This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/18Szc_NOHV7yuL-RPwFFVIdly00.roa
File: 18Szc_NOHV7yuL-RPwFFVIdly00.roa (raw, json)
Hash identifier: ld/2o13pONoCjqn2WT6haOPdokqq4iF1vU3cu4RZBY4=
Subject key identifier: D7:C4:B3:73:F3:4E:1D:5E:F2:B8:BF:91:3F:01:45:54:87:65:CB:4D
Certificate issuer: /CN=c44db8b0983acf97a3255152c2ea592adae7735b
Certificate serial: 019B783562373542F530AEE44FEA7B89D8B3
Authority key identifier: C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/18Szc_NOHV7yuL-RPwFFVIdly00.roa
Signing time: Thu 01 Jan 2026 06:18:43 +0000
ROA not before: Thu 01 Jan 2026 06:18:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 22773
IP address blocks: 203.81.192.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Jan 2026 00:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:35:62:37:35:42:f5:30:ae:e4:4f:ea:7b:89:d8:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c44db8b0983acf97a3255152c2ea592adae7735b
Validity
Not Before: Jan 1 06:18:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d7c4b373f34e1d5ef2b8bf913f0145548765cb4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:37:cf:43:9a:7a:47:e1:fd:81:36:34:2c:65:
95:b7:88:8e:fb:3d:0c:07:71:c2:8b:c0:b6:60:a8:
27:ba:ba:e2:cf:a9:04:fa:3c:fe:fd:38:6c:d7:cc:
20:49:ed:ed:31:e9:b8:8f:3c:91:60:4a:6f:4b:fe:
95:6d:f9:18:ad:68:61:dc:f6:fd:ff:a8:27:71:43:
04:0c:69:8e:47:96:6e:8d:ab:ae:e8:7f:3a:53:c2:
dd:92:67:60:fe:cc:d1:e7:98:17:6d:37:8d:93:75:
87:99:0b:4f:7f:e7:af:3d:dc:86:32:7a:47:01:25:
7c:81:45:9a:11:e7:3a:b8:09:3d:29:c5:22:c8:7e:
70:fa:a3:98:c2:ab:1e:15:14:fa:31:a0:aa:b5:fb:
27:02:20:de:e3:7c:6c:67:b5:a1:94:91:62:fe:b5:
89:89:b8:9d:64:27:3b:fe:b1:0f:8f:f0:ea:52:b8:
e0:00:cb:94:50:92:25:06:fb:14:2c:36:0b:f8:b1:
8a:0e:02:2e:ae:c0:c2:ca:b7:0f:d3:4c:2c:a9:2b:
c6:78:5a:5b:03:82:8c:55:b6:b8:f4:a3:58:86:cb:
3b:12:42:b2:e5:f5:48:70:91:21:73:52:9f:0d:14:
73:65:6c:f1:6c:9f:7a:da:ed:23:2c:8c:72:d3:8b:
d2:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:C4:B3:73:F3:4E:1D:5E:F2:B8:BF:91:3F:01:45:54:87:65:CB:4D
X509v3 Authority Key Identifier:
keyid:C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/18Szc_NOHV7yuL-RPwFFVIdly00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.81.192.0/20
Signature Algorithm: sha256WithRSAEncryption
42:0c:02:13:1d:37:b3:99:48:a6:f5:58:06:4e:34:b9:36:a7:
28:c1:41:83:4c:33:24:3b:00:a5:ab:1f:4e:e1:30:82:d0:4a:
9d:66:06:bb:35:4a:6a:08:ad:3e:36:cc:b9:36:0c:a3:b3:10:
c6:99:8b:4c:aa:6a:5f:89:5b:38:03:73:67:f3:df:bb:30:3a:
99:7a:f9:0f:5a:7b:bb:61:4d:39:63:64:78:af:ee:95:9d:88:
7f:5a:f1:40:a9:4f:a8:36:4d:5d:01:a6:30:9c:55:15:60:7d:
01:92:18:01:fa:1b:8b:d0:31:3c:c7:0b:b4:f6:eb:a2:ff:f6:
b7:71:83:d3:ad:49:29:a6:c7:10:2a:21:ce:61:08:9f:32:f2:
b4:5b:c7:f0:55:57:7a:a8:7d:3c:d9:cd:3f:7c:87:81:fc:0a:
df:b0:b3:fc:d8:e8:78:ce:fa:ab:96:af:81:47:ee:06:3b:15:
60:60:6f:ce:ea:cd:0a:a5:d7:87:7c:7d:d1:50:15:f8:b1:2e:
8c:f6:fe:39:21:ed:af:f0:d8:19:ef:06:3e:81:f1:82:e7:4a:
9e:e7:37:5a:11:22:59:f8:fa:3e:3b:47:dd:72:1a:12:6a:f5:
da:96:f1:ef:23:af:18:82:c0:01:1f:74:e7:4e:88:0a:f2:02:
04:15:b8:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 09:49:57 2026 by rpki-client