This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/4io-REhzFRxPhNR2ODLWtq5-pVg.roa
File: 4io-REhzFRxPhNR2ODLWtq5-pVg.roa (raw, json)
Hash identifier: wvYJq+OJ0yBLuz2nx1cnZCl0Nf5x5+pis6cfSb4TkHk=
Subject key identifier: E2:2A:3E:44:48:73:15:1C:4F:84:D4:76:38:32:D6:B6:AE:7E:A5:58
Certificate issuer: /CN=ce704858b643266f7c7107721c98f2ba93dd5265
Certificate serial: 019B797F0338921BC9BCC4217ACC0F0DC3A3
Authority key identifier: CE:70:48:58:B6:43:26:6F:7C:71:07:72:1C:98:F2:BA:93:DD:52:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/znBIWLZDJm98cQdyHJjyupPdUmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/4io-REhzFRxPhNR2ODLWtq5-pVg.roa
Signing time: Thu 01 Jan 2026 12:18:45 +0000
ROA not before: Thu 01 Jan 2026 12:18:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49981
IP address blocks: 185.200.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/znBIWLZDJm98cQdyHJjyupPdUmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 09:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:7f:03:38:92:1b:c9:bc:c4:21:7a:cc:0f:0d:c3:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce704858b643266f7c7107721c98f2ba93dd5265
Validity
Not Before: Jan 1 12:18:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e22a3e444873151c4f84d4763832d6b6ae7ea558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:86:02:35:36:ac:18:33:b7:d0:2c:c4:01:9f:
ae:4d:f0:26:94:2b:ea:48:a2:86:28:34:79:1c:cd:
67:07:16:b7:99:69:3a:93:82:7a:75:ab:fa:0b:20:
cc:63:8e:54:c4:94:c3:41:c3:58:c4:72:f1:87:dd:
53:2b:6a:5c:10:6e:01:ba:7d:cf:81:c1:b7:0c:a4:
c8:91:36:d0:cd:0d:23:76:5a:c4:54:53:4f:3c:c4:
97:61:69:70:4c:0d:c4:79:78:f4:4a:03:b6:b6:1b:
8c:8a:c8:31:53:76:d9:d0:51:ca:96:1a:92:73:66:
6e:94:cb:0a:65:3b:47:fd:9d:40:72:23:9a:93:18:
65:d0:49:08:ae:72:36:ec:66:d4:93:c3:d7:44:f6:
fc:8c:c7:ad:bf:fc:0d:89:8b:32:ce:79:a5:83:cb:
1e:cc:ac:7c:d5:d6:13:c6:ea:4a:11:69:f8:bc:f6:
ff:43:03:68:05:e4:68:16:ae:cb:4d:96:25:86:c2:
9f:1d:6a:56:82:05:99:4c:0b:59:d0:ad:6c:61:a2:
af:d9:76:34:11:83:0e:77:84:55:f7:2c:a7:a4:2e:
5f:8d:38:b3:e8:b0:37:1c:d7:7c:41:ec:f8:5a:f5:
94:6f:f3:92:e4:e1:3c:93:c1:e8:8d:01:90:51:ad:
f9:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:2A:3E:44:48:73:15:1C:4F:84:D4:76:38:32:D6:B6:AE:7E:A5:58
X509v3 Authority Key Identifier:
keyid:CE:70:48:58:B6:43:26:6F:7C:71:07:72:1C:98:F2:BA:93:DD:52:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znBIWLZDJm98cQdyHJjyupPdUmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/4io-REhzFRxPhNR2ODLWtq5-pVg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.200.12.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:b3:1b:bc:c0:f7:7c:76:80:38:4a:66:6a:fc:16:43:45:78:
d2:df:76:66:38:cf:bf:a0:8d:31:d1:08:8a:1a:88:b4:94:40:
a7:fa:ef:a5:1a:08:79:74:e9:c9:e4:be:3b:86:e4:65:e0:73:
90:93:5f:dc:0e:6b:73:20:d7:00:76:a0:f8:90:ec:b9:08:9f:
c2:3d:54:62:a2:39:2e:7f:4c:87:7d:16:fe:1d:f4:88:ae:f4:
11:3b:45:37:c1:86:1c:e5:c4:42:e8:fd:19:4d:20:1a:50:6a:
2a:45:8b:6a:3e:b4:15:c6:49:7e:a2:93:ff:58:88:a4:24:bb:
79:46:4b:38:4a:3b:cb:77:7c:01:ea:d2:a7:a9:af:cf:5b:ca:
4d:44:70:2f:00:fd:7f:50:36:c4:7c:ef:2f:da:82:0a:c1:b0:
ea:9f:82:9f:9c:b3:a8:04:8a:cf:24:1f:4b:f3:18:cc:01:1b:
8d:c4:c7:49:64:99:8b:95:c1:25:32:62:11:6a:08:c5:25:a0:
88:59:70:9b:03:3b:ce:34:3a:9f:38:4b:e0:8d:03:53:cf:0c:
e2:fb:fb:28:d7:09:f1:49:35:5d:bf:66:da:e7:7e:69:07:86:
e6:b5:1f:b2:fe:0e:88:23:b3:2a:d7:0b:60:87:10:ac:cf:f2:
e4:32:c1:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 17:33:03 2026 by rpki-client