This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/NJEoHoRyVGKC0P78tVV3gWYHQQk.roa
File: NJEoHoRyVGKC0P78tVV3gWYHQQk.roa (raw, json)
Hash identifier: fLFK4cmXKAGdUq1vKqggm+NLuNDmyWqOB3/ubBr0cQU=
Subject key identifier: 34:91:28:1E:84:72:54:62:82:D0:FE:FC:B5:55:77:81:66:07:41:09
Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Certificate serial: 019B7EA6F087840B1AC1867F92C5342FDC60
Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/NJEoHoRyVGKC0P78tVV3gWYHQQk.roa
Signing time: Fri 02 Jan 2026 12:20:28 +0000
ROA not before: Fri 02 Jan 2026 12:20:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198961
IP address blocks: 178.254.171.0/24 maxlen: 24
178.254.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Jan 2026 23:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:a6:f0:87:84:0b:1a:c1:86:7f:92:c5:34:2f:dc:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Validity
Not Before: Jan 2 12:20:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3491281e8472546282d0fefcb555778166074109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7f:7a:9b:ce:0f:04:ba:73:03:b9:98:54:8d:
dd:46:6b:1f:5f:39:7f:e6:35:6a:66:a1:99:f7:b3:
df:44:9f:c2:b7:f7:eb:84:9a:32:59:66:6a:fa:e9:
84:65:92:0b:2e:20:b0:d7:65:b9:ae:f8:26:26:24:
99:d9:d3:69:bd:be:65:3e:b2:76:de:4e:9c:bb:d0:
a0:67:95:d8:bc:dc:ba:59:84:ad:10:92:6a:f3:79:
c1:79:1a:03:7d:10:6d:89:33:25:af:04:44:94:f1:
af:8d:45:60:56:35:99:59:b3:9c:c4:27:65:43:c6:
71:5b:a5:77:5c:65:11:8c:00:0e:a6:32:d2:55:42:
a6:b6:8e:eb:8c:f6:0a:35:18:cd:53:1e:64:03:35:
04:82:e9:1f:be:58:34:0d:0a:5c:43:ae:5d:92:a3:
17:8f:37:45:93:7e:00:f2:38:d0:51:8e:2b:01:65:
b2:75:c4:14:54:5e:07:ac:61:63:32:99:c6:9b:f2:
60:a1:11:4c:fa:92:34:c7:9e:05:d4:fc:a4:c8:80:
a7:df:1f:0b:5a:99:d7:51:95:9f:d9:98:84:42:44:
b9:17:31:37:87:93:9b:74:7b:26:0b:c5:b4:00:c9:
7c:16:d1:c1:83:7c:b0:4c:74:a6:60:ea:b1:f9:58:
3f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:91:28:1E:84:72:54:62:82:D0:FE:FC:B5:55:77:81:66:07:41:09
X509v3 Authority Key Identifier:
keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/NJEoHoRyVGKC0P78tVV3gWYHQQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.254.171.0/24
178.254.179.0/24
Signature Algorithm: sha256WithRSAEncryption
18:51:b8:e1:ea:ca:61:88:c5:38:a8:14:f3:cb:4c:89:83:f8:
55:34:bd:06:90:35:75:a9:a4:c5:ae:67:fb:50:73:a9:f7:3f:
74:2e:6d:3d:61:64:53:b3:14:59:80:0b:cc:cb:72:52:a0:c4:
a2:97:55:4f:a9:b0:93:0d:2e:5a:1d:ad:0f:a5:70:97:84:ec:
eb:13:f8:10:53:d7:dc:a5:83:aa:1e:d1:d6:0a:35:b9:65:f5:
46:07:90:19:c9:47:5a:f5:89:78:19:9b:d1:ac:7c:cb:c5:aa:
24:79:93:e3:ee:4f:50:e1:57:c7:df:c2:41:b1:5e:fd:3d:34:
c6:15:27:99:df:1c:cb:6b:32:4f:be:5b:82:1b:87:4f:ac:e3:
8a:71:89:d6:f1:4a:9c:10:c6:91:8c:5e:e2:a1:e2:86:dd:27:
64:3d:85:1e:c5:45:94:73:97:56:03:42:ed:cb:64:d1:94:7b:
a2:5f:6f:f8:a5:ef:49:0b:4c:5f:64:48:02:01:aa:9e:6e:b9:
81:e9:34:c2:ca:76:ec:86:30:66:76:d9:d8:df:5b:0a:74:76:
25:1c:4b:fd:4a:07:77:50:33:31:a5:9a:b7:04:5c:67:40:07:
f4:11:7c:dc:76:99:8d:32:41:63:34:86:6b:2c:1e:e6:4b:ee:
8b:65:fa:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:52:08 2026 by rpki-client