This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/zlryn4mko1wRxoOR9PxP0fcxrmE.roa
File: zlryn4mko1wRxoOR9PxP0fcxrmE.roa (raw, json)
Hash identifier: AIH8NLSlPfR8dAuRGSz5mVvImvbLrLk/0uPHSLREnZ0=
Subject key identifier: CE:5A:F2:9F:89:A4:A3:5C:11:C6:83:91:F4:FC:4F:D1:F7:31:AE:61
Certificate issuer: /CN=30f08f840e317e95205ba13497d9dbc7377b9e57
Certificate serial: 019B77C6944825E2D3292113C4D76D42674A
Authority key identifier: 30:F0:8F:84:0E:31:7E:95:20:5B:A1:34:97:D9:DB:C7:37:7B:9E:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MPCPhA4xfpUgW6E0l9nbxzd7nlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/zlryn4mko1wRxoOR9PxP0fcxrmE.roa
Signing time: Thu 01 Jan 2026 04:17:41 +0000
ROA not before: Thu 01 Jan 2026 04:17:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35450
IP address blocks: 193.192.42.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MPCPhA4xfpUgW6E0l9nbxzd7nlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c6:94:48:25:e2:d3:29:21:13:c4:d7:6d:42:67:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30f08f840e317e95205ba13497d9dbc7377b9e57
Validity
Not Before: Jan 1 04:17:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ce5af29f89a4a35c11c68391f4fc4fd1f731ae61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:96:52:c3:00:71:d8:6c:cf:f0:37:b1:6b:61:
4f:ab:8a:03:59:d0:ab:28:04:b8:20:9f:45:c3:78:
74:3d:0e:cb:f3:13:88:14:6e:26:44:b1:3a:c9:77:
a3:e3:45:76:2c:82:c2:94:4b:6e:27:f1:20:fe:3d:
6a:91:b0:90:65:63:fb:c8:e1:0b:72:35:8c:43:59:
ea:b0:87:3b:6c:10:b2:6e:f6:b4:58:fb:ab:e5:3c:
e9:05:67:fa:3c:bb:af:9b:f9:42:0c:48:59:88:0f:
91:dc:e6:09:c0:bf:8c:15:d1:ad:a0:90:29:6c:92:
0c:55:32:2b:6a:ba:ba:83:e4:23:3e:fa:41:9a:11:
94:4f:32:5c:3a:98:4a:f9:62:2a:9a:97:22:e7:2b:
12:9e:b7:2c:bd:be:1d:a6:d9:9a:a1:d5:31:ee:ec:
53:ad:6d:e5:06:0c:78:85:a4:69:3b:62:b0:be:ca:
be:77:07:38:c8:56:9c:61:4b:f8:5d:3c:56:87:c0:
c4:e3:ef:69:64:22:f4:e1:97:c6:f0:73:79:19:b5:
12:b4:60:f9:97:8e:ac:ef:63:e9:d1:9f:46:88:e8:
d1:d8:2a:cb:76:8b:a0:f4:ad:e6:46:cc:be:aa:2d:
73:a3:5e:57:e9:45:d9:e3:77:39:28:03:1e:88:c6:
0d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:5A:F2:9F:89:A4:A3:5C:11:C6:83:91:F4:FC:4F:D1:F7:31:AE:61
X509v3 Authority Key Identifier:
keyid:30:F0:8F:84:0E:31:7E:95:20:5B:A1:34:97:D9:DB:C7:37:7B:9E:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPCPhA4xfpUgW6E0l9nbxzd7nlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/zlryn4mko1wRxoOR9PxP0fcxrmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.192.42.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:5c:4f:a2:15:93:30:48:01:e8:35:07:b8:38:c4:f7:c3:ec:
d8:cc:89:f5:3e:d7:08:f1:b2:78:28:54:8b:f5:92:bc:c8:6a:
c6:01:ce:d8:21:ca:66:5c:b1:4c:e8:08:c1:16:d3:a6:72:02:
92:a1:92:0a:d9:15:c6:45:37:16:ae:b8:2e:98:14:e0:70:43:
78:fc:2b:b6:41:13:26:9e:28:46:18:5a:98:8f:29:c0:27:1d:
42:2d:3c:79:e4:76:87:a8:a7:8a:d2:ef:cc:16:b6:66:46:36:
63:66:be:0a:72:61:5f:d3:e5:72:f1:f9:76:d0:be:d6:53:66:
1b:ff:c5:d8:a3:45:9c:6d:7d:d8:29:ff:72:18:a4:b0:e6:b4:
5b:ff:6d:77:73:51:d7:53:15:1c:7f:ee:41:f0:c1:3a:65:f5:
27:f7:97:3b:d1:89:58:6c:5f:dd:92:9a:ff:c5:58:c0:a0:d5:
ed:d0:67:2c:32:44:db:f7:02:91:2e:18:4f:fc:a7:40:c2:cd:
ee:17:d5:44:6c:92:93:4d:0e:29:17:c0:ac:f8:a4:bc:e1:b2:
42:1d:8c:17:3a:9a:e5:85:9e:fa:d4:4c:a1:98:a9:83:7f:14:
2b:2b:36:86:a2:5c:4e:09:8c:2f:dc:d3:a5:64:10:24:9e:aa:
93:06:c0:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:40:43 2026 by rpki-client