This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/c1fb46-8b47-4f91-8b9a-d7faa7e7e84d/1/r4v3iJ7ZmrW5k4QgSrKKA1nKHf4.roa
File: r4v3iJ7ZmrW5k4QgSrKKA1nKHf4.roa (raw, json)
Hash identifier: ekj20SSmXzNkPCb5b7krZxHKnMBgi0MEQBHep36Ait0=
Subject key identifier: AF:8B:F7:88:9E:D9:9A:B5:B9:93:84:20:4A:B2:8A:03:59:CA:1D:FE
Certificate issuer: /CN=e887e5fcbcbf1ad03268dac9ee5d292025368090
Certificate serial: 019B7910DBB19C3EE52EC5566332707322C9
Authority key identifier: E8:87:E5:FC:BC:BF:1A:D0:32:68:DA:C9:EE:5D:29:20:25:36:80:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/c1fb46-8b47-4f91-8b9a-d7faa7e7e84d/1/r4v3iJ7ZmrW5k4QgSrKKA1nKHf4.roa
Signing time: Thu 01 Jan 2026 10:18:26 +0000
ROA not before: Thu 01 Jan 2026 10:18:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31354
IP address blocks: 195.234.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/c1fb46-8b47-4f91-8b9a-d7faa7e7e84d/1/6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/c1fb46-8b47-4f91-8b9a-d7faa7e7e84d/1/6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 10:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:10:db:b1:9c:3e:e5:2e:c5:56:63:32:70:73:22:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e887e5fcbcbf1ad03268dac9ee5d292025368090
Validity
Not Before: Jan 1 10:18:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=af8bf7889ed99ab5b99384204ab28a0359ca1dfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ae:3b:0b:c3:02:9e:62:fe:62:34:70:ea:8b:
52:eb:e6:dd:6f:8e:a0:4c:d9:a6:ba:84:5b:33:f9:
ef:0d:ce:0a:3d:44:5a:a5:99:bd:66:86:95:8d:25:
45:f6:19:80:e4:31:97:78:33:44:0a:1f:f2:7a:a6:
40:60:6c:e7:da:a7:8d:41:b2:e7:ee:38:c7:f5:d6:
62:d7:fb:96:02:42:91:a4:8b:61:39:a3:4b:df:9c:
7a:10:56:63:0e:07:db:0a:db:8c:b9:4a:1a:9c:4c:
c3:3b:67:b9:f2:91:92:59:b1:d9:02:fd:4a:c0:d9:
16:ed:b9:97:c9:f9:b5:cb:2d:fe:8a:e1:a0:da:0d:
42:f9:35:75:e3:28:36:07:c1:ec:e0:54:0b:93:4d:
29:5f:b1:53:13:e3:d2:7b:62:16:f9:78:92:f9:fd:
56:cc:2a:48:7a:d3:2c:74:53:6f:8e:35:ec:11:bc:
a7:42:f5:90:d9:28:0e:20:2c:4d:20:ee:f3:d3:a3:
69:1d:82:12:d1:0f:87:b9:b6:c3:dc:e1:c3:ac:f6:
1b:79:be:8c:33:c1:d8:7b:2c:3d:0c:7c:47:33:32:
4f:a9:1e:3a:b9:75:5d:a3:67:42:b5:67:d8:35:26:
4c:ea:ed:99:80:8e:a4:11:05:f5:f3:9b:f9:88:dd:
0e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:8B:F7:88:9E:D9:9A:B5:B9:93:84:20:4A:B2:8A:03:59:CA:1D:FE
X509v3 Authority Key Identifier:
keyid:E8:87:E5:FC:BC:BF:1A:D0:32:68:DA:C9:EE:5D:29:20:25:36:80:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/c1fb46-8b47-4f91-8b9a-d7faa7e7e84d/1/r4v3iJ7ZmrW5k4QgSrKKA1nKHf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/c1fb46-8b47-4f91-8b9a-d7faa7e7e84d/1/6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.234.182.0/24
Signature Algorithm: sha256WithRSAEncryption
36:3f:22:71:2b:02:7f:41:1a:95:0b:e9:62:b6:b6:85:53:22:
4a:18:12:0d:b1:cb:47:a9:c8:4e:53:be:d6:21:26:1d:52:cc:
04:43:e6:3f:89:db:e2:c1:0f:95:58:34:16:70:3e:fe:d3:24:
1d:a6:e4:54:9c:9e:b4:aa:5e:d9:98:f6:40:a4:f0:c2:85:e7:
cf:2a:a2:46:14:ff:ea:39:41:f8:52:85:6c:49:07:c0:53:3f:
ee:25:a1:30:8f:ea:a5:d9:1f:64:54:0b:a8:9f:9f:4b:12:ec:
51:37:e8:ff:52:16:70:52:41:dc:11:8a:f4:d5:e1:9b:c0:ba:
33:c3:54:5b:c6:e1:ae:8c:b4:45:39:3a:13:95:ba:bd:99:1c:
4e:a7:7b:53:2f:4e:a3:f2:d7:04:e3:64:81:00:60:90:8c:fc:
bd:a5:84:22:d6:ba:8b:67:96:ef:f5:f5:91:01:05:e0:bf:7e:
e0:96:c4:11:9b:2c:dc:cd:2f:c9:a7:07:44:2f:ee:11:c9:02:
44:13:be:83:16:9e:bd:a1:c8:f0:b7:cb:38:e8:9d:9f:4f:12:
f8:a4:0c:83:dd:97:43:29:31:f0:58:72:bf:11:bc:ce:33:a1:
0e:38:07:dd:91:0f:13:bc:80:91:fa:1f:9f:59:c4:75:48:98:
27:43:31:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:43:57 2026 by rpki-client