This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/cBwp2ouu-kTQUV0AP3SgjoKtpKE.roa
File: cBwp2ouu-kTQUV0AP3SgjoKtpKE.roa (raw, json)
Hash identifier: 2mn/5LNm9rX3SfstPhosdI3pLFHA9jE4gvH4r7JdHQg=
Subject key identifier: 70:1C:29:DA:8B:AE:FA:44:D0:51:5D:00:3F:74:A0:8E:82:AD:A4:A1
Certificate issuer: /CN=e909ee3d618974da0cbd805a2da80410a4989881
Certificate serial: 019B7B369CFC85E64C9AE2F6952EF098B763
Authority key identifier: E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/cBwp2ouu-kTQUV0AP3SgjoKtpKE.roa
Signing time: Thu 01 Jan 2026 20:18:55 +0000
ROA not before: Thu 01 Jan 2026 20:18:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62057
IP address blocks: 78.153.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 11:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:36:9c:fc:85:e6:4c:9a:e2:f6:95:2e:f0:98:b7:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e909ee3d618974da0cbd805a2da80410a4989881
Validity
Not Before: Jan 1 20:18:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=701c29da8baefa44d0515d003f74a08e82ada4a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8b:bf:75:b5:1f:9e:10:c2:a5:c5:e9:f1:07:
96:b1:4b:b4:8b:c5:1f:76:19:ef:9d:f5:0e:82:d2:
b8:c7:f3:c4:47:c5:92:61:1a:52:16:f3:19:7d:42:
89:59:a7:65:79:66:5e:2e:57:d9:57:19:5e:26:7e:
ee:64:57:94:e7:19:3d:8a:79:ea:2a:fd:9a:84:5f:
f7:e1:8b:a1:c9:f4:58:26:13:71:56:b8:c6:d3:82:
19:9e:7b:87:02:38:5a:5a:28:c1:ee:9a:d9:d8:e1:
6b:6c:90:8b:9e:11:3e:36:89:77:58:d1:b0:a5:59:
46:15:4a:5c:92:42:36:87:1f:e8:b2:12:c5:74:8a:
99:22:9a:ca:eb:9c:7a:c5:d6:bc:5b:2e:59:69:88:
79:0e:6b:16:e7:da:07:f8:52:2b:1d:98:53:4f:eb:
0f:f9:44:7b:6c:46:34:03:b4:52:f7:45:94:7a:43:
54:9a:89:a7:5c:fd:44:4b:6b:cb:40:99:9e:48:b3:
38:24:d4:69:ae:a1:ff:d8:7e:b6:ba:61:b4:f0:1a:
8d:be:96:63:82:7b:6d:37:7e:b8:ac:bf:06:1d:35:
15:3a:5c:54:f4:23:49:08:c8:39:9c:33:32:cc:f2:
91:24:2f:42:21:63:2d:35:32:3f:6d:37:89:47:af:
46:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:1C:29:DA:8B:AE:FA:44:D0:51:5D:00:3F:74:A0:8E:82:AD:A4:A1
X509v3 Authority Key Identifier:
keyid:E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/cBwp2ouu-kTQUV0AP3SgjoKtpKE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.153.247.0/24
Signature Algorithm: sha256WithRSAEncryption
77:dc:b7:66:9d:73:8c:e5:2c:66:ff:5c:ff:3b:d6:8e:ea:bd:
0b:a5:18:d3:8a:69:ff:67:ed:86:e2:90:72:4a:3f:39:8a:6f:
7b:86:d2:38:5b:47:be:54:66:0a:3c:6f:d3:a4:64:77:f6:1b:
30:1c:5d:80:75:79:df:a0:23:db:ad:9a:00:e2:68:e8:87:16:
82:68:2a:65:49:90:81:e6:95:1b:87:bb:29:ca:d5:a2:db:9b:
68:55:f0:35:42:57:e3:6b:59:d1:8c:59:23:df:b0:2a:2e:ff:
63:f0:d4:8c:11:bf:e6:83:14:9a:47:7b:92:3b:ee:89:cf:c3:
a1:b1:08:60:ec:cc:d4:61:dc:76:93:c6:b1:a9:3d:15:87:09:
f6:20:84:00:84:34:22:2f:8a:bc:29:ac:8f:92:41:45:1f:ee:
a5:03:c5:5f:68:70:1d:1b:b8:2d:45:01:7e:8d:ca:23:c4:2d:
51:a4:b0:09:69:61:38:20:4f:f0:be:74:4a:ce:b0:34:ee:7e:
b8:51:69:03:58:0d:fa:a3:64:a8:90:b4:4d:84:88:0e:5d:fe:
5c:59:a3:6a:72:8d:3d:6e:63:92:95:4d:d3:ed:1a:8f:d1:92:
39:cb:28:3c:8a:08:26:34:a5:ff:c6:f8:bb:80:7b:de:ac:a0:
b8:a8:70:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:35:29 2026 by rpki-client