This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/eWAGfLfEp43y_iN-RtSZfG1D49U.roa
File: eWAGfLfEp43y_iN-RtSZfG1D49U.roa (raw, json)
Hash identifier: POgI5hw92swzuRADnz2nsMp43qgG4i2QfhiIQqJZJqs=
Subject key identifier: 79:60:06:7C:B7:C4:A7:8D:F2:FE:23:7E:46:D4:99:7C:6D:43:E3:D5
Certificate issuer: /CN=f8555a7883f92b9f9ba422a96b4e397bf5fb8fc7
Certificate serial: 019B797F2A77470F2D8829A171346CF6DFD9
Authority key identifier: F8:55:5A:78:83:F9:2B:9F:9B:A4:22:A9:6B:4E:39:7B:F5:FB:8F:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-FVaeIP5K5-bpCKpa045e_X7j8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/eWAGfLfEp43y_iN-RtSZfG1D49U.roa
Signing time: Thu 01 Jan 2026 12:18:55 +0000
ROA not before: Thu 01 Jan 2026 12:18:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42334
IP address blocks: 185.115.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/1-FVaeIP5K5-bpCKpa045e_X7j8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/1-FVaeIP5K5-bpCKpa045e_X7j8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-FVaeIP5K5-bpCKpa045e_X7j8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 12:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:7f:2a:77:47:0f:2d:88:29:a1:71:34:6c:f6:df:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8555a7883f92b9f9ba422a96b4e397bf5fb8fc7
Validity
Not Before: Jan 1 12:18:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7960067cb7c4a78df2fe237e46d4997c6d43e3d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:13:ac:8b:19:fe:dc:e9:9c:25:06:84:b8:8d:
25:78:b9:e6:d1:97:62:86:62:14:8d:db:9e:dc:cf:
62:44:f7:19:1c:28:d7:4b:2c:8a:3f:70:67:49:5b:
dd:a2:14:88:76:70:ee:f0:4d:b9:32:b3:20:e1:59:
9a:53:e7:89:97:ac:c5:50:fd:d4:ed:4e:05:4f:42:
ad:84:38:14:f6:b4:51:95:93:78:94:0a:af:12:94:
58:aa:21:1a:6f:98:76:59:90:3e:bf:64:83:f3:ff:
ac:5d:3d:37:1d:e6:3d:e0:17:2b:17:05:c0:05:e9:
26:18:ee:ae:c6:3d:49:3e:85:48:f1:5a:4d:21:8c:
18:16:c8:03:f3:8a:4b:09:3e:2b:2b:c5:b3:59:c8:
f5:7f:f7:32:9d:83:08:7f:a4:65:c0:87:32:4f:5e:
a4:6b:3b:a0:4e:4c:90:8b:99:84:eb:ae:c9:d1:a1:
98:08:05:b5:3b:70:2f:5b:2f:66:8c:73:78:0e:e5:
31:c7:d0:76:e3:0a:cf:12:31:13:1c:f3:c3:dc:d5:
05:cf:77:89:a3:55:bf:82:a8:03:3f:08:08:de:c9:
fe:2f:5d:2b:02:38:87:51:72:97:bd:59:15:dc:3e:
ef:92:01:e0:fc:f4:f6:33:35:89:d9:a2:e5:7d:ed:
2e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:60:06:7C:B7:C4:A7:8D:F2:FE:23:7E:46:D4:99:7C:6D:43:E3:D5
X509v3 Authority Key Identifier:
keyid:F8:55:5A:78:83:F9:2B:9F:9B:A4:22:A9:6B:4E:39:7B:F5:FB:8F:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-FVaeIP5K5-bpCKpa045e_X7j8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/eWAGfLfEp43y_iN-RtSZfG1D49U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/1-FVaeIP5K5-bpCKpa045e_X7j8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.115.100.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:4d:22:b2:ea:f3:92:a3:40:3b:01:18:93:68:03:01:25:99:
f9:03:92:6c:76:71:ce:de:54:f2:c4:4a:0c:a5:9d:13:3f:d8:
1e:37:d2:4d:8e:b5:07:87:5d:fe:7f:20:77:ba:22:8f:54:3a:
ab:cf:d0:d6:54:ce:8c:88:70:4a:70:9e:4e:16:73:54:ab:a9:
31:d6:71:d6:61:38:ed:c5:eb:05:12:48:66:3c:8f:56:51:08:
32:2c:fb:8d:ce:ab:3e:c5:4e:71:c8:d4:5f:0c:22:4b:2c:97:
84:82:9a:9e:94:6f:8b:33:da:97:6d:e8:a7:3b:55:d2:7c:1f:
eb:1c:ab:96:c7:05:45:6a:fd:b3:ee:1a:ab:a9:7d:a0:95:ac:
3e:64:06:32:7e:f7:4e:07:18:52:fd:f9:ff:0b:21:5c:4b:ab:
b7:dc:f7:04:a7:fa:d7:5c:9e:d5:cc:69:be:4c:f5:4d:e6:ac:
69:c0:e3:a9:eb:d1:ff:e6:9c:9d:6d:7e:74:41:d7:f7:d6:97:
00:a3:5c:c5:82:0d:c0:98:85:59:d4:52:74:ca:51:c7:5b:fb:
a6:27:f2:96:ad:82:09:19:55:2c:b3:e9:e9:cf:78:7d:f0:09:
8d:59:84:ac:83:bc:13:60:bd:43:aa:48:38:c2:b2:15:24:46:
66:3d:67:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:05:46 2026 by rpki-client