This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/4usRpBobCHCzpwrJfO9MESi2eHE.roa
File: 4usRpBobCHCzpwrJfO9MESi2eHE.roa (raw, json)
Hash identifier: 9o5TwDkw3VuguoRghDhwwlw0Cs2+gJaMgEUU/235EeA=
Subject key identifier: E2:EB:11:A4:1A:1B:08:70:B3:A7:0A:C9:7C:EF:4C:11:28:B6:78:71
Certificate issuer: /CN=70de707d6c01006b2aca687eaab29cb4736b7668
Certificate serial: 019B76EB215E9D6D4ACFD37FCF6A3032FF30
Authority key identifier: 70:DE:70:7D:6C:01:00:6B:2A:CA:68:7E:AA:B2:9C:B4:73:6B:76:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cN5wfWwBAGsqymh-qrKctHNrdmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/4usRpBobCHCzpwrJfO9MESi2eHE.roa
Signing time: Thu 01 Jan 2026 00:17:59 +0000
ROA not before: Thu 01 Jan 2026 00:17:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208357
IP address blocks: 185.54.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/cN5wfWwBAGsqymh-qrKctHNrdmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:76:eb:21:5e:9d:6d:4a:cf:d3:7f:cf:6a:30:32:ff:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70de707d6c01006b2aca687eaab29cb4736b7668
Validity
Not Before: Jan 1 00:17:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e2eb11a41a1b0870b3a70ac97cef4c1128b67871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:6e:0c:26:05:cf:35:44:36:6c:be:0a:83:c0:
fc:14:2a:4a:2d:9c:2d:f0:58:e0:cc:87:9a:64:3f:
ec:80:46:a2:65:0a:14:f5:7c:30:9f:06:18:2a:5a:
69:27:a9:76:9d:e3:01:fa:0e:04:1c:4f:ee:4e:c5:
12:0f:68:8a:18:52:73:2a:1d:22:cb:6d:2f:f0:7e:
ab:7d:03:08:e1:a5:d0:89:85:6d:86:8c:ec:2c:24:
6e:f6:f8:23:d6:ea:db:52:2f:71:86:bc:83:49:87:
f2:46:4a:ba:97:e0:a6:77:5c:1f:36:55:d7:34:e7:
d2:a9:2e:41:2d:3c:74:f0:d6:0b:6a:a4:4b:ce:fe:
b4:db:94:d8:b2:34:5c:5f:f7:a6:c5:e4:3c:7b:81:
9f:c3:de:03:71:97:02:07:8e:ee:db:cc:38:7a:fa:
cb:7c:3e:e6:42:6e:fe:2d:11:fa:d3:9c:6e:0b:d9:
fc:67:51:04:ad:e4:cf:a9:ed:df:3a:1f:71:cf:57:
eb:bd:f1:90:f1:d9:be:fd:ca:2e:f0:cb:ac:c5:e1:
76:b8:62:4b:c9:94:b3:c2:8a:d5:72:f4:f0:47:6d:
60:5a:01:b9:27:7e:f7:43:61:9a:ed:14:03:fa:1b:
36:56:12:15:67:6c:a8:a3:90:a3:59:ac:4a:99:8d:
68:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:EB:11:A4:1A:1B:08:70:B3:A7:0A:C9:7C:EF:4C:11:28:B6:78:71
X509v3 Authority Key Identifier:
keyid:70:DE:70:7D:6C:01:00:6B:2A:CA:68:7E:AA:B2:9C:B4:73:6B:76:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cN5wfWwBAGsqymh-qrKctHNrdmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/4usRpBobCHCzpwrJfO9MESi2eHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.54.138.0/24
Signature Algorithm: sha256WithRSAEncryption
71:3e:d0:f0:ff:29:b6:3f:82:8c:d7:64:0a:a1:2d:b4:80:62:
ae:1d:bb:02:a4:10:22:eb:84:eb:1f:2b:3d:78:c8:4a:a5:68:
36:90:ea:33:c1:9b:09:9e:09:68:d6:1a:88:ca:fe:e9:03:56:
3c:98:7c:ec:af:12:7a:2f:d9:27:6f:cd:b4:cd:b7:1c:a8:14:
c3:86:d9:c9:00:7c:81:1c:dc:c2:54:9a:25:95:f9:fc:88:a7:
59:59:ec:5d:a0:45:34:1e:70:c6:d4:67:bf:e8:cb:3a:05:b9:
4f:fb:92:be:89:7c:98:db:44:cc:0a:c0:c2:40:6f:14:d9:8d:
bc:86:92:d0:f5:69:74:89:5e:4b:8f:c7:ec:94:84:0c:b5:70:
ea:93:6d:ae:25:7c:3a:6b:0b:e8:5b:79:05:e9:47:06:83:41:
d4:a6:32:bb:13:de:17:6a:b6:34:88:c5:65:15:52:70:46:09:
1e:03:58:b8:01:92:2e:73:ff:4a:8e:8a:38:00:8e:51:ef:03:
d6:e6:2e:23:59:ce:3f:c2:03:74:dc:a3:7e:84:37:25:54:f2:
ea:3a:6a:cf:32:e9:04:09:05:b8:ef:f6:87:81:e1:04:a2:a4:
44:c4:b9:c4:89:13:95:08:54:75:50:93:5f:e2:68:63:07:3b:
12:06:ce:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 06:28:40 2026 by rpki-client