This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/b42027-6637-48e7-a354-9e0b196a0487/1/TKiySKsrDB9cF93wGZALmPNCai4.roa
File: TKiySKsrDB9cF93wGZALmPNCai4.roa (raw, json)
Hash identifier: tc1pUMByW6R2FInLyIj5FqB3NbTIk6zZRQsKK64hyM4=
Subject key identifier: 4C:A8:B2:48:AB:2B:0C:1F:5C:17:DD:F0:19:90:0B:98:F3:42:6A:2E
Certificate issuer: /CN=4ab9f900ba618be8e7c920963cdf757b9050e509
Certificate serial: 019B7B3566A934B7A425079F9330E6D9E49D
Authority key identifier: 4A:B9:F9:00:BA:61:8B:E8:E7:C9:20:96:3C:DF:75:7B:90:50:E5:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Srn5ALphi-jnySCWPN91e5BQ5Qk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/b42027-6637-48e7-a354-9e0b196a0487/1/TKiySKsrDB9cF93wGZALmPNCai4.roa
Signing time: Thu 01 Jan 2026 20:17:35 +0000
ROA not before: Thu 01 Jan 2026 20:17:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15600
IP address blocks: 185.148.124.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/b42027-6637-48e7-a354-9e0b196a0487/1/Srn5ALphi-jnySCWPN91e5BQ5Qk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/b42027-6637-48e7-a354-9e0b196a0487/1/Srn5ALphi-jnySCWPN91e5BQ5Qk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Srn5ALphi-jnySCWPN91e5BQ5Qk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 14:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:35:66:a9:34:b7:a4:25:07:9f:93:30:e6:d9:e4:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ab9f900ba618be8e7c920963cdf757b9050e509
Validity
Not Before: Jan 1 20:17:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4ca8b248ab2b0c1f5c17ddf019900b98f3426a2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:14:28:55:9c:f5:70:73:60:d8:c1:a7:7a:ea:
6f:2d:54:b5:4f:87:54:46:b6:06:6f:9b:ef:cb:0a:
7d:eb:17:15:31:6d:17:31:95:c5:0c:b3:40:4d:f6:
9d:40:53:46:43:01:cc:a8:a6:b8:87:8f:04:b4:54:
d4:73:66:2f:77:49:07:ad:4b:4f:79:4e:00:17:1a:
2f:7d:b4:9d:bd:02:45:b4:4f:3d:06:b7:1b:71:d9:
ce:78:66:92:05:eb:ca:ba:cc:e5:6b:97:42:f0:fe:
9a:1d:34:b7:92:d8:bb:8e:16:6d:c9:71:20:8c:00:
2b:54:da:ad:89:ee:bb:bd:2b:f7:f6:69:02:42:73:
c0:a3:b5:0c:53:1d:3b:f6:3f:ab:f9:e9:a6:31:02:
a4:86:3b:1a:1a:42:69:b6:43:e1:d0:ac:ff:b8:23:
9e:f5:65:58:dd:0a:12:59:52:88:14:39:fe:c3:0a:
10:cc:c1:d3:cc:f8:ce:21:4d:bd:a6:86:2e:fb:7c:
02:7d:00:e0:4b:a2:cf:72:db:21:da:c8:1e:44:a1:
b6:4d:c1:9d:d8:29:56:6e:c4:d1:82:f9:20:b4:52:
85:93:db:0d:0d:39:4c:fa:ae:bd:f1:34:43:75:a3:
9a:53:01:58:3d:8f:4a:cb:e6:2d:d1:2d:fa:1b:4e:
4a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:A8:B2:48:AB:2B:0C:1F:5C:17:DD:F0:19:90:0B:98:F3:42:6A:2E
X509v3 Authority Key Identifier:
keyid:4A:B9:F9:00:BA:61:8B:E8:E7:C9:20:96:3C:DF:75:7B:90:50:E5:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Srn5ALphi-jnySCWPN91e5BQ5Qk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/b42027-6637-48e7-a354-9e0b196a0487/1/TKiySKsrDB9cF93wGZALmPNCai4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/b42027-6637-48e7-a354-9e0b196a0487/1/Srn5ALphi-jnySCWPN91e5BQ5Qk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.148.124.0/22
Signature Algorithm: sha256WithRSAEncryption
22:49:d3:e1:47:9f:47:b0:63:fc:56:9d:0c:7e:64:f0:90:fb:
ba:b0:f8:a6:8b:f5:09:99:9c:0f:56:81:70:b6:f6:ff:19:64:
37:d1:f6:33:76:30:3f:68:a7:81:62:57:31:fe:f1:6e:ea:22:
7b:ee:82:81:9a:d5:fa:07:20:01:f6:1d:07:38:c0:3a:ff:f9:
51:81:e5:56:4a:f5:81:e9:9f:85:c0:09:69:23:d4:99:b5:23:
5b:5b:e2:33:18:d9:b6:34:d7:1b:87:1b:e8:84:5e:a5:c0:e7:
68:57:52:56:1c:9f:88:2e:d6:3a:b7:50:f7:19:54:33:ad:9a:
aa:fc:8c:42:2f:af:b2:0c:45:f3:0b:10:65:f3:60:dd:2b:50:
6f:de:e1:36:dc:1e:82:36:d1:46:e3:fb:f1:d6:9a:2c:00:a4:
d9:c0:db:21:27:72:13:b2:68:c6:71:6d:1b:fe:0d:95:2d:f4:
16:a4:aa:01:3e:6e:aa:33:e9:bd:4e:dd:86:76:43:ea:e1:93:
71:72:ef:b4:68:bc:92:a1:7a:f4:0d:b9:65:07:e3:07:f1:83:
2c:cc:7f:25:51:02:eb:a8:4a:59:3f:0a:24:7d:4b:27:4d:c8:
c3:8f:06:71:67:56:ac:de:90:76:1b:ae:1b:b7:9e:2a:0c:42:
1e:b4:a0:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 20:42:29 2026 by rpki-client