This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/eTMwYXEU18649L8hIZfY5-esqZ4.roa
File: eTMwYXEU18649L8hIZfY5-esqZ4.roa (raw, json)
Hash identifier: k/4i/a9Iw12pbxtRFEJ28+gA1SHnDyMvm6bPTt/tfsk=
Subject key identifier: 79:33:30:61:71:14:D7:CE:B8:F4:BF:21:21:97:D8:E7:E7:AC:A9:9E
Certificate issuer: /CN=2588b1b560f998eccd3a6eff40543b59204d67b8
Certificate serial: 019B7B3582F1CF55FA9D4725666A7453E656
Authority key identifier: 25:88:B1:B5:60:F9:98:EC:CD:3A:6E:FF:40:54:3B:59:20:4D:67:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/eTMwYXEU18649L8hIZfY5-esqZ4.roa
Signing time: Thu 01 Jan 2026 20:17:43 +0000
ROA not before: Thu 01 Jan 2026 20:17:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30848
IP address blocks: 94.185.124.0/23 maxlen: 23
94.185.126.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:35:82:f1:cf:55:fa:9d:47:25:66:6a:74:53:e6:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2588b1b560f998eccd3a6eff40543b59204d67b8
Validity
Not Before: Jan 1 20:17:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=793330617114d7ceb8f4bf212197d8e7e7aca99e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e6:d2:ae:54:e8:57:a1:c5:dd:b2:26:48:1e:
f9:5d:58:0b:9e:fa:7c:e3:5e:ec:1f:95:bc:fb:82:
39:62:5d:77:a4:e3:fe:06:35:53:91:45:79:94:9f:
7b:72:5d:5e:b0:0a:e7:6f:ea:ff:f2:3b:94:9b:e8:
eb:73:bc:ce:fc:e0:41:55:67:b8:72:c3:22:fc:27:
25:e7:cd:23:04:51:6b:86:05:15:7a:82:58:39:68:
bc:df:ff:2c:25:98:13:50:30:2a:d9:fc:83:a5:60:
ad:52:5a:6e:2e:cc:0f:41:43:0d:ac:ee:c1:a6:c3:
a6:9c:9c:48:93:57:69:45:72:85:08:df:33:30:77:
1c:ca:40:35:a0:ea:bc:18:3e:b1:c3:43:39:bc:94:
b4:19:db:74:21:53:09:6b:6b:4c:5a:57:d1:fb:4d:
71:f8:cf:4b:01:e1:fa:05:b6:ca:a3:60:0c:fc:6b:
2b:9c:00:2f:38:47:fc:f0:1c:16:68:6a:ba:20:e7:
6c:ae:f7:b2:3f:f6:a3:02:c1:6e:22:ec:ad:9d:6b:
9a:97:a8:ae:2a:92:5b:cf:b9:87:0a:2d:96:55:26:
26:00:58:d7:56:36:32:37:78:35:16:c0:61:da:32:
b4:68:18:97:9d:62:5b:42:e0:24:d6:48:fa:47:95:
9e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:33:30:61:71:14:D7:CE:B8:F4:BF:21:21:97:D8:E7:E7:AC:A9:9E
X509v3 Authority Key Identifier:
keyid:25:88:B1:B5:60:F9:98:EC:CD:3A:6E:FF:40:54:3B:59:20:4D:67:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/eTMwYXEU18649L8hIZfY5-esqZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.185.124.0/22
Signature Algorithm: sha256WithRSAEncryption
55:20:7c:60:ea:e6:74:10:99:71:4d:29:e6:8c:ac:e7:18:d1:
02:32:df:8a:b0:23:28:da:9b:6f:39:d1:9c:d6:7e:2c:18:da:
b0:e2:bc:b7:47:48:4e:1b:c8:08:51:9b:18:bf:52:39:33:a9:
fd:94:0f:be:b6:63:32:b1:11:cc:cd:96:83:c6:fb:d1:b8:eb:
9e:49:ba:89:30:0b:7c:80:52:c8:37:b8:5a:b1:bf:53:bb:f6:
7c:70:7c:61:13:cc:dc:06:3a:15:1b:6f:4a:54:69:2e:ed:03:
28:c1:63:7b:00:1b:c7:ed:8d:45:81:21:0a:4e:fe:a9:94:6e:
2d:f5:13:fb:e0:4c:97:da:d9:3d:29:09:80:e6:d7:a6:5e:3e:
36:79:e9:12:35:62:73:f2:9f:74:a7:a9:df:74:40:0d:c8:80:
a4:32:7c:39:10:2c:86:f2:88:1e:b4:9c:f4:4d:7b:94:9d:0d:
3a:18:92:19:c1:48:aa:c7:bd:09:52:cf:b8:5e:e9:12:3d:45:
49:b8:ee:eb:79:4b:72:49:45:2b:6c:9e:fb:91:8d:a0:95:99:
35:f5:12:3d:db:c0:59:ec:4d:d4:58:d2:ad:b0:22:0a:25:ea:
09:c3:fe:be:23:42:70:3b:cb:6a:81:61:cf:c9:0b:1f:50:a8:
e9:25:91:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:23:04 2026 by rpki-client