b:
cd:a0:dc:d4:8d:e9:78:84:ef:dc:51:85:70:ef:fe:
98:1a:a8:6e:4b:d9:f1:01:7a:f6:67:bf:60:de:a3:
b1:ad:7d:be:54:bb:44:30:63:39:4f:75:b9:7c:48:
1c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:7D:BB:AE:F6:9E:95:15:32:91:EC:BA:C1:FE:51:3B:08:C8:89:D2
X509v3 Authority Key Identifier:
keyid:44:7C:D4:1D:9E:6C:CF:80:30:6C:1B:46:BD:C0:B5:77:B1:EE:2C:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/1203d7-41ab-404c-929b-b97838c8d658/1/1n27rvaelRUykey6wf5ROwjIidI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/1203d7-41ab-404c-929b-b97838c8d658/1/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.5.184.0/24
Signature Algorithm: sha256WithRSAEncryption
87:14:57:75:2d:39:d1:61:24:79:23:36:96:ba:8f:b0:e0:d9:
98:2b:77:49:ef:29:a9:5c:95:7f:50:9c:08:a1:37:41:b3:6b:
e3:ea:76:78:51:e6:67:5c:95:91:70:10:33:79:06:29:55:c4:
b3:9e:8a:c2:dc:70:de:58:97:04:69:6e:06:b6:3e:a6:5f:39:
3c:37:ff:6c:99:74:61:15:a4:45:db:3f:a1:db:d2:94:cb:55:
49:45:1a:8a:6b:28:9f:82:d4:0f:56:18:c3:20:79:48:fb:17:
df:5d:b3:b2:2a:ab:10:d5:18:50:50:9c:4a:f2:40:cd:3c:72:
56:4f:64:91:35:89:db:f3:fd:c7:e0:8b:97:5a:94:7c:33:1b:
ed:b7:bf:b5:e2:fb:b3:3c:09:f7:8b:e1:dc:b4:28:87:1e:08:
6c:ab:07:23:e2:4c:6d:a6:fd:57:49:07:1d:9d:aa:71:73:c3:
86:6a:98:fb:93:01:6a:9a:36:24:04:e1:44:1b:41:56:47:49:
ee:5e:1f:b8:d0:df:05:1e:6c:fe:96:9f:58:65:d3:5d:04:0f:
5d:f9:6c:cf:e7:64:ea:dc:b6:a2:d4:c9:0e:f3:8a:12:88:89:
87:3c:99:9b:93:15:82:5d:a7:f1:f8:b2:c6:22:81:5b:7d:26:
2c:91:ca:b7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt+pyM88Mm7HIdSwkT7DpjcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0N2NkNDFkOWU2Y2NmODAzMDZjMWI0NmJkYzBiNTc3YjFl
ZTJjYWUwHhcNMjYwMTAyMTIyMDQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNjdkYmJhZWY2OWU5NTE1MzI5MWVjYmFjMWZlNTEzYjA4Yzg4OWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWUtWzxJJA4kP66EL0V06vAoUaYk
giTl9Ow7mt5V5kRyh6BCErqDB2ob0oyRFqiGxeKzIcClF5xcbWuuhm/7lQKJ24lH
WPfvzJBB2umEaQJfhFn09SnQuGhicYEJhQEDglKLFq97mv02YKOYMZZCWKuaoF7h
83p8Wb9mV0v9jqFdH5Dwywx6qE1kXbhjBqrSEWtzJH5z2cPBqN+QOzHekKF3WfZv
X1OYQ1gJxSXH3zhMUiyCKfht5zAxqXLLV8qo3i7nY4ozqwh5Asmf78qaTnvNoNzU
jel4hO/cUYVw7/6YGqhuS9nxAXr2Z79g3qOxrX2+VLtEMGM5T3W5fEgcOQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNZ9u672npUVMpHsusH+UTsIyInSMB8GA1UdIwQY
MBaAFER81B2ebM+AMGwbRr3AtXex7iyuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkh6VUhaNXN6NEF3YkJ0R3ZjQzFkN0h1TEs0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8xMjAzZDctNDFhYi00MDRjLTkyOWIt
Yjk3ODM4YzhkNjU4LzEvMW4yN3J2YWVsUlV5a2V5NndmNVJPd2pJaWRJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS8xMjAzZDctNDFhYi00MDRjLTkyOWItYjk3ODM4YzhkNjU4
LzEvUkh6VUhaNXN6NEF3YkJ0R3ZjQzFkN0h1TEs0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwwW4MA0G
CSqGSIb3DQEBCwUAA4IBAQCHFFd1LTnRYSR5IzaWuo+w4NmYK3dJ7ympXJV/UJwI
oTdBs2vj6nZ4UeZnXJWRcBAzeQYpVcSznorC3HDeWJcEaW4Gtj6mXzk8N/9smXRh
FaRF2z+h29KUy1VJRRqKayifgtQPVhjDIHlI+xffXbOyKqsQ1RhQUJxK8kDNPHJW
T2SRNYnb8/3H4IuXWpR8Mxvtt7+14vuzPAn3i+HctCiHHghsqwcj4kxtpv1XSQcd
napxc8OGapj7kwFqmjYkBOFEG0FWR0nuXh+40N8FHmz+lp9YZdNdBA9d+WzP52Tq
3Lai1MkO84oSiImHPJmbkxWCXafx+LLGIoFbfSYskcq3
-----END CERTIFICATE-----
Generated at Tue Feb 10 03:09:34 2026 by rpki-client