This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/eyT0hDNITHAYozOfTmD4WHYvNdE.roa
File: eyT0hDNITHAYozOfTmD4WHYvNdE.roa (raw, json)
Hash identifier: PCxiDKOq3LXFucBrFCL15qgZKw4BnZHABc1IU3XiyW0=
Subject key identifier: 7B:24:F4:84:33:48:4C:70:18:A3:33:9F:4E:60:F8:58:76:2F:35:D1
Certificate issuer: /CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Certificate serial: 019B7E3720E27181C064233CD720779EA55E
Authority key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/eyT0hDNITHAYozOfTmD4WHYvNdE.roa
Signing time: Fri 02 Jan 2026 10:18:20 +0000
ROA not before: Fri 02 Jan 2026 10:18:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201247
IP address blocks: 79.133.97.0/24 maxlen: 24
185.13.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:37:20:e2:71:81:c0:64:23:3c:d7:20:77:9e:a5:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Validity
Not Before: Jan 2 10:18:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7b24f48433484c7018a3339f4e60f858762f35d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3f:ce:6f:1a:d2:b4:40:27:13:f2:46:42:9a:
31:46:b3:56:b3:dd:b7:84:33:87:f1:78:93:1f:9c:
a2:f6:38:5e:c3:11:11:0c:74:02:63:4a:30:45:e9:
ff:25:1c:b1:71:28:d3:02:09:d3:70:09:8b:3f:85:
38:b3:b7:f6:48:86:39:cb:5f:2c:d2:ff:01:76:0a:
ff:60:5c:d9:a1:24:5c:f0:e3:e1:be:b7:47:bc:94:
29:10:b7:8b:cc:ee:2f:bc:40:20:4c:6a:d5:7f:35:
d2:95:c7:52:04:eb:cd:95:3e:25:59:ca:be:99:9e:
cf:74:78:16:81:c5:e5:50:a8:14:f3:46:29:9c:ee:
bc:96:20:46:e8:9c:a1:7e:01:11:93:83:24:30:0a:
e4:cf:8f:64:c5:9c:44:79:dd:5d:cc:da:8f:73:c8:
d6:6b:5a:be:3d:c3:c5:90:8f:22:3f:6b:dd:bf:98:
ef:d9:ca:8b:49:ff:89:a4:6d:4d:79:08:a0:80:6a:
3e:d5:16:40:85:1e:a1:9c:92:2c:04:4b:04:47:78:
5e:05:14:71:15:0e:39:f2:40:f3:1b:4e:fc:c8:c7:
74:74:0d:70:58:bc:e8:c2:91:3a:02:f8:1e:49:c7:
ea:6f:be:53:9a:48:a4:44:8c:38:18:ef:03:cd:cd:
e0:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:24:F4:84:33:48:4C:70:18:A3:33:9F:4E:60:F8:58:76:2F:35:D1
X509v3 Authority Key Identifier:
keyid:83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/eyT0hDNITHAYozOfTmD4WHYvNdE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.133.97.0/24
185.13.34.0/24
Signature Algorithm: sha256WithRSAEncryption
98:1c:00:78:cc:00:1d:9e:73:01:c7:cd:22:f6:b1:02:1e:36:
ee:10:60:6a:aa:6b:6e:18:12:7d:e1:40:5c:f0:a6:4b:5a:30:
db:e1:53:85:b6:3b:2c:40:94:27:2f:c4:b6:68:7f:8c:92:11:
e8:61:da:1f:4b:5f:f1:28:fe:b5:d2:c7:ae:39:ab:e9:2d:d4:
01:a5:09:9f:8c:18:1d:40:c0:42:ed:07:6a:fd:69:83:9e:4e:
d2:4d:fd:af:98:49:2b:6c:62:97:f1:f3:c4:cd:86:76:c4:c0:
ea:73:67:c8:08:79:e8:ed:7c:80:c7:8c:b8:2f:9a:88:4f:ae:
ba:64:a5:08:fe:6b:93:b0:1c:ef:e3:13:ce:ea:17:19:28:49:
c9:b3:7f:64:da:c6:6a:32:1c:11:9c:61:f4:99:b6:8f:00:eb:
a6:89:68:29:16:0a:6b:f6:01:44:c8:9c:bb:fb:d4:bb:5f:43:
a9:b7:15:b1:30:56:1e:98:b3:0d:c3:b2:c4:e5:91:e3:ba:fd:
0a:db:3e:83:27:29:cc:c0:54:2d:0c:dc:41:8c:54:84:96:f4:
28:31:4d:30:e8:d4:2b:23:ca:72:9f:41:90:5f:86:42:f8:48:
0b:47:f8:30:b4:66:06:55:74:d2:3c:f1:3a:d4:dd:d7:7b:85:
52:b6:ce:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:31:54 2026 by rpki-client