This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/4415GxEj-TYr3AidYcdJ8bhsDy8.roa
File: 4415GxEj-TYr3AidYcdJ8bhsDy8.roa (raw, json)
Hash identifier: cE5GPiOmnznkFTHE5XfxrOsWeoTa87SB/CFxhnlAtck=
Subject key identifier: E3:8D:79:1B:11:23:F9:36:2B:DC:08:9D:61:C7:49:F1:B8:6C:0F:2F
Certificate issuer: /CN=61b95518ed4f5582a2f6c11955740284bc088134
Certificate serial: 019B7D5C483D7A6F9D0D22A3AA3723BE0523
Authority key identifier: 61:B9:55:18:ED:4F:55:82:A2:F6:C1:19:55:74:02:84:BC:08:81:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YblVGO1PVYKi9sEZVXQChLwIgTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/4415GxEj-TYr3AidYcdJ8bhsDy8.roa
Signing time: Fri 02 Jan 2026 06:19:18 +0000
ROA not before: Fri 02 Jan 2026 06:19:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206433
IP address blocks: 195.122.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/YblVGO1PVYKi9sEZVXQChLwIgTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/YblVGO1PVYKi9sEZVXQChLwIgTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YblVGO1PVYKi9sEZVXQChLwIgTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Feb 2026 06:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:5c:48:3d:7a:6f:9d:0d:22:a3:aa:37:23:be:05:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b95518ed4f5582a2f6c11955740284bc088134
Validity
Not Before: Jan 2 06:19:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e38d791b1123f9362bdc089d61c749f1b86c0f2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:16:3a:f0:9c:73:e3:af:aa:a1:d8:de:8c:cf:
5b:56:1a:f9:0a:c5:f9:e8:ae:4c:e9:2b:ff:41:02:
3f:4f:66:35:3e:97:fe:3c:ba:97:4e:e7:e4:15:40:
cd:55:99:d8:6e:4e:1e:f9:bb:a5:4c:a8:61:2f:4d:
16:ae:e0:4b:22:a0:4d:99:89:73:35:01:af:f7:86:
fa:98:43:20:b6:35:a8:8d:2d:59:54:83:40:99:5b:
d2:ce:31:b8:d2:09:37:92:8a:2c:00:8d:9a:ca:bf:
0e:9b:a3:7f:74:72:d1:ee:fa:b0:11:be:fe:6c:49:
ca:76:ef:a9:ec:d1:90:2f:f4:68:0b:06:b4:b4:5d:
3f:2f:54:45:16:c5:1e:7a:28:cf:f4:d3:96:38:0f:
13:01:1e:13:f4:00:c4:fb:02:e6:76:e3:fd:81:b7:
62:62:15:38:3b:15:71:5b:90:8e:99:ae:98:cb:bc:
07:54:ce:6c:fe:26:68:2a:af:11:3c:d5:f5:6d:cc:
2d:d6:90:7a:14:9d:b0:81:91:4c:67:34:01:ba:ef:
99:17:d5:b8:e8:d9:3a:dd:a8:ba:18:62:54:d5:51:
1f:79:ed:65:9e:fe:9c:f6:ca:61:25:3d:67:91:75:
ac:43:8d:b8:56:30:e5:4b:b0:a0:d5:ab:32:f7:eb:
f7:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:8D:79:1B:11:23:F9:36:2B:DC:08:9D:61:C7:49:F1:B8:6C:0F:2F
X509v3 Authority Key Identifier:
keyid:61:B9:55:18:ED:4F:55:82:A2:F6:C1:19:55:74:02:84:BC:08:81:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YblVGO1PVYKi9sEZVXQChLwIgTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/4415GxEj-TYr3AidYcdJ8bhsDy8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/YblVGO1PVYKi9sEZVXQChLwIgTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.122.92.0/24
Signature Algorithm: sha256WithRSAEncryption
68:00:da:fd:fe:4c:9d:35:2b:97:c2:e4:67:64:4b:87:ba:df:
b2:bf:06:8e:3c:2e:d2:ce:95:d2:4d:da:ce:8b:dc:8e:40:5e:
c1:ff:d8:91:c5:17:88:be:86:72:20:f8:5a:bf:41:49:2e:44:
c4:c9:5b:66:e4:08:3d:42:14:45:5e:c5:63:d5:c1:fa:b2:2e:
53:b8:16:e0:62:30:70:8b:62:3b:49:d2:ce:57:d2:d3:68:1f:
67:f3:74:d9:1a:17:36:17:0b:f4:48:3b:bb:fa:06:c4:4a:ff:
93:7d:1a:48:55:bf:17:9b:ee:6c:c1:de:fc:66:a4:cd:50:30:
e0:f2:0b:7a:f4:4d:e7:5e:ff:00:ff:fa:73:13:a4:8d:9b:a1:
5d:b1:e0:d8:61:8d:1f:c6:55:93:1e:1f:97:f7:3f:de:a5:7a:
9d:d9:96:d5:92:c2:24:7d:e3:6c:f6:ec:d3:b5:d4:d5:e7:9d:
57:b4:9b:ea:49:1d:4a:a7:96:88:a0:74:78:1b:33:1f:c2:02:
37:5b:85:91:cc:71:ae:f1:f1:62:86:e8:f9:e0:47:51:ce:80:
df:ad:87:57:c5:c4:02:38:ac:a8:eb:c8:22:43:f6:3d:20:fb:
ad:1f:bd:b6:d1:e2:db:ca:70:e9:5e:f2:6a:17:1f:f9:35:bd:
50:2a:6b:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 7 16:39:55 2026 by rpki-client