This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/c4zkb26v95y_D2sc6nv7fdxn9Lc.roa
File: c4zkb26v95y_D2sc6nv7fdxn9Lc.roa (raw, json)
Hash identifier: bMZY04nBemF6cIkhBuUz9nxHZyNkGpj8Eh/OlRIxJ2M=
Subject key identifier: 73:8C:E4:6F:6E:AF:F7:9C:BF:0F:6B:1C:EA:7B:FB:7D:DC:67:F4:B7
Certificate issuer: /CN=d7498cd327ea33bff8629d7f49d6be3adc5ff32c
Certificate serial: 019B7C11E09E67BA7627F5724A569EFC968E
Authority key identifier: D7:49:8C:D3:27:EA:33:BF:F8:62:9D:7F:49:D6:BE:3A:DC:5F:F3:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10mM0yfqM7_4Yp1_Sda-Otxf8yw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/c4zkb26v95y_D2sc6nv7fdxn9Lc.roa
Signing time: Fri 02 Jan 2026 00:18:25 +0000
ROA not before: Fri 02 Jan 2026 00:18:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 559
IP address blocks: 193.247.190.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.mft
rsync://rpki.ripe.net/repository/DEFAULT/10mM0yfqM7_4Yp1_Sda-Otxf8yw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:11:e0:9e:67:ba:76:27:f5:72:4a:56:9e:fc:96:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7498cd327ea33bff8629d7f49d6be3adc5ff32c
Validity
Not Before: Jan 2 00:18:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=738ce46f6eaff79cbf0f6b1cea7bfb7ddc67f4b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ad:dc:ae:44:1d:d9:ef:2e:a4:d2:c7:d1:b8:
7b:80:04:7a:ca:9f:18:58:f7:67:34:81:f4:e6:9e:
ab:1e:30:61:66:0f:fb:bb:3c:7a:e5:e5:20:2f:eb:
17:a0:89:76:20:69:bd:23:dd:bf:e0:12:41:c2:fb:
54:d2:7d:f5:db:1a:fb:dc:e1:06:82:e0:63:79:86:
49:b9:ec:e8:b0:f9:6e:81:90:6c:e8:6a:86:5a:24:
73:e3:7e:b8:9b:91:74:5a:d4:9b:37:c4:b1:fa:da:
7a:be:b8:2d:74:21:9b:4b:d0:5f:56:8b:62:65:be:
3f:05:68:91:a1:d0:62:ef:85:dc:4b:a0:d1:f7:00:
e3:85:b4:0d:69:b1:2c:01:bc:e3:cc:0a:d6:c8:83:
62:d4:2b:b6:9b:71:33:ad:52:70:8b:44:b8:50:92:
ba:6c:37:f4:6c:e9:72:12:0a:5c:6a:15:ae:43:2d:
b9:c9:d5:ff:40:c7:d3:69:ed:87:4d:d5:c2:24:bf:
a0:da:96:4f:f8:80:88:a0:17:77:79:d0:00:12:30:
9b:15:a4:bf:2c:75:fa:9e:ab:fb:24:46:75:bf:2c:
2b:3f:0f:25:1a:20:58:df:39:b5:2f:33:29:a4:00:
fb:82:96:22:bb:06:ff:4c:55:40:41:f4:cd:8a:2b:
9c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:8C:E4:6F:6E:AF:F7:9C:BF:0F:6B:1C:EA:7B:FB:7D:DC:67:F4:B7
X509v3 Authority Key Identifier:
keyid:D7:49:8C:D3:27:EA:33:BF:F8:62:9D:7F:49:D6:BE:3A:DC:5F:F3:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10mM0yfqM7_4Yp1_Sda-Otxf8yw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/c4zkb26v95y_D2sc6nv7fdxn9Lc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.247.190.0/23
Signature Algorithm: sha256WithRSAEncryption
54:44:53:b0:00:93:85:ba:5c:09:46:ab:a1:f0:a8:a8:3d:1b:
63:95:99:e3:c8:36:1c:c8:c1:9a:4f:f6:80:3b:c6:62:8c:07:
b1:5b:94:2e:e2:f6:b8:8b:10:dc:b8:b9:79:29:4f:ae:2e:cb:
63:cb:10:fc:78:82:21:2f:84:c8:2a:db:4e:9e:e5:ed:07:59:
5b:9d:c5:46:69:5f:b3:61:6e:b7:2c:b8:fd:94:4a:c9:ae:35:
c9:1c:2b:8a:f6:b0:bf:a7:2d:b4:13:5c:92:ad:9f:b6:2c:7c:
94:f3:b4:75:69:5a:a0:4b:5e:a4:7f:cd:51:0f:58:06:be:3c:
4e:52:7b:5e:d2:7f:bb:40:6e:a5:1a:09:4c:ad:72:05:88:a4:
a5:4c:49:6f:0e:06:be:36:e4:c1:e3:da:5d:90:47:c6:bf:b7:
77:af:bf:a0:21:1f:14:76:fe:0b:82:c2:fc:11:11:47:24:51:
9e:cd:6a:6c:b7:ce:d3:39:25:c7:a4:eb:c6:8f:17:bd:99:45:
1c:bc:4b:5e:f0:8c:e0:8a:9b:b0:d8:3b:3c:81:8c:57:93:c5:
a2:0a:61:08:df:91:21:99:05:12:5e:a0:09:25:42:7e:e5:0f:
23:9a:60:92:47:ae:77:1f:97:5c:13:d3:f0:06:37:2f:af:f4:
f1:3e:51:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:05:04 2026 by rpki-client