This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/E9APco7X5s-y_ndtROFoXtIewVo.roa
File: E9APco7X5s-y_ndtROFoXtIewVo.roa (raw, json)
Hash identifier: ivFiLkZ8In0JyMQIcM+7PA1jeMldEvXCr0uAAOVK9i8=
Subject key identifier: 13:D0:0F:72:8E:D7:E6:CF:B2:FE:77:6D:44:E1:68:5E:D2:1E:C1:5A
Certificate issuer: /CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea
Certificate serial: 019B78344620D911490DA2A2B0F9650FCC97
Authority key identifier: D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/E9APco7X5s-y_ndtROFoXtIewVo.roa
Signing time: Thu 01 Jan 2026 06:17:30 +0000
ROA not before: Thu 01 Jan 2026 06:17:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215590
IP address blocks: 93.185.157.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Jan 2026 23:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:34:46:20:d9:11:49:0d:a2:a2:b0:f9:65:0f:cc:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea
Validity
Not Before: Jan 1 06:17:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=13d00f728ed7e6cfb2fe776d44e1685ed21ec15a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6a:45:d1:7d:be:d8:19:ba:ae:77:f5:b0:43:
7f:7b:55:36:4e:b9:54:1a:ed:64:e2:c3:8d:15:4c:
f3:57:13:41:a5:54:f2:5a:2b:53:f9:4d:20:1e:34:
fb:03:5c:cc:cd:fa:82:a2:ef:ba:81:da:0b:51:f7:
f5:65:91:84:e7:76:16:ac:d7:76:8d:cd:f3:71:25:
ce:51:1c:4a:a1:0e:f8:0d:aa:5f:63:37:1c:48:e8:
46:7e:c0:99:35:00:d7:df:c4:95:28:58:6e:1d:7d:
ff:c0:ee:44:f6:35:09:ff:39:b7:b6:95:25:0f:02:
3a:bd:53:14:cb:63:ee:86:0f:4c:9f:42:43:b0:39:
05:3b:d8:b0:1d:a4:79:7a:f2:7e:0f:ed:9a:d8:8c:
85:4c:93:7f:27:01:e9:79:0e:5a:5c:1c:30:55:6d:
36:e1:f3:9e:71:c3:2c:4c:33:ee:5b:bc:56:83:94:
2d:b1:68:47:db:5f:a5:a4:1c:b8:a8:3f:0f:9a:31:
8a:83:a6:ce:5a:58:29:1f:36:a2:4f:1f:fe:43:67:
6b:ee:05:6e:1c:1d:2f:47:d2:2a:c9:47:3e:89:22:
b2:05:6f:c6:d0:76:b7:21:6b:02:b9:42:80:ee:15:
f3:07:18:56:bc:94:0e:94:d8:52:86:72:b4:67:17:
01:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:D0:0F:72:8E:D7:E6:CF:B2:FE:77:6D:44:E1:68:5E:D2:1E:C1:5A
X509v3 Authority Key Identifier:
keyid:D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/E9APco7X5s-y_ndtROFoXtIewVo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.185.157.0/24
Signature Algorithm: sha256WithRSAEncryption
89:c7:f1:86:cd:89:df:b3:58:85:a3:c9:f1:3e:75:11:2d:b6:
82:f9:88:d5:29:b4:ad:98:73:85:df:82:37:51:de:39:b8:1f:
46:d9:f3:b5:9f:0a:f4:c0:89:69:7d:59:2b:38:0f:6b:55:95:
3b:2b:69:cd:dc:9c:0d:b7:91:80:a7:55:33:f0:e6:96:97:67:
dd:e8:a5:c4:14:95:05:27:b8:dc:6c:be:0f:ed:6d:cb:4e:7f:
78:18:8f:0f:ff:0c:7a:15:5a:89:ed:e4:cd:3a:81:05:6d:6e:
02:c4:26:b2:df:ac:2f:fa:97:5f:d6:3c:5d:bf:01:41:30:97:
80:bc:96:f8:b0:90:b7:1c:c0:ed:49:75:98:fe:3c:3e:c7:10:
2d:7e:28:9b:34:2c:c2:35:f6:a9:87:0d:29:15:90:f6:7b:76:
a4:ee:d8:1d:2c:25:fe:cd:9c:67:37:d3:35:45:be:96:f3:8e:
99:3c:84:15:4f:fe:75:f8:8b:84:18:7b:80:ca:35:b0:19:3f:
4a:03:2a:73:fe:fe:14:e6:8a:a0:75:00:11:0d:b0:34:a1:fb:
73:f0:9b:aa:26:85:7a:ab:ab:ab:df:88:e6:71:3b:54:fc:06:
33:3c:f8:c0:32:b1:06:ec:d4:6b:7e:fd:b4:33:f0:98:3e:42:
2a:d8:7d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:08:08 2026 by rpki-client