This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/iEeEp42GZdk24J_XhsWfZczs8bI.roa
File: iEeEp42GZdk24J_XhsWfZczs8bI.roa (raw, json)
Hash identifier: Es9r36V7+YULS9141hzfnZoXbLZeW7YOudDWcJDuqPo=
Subject key identifier: 88:47:84:A7:8D:86:65:D9:36:E0:9F:D7:86:C5:9F:65:CC:EC:F1:B2
Certificate issuer: /CN=e1ef9694aa48d81279e8ede430795f2768d2dd52
Certificate serial: 019B7FF178311E694D9367AB5B82BE23819E
Authority key identifier: E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/iEeEp42GZdk24J_XhsWfZczs8bI.roa
Signing time: Fri 02 Jan 2026 18:21:29 +0000
ROA not before: Fri 02 Jan 2026 18:21:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6786
IP address blocks: 185.39.48.0/23 maxlen: 23
2a04:7a00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 10:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:f1:78:31:1e:69:4d:93:67:ab:5b:82:be:23:81:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ef9694aa48d81279e8ede430795f2768d2dd52
Validity
Not Before: Jan 2 18:21:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=884784a78d8665d936e09fd786c59f65ccecf1b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:42:4a:5d:84:88:fb:18:86:f7:aa:01:7b:ab:
4a:fc:15:51:e1:42:45:22:ff:77:25:b0:6c:37:af:
19:30:18:f7:25:4d:8b:14:e6:14:a3:05:f3:e3:7e:
e5:f7:e7:0c:f6:9a:02:24:6f:c5:94:b0:73:4d:00:
07:a1:a2:cf:42:45:0c:7c:16:d1:ca:15:35:0d:30:
a6:d9:a5:fb:c0:a1:71:8a:5f:50:02:10:89:77:68:
6b:76:fb:96:9d:da:56:89:a4:eb:f8:46:ca:99:71:
e5:d5:d1:63:7e:01:7c:d9:6c:ec:ce:7f:4f:e9:2c:
54:6f:98:ea:f0:b6:e7:ca:06:0d:2c:49:d6:26:f0:
be:b2:1a:f1:58:08:61:9e:b8:33:a7:75:29:44:7e:
89:d4:a5:c1:bd:48:c1:f4:37:72:1d:63:48:7e:0f:
91:1f:49:4d:00:d6:98:26:d1:67:0e:ad:9a:5e:4d:
58:dc:ba:44:1c:a4:86:f8:58:a8:c9:0a:2c:c4:b6:
c0:bc:db:43:a8:ad:51:f1:48:1d:27:c8:97:c7:5c:
7a:f8:c8:b1:de:87:06:ce:00:62:20:c1:6d:19:98:
67:c8:19:d3:52:a7:ac:93:44:b9:5d:db:1e:81:36:
9f:6e:a1:72:dc:21:58:ff:7f:5d:31:9c:34:de:6f:
02:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:47:84:A7:8D:86:65:D9:36:E0:9F:D7:86:C5:9F:65:CC:EC:F1:B2
X509v3 Authority Key Identifier:
keyid:E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/iEeEp42GZdk24J_XhsWfZczs8bI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.39.48.0/23
IPv6:
2a04:7a00::/32
Signature Algorithm: sha256WithRSAEncryption
1d:b1:4a:1b:9c:cb:58:27:94:f1:79:3e:17:d6:e3:a2:6e:4f:
cb:99:a5:01:c7:9b:be:7d:2c:8c:90:4f:94:a6:7e:79:9f:65:
79:db:4d:53:b2:ed:2d:fc:de:d8:ae:5b:cb:cf:a1:69:8a:74:
f8:ea:20:99:4e:3e:4d:fe:56:79:98:75:dd:c6:c3:f5:72:42:
3d:f0:8f:a6:8a:8d:ab:6b:38:70:29:f7:d9:1a:bb:1f:9a:1e:
38:46:59:6f:0d:cc:95:69:44:d7:d0:55:91:aa:6a:8f:37:ac:
76:73:62:40:69:44:22:23:0b:12:c4:a6:3a:f4:ec:6c:d9:41:
c9:9c:53:ea:91:0d:15:28:3c:6d:76:0e:0d:0a:36:45:a2:76:
43:54:1b:2f:22:ff:cc:aa:7f:cb:fe:fa:94:4a:d7:f2:46:5f:
9d:f0:1b:af:52:5a:0f:82:43:c9:a1:b0:d2:9d:e5:58:43:a9:
55:8b:d9:86:13:27:f2:e6:ef:a6:eb:00:67:df:38:bb:2a:20:
91:01:69:b0:42:c3:27:1c:ac:d9:2f:36:37:ad:b5:fb:a3:3d:
cb:1e:2c:7b:d6:49:a7:10:6d:58:5e:e9:5e:55:60:f9:05:c4:
14:cb:f1:af:d0:b3:2d:96:51:f6:04:a8:00:ac:56:fb:de:96:
94:37:09:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:20:22 2026 by rpki-client