This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/Z4DAklyvQ_tcSanawmKE9EaEL9M.roa
File: Z4DAklyvQ_tcSanawmKE9EaEL9M.roa (raw, json)
Hash identifier: o3molPBT9AAqHiP/f5TGDP1/kwtZCHzNXCqe1hcN8eI=
Subject key identifier: 67:80:C0:92:5C:AF:43:FB:5C:49:A9:DA:C2:62:84:F4:46:84:2F:D3
Certificate issuer: /CN=e61bd7dd1f8ac8b4192ba78a592348b5dd0a1a66
Certificate serial: 019C0EAD181B944DB3862632BF073BF825DD
Authority key identifier: E6:1B:D7:DD:1F:8A:C8:B4:19:2B:A7:8A:59:23:48:B5:DD:0A:1A:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/Z4DAklyvQ_tcSanawmKE9EaEL9M.roa
Signing time: Fri 30 Jan 2026 11:32:30 +0000
ROA not before: Fri 30 Jan 2026 11:32:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 185.199.196.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.mft
rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Feb 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:0e:ad:18:1b:94:4d:b3:86:26:32:bf:07:3b:f8:25:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e61bd7dd1f8ac8b4192ba78a592348b5dd0a1a66
Validity
Not Before: Jan 30 11:32:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6780c0925caf43fb5c49a9dac26284f446842fd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:df:cd:95:5f:63:23:24:17:05:d8:57:17:7f:
2b:4d:58:68:74:ba:34:fe:29:83:87:23:6e:d8:4d:
30:59:ce:c5:ac:50:f3:b5:04:0c:29:9b:d5:b9:58:
5f:b2:d4:1f:10:ad:8c:e0:e5:06:1c:19:0f:0c:17:
2a:4e:eb:4e:80:8e:e7:95:55:4c:57:4a:1a:19:6d:
6e:65:a6:73:c5:bb:e2:0b:92:57:30:4f:e5:b7:5f:
3d:e6:10:ef:08:ca:51:c7:83:3d:d5:d2:ce:84:1c:
af:90:48:b1:86:2d:e7:ea:b9:5b:00:fd:a2:1c:dc:
da:5b:45:8f:30:8a:f0:88:59:3c:95:00:52:54:9f:
a4:48:1b:45:51:37:1f:55:08:0e:cd:b4:23:43:30:
7e:a5:cc:43:24:2b:a6:86:6a:85:1f:19:34:94:0d:
94:88:8b:df:84:ba:22:25:50:33:a4:eb:fa:f0:79:
5c:71:9a:f5:4c:3d:8d:57:09:f4:48:57:52:b7:0a:
fa:79:df:82:00:dc:a1:b2:13:50:f7:88:a8:6a:00:
51:17:5c:a2:8e:35:13:8f:3c:cd:98:93:c9:4c:18:
87:9f:e5:1c:f1:5c:9d:d8:d1:93:95:53:3e:2a:fc:
a0:0f:59:cf:40:da:16:54:5d:cb:15:03:ee:a5:6b:
a6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:80:C0:92:5C:AF:43:FB:5C:49:A9:DA:C2:62:84:F4:46:84:2F:D3
X509v3 Authority Key Identifier:
keyid:E6:1B:D7:DD:1F:8A:C8:B4:19:2B:A7:8A:59:23:48:B5:DD:0A:1A:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/Z4DAklyvQ_tcSanawmKE9EaEL9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.199.196.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:94:68:cf:80:9c:f8:a8:c7:d3:55:ce:8b:a0:8f:05:6c:4d:
92:27:35:e0:6c:e8:8b:40:36:c7:be:6d:ff:74:0e:7a:9f:91:
8f:86:43:1b:c6:b0:40:11:cb:15:83:9f:b0:87:9e:64:53:e4:
b0:7e:bd:a3:63:fd:15:f9:7f:d2:70:30:29:b8:db:da:f7:6f:
72:31:fe:8c:78:e7:26:1e:6f:0b:e1:5e:a8:2f:3a:00:58:4a:
54:57:ec:96:58:9a:8d:97:8a:40:98:6b:9c:0a:2b:15:2e:a3:
8e:95:de:4b:b2:69:3b:2e:f2:6a:d6:07:3d:2a:be:e6:12:ea:
f5:05:57:03:56:cd:5c:45:6b:68:9f:41:79:42:30:ab:58:a7:
2e:59:2a:57:09:6f:e9:0a:eb:c7:2c:fe:22:30:0f:60:03:71:
0d:5c:e0:0a:f2:99:5a:68:1d:dd:83:5c:8d:0a:05:87:77:65:
d1:96:02:bb:0a:89:e5:6e:51:29:a4:c4:f1:a9:40:58:2e:76:
98:22:6e:5f:ac:5c:39:d1:2a:fe:96:b0:cf:d6:00:05:6b:df:
a7:4f:17:2a:69:37:c7:2e:ab:7c:26:f8:d5:57:2a:23:25:4c:
01:39:9e:35:95:38:ca:b8:bc:34:4c:56:f6:7f:b0:27:c8:e1:
ed:0f:2b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 4 15:57:14 2026 by rpki-client