This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/_e53uvo6U-VwaFNUrhbZ0o9cAIk.roa
File: _e53uvo6U-VwaFNUrhbZ0o9cAIk.roa (raw, json)
Hash identifier: 3MnafteQbEnb4/lZd7D02L0no0lOBTDc4/+MQgihXLo=
Subject key identifier: FD:EE:77:BA:FA:3A:53:E5:70:68:53:54:AE:16:D9:D2:8F:5C:00:89
Certificate issuer: /CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48
Certificate serial: 019A7EE09173B668DA2F0D778658B073DD95
Authority key identifier: 2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/_e53uvo6U-VwaFNUrhbZ0o9cAIk.roa
Signing time: Thu 13 Nov 2025 20:20:37 +0000
ROA not before: Thu 13 Nov 2025 20:20:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213440
IP address blocks: 212.52.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 13:09:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:7e:e0:91:73:b6:68:da:2f:0d:77:86:58:b0:73:dd:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48
Validity
Not Before: Nov 13 20:20:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fdee77bafa3a53e570685354ae16d9d28f5c0089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:55:1c:e8:a1:b9:bd:42:84:44:4c:6b:4e:3b:
70:63:18:79:5d:ec:75:0e:0b:a0:d8:26:8b:27:9b:
bb:4f:00:d5:d9:9c:4b:8d:83:5f:13:02:fc:55:58:
7e:ca:4e:78:a8:05:79:cf:05:66:0a:21:89:d3:82:
a4:f1:9a:0c:93:8a:fd:a4:3e:79:d1:4a:56:a1:79:
97:ec:75:b1:c5:ae:17:eb:82:42:e6:0a:fb:56:bd:
c9:63:73:27:5f:40:6b:dd:9b:8d:d0:9e:35:38:1a:
5a:a9:dc:09:06:48:08:bf:df:33:43:aa:64:e5:ff:
26:98:55:a3:55:4c:f2:86:d0:48:ba:79:08:41:f9:
2f:49:b3:fd:0c:74:b7:c0:85:00:7f:de:3f:00:f0:
0d:de:68:41:75:14:5c:a8:79:80:47:f5:4d:8b:d2:
07:3e:88:94:14:a9:8d:08:5b:5a:80:89:41:67:61:
67:6f:db:3f:4f:66:2a:e7:9d:c3:ab:8c:7a:1f:2d:
44:cf:4c:81:90:0d:91:cd:e7:7b:1d:a7:ad:3e:d5:
21:7c:81:89:b7:33:e1:96:0d:3a:48:15:e2:75:85:
68:e3:c6:b6:91:f6:4b:a3:ce:9c:91:74:d6:19:fb:
c1:4f:1b:87:6a:ca:db:ea:f5:eb:8f:a7:30:ab:9b:
5c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:EE:77:BA:FA:3A:53:E5:70:68:53:54:AE:16:D9:D2:8F:5C:00:89
X509v3 Authority Key Identifier:
keyid:2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/_e53uvo6U-VwaFNUrhbZ0o9cAIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.52.14.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:d8:67:38:0a:59:ab:43:44:2a:6c:9a:ec:45:90:5b:0a:25:
a7:12:99:18:db:f2:6f:03:d6:94:fb:f3:61:53:8c:bf:c2:2d:
fb:05:2e:63:32:cd:8f:65:ce:e7:22:87:cb:d0:dc:71:4b:eb:
73:33:bb:46:76:a9:76:31:1a:44:39:18:9b:d6:7b:39:e5:ad:
74:38:28:ce:26:49:55:ff:97:bf:12:b5:13:91:c0:55:54:2d:
d1:66:b5:ea:03:cc:12:4a:3e:ed:71:44:ca:b2:de:35:9a:09:
ad:a9:3a:20:20:66:b4:06:44:a0:fe:ef:d3:0c:d5:66:3a:14:
c3:83:25:26:6f:a8:5a:10:fc:50:87:be:8b:ee:60:73:65:30:
0c:d4:45:e5:85:1d:cf:88:46:88:02:a0:da:ba:9a:03:76:d6:
9e:68:3f:99:44:56:3d:8b:52:f5:a4:60:93:3c:f8:0b:47:42:
b9:7f:b8:14:34:cf:44:a2:06:15:9f:f9:81:30:4d:88:67:57:
df:7d:a3:06:85:31:93:ca:ba:6b:db:2c:67:ef:5b:a1:d9:d2:
7a:9b:46:9f:06:a1:a1:d8:b8:47:4a:fc:24:f0:ba:75:29:6c:
b9:f2:37:7f:db:30:c5:c2:ff:08:bd:de:26:ce:f2:e2:78:e5:
22:1f:60:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:23:49 2025 by rpki-client