This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/iENB1Spx9V_JeHkY-UbptgejZiE.roa
File: iENB1Spx9V_JeHkY-UbptgejZiE.roa (raw, json)
Hash identifier: ES4qZEdwWMYEICC/I+62oZDSZUFAJeYLS9pH0fQiUlo=
Subject key identifier: 88:43:41:D5:2A:71:F5:5F:C9:78:79:18:F9:46:E9:B6:07:A3:66:21
Certificate issuer: /CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Certificate serial: 019B7DC88A864970FFDC57D5E58355503076
Authority key identifier: 62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/iENB1Spx9V_JeHkY-UbptgejZiE.roa
Signing time: Fri 02 Jan 2026 08:17:33 +0000
ROA not before: Fri 02 Jan 2026 08:17:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212566
IP address blocks: 95.161.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:c8:8a:86:49:70:ff:dc:57:d5:e5:83:55:50:30:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Validity
Not Before: Jan 2 08:17:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=884341d52a71f55fc9787918f946e9b607a36621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1c:72:be:f7:21:13:71:c5:d9:43:bf:e6:48:
04:cb:8a:23:4e:fc:bf:29:5c:0a:59:fb:59:ee:32:
04:d1:b0:b7:b8:f4:88:02:9e:37:dd:37:3b:c2:35:
36:0d:5e:27:8d:30:d6:da:87:55:46:35:19:d8:1c:
dd:6e:80:f7:8a:28:f7:0d:70:7c:07:cd:e5:5e:fc:
72:f8:a9:22:86:70:7a:86:58:07:f3:b1:38:d4:d0:
59:5b:bc:20:28:5c:73:bb:72:d2:b7:57:95:02:d9:
c4:32:be:3a:60:12:b7:3a:60:6f:4d:20:51:66:86:
47:be:23:5c:07:c4:a6:4f:1d:4c:88:00:45:c6:58:
b5:8e:4b:f7:6b:8b:8a:e3:b1:81:3b:82:89:91:33:
ff:f0:68:0a:c0:37:29:1b:5c:e4:2f:11:44:dc:64:
13:49:e7:1e:c7:01:14:80:5b:ba:20:1f:21:c6:98:
77:03:3c:7f:18:53:4b:5c:6a:51:f5:cb:09:9d:29:
c2:58:38:d8:78:63:88:bb:65:25:0d:09:62:e2:e5:
b6:b4:0f:90:30:9b:a7:4e:c8:49:92:64:fd:82:ff:
9b:62:9e:8a:92:f2:a3:06:4d:21:1a:fb:83:70:8c:
52:16:6c:b9:d6:48:fd:05:0b:ef:1b:c5:37:0f:a9:
1e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:43:41:D5:2A:71:F5:5F:C9:78:79:18:F9:46:E9:B6:07:A3:66:21
X509v3 Authority Key Identifier:
keyid:62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/iENB1Spx9V_JeHkY-UbptgejZiE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.161.83.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:cf:32:82:0a:38:be:a1:8c:dd:6a:6d:63:c5:e0:e2:29:8f:
59:59:7d:c8:bf:fb:ed:2f:b6:b8:34:69:a9:52:ce:73:5e:21:
fc:e5:65:a2:49:93:6e:22:70:bf:af:83:67:6c:b1:1d:d0:0b:
0b:e4:c6:12:7b:9e:14:25:31:15:a5:55:db:86:44:5d:0d:db:
2a:bf:bc:48:c6:ec:f6:06:00:fb:f2:c7:dd:ba:95:ea:86:74:
ce:5f:21:2b:da:1c:1b:fa:f2:cd:dd:08:5f:f8:ee:db:69:6e:
d3:cb:c1:c7:91:f3:2d:1d:e5:d2:dd:e8:73:98:f3:86:37:f7:
30:ce:4b:f4:8d:03:a6:6a:28:fc:55:3e:2e:91:ea:6a:92:a9:
c2:df:80:33:90:0b:f3:06:2d:25:24:a2:d7:70:03:25:12:3a:
65:00:81:ce:6a:95:6b:b9:80:5b:1a:b3:e6:68:7f:3f:e7:70:
9c:fc:4e:40:9e:b9:85:38:5d:67:6a:ad:df:69:f9:34:09:47:
ec:ca:2d:be:1d:87:3f:25:1b:c4:c3:5a:1e:98:52:11:16:51:
73:e2:e8:8c:8e:cb:fe:f3:3c:98:32:a3:0c:80:98:c3:2f:29:
55:83:49:4f:fe:f3:13:92:1b:d6:18:0a:8b:bb:62:27:a3:19:
fd:d6:96:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:34:24 2026 by rpki-client