This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/4drBeY0WR_A1GPJtZA4YXlykfh4.roa
File: 4drBeY0WR_A1GPJtZA4YXlykfh4.roa (raw, json)
Hash identifier: uPxG8eo/1XvDANn6qBOuvVB20xa9nluualatLIHzSnQ=
Subject key identifier: E1:DA:C1:79:8D:16:47:F0:35:18:F2:6D:64:0E:18:5E:5C:A4:7E:1E
Certificate issuer: /CN=e7c07db9880133c5cdce005bca111b552cd14c53
Certificate serial: 019B7B369B37DE7EBAD51DE0C94FD0CFEDBD
Authority key identifier: E7:C0:7D:B9:88:01:33:C5:CD:CE:00:5B:CA:11:1B:55:2C:D1:4C:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/4drBeY0WR_A1GPJtZA4YXlykfh4.roa
Signing time: Thu 01 Jan 2026 20:18:54 +0000
ROA not before: Thu 01 Jan 2026 20:18:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209347
IP address blocks: 45.12.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:36:9b:37:de:7e:ba:d5:1d:e0:c9:4f:d0:cf:ed:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7c07db9880133c5cdce005bca111b552cd14c53
Validity
Not Before: Jan 1 20:18:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e1dac1798d1647f03518f26d640e185e5ca47e1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:77:a6:7f:61:04:c7:57:a6:7c:e7:ac:e8:ed:
90:f6:42:eb:ec:c2:95:91:2e:4d:b9:de:d5:e1:20:
af:ff:0f:67:42:90:5a:66:2e:4a:b7:e0:32:48:59:
97:7b:35:d4:f9:49:1d:0c:28:89:29:85:a3:c4:bb:
a9:1a:4a:61:56:5d:59:43:f0:3d:19:ec:6f:2e:7f:
7b:64:fc:f6:28:85:8f:ce:c9:83:3f:56:97:80:3d:
80:dd:c4:4d:b9:96:4a:72:75:3d:00:d3:aa:8b:1d:
3f:1b:98:f0:ca:36:58:40:fe:f1:f1:8d:f2:c4:c9:
1e:bc:d0:70:4d:ab:56:75:24:dd:84:17:4c:ef:ce:
88:b8:e5:5c:75:04:c7:2e:45:22:1d:f5:b8:3b:af:
97:47:64:ee:b9:77:ae:5c:fb:a0:f3:d3:eb:86:44:
70:1e:b1:02:41:8f:76:4e:e2:92:b9:3c:db:ab:2c:
bb:47:0d:01:1b:9a:24:4c:13:62:99:97:af:3b:b5:
28:20:af:3f:bc:c0:c8:05:ee:f3:4c:78:cc:2b:c9:
03:6f:cc:ab:20:62:75:04:84:23:cb:4c:b2:69:1e:
93:34:10:1c:8a:ed:3f:88:72:cf:d2:b4:1f:2e:ae:
ef:01:2f:b0:a8:0d:cb:82:36:9e:23:d2:82:87:38:
f1:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:DA:C1:79:8D:16:47:F0:35:18:F2:6D:64:0E:18:5E:5C:A4:7E:1E
X509v3 Authority Key Identifier:
keyid:E7:C0:7D:B9:88:01:33:C5:CD:CE:00:5B:CA:11:1B:55:2C:D1:4C:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/4drBeY0WR_A1GPJtZA4YXlykfh4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.203.0/24
Signature Algorithm: sha256WithRSAEncryption
e1:78:49:0a:b3:03:3d:90:ff:06:40:ee:62:5f:b3:3a:c2:d4:
dd:16:1c:2f:8f:69:99:69:f0:02:fd:59:90:26:ad:b9:71:d8:
