This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/mr4GPzNHl1BXdqqKxPgtpJ_bvG4.roa
File: mr4GPzNHl1BXdqqKxPgtpJ_bvG4.roa (raw, json)
Hash identifier: uZhqzJ/VBEcqt1cjJm9DgjFyfds9tNiF+cC3M9YmS6Y=
Subject key identifier: 9A:BE:06:3F:33:47:97:50:57:76:AA:8A:C4:F8:2D:A4:9F:DB:BC:6E
Certificate issuer: /CN=4da84d247ce37cdccf06e1571d226a2b85677bcd
Certificate serial: 019B7DCB12D364B01B415D7CCF927D4969DA
Authority key identifier: 4D:A8:4D:24:7C:E3:7C:DC:CF:06:E1:57:1D:22:6A:2B:85:67:7B:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/mr4GPzNHl1BXdqqKxPgtpJ_bvG4.roa
Signing time: Fri 02 Jan 2026 08:20:19 +0000
ROA not before: Fri 02 Jan 2026 08:20:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207483
IP address blocks: 93.180.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.mft
rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Jan 2026 11:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:cb:12:d3:64:b0:1b:41:5d:7c:cf:92:7d:49:69:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4da84d247ce37cdccf06e1571d226a2b85677bcd
Validity
Not Before: Jan 2 08:20:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9abe063f334797505776aa8ac4f82da49fdbbc6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6e:25:a1:a6:40:33:96:6b:7d:a5:96:ce:84:
e6:2a:b3:a3:30:9e:8c:70:2b:9f:da:4f:f3:3d:3e:
9a:e9:bb:86:7b:0f:11:66:8b:98:b9:cf:60:5b:96:
ef:e6:2b:42:c4:03:65:39:33:5f:25:31:e1:92:8b:
05:f3:77:74:52:12:24:18:98:80:9d:94:91:ff:dc:
ab:e0:d2:ab:ce:bf:d9:7d:6b:9c:76:fc:e1:d2:ef:
a6:b8:5c:6a:c5:e6:f3:31:f5:61:2c:45:7f:c6:78:
c9:c7:d6:b6:77:50:cb:4b:ec:e4:32:ed:e7:ad:8d:
ed:96:20:eb:32:0e:e0:5e:de:57:11:99:b1:b8:36:
43:b2:83:1f:02:af:49:88:73:25:75:a7:3e:03:68:
f3:04:c8:ac:90:32:f3:cc:97:ee:18:52:b5:22:76:
4c:a0:e6:04:cb:77:6f:78:b3:90:56:7a:92:95:3b:
7e:99:d8:af:40:c5:4f:c1:3d:2f:b9:ed:9d:4f:15:
fa:4c:ef:0c:0c:ef:a2:c8:2b:b9:73:34:4c:41:88:
48:fc:4c:df:1d:3d:06:b4:d6:ca:fb:c4:a7:da:dc:
53:ca:ed:f6:b5:de:e5:20:f1:0d:94:94:6e:f7:9b:
2a:30:3a:04:6f:34:bb:b3:c3:ec:eb:bd:c2:74:5c:
30:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:BE:06:3F:33:47:97:50:57:76:AA:8A:C4:F8:2D:A4:9F:DB:BC:6E
X509v3 Authority Key Identifier:
keyid:4D:A8:4D:24:7C:E3:7C:DC:CF:06:E1:57:1D:22:6A:2B:85:67:7B:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/mr4GPzNHl1BXdqqKxPgtpJ_bvG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.180.134.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:38:91:30:b2:c9:30:7a:d8:64:8d:fd:8e:11:db:8d:a8:f3:
56:81:6d:25:c1:54:aa:6b:61:5b:e6:14:fc:72:e3:31:f7:94:
c2:29:ab:63:a8:59:37:e1:43:81:0c:8b:00:a7:18:57:a8:9f:
4a:be:6d:52:18:ab:49:81:7b:ac:c8:f2:06:a2:3a:01:2b:69:
01:c6:db:91:0a:61:64:3c:c8:88:e6:41:87:90:2a:0b:94:d0:
9c:81:51:55:aa:a0:3b:09:14:e7:62:4d:1c:55:4a:29:c1:57:
f1:79:d2:f7:e7:da:2a:57:d9:df:ff:e9:72:0f:c0:eb:cd:10:
7c:35:1f:f5:12:36:06:17:53:c6:0d:d3:7f:a8:9b:c6:75:79:
fa:20:ad:b8:0f:3e:a8:06:ba:0b:05:b3:73:7d:b3:6c:8e:f6:
ad:7a:b3:47:e1:fb:10:10:c5:b9:90:e3:b6:92:65:d4:44:41:
f6:39:20:a3:05:c2:6e:21:5c:4b:78:97:3d:5c:16:17:60:e6:
ce:38:9a:ca:a3:6e:8d:a9:c7:32:d1:1d:24:e0:7c:76:b1:65:
7e:a9:b1:b6:5b:ca:70:31:55:6a:0a:45:93:7f:c3:a6:55:83:
55:79:81:55:91:a1:e1:d5:7f:1a:57:22:55:4d:22:50:6e:77:
9b:67:e3:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 18:59:13 2026 by rpki-client