This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/c3c3c4-27a1-4c79-b7de-b9403f64ba60/1/Q4xuvUSfdd_hH6iytKUgGmNl_4Y.roa
File: Q4xuvUSfdd_hH6iytKUgGmNl_4Y.roa (raw, json)
Hash identifier: NjKec32Map1aJoepsfhE/kdsE4Oyvd37A3jStLOxK1E=
Subject key identifier: 43:8C:6E:BD:44:9F:75:DF:E1:1F:A8:B2:B4:A5:20:1A:63:65:FF:86
Certificate issuer: /CN=12dcb8e1410c8cd18e52457f7e1a9580d6da5226
Certificate serial: 019B7F832B76917D08C52293D0BF79C278E3
Authority key identifier: 12:DC:B8:E1:41:0C:8C:D1:8E:52:45:7F:7E:1A:95:80:D6:DA:52:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ety44UEMjNGOUkV_fhqVgNbaUiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/c3c3c4-27a1-4c79-b7de-b9403f64ba60/1/Q4xuvUSfdd_hH6iytKUgGmNl_4Y.roa
Signing time: Fri 02 Jan 2026 16:21:01 +0000
ROA not before: Fri 02 Jan 2026 16:21:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 19762
IP address blocks: 80.244.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/c3c3c4-27a1-4c79-b7de-b9403f64ba60/1/Ety44UEMjNGOUkV_fhqVgNbaUiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/c3c3c4-27a1-4c79-b7de-b9403f64ba60/1/Ety44UEMjNGOUkV_fhqVgNbaUiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ety44UEMjNGOUkV_fhqVgNbaUiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 04:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:83:2b:76:91:7d:08:c5:22:93:d0:bf:79:c2:78:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12dcb8e1410c8cd18e52457f7e1a9580d6da5226
Validity
Not Before: Jan 2 16:21:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=438c6ebd449f75dfe11fa8b2b4a5201a6365ff86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:12:a7:e9:f2:33:59:1c:e0:ff:da:d6:02:a2:
cd:29:07:ae:e5:92:48:6f:64:9b:3e:99:33:ac:a0:
02:51:d9:be:34:5c:9a:03:04:8d:e0:8b:e5:89:4d:
d8:40:25:b3:cd:7e:86:29:fc:27:89:a1:44:5c:9b:
2d:13:33:9f:b8:b2:7d:59:94:ce:ec:66:5d:17:42:
d9:1a:80:80:47:8f:95:24:46:e7:cb:8d:ae:cc:17:
29:08:a9:a1:c5:19:48:7a:c7:9c:b8:41:ae:7c:e1:
e5:df:b6:cb:94:74:f4:3c:99:2c:8c:f5:86:6c:ce:
36:14:f7:39:86:b2:4e:d2:ae:4a:15:e2:0c:d1:bd:
c9:c5:a3:67:b5:31:ac:82:20:f0:7d:a7:4a:9e:15:
91:c7:6c:60:38:ac:8b:10:07:36:c1:04:d0:aa:e1:
4c:36:94:58:ed:eb:39:f6:db:e9:6f:e3:db:03:fb:
2f:37:95:d2:3a:13:0c:55:de:4e:84:7e:0b:69:2f:
df:96:1c:8a:00:67:7a:3d:e9:9e:92:5d:44:06:1e:
2c:cf:4a:0c:49:5f:d5:5d:64:99:f9:2a:8c:d4:c9:
73:0b:14:22:9e:e8:77:f3:78:a8:81:da:ac:c4:cb:
45:7c:9e:ae:49:66:1e:5b:b6:49:9e:8d:90:3d:f4:
b2:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:8C:6E:BD:44:9F:75:DF:E1:1F:A8:B2:B4:A5:20:1A:63:65:FF:86
X509v3 Authority Key Identifier:
keyid:12:DC:B8:E1:41:0C:8C:D1:8E:52:45:7F:7E:1A:95:80:D6:DA:52:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ety44UEMjNGOUkV_fhqVgNbaUiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c3c3c4-27a1-4c79-b7de-b9403f64ba60/1/Q4xuvUSfdd_hH6iytKUgGmNl_4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c3c3c4-27a1-4c79-b7de-b9403f64ba60/1/Ety44UEMjNGOUkV_fhqVgNbaUiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.244.12.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:f3:78:fa:88:13:e1:ac:b8:ac:03:f1:72:fb:1c:e5:60:50:
95:d7:cc:87:48:7b:fc:a6:fc:77:1d:86:3a:d3:8d:93:4d:b4:
3f:0b:8a:5e:8b:2d:23:d1:9a:c2:bb:f1:e2:6a:a1:f8:a3:3f:
9d:3a:68:01:ea:94:c7:4f:de:77:d5:d0:b7:97:96:f4:dd:23:
41:2d:9e:43:f6:48:ed:27:3a:c6:9e:d9:db:bd:b6:51:28:c9:
bb:7c:44:08:86:5f:28:f4:7e:7d:d1:cd:7d:79:94:84:07:ba:
c9:f1:f5:24:9a:65:7a:0e:9f:9b:f8:a2:70:71:37:cd:65:08:
1a:0b:12:65:3f:49:d3:5a:74:06:a5:12:c8:69:b6:fe:c7:59:
ad:20:6a:e8:c6:60:a8:69:57:3e:7c:51:6a:39:f7:ad:19:1c:
23:a7:0f:5b:0c:29:48:a9:9f:f7:18:5a:32:28:1c:ed:8e:21:
bb:b8:2d:fc:3d:57:47:aa:56:15:99:b2:96:ec:53:a4:55:83:
49:1a:3e:b3:b8:99:bd:09:32:96:b5:56:f5:9b:36:c1:7e:c0:
30:e1:c2:a9:77:19:72:64:df:d4:b3:8d:2f:8c:7b:6a:63:f5:
96:06:6b:ec:ff:16:5d:aa:32:f1:4c:45:39:b2:40:b1:e3:65:
48:a8:7a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:04:55 2026 by rpki-client