This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/4xcI6-ajxKmP_Ug4IMIxPvlGv34.roa
File: 4xcI6-ajxKmP_Ug4IMIxPvlGv34.roa (raw, json)
Hash identifier: xrDvVgzmOi/0saXzoSAdi3kdTTIHSg71KS5FPmg6F+8=
Subject key identifier: E3:17:08:EB:E6:A3:C4:A9:8F:FD:48:38:20:C2:31:3E:F9:46:BF:7E
Certificate issuer: /CN=f6af433974df373b70abd76b13e1c70c775f554b
Certificate serial: 019B78348BBABD2015724960FE78A2F3A7F2
Authority key identifier: F6:AF:43:39:74:DF:37:3B:70:AB:D7:6B:13:E1:C7:0C:77:5F:55:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9q9DOXTfNztwq9drE-HHDHdfVUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/4xcI6-ajxKmP_Ug4IMIxPvlGv34.roa
Signing time: Thu 01 Jan 2026 06:17:48 +0000
ROA not before: Thu 01 Jan 2026 06:17:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44486
IP address blocks: 45.85.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/9q9DOXTfNztwq9drE-HHDHdfVUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Jan 2026 03:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:34:8b:ba:bd:20:15:72:49:60:fe:78:a2:f3:a7:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6af433974df373b70abd76b13e1c70c775f554b
Validity
Not Before: Jan 1 06:17:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e31708ebe6a3c4a98ffd483820c2313ef946bf7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b5:0e:6f:6f:30:b2:6e:6c:45:80:62:58:33:
14:cf:20:3d:2e:e8:a3:22:0d:e2:2c:22:22:19:5e:
9b:46:5d:b9:5d:94:18:45:c0:31:e3:d1:0c:c4:0b:
43:00:a8:22:22:73:09:56:39:a8:d5:b8:fd:2d:8f:
36:4f:68:02:65:6c:22:24:e0:9b:73:1a:9d:ca:85:
67:51:29:27:a3:cf:2f:a9:ed:d6:7f:d1:1d:cb:15:
ef:3f:6e:92:1f:c5:e5:38:9a:f4:80:32:5c:e3:35:
cf:42:2f:e9:87:df:70:f0:65:75:f7:b4:1d:5c:b3:
a9:d8:55:67:00:7a:bb:8e:e7:6b:4c:0a:a2:e0:ea:
14:d7:df:10:2d:2d:e7:85:82:e9:87:c0:40:0b:e2:
e7:52:b5:e5:61:fa:92:0b:8d:7e:7d:75:55:b9:98:
bf:40:81:d0:76:9c:89:fa:e4:d6:9c:49:ba:2c:a1:
b4:c3:f4:1f:3d:f1:19:e4:1d:1d:7d:d1:b5:b7:5d:
20:c1:8c:98:16:bd:85:80:60:b5:ec:b0:34:11:bc:
7e:1d:7a:cb:00:c7:41:4e:af:07:44:36:66:74:45:
41:7c:ff:10:83:5c:de:74:91:52:7a:dc:ac:92:4a:
57:ee:d9:02:1a:a1:7a:72:a0:f4:da:4b:4c:d8:cc:
f2:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:17:08:EB:E6:A3:C4:A9:8F:FD:48:38:20:C2:31:3E:F9:46:BF:7E
X509v3 Authority Key Identifier:
keyid:F6:AF:43:39:74:DF:37:3B:70:AB:D7:6B:13:E1:C7:0C:77:5F:55:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9q9DOXTfNztwq9drE-HHDHdfVUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/4xcI6-ajxKmP_Ug4IMIxPvlGv34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.219.0/24
Signature Algorithm: sha256WithRSAEncryption
54:e2:a1:22:42:7f:57:19:af:a5:62:51:55:44:1e:91:f9:7c:
3b:13:af:c7:5f:e6:97:0a:55:62:f6:87:c7:94:d3:63:c8:ff:
cf:2b:ba:e5:0b:65:cb:e9:f4:a0:71:b3:41:bb:d1:f1:90:e7:
60:86:f9:ca:a9:af:04:fb:26:73:13:88:ce:fd:c1:06:9d:52:
f2:ab:f4:55:3a:a2:14:f1:3c:50:d6:ea:99:5f:a8:ec:a2:2f:
a2:3b:05:52:dd:63:30:02:a7:4b:16:59:d4:3d:72:c9:f0:3b:
b7:2b:67:8a:e0:5a:3a:fa:2a:de:d4:9e:de:dd:cf:68:cb:24:
58:f7:75:dd:bc:c8:c4:4f:f3:35:45:5c:3d:68:5b:37:9b:ce:
aa:d9:31:ba:ac:3e:8a:e7:ac:be:f0:2d:b2:2f:3d:a1:77:f5:
19:19:ac:9b:3c:7e:c4:78:ce:40:8f:16:af:d6:97:84:0b:3c:
a6:0c:8e:8f:fc:84:a7:45:36:19:00:49:c9:60:be:45:c3:f7:
b5:19:15:85:41:ac:c2:6b:6b:a8:58:09:75:c9:f8:fe:67:a6:
c5:4e:55:69:b0:ac:46:e5:af:dc:44:72:7b:87:53:10:ff:7b:
a7:8b:76:6f:cb:d9:89:3c:1b:98:c1:f5:dd:f8:25:5c:04:47:
a9:4a:02:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 08:33:45 2026 by rpki-client