1d:99:6f:e0:38:3f:46:00:e1:16:d9:41:e5:10:e6:ec:5e:4e:
9b:a5:3f:68:e5:e6:48:e4:b1:1c:6f:bb:74:21:9a:dd:7e:ff:
7a:6e:ad:c4:74:93:50:7c:82:b7:6a:f6:38:7b:03:fc:f7:51:
14:d8:16:02:01:1c:01:2d:af:61:90:86:29:b7:e1:d7:37:3e:
ef:66:53:15:ca:3f:cb:75:07:85:3a:2a:b5:15:0c:56:98:cd:
6c:ed:89:c8:fe:92:a5:2c:79:3b:32:a0:98:5b:ce:06:dc:d7:
3c:1e:31:ba:ad:82:a3:54:de:31:3a:20:43:04:a2:96:ab:e0:
f0:1a:a7:30:1e:c1:59:65:30:0f:03:59:78:e8:9d:7e:73:1b:
73:7c:85:fa:49:74:2d:d1:fd:a4:47:4a:48:19:fa:44:7f:c3:
da:d7:36:5e:33:8d:6f:cc:48:e6:2b:fe:67:6f:02:16:b6:fa:
aa:ca:d6:7e:e1:98:ac:3c:1f:64:ab:39:e6:2c:c1:12:7f:ee:
0c:66:e2:bf:71:18:7c:ce:97:44:c2:2f:da:2c:d5:ea:f2:57:
50:14:57:c1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt7Nps33n661R3gyU/Qz+29MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3YzA3ZGI5ODgwMTMzYzVjZGNlMDA1YmNhMTExYjU1MmNk
MTRjNTMwHhcNMjYwMTAxMjAxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMWRhYzE3OThkMTY0N2YwMzUxOGYyNmQ2NDBlMTg1ZTVjYTQ3ZTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3emf2EEx1emfOes6O2Q9kLr7MKV
kS5Nud7V4SCv/w9nQpBaZi5Kt+AySFmXezXU+UkdDCiJKYWjxLupGkphVl1ZQ/A9
GexvLn97ZPz2KIWPzsmDP1aXgD2A3cRNuZZKcnU9ANOqix0/G5jwyjZYQP7x8Y3y
xMkevNBwTatWdSTdhBdM786IuOVcdQTHLkUiHfW4O6+XR2TuuXeuXPug89PrhkRw
HrECQY92TuKSuTzbqyy7Rw0BG5okTBNimZevO7UoIK8/vMDIBe7zTHjMK8kDb8yr
IGJ1BIQjy0yyaR6TNBAciu0/iHLP0rQfLq7vAS+wqA3LgjaeI9KChzjxEQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOHawXmNFkfwNRjybWQOGF5cpH4eMB8GA1UdIwQY
MBaAFOfAfbmIATPFzc4AW8oRG1Us0UxTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNThCOXVZZ0JNOFhOemdCYnloRWJWU3pSVEZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi84Y2RkNDktYzA5NC00YzZhLTkxOGMt
MGFhNDYzY2RmY2EwLzEvNGRyQmVZMFdSX0ExR1BKdFpBNFlYbHlrZmg0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi84Y2RkNDktYzA5NC00YzZhLTkxOGMtMGFhNDYzY2RmY2Ew
LzEvNThCOXVZZ0JNOFhOemdCYnloRWJWU3pSVEZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQzLMA0G
CSqGSIb3DQEBCwUAA4IBAQDheEkKswM9kP8GQO5iX7M6wtTdFhwvj2mZafAC/VmQ
Jq25cdgdmW/gOD9GAOEW2UHlEObsXk6bpT9o5eZI5LEcb7t0IZrdfv96bq3EdJNQ
fIK3avY4ewP891EU2BYCARwBLa9hkIYpt+HXNz7vZlMVyj/LdQeFOiq1FQxWmM1s
7YnI/pKlLHk7MqCYW84G3Nc8HjG6rYKjVN4xOiBDBKKWq+DwGqcwHsFZZTAPA1l4
6J1+cxtzfIX6SXQt0f2kR0pIGfpEf8Pa1zZeM41vzEjmK/5nbwIWtvqqytZ+4Zis
PB9kqznmLMESf+4MZuK/cRh8zpdEwi/aLNXq8ldQFFfB
-----END CERTIFICATE-----
Generated at Mon Jan 26 02:23:54 2026 by rpki-client