This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/E2yjjcIin_7jg0Go72UPY9AyT6A.roa
File: E2yjjcIin_7jg0Go72UPY9AyT6A.roa (raw, json)
Hash identifier: n+/VXl3KasYnTbVQIWwF07TnFCAY/4EQuPzsBC6ENFY=
Subject key identifier: 13:6C:A3:8D:C2:22:9F:FE:E3:83:41:A8:EF:65:0F:63:D0:32:4F:A0
Certificate issuer: /CN=3919f2ad91584baff0467447bac8fb978d1f9dd3
Certificate serial: 019B78A36C51B48F7D59B0969BB086A54BD6
Authority key identifier: 39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/E2yjjcIin_7jg0Go72UPY9AyT6A.roa
Signing time: Thu 01 Jan 2026 08:18:54 +0000
ROA not before: Thu 01 Jan 2026 08:18:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206409
IP address blocks: 90.158.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:a3:6c:51:b4:8f:7d:59:b0:96:9b:b0:86:a5:4b:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3919f2ad91584baff0467447bac8fb978d1f9dd3
Validity
Not Before: Jan 1 08:18:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=136ca38dc2229ffee38341a8ef650f63d0324fa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:e8:7d:eb:e2:af:b6:86:56:a7:3d:e7:7b:59:
07:6a:3c:d0:f6:68:e9:d6:ad:d7:c0:72:68:47:83:
2c:b0:34:8b:5f:4e:fd:13:76:a1:00:67:ea:20:7d:
44:33:2b:4f:33:d5:a6:c3:26:25:77:de:25:7a:60:
f5:19:1d:46:ef:ce:80:2e:4c:fb:52:00:af:b5:cd:
6d:8c:a9:81:5b:7c:fb:0a:0a:68:c2:e7:fc:f5:63:
b4:43:2d:82:b6:be:45:69:6b:73:29:47:bb:4e:84:
33:02:f8:34:35:9e:3b:36:0a:ee:97:e9:9e:f8:56:
18:15:8b:c9:17:54:d7:6e:34:16:bf:43:54:dc:35:
9a:93:4f:d3:a8:76:65:cd:2d:21:97:61:83:7d:17:
71:21:ca:d0:fe:55:23:df:39:ea:62:0e:f3:2f:cf:
f0:07:d6:a2:4c:72:69:7d:38:12:39:0f:30:7d:5a:
46:f0:c2:9d:05:4d:3b:14:07:b0:3a:73:bf:c9:42:
ec:38:0a:c2:2b:6b:01:f4:e6:25:1f:35:4c:9b:b2:
04:09:5e:42:02:17:d9:68:44:f8:87:97:de:e4:6c:
1e:0a:d7:69:c1:63:e9:23:33:8a:61:1f:e7:c3:9f:
bf:b6:9c:d9:92:45:c0:cb:73:26:b8:d1:f5:bb:91:
ce:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:6C:A3:8D:C2:22:9F:FE:E3:83:41:A8:EF:65:0F:63:D0:32:4F:A0
X509v3 Authority Key Identifier:
keyid:39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/E2yjjcIin_7jg0Go72UPY9AyT6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.158.17.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:ab:d3:75:53:e9:69:40:b5:9a:c6:c4:b6:9f:67:aa:6f:ce:
6f:f0:ba:c7:8f:69:76:b9:9c:2c:07:00:ec:f8:ef:08:d4:dd:
0d:d1:48:93:f2:43:3c:c0:52:e5:f3:81:1f:ba:c3:54:ff:d2:
bd:17:48:be:16:04:3c:92:89:6a:e3:5a:6a:32:28:04:f1:d5:
b1:b5:82:c6:5d:fa:41:23:4a:4d:16:7b:92:4b:27:50:52:fe:
3b:a2:93:20:5d:4d:20:f4:43:3b:ce:69:65:ca:f9:da:c8:41:
f5:6b:b4:67:b8:c5:e9:d2:d9:b6:bc:e4:cd:81:45:c9:f6:d1:
81:7e:78:a1:dc:42:b4:7a:40:b4:7f:5e:4f:84:8b:cf:10:27:
34:7c:33:32:3a:21:56:5e:69:75:f1:25:cd:bb:33:47:df:01:
1e:60:91:92:24:5a:81:59:8d:8e:e9:7e:fa:aa:60:b4:50:c0:
36:2b:cb:6f:d0:be:16:42:61:4e:68:79:ad:85:09:28:c8:50:
77:5a:a9:a5:78:b9:80:89:47:95:c5:4d:21:f2:b2:a3:21:bb:
a5:05:e9:df:38:6e:36:d8:45:06:b4:45:35:b0:f9:a9:84:d6:
75:9b:f8:4f:70:a1:83:c0:36:09:10:37:8f:ab:fb:01:64:e9:
98:3a:cd:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:31:20 2026 by rpki-client