This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/4e6b43-13d7-4d3b-92ed-d9aebe43ef42/1/Z4v6ZlvI7omARbhcez6_NDTJQb8.roa
File: Z4v6ZlvI7omARbhcez6_NDTJQb8.roa (raw, json)
Hash identifier: UHj01S+GeMVO8OMw4/2M24W4FzNlf+cf+5/o/Mm/j6M=
Subject key identifier: 67:8B:FA:66:5B:C8:EE:89:80:45:B8:5C:7B:3E:BF:34:34:C9:41:BF
Certificate issuer: /CN=3905b7ec1cb8e895a25bd4ac67bc3166615d8b62
Certificate serial: 019B77C74EFC84C9CAA7A71D4F5F3CB5780E
Authority key identifier: 39:05:B7:EC:1C:B8:E8:95:A2:5B:D4:AC:67:BC:31:66:61:5D:8B:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQW37By46JWiW9SsZ7wxZmFdi2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/4e6b43-13d7-4d3b-92ed-d9aebe43ef42/1/Z4v6ZlvI7omARbhcez6_NDTJQb8.roa
Signing time: Thu 01 Jan 2026 04:18:29 +0000
ROA not before: Thu 01 Jan 2026 04:18:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59575
IP address blocks: 176.116.146.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/4e6b43-13d7-4d3b-92ed-d9aebe43ef42/1/OQW37By46JWiW9SsZ7wxZmFdi2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/4e6b43-13d7-4d3b-92ed-d9aebe43ef42/1/OQW37By46JWiW9SsZ7wxZmFdi2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/OQW37By46JWiW9SsZ7wxZmFdi2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c7:4e:fc:84:c9:ca:a7:a7:1d:4f:5f:3c:b5:78:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3905b7ec1cb8e895a25bd4ac67bc3166615d8b62
Validity
Not Before: Jan 1 04:18:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=678bfa665bc8ee898045b85c7b3ebf3434c941bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:52:67:88:99:c4:6f:f0:eb:5c:95:cc:26:be:
5f:57:4e:a9:0d:3c:5b:94:67:aa:dc:71:52:b1:1a:
87:ad:9b:2e:a8:4a:a1:f1:fe:48:15:cc:d7:c7:96:
fb:8c:f9:f6:e3:99:11:12:60:6c:fc:14:32:e2:02:
e4:08:53:70:58:b6:6e:e6:4f:2a:68:65:66:44:26:
64:e0:71:96:da:eb:9b:af:cb:52:15:8d:78:00:a4:
0b:5d:d7:f1:20:ec:0d:18:74:21:c8:4d:cb:0b:8b:
d2:c1:43:68:75:14:69:06:c9:14:81:9e:7e:ec:d0:
ad:9c:df:1d:b1:c4:e8:98:5a:7c:d3:a7:ee:7c:0e:
6c:e2:f0:53:61:d9:39:31:61:8c:88:43:76:0f:c2:
03:87:39:34:86:cf:2f:6d:d2:e9:f2:c8:8a:e9:83:
be:1c:d2:c9:aa:2c:1f:66:f1:99:98:71:da:b2:63:
68:fe:03:ff:07:fc:49:c6:14:12:02:22:aa:0b:df:
0c:a1:12:a5:5d:78:a0:7f:c0:bf:33:3f:5c:a8:45:
48:7c:0f:f1:9c:e4:7d:46:17:d3:ca:d7:15:62:41:
38:cf:89:89:e5:1d:3f:36:77:4e:0f:44:df:bc:b0:
47:30:42:be:bc:d8:1a:fc:27:87:5b:e2:18:a4:57:
e3:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:8B:FA:66:5B:C8:EE:89:80:45:B8:5C:7B:3E:BF:34:34:C9:41:BF
X509v3 Authority Key Identifier:
keyid:39:05:B7:EC:1C:B8:E8:95:A2:5B:D4:AC:67:BC:31:66:61:5D:8B:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQW37By46JWiW9SsZ7wxZmFdi2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/4e6b43-13d7-4d3b-92ed-d9aebe43ef42/1/Z4v6ZlvI7omARbhcez6_NDTJQb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/4e6b43-13d7-4d3b-92ed-d9aebe43ef42/1/OQW37By46JWiW9SsZ7wxZmFdi2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.116.146.0/23
Signature Algorithm: sha256WithRSAEncryption
b1:97:b8:47:bd:73:a9:af:bd:e3:21:eb:d9:3b:5a:41:33:da:
ff:bc:c3:32:f8:b5:86:53:e8:14:f0:68:dc:31:da:4c:c0:6e:
ba:f3:c9:93:c8:77:2c:29:59:e8:70:06:fc:a5:f9:ab:07:8d:
7c:fb:f2:6c:2c:cd:5c:45:48:27:ea:ed:37:42:85:52:18:b6:
f8:bf:a8:e5:66:e1:11:79:57:b3:93:8f:1c:e6:c7:e8:a2:18:
dd:40:45:76:a9:91:35:b3:57:5e:a8:38:99:13:7d:45:67:83:
42:97:a4:7e:26:91:3e:18:3c:2d:e9:88:df:9f:3a:1c:03:35:
76:26:46:e5:2d:ec:dc:f9:2f:be:01:3f:3a:8a:02:03:a2:f5:
a9:cd:40:86:5a:ae:9b:f1:8a:9c:79:d4:e1:5f:0f:f0:80:a7:
d6:23:2e:02:96:ec:9b:a1:05:df:77:2b:b9:86:30:fc:4b:4b:
9b:d0:80:bc:98:a1:78:30:34:51:b5:ea:0e:59:23:af:66:02:
c9:d4:e0:4f:8f:0b:bf:84:3d:db:73:60:af:cb:0e:92:d4:b3:
e5:93:3e:c0:3c:8e:15:91:22:9d:e6:bf:af:58:05:cd:b5:36:
c8:5c:d0:c8:0e:28:5c:43:99:ff:bc:6e:c3:d9:bc:2f:af:7f:
8e:96:81:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:59:47 2026 by rpki-client