This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/euKoI7vmey1fTPE04HoSqLuDz4Q.roa
File: euKoI7vmey1fTPE04HoSqLuDz4Q.roa (raw, json)
Hash identifier: 32wDb/N882DtoqSetNBAzx24jUXx/OWTovG5eWeLxNM=
Subject key identifier: 7A:E2:A8:23:BB:E6:7B:2D:5F:4C:F1:34:E0:7A:12:A8:BB:83:CF:84
Certificate issuer: /CN=045c5f3bb81191720c0ddf8b3cf34d91dab4e1d3
Certificate serial: 019B7C7F60CFC41B0AD21B3B64D6C62A715F
Authority key identifier: 04:5C:5F:3B:B8:11:91:72:0C:0D:DF:8B:3C:F3:4D:91:DA:B4:E1:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BFxfO7gRkXIMDd-LPPNNkdq04dM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/euKoI7vmey1fTPE04HoSqLuDz4Q.roa
Signing time: Fri 02 Jan 2026 02:18:01 +0000
ROA not before: Fri 02 Jan 2026 02:18:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204533
IP address blocks: 78.109.203.0/24 maxlen: 24
78.109.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/BFxfO7gRkXIMDd-LPPNNkdq04dM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/BFxfO7gRkXIMDd-LPPNNkdq04dM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BFxfO7gRkXIMDd-LPPNNkdq04dM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:7f:60:cf:c4:1b:0a:d2:1b:3b:64:d6:c6:2a:71:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=045c5f3bb81191720c0ddf8b3cf34d91dab4e1d3
Validity
Not Before: Jan 2 02:18:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7ae2a823bbe67b2d5f4cf134e07a12a8bb83cf84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:45:39:6c:0b:1d:5b:49:b8:1b:bf:62:5c:40:
72:2c:ce:52:06:e2:da:bd:f3:cd:16:d9:d3:31:3b:
11:83:84:a4:b3:ec:82:6b:bf:02:6e:85:cf:99:6f:
65:06:61:dd:6c:32:8a:4f:79:56:18:55:f4:c2:19:
9f:71:e5:16:58:e3:ae:fd:02:c8:0b:cd:57:78:33:
3a:93:53:6f:1b:0b:3a:a8:04:90:c9:4a:a2:a5:5a:
0b:0d:4a:b8:c0:1e:db:ee:bc:fb:89:b0:48:9f:7b:
e8:ae:3c:47:3b:1d:8d:12:2b:27:7e:f1:11:ee:82:
49:29:f1:fa:a1:91:64:f0:54:a5:9c:a8:96:db:3c:
13:e8:68:29:50:c5:73:b3:99:66:5b:07:72:64:af:
c5:13:96:a1:1e:3d:f6:48:56:b3:2b:18:63:9d:6c:
9b:b0:d3:43:db:7f:a8:df:1c:cd:94:74:c0:13:e7:
c2:b0:e1:4f:98:5d:38:c0:13:7e:9c:94:0a:15:ff:
3e:15:8d:92:86:d1:af:9a:54:87:58:c4:aa:73:bd:
10:f7:96:fd:69:4f:de:34:a4:15:bc:6a:37:ed:22:
48:dc:58:63:ca:03:ab:56:63:1d:4d:5d:82:1c:0e:
b3:bd:12:b0:de:bd:d8:bc:72:bf:14:da:6e:c9:63:
8d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:E2:A8:23:BB:E6:7B:2D:5F:4C:F1:34:E0:7A:12:A8:BB:83:CF:84
X509v3 Authority Key Identifier:
keyid:04:5C:5F:3B:B8:11:91:72:0C:0D:DF:8B:3C:F3:4D:91:DA:B4:E1:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BFxfO7gRkXIMDd-LPPNNkdq04dM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/euKoI7vmey1fTPE04HoSqLuDz4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/BFxfO7gRkXIMDd-LPPNNkdq04dM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.109.203.0/24
78.109.207.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:86:6f:b2:33:96:4f:a3:42:bc:29:54:46:12:ee:73:72:bd:
08:9d:d4:4e:4a:ff:20:63:45:5c:7d:b0:5c:20:bf:e0:7a:72:
03:7a:81:f3:41:24:ba:e1:bc:fb:62:a1:7f:3a:bd:07:85:b5:
40:1f:31:d5:f3:59:f0:52:35:39:02:2a:b9:79:03:d9:30:45:
56:1c:6a:36:26:75:6d:12:29:d3:f2:32:fc:c4:9b:e1:06:eb:
6e:06:b7:c3:d9:c9:cd:aa:af:97:1a:a9:17:65:21:15:b0:a9:
1d:ad:3e:31:13:4f:22:9c:b2:3d:fa:56:3a:fe:5b:69:6a:ad:
db:47:de:40:87:14:c4:3e:31:a1:cc:4b:a7:ab:de:01:70:bb:
67:0d:5a:0a:66:01:f4:67:18:45:18:8c:54:0f:ac:e0:c4:41:
f3:ae:71:0d:a1:9f:ed:32:45:28:59:70:fc:46:52:2d:ae:b9:
41:7b:79:54:78:fc:38:a8:d5:0f:c9:b6:d0:74:ce:c4:ba:22:
3d:01:3d:f0:44:a0:78:07:09:ee:3e:a9:55:bc:60:2a:9b:4c:
5c:bd:bc:89:85:16:78:36:25:58:46:04:9e:21:88:e6:50:b8:
35:ac:69:cb:f6:07:7b:12:c7:cc:07:af:dc:57:1e:2f:57:1c:
63:97:cd:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:20:18 2026 by rpki-client