This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/0E0G_V7Qww5gf7roh6v7vgAuxXI.roa
File: 0E0G_V7Qww5gf7roh6v7vgAuxXI.roa (raw, json)
Hash identifier: /cBoP5h3k8tG8K+/XM4vhzPv5C3M0myfV5uPfAajNmA=
Subject key identifier: D0:4D:06:FD:5E:D0:C3:0E:60:7F:BA:E8:87:AB:FB:BE:00:2E:C5:72
Certificate issuer: /CN=318dab70f44a7eb8b1cfc137433fcd4d78a03b05
Certificate serial: 019B7A5B183615625ADA51C396C26E3FF71D
Authority key identifier: 31:8D:AB:70:F4:4A:7E:B8:B1:CF:C1:37:43:3F:CD:4D:78:A0:3B:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MY2rcPRKfrixz8E3Qz_NTXigOwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/0E0G_V7Qww5gf7roh6v7vgAuxXI.roa
Signing time: Thu 01 Jan 2026 16:19:08 +0000
ROA not before: Thu 01 Jan 2026 16:19:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209870
IP address blocks: 79.140.195.0/24 maxlen: 32
2a0e:5140::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MY2rcPRKfrixz8E3Qz_NTXigOwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:5b:18:36:15:62:5a:da:51:c3:96:c2:6e:3f:f7:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=318dab70f44a7eb8b1cfc137433fcd4d78a03b05
Validity
Not Before: Jan 1 16:19:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d04d06fd5ed0c30e607fbae887abfbbe002ec572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:7a:cc:2c:07:9d:2d:67:89:b6:3f:05:87:6e:
de:43:75:70:65:d3:eb:38:9d:07:ff:85:cb:28:6e:
7b:07:3a:8b:43:fc:fd:34:dc:e7:22:92:de:59:c2:
f7:bc:bb:e7:df:89:54:a3:c4:1a:48:c6:3b:62:ba:
e1:55:d9:78:2c:a1:7e:53:9a:7d:6d:6e:4f:6f:9d:
fb:9e:40:7a:cc:30:bc:a6:ac:15:e1:dc:69:6d:bd:
84:c4:31:33:4d:19:33:92:ff:ff:14:81:52:aa:26:
58:8b:a9:92:86:68:03:37:1b:df:ec:aa:7d:9f:c1:
44:9b:e9:0a:bc:66:ab:96:e4:ee:19:8a:13:aa:8e:
2c:32:c7:18:28:2d:b3:38:e9:28:43:0a:5c:6b:cb:
46:0b:f9:fb:7b:e8:ea:5e:5c:96:29:95:aa:0b:82:
0b:c2:f5:db:7a:49:dd:31:41:a9:e4:ce:80:05:5a:
6c:ce:03:33:b0:e1:f6:39:57:ea:4d:9d:bd:3a:ba:
37:16:57:f1:b9:1c:e7:f9:2a:c7:a1:d1:34:93:59:
e2:03:7d:2c:70:04:67:37:20:dd:d2:59:47:67:96:
d4:6e:9b:b5:23:e8:e6:fc:cf:da:de:c3:2d:43:87:
78:9a:f8:2d:84:49:fe:2e:8a:57:09:8d:20:69:75:
35:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:4D:06:FD:5E:D0:C3:0E:60:7F:BA:E8:87:AB:FB:BE:00:2E:C5:72
X509v3 Authority Key Identifier:
keyid:31:8D:AB:70:F4:4A:7E:B8:B1:CF:C1:37:43:3F:CD:4D:78:A0:3B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MY2rcPRKfrixz8E3Qz_NTXigOwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/0E0G_V7Qww5gf7roh6v7vgAuxXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.140.195.0/24
IPv6:
2a0e:5140::/29
Signature Algorithm: sha256WithRSAEncryption
ab:9d:3a:64:17:1d:5a:8a:35:68:3c:fa:85:3a:16:51:10:45:
a4:bb:20:d7:c9:68:23:e5:31:ee:75:dc:24:62:99:6d:b5:2d:
45:80:25:58:a1:1b:73:8c:71:78:e8:f2:e1:ad:50:5c:97:a8:
da:83:c0:65:24:d8:b1:a1:f6:04:a0:49:f2:31:95:b0:58:b0:
03:60:a4:03:e2:73:bc:b5:20:2f:70:5d:05:be:2b:11:ee:10:
7c:d5:96:0a:5e:5d:60:a3:61:b3:6b:c0:02:44:fe:47:f2:a2:
7e:e6:39:16:52:2d:24:60:78:49:9e:de:58:67:cf:87:ed:9d:
8c:60:30:9e:64:92:a0:9c:0c:41:69:a2:2d:29:42:d5:03:26:
37:e5:e6:ec:bc:ef:92:cf:db:56:49:4e:80:9d:f6:c7:91:4c:
ac:eb:4c:1c:2a:b1:bf:f7:81:57:fd:ba:78:e7:25:c8:69:98:
64:0b:6f:b5:2e:b7:62:94:35:3b:5e:48:42:f2:de:cf:9e:b3:
19:56:fd:10:64:25:21:a6:4a:72:98:15:e4:84:7e:33:5d:f6:
fb:d8:b6:16:37:4b:ba:ca:00:60:ef:80:3f:1b:27:ff:3b:54:
f3:a7:8b:71:e2:f4:8a:5c:52:27:a4:78:0f:50:9b:e0:24:9e:
43:3a:e5:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:54:22 2026 by rpki-client