This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/4B896DriFtAolXOY-xdv5QVHnqc.roa
File: 4B896DriFtAolXOY-xdv5QVHnqc.roa (raw, json)
Hash identifier: wR37hBGCsDrwex8V1Zs7ZSZ8bVSJce10KqTd05gjF0c=
Subject key identifier: E0:1F:3D:E8:3A:E2:16:D0:28:95:73:98:FB:17:6F:E5:05:47:9E:A7
Certificate issuer: /CN=2e0a9333f93cca544fdabe2ea7a6738a54af759e
Certificate serial: 019B77C73A977D455A490120498D887556A1
Authority key identifier: 2E:0A:93:33:F9:3C:CA:54:4F:DA:BE:2E:A7:A6:73:8A:54:AF:75:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/4B896DriFtAolXOY-xdv5QVHnqc.roa
Signing time: Thu 01 Jan 2026 04:18:23 +0000
ROA not before: Thu 01 Jan 2026 04:18:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396356
IP address blocks: 185.113.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c7:3a:97:7d:45:5a:49:01:20:49:8d:88:75:56:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e0a9333f93cca544fdabe2ea7a6738a54af759e
Validity
Not Before: Jan 1 04:18:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e01f3de83ae216d028957398fb176fe505479ea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:cc:31:cf:f0:f4:16:5f:01:55:40:e2:cd:94:
6d:fe:be:bd:59:9d:2a:40:82:bd:9c:cc:32:ab:a0:
4b:d9:77:08:29:3c:2e:bb:36:1d:0a:19:61:71:8b:
68:90:fd:c9:48:51:3b:f0:7d:0d:dc:ce:5c:8a:ca:
81:bd:83:bd:db:ef:d2:b5:0e:ae:07:7d:99:71:84:
24:4d:64:64:4c:a0:52:7a:66:33:ab:7d:f1:cf:86:
39:c4:c0:54:b6:00:75:d3:80:f6:5d:ca:27:28:74:
65:04:85:15:2d:d9:39:97:f5:87:c4:e3:51:e1:27:
a0:6b:57:c4:e6:cc:87:db:16:20:98:26:f3:0a:60:
69:5e:71:7b:10:c0:d9:41:40:24:ba:02:f2:2a:1b:
52:b3:81:2a:39:05:e7:b8:8b:a8:17:e0:53:8a:2f:
a4:4c:c1:ef:87:c0:5f:df:f0:86:95:b3:06:ed:f6:
81:94:dd:1d:82:f4:85:d3:d7:85:83:e9:da:68:ef:
d7:a1:37:00:7d:bd:76:80:12:5e:c1:9d:04:70:2e:
9e:16:08:6e:b9:7d:e0:65:ad:73:d1:66:70:14:2e:
1e:f7:da:29:34:72:3c:52:92:f2:07:79:57:27:23:
67:2e:f0:f2:fb:6d:71:ac:bc:78:00:fc:5a:5c:69:
71:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:1F:3D:E8:3A:E2:16:D0:28:95:73:98:FB:17:6F:E5:05:47:9E:A7
X509v3 Authority Key Identifier:
keyid:2E:0A:93:33:F9:3C:CA:54:4F:DA:BE:2E:A7:A6:73:8A:54:AF:75:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/4B896DriFtAolXOY-xdv5QVHnqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.113.221.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:ba:76:bc:1c:aa:d5:65:f9:40:85:9d:7f:9d:01:32:de:85:
ab:84:69:86:00:77:ba:20:0e:cf:e6:82:40:08:c4:93:8b:1c:
a1:cf:f4:11:5b:7c:e0:30:f3:dd:2f:f8:23:ca:58:d5:bf:ab:
bd:b7:42:87:01:be:32:7a:1c:52:9e:c3:02:66:b2:6c:98:c1:
aa:86:44:ae:fd:0a:59:61:4b:2f:e9:28:1d:06:23:79:fb:97:
53:9d:80:20:e6:8f:b1:71:08:7b:87:92:a3:62:b5:a5:2e:51:
23:97:12:5f:95:a7:e0:1f:0e:db:18:f7:93:d3:45:75:16:75:
2a:53:30:c9:4b:10:49:f8:51:0f:96:8f:e6:76:03:18:ae:69:
16:78:70:02:96:cd:b7:13:b3:ee:f5:fb:4f:f4:7e:c6:ab:37:
f1:ea:59:06:7c:41:03:c0:09:ca:89:b2:18:6a:25:ad:08:0e:
f8:8a:ee:4e:79:87:20:2b:ae:2f:52:b1:de:23:f1:4f:50:2d:
59:bf:39:4e:c9:1b:01:39:50:b1:9d:e8:dd:6d:6d:f2:d7:4f:
1e:f5:9b:87:9e:61:27:6a:e1:e0:6f:5a:3a:98:4a:40:43:86:
57:91:6a:2e:e3:93:95:fb:4e:67:f4:63:33:bd:31:8f:12:7b:
1a:5e:48:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:00:39 2026 by rpki-client