This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/4zRdAfm8vTXKL2ilJfBKhYqn6NY.roa
File: 4zRdAfm8vTXKL2ilJfBKhYqn6NY.roa (raw, json)
Hash identifier: C2KBkGNtf0AMtr/iwr1TvmDzjxKM7CTZhxV5u4CUJx8=
Subject key identifier: E3:34:5D:01:F9:BC:BD:35:CA:2F:68:A5:25:F0:4A:85:8A:A7:E8:D6
Certificate issuer: /CN=9891c4488699e6d024e39cc4d61eeeabd38010fa
Certificate serial: 019B78347A6FFDAD89A4ED2D71A64CB059A6
Authority key identifier: 98:91:C4:48:86:99:E6:D0:24:E3:9C:C4:D6:1E:EE:AB:D3:80:10:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/4zRdAfm8vTXKL2ilJfBKhYqn6NY.roa
Signing time: Thu 01 Jan 2026 06:17:43 +0000
ROA not before: Thu 01 Jan 2026 06:17:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206764
IP address blocks: 93.95.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:34:7a:6f:fd:ad:89:a4:ed:2d:71:a6:4c:b0:59:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9891c4488699e6d024e39cc4d61eeeabd38010fa
Validity
Not Before: Jan 1 06:17:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e3345d01f9bcbd35ca2f68a525f04a858aa7e8d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:bb:df:27:9e:50:af:a8:d3:d7:61:bc:2b:72:
86:4e:b8:0b:01:42:22:74:89:2e:25:3d:95:31:ce:
a5:aa:82:c0:fe:ab:44:5f:80:87:9c:d5:5f:7d:c4:
80:d5:4d:30:8b:08:bc:8e:3d:c4:d5:d3:3a:76:a8:
d1:ce:1e:bb:ed:02:ac:6c:81:34:5e:69:4b:5c:0e:
3c:60:7d:63:f1:6b:33:00:9e:e4:76:61:da:4a:be:
50:7d:f9:31:14:62:7a:23:2d:39:f2:22:ab:e8:77:
ed:0d:9c:dc:f0:c6:79:ac:d2:00:90:a3:30:6a:8b:
7f:cf:0b:f8:09:8b:78:7a:62:d8:52:2f:43:d8:d8:
f5:83:23:26:35:1f:08:a4:2b:a7:2e:62:c4:97:c8:
6a:1a:fe:d9:b4:69:01:ad:47:f3:dd:36:6f:b7:da:
5c:70:83:f1:eb:a8:b1:d7:f9:40:51:7f:8a:7a:24:
95:d5:33:c9:41:4b:3a:4d:28:0a:5f:3c:e9:d3:f0:
f0:e5:ea:c0:02:1b:0b:fe:70:1d:69:de:fd:e5:10:
e4:4e:7f:50:f2:0e:85:ce:54:4f:c7:e9:3d:e4:24:
1c:7e:ed:5e:25:83:12:63:4d:e7:41:bd:9c:54:c2:
3b:1a:af:96:e8:d8:d0:7b:a4:b5:74:2a:f7:a9:22:
e0:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:34:5D:01:F9:BC:BD:35:CA:2F:68:A5:25:F0:4A:85:8A:A7:E8:D6
X509v3 Authority Key Identifier:
keyid:98:91:C4:48:86:99:E6:D0:24:E3:9C:C4:D6:1E:EE:AB:D3:80:10:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/4zRdAfm8vTXKL2ilJfBKhYqn6NY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.96.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:40:47:bd:89:28:96:e6:db:5d:a4:22:2e:2b:94:de:a0:d3:
7a:a2:df:07:3d:a8:88:b1:df:81:8b:10:90:c4:7a:09:88:45:
b2:aa:be:61:3e:af:b7:f9:b2:5f:4a:7c:93:72:f0:d0:87:11:
dc:92:a3:b5:44:64:a7:f2:d5:09:0d:73:75:af:94:7e:fd:d4:
35:4a:f2:95:e6:e7:a0:6e:04:c5:6f:31:e6:4f:de:39:86:ab:
14:1f:ca:08:a3:cf:6f:04:ba:19:d8:d3:91:6e:3d:76:6a:ec:
53:cd:6c:5d:e0:02:2a:76:c9:a3:7e:d1:0e:c4:b0:82:77:6b:
96:6b:f8:29:46:3b:db:6f:2c:fc:9c:d4:52:97:06:69:33:5f:
95:fd:21:cc:61:1d:02:ee:18:6f:b7:40:68:f5:f4:93:3a:63:
e8:1e:20:50:56:b8:7f:9e:0c:46:2b:5a:ac:fe:c9:ad:b3:4b:
ba:27:31:d9:95:18:e8:11:cf:5c:f5:b8:44:8b:3d:0e:86:ce:
eb:3b:2c:04:d0:09:2b:48:08:92:b9:e2:b2:96:db:7a:29:68:
82:75:32:bc:2d:ad:33:0f:46:5b:cc:43:10:ac:e6:1b:9c:59:
2d:d8:f3:09:d2:82:37:a3:ea:c0:3c:70:69:97:80:d2:3f:29:
60:88:3c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:55:29 2026 by rpki-client