This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/eS58SIhIWJ4XFjzjTywByaS6ziM.roa
File: eS58SIhIWJ4XFjzjTywByaS6ziM.roa (raw, json)
Hash identifier: cCeJUNW3K0+YbEiTC0ChM/SJpHm9zAVxO/o92JKxF5E=
Subject key identifier: 79:2E:7C:48:88:48:58:9E:17:16:3C:E3:4F:2C:01:C9:A4:BA:CE:23
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 019B7759066652D2A4A96CDC1568B04D8A6D
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/eS58SIhIWJ4XFjzjTywByaS6ziM.roa
Signing time: Thu 01 Jan 2026 02:18:01 +0000
ROA not before: Thu 01 Jan 2026 02:18:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202399
IP address blocks: 85.31.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 11:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:59:06:66:52:d2:a4:a9:6c:dc:15:68:b0:4d:8a:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 02:18:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=792e7c488848589e17163ce34f2c01c9a4bace23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:1b:07:07:c5:af:dc:b1:c6:56:e7:a5:ba:13:
6f:ee:28:1e:8a:cc:a7:34:05:28:86:af:7e:28:7d:
81:d2:b7:63:45:f1:8f:9f:6e:fb:1b:d2:bb:46:85:
ac:80:28:06:92:4d:89:bd:83:d0:e2:9c:40:e1:dd:
40:a6:a8:56:59:72:20:44:b1:4b:1e:9a:44:b0:7f:
0a:09:db:a3:f9:98:c6:3d:e1:ca:ef:e5:47:51:c4:
25:b4:81:d3:a7:fb:e5:41:e4:11:d2:7c:2a:97:89:
5a:ca:6d:56:19:b0:a6:ed:96:73:7d:4e:b8:d2:a2:
8b:a7:b1:c8:a4:d2:05:47:9d:2d:b3:e5:fc:a9:72:
a6:53:7b:5c:79:66:0a:ac:cf:31:f3:02:df:a2:59:
1d:51:e3:4a:94:e8:f7:2e:a9:d2:3d:55:85:8c:9d:
70:57:48:f1:95:c1:b6:d5:05:47:f5:76:9e:99:95:
cf:e0:6d:46:22:55:97:94:97:09:d0:5a:b6:e4:be:
16:4c:3d:af:2b:77:10:b2:29:27:3e:b5:6b:c2:e0:
8a:a1:4e:44:e1:c3:82:94:94:35:c7:fd:64:e0:99:
d8:d8:cb:f0:9f:50:04:e6:df:2f:69:90:95:c9:da:
9b:83:69:1e:23:83:cf:77:c7:3d:18:02:7d:8a:b4:
af:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:2E:7C:48:88:48:58:9E:17:16:3C:E3:4F:2C:01:C9:A4:BA:CE:23
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/eS58SIhIWJ4XFjzjTywByaS6ziM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.31.253.0/24
Signature Algorithm: sha256WithRSAEncryption
86:4e:f1:b2:8e:d6:21:92:1c:68:ec:50:c7:7e:1e:02:31:87:
7b:59:d6:37:0f:3e:a4:af:a1:77:79:3b:2a:4c:18:1c:e3:a0:
9f:0e:3b:2a:2b:25:3e:ea:3c:3c:1a:fe:12:a7:45:7f:3b:90:
cc:c6:3d:36:b3:60:ca:70:0f:70:e4:0d:45:5d:2a:58:cc:b4:
e3:e8:d5:42:75:ed:92:eb:da:ef:3a:07:79:19:e1:b4:36:2b:
55:a3:10:1c:ca:0e:4a:1f:70:1c:e7:b0:b7:f5:63:d7:5f:3b:
d3:60:ae:79:22:da:ea:9d:71:e5:0f:0c:b9:23:ae:63:39:2f:
d3:eb:c2:bc:83:5e:66:c7:bd:56:b2:8f:60:5b:6d:38:5e:1f:
30:01:ce:63:a3:3c:90:c1:90:b8:95:75:d0:7c:0f:24:f8:73:
dc:e2:c4:6c:f0:90:f1:c3:ed:9f:27:78:b4:6f:21:eb:2f:67:
dd:83:57:d6:f8:0a:0a:cb:a5:13:3e:bf:c8:2c:ce:93:9d:9f:
49:02:3f:88:77:44:a5:28:02:70:9f:11:23:56:ea:e9:fd:0f:
cf:0c:21:90:ae:96:fb:f4:6c:5b:c2:71:c0:2b:80:04:ea:4a:
29:a4:44:69:cf:03:55:12:7f:cd:4d:4c:3a:b1:09:f7:67:79:
b4:dc:23:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:31:36 2026 by rpki-client