This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/E6053yR1CqVaJr7LtSIy8wHoaGg.roa
File: E6053yR1CqVaJr7LtSIy8wHoaGg.roa (raw, json)
Hash identifier: YpgpJxbI9F9bF2mcDpVeWkbBTRfl6cIoKyEc+QXfAaA=
Subject key identifier: 13:AD:39:DF:24:75:0A:A5:5A:26:BE:CB:B5:22:32:F3:01:E8:68:68
Certificate issuer: /CN=2378a4a9c52325a85920809ba1a4d89e21c02f17
Certificate serial: 019B775889F0D6270527E5313EB4FC6296E5
Authority key identifier: 23:78:A4:A9:C5:23:25:A8:59:20:80:9B:A1:A4:D8:9E:21:C0:2F:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I3ikqcUjJahZIICboaTYniHALxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/E6053yR1CqVaJr7LtSIy8wHoaGg.roa
Signing time: Thu 01 Jan 2026 02:17:29 +0000
ROA not before: Thu 01 Jan 2026 02:17:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205364
IP address blocks: 195.230.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/I3ikqcUjJahZIICboaTYniHALxc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/I3ikqcUjJahZIICboaTYniHALxc.mft
rsync://rpki.ripe.net/repository/DEFAULT/I3ikqcUjJahZIICboaTYniHALxc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:58:89:f0:d6:27:05:27:e5:31:3e:b4:fc:62:96:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2378a4a9c52325a85920809ba1a4d89e21c02f17
Validity
Not Before: Jan 1 02:17:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=13ad39df24750aa55a26becbb52232f301e86868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:aa:a6:f6:27:cd:38:e4:c2:2e:a7:13:2d:4e:
3a:39:3e:2f:17:4c:67:bd:af:65:8e:c2:bd:3d:78:
6c:60:0e:41:ae:fb:61:82:ea:d4:04:57:04:21:a5:
0a:78:2e:b9:16:57:40:e5:e0:33:6c:39:24:74:76:
6e:5f:4e:28:8e:8a:94:cf:a1:8e:fe:eb:4f:75:47:
95:42:ca:2b:49:9c:95:48:c7:57:52:8d:55:35:29:
29:fc:66:04:9c:c3:80:3c:ca:45:02:00:6a:85:97:
25:61:f1:e0:f6:87:f5:d1:92:27:c8:57:b9:02:91:
1f:77:fd:5d:8a:10:56:da:8d:cb:29:ce:72:77:16:
69:e9:a6:08:3c:db:0f:c0:04:01:28:4c:d3:81:af:
2e:18:78:cb:67:9a:42:dd:c5:67:a4:fd:05:42:4f:
20:bf:94:fe:20:ea:0f:06:1b:48:83:96:e7:e6:de:
9b:63:1d:e2:da:b7:7a:b0:67:cb:4d:8b:69:81:31:
96:09:a8:e1:d0:a6:87:5c:e0:d2:1b:64:72:75:65:
c0:89:61:47:bd:61:57:b2:91:fa:91:c4:27:a2:b7:
42:26:08:d0:53:7a:35:19:2d:69:e2:e7:a3:a6:7f:
e4:d5:a1:61:7c:74:a0:1e:0d:79:7f:bf:16:ab:08:
31:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:AD:39:DF:24:75:0A:A5:5A:26:BE:CB:B5:22:32:F3:01:E8:68:68
X509v3 Authority Key Identifier:
keyid:23:78:A4:A9:C5:23:25:A8:59:20:80:9B:A1:A4:D8:9E:21:C0:2F:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3ikqcUjJahZIICboaTYniHALxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/E6053yR1CqVaJr7LtSIy8wHoaGg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/I3ikqcUjJahZIICboaTYniHALxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.230.148.0/24
Signature Algorithm: sha256WithRSAEncryption
09:93:1a:4f:51:d4:a2:41:d6:25:74:40:f2:4e:49:42:f4:47:
7e:a4:d5:09:4f:9e:fe:74:57:58:65:eb:27:33:98:da:9c:28:
1e:0f:a2:cc:e2:d7:40:dc:e4:3c:d2:9c:df:a7:10:92:cc:a8:
36:16:c0:01:82:96:7e:56:71:ee:c6:7a:37:ca:48:f8:4b:98:
82:8b:e4:8d:c1:17:fb:86:07:e1:ab:dc:c2:58:4a:76:d8:31:
26:d9:af:6c:84:bd:46:7f:55:99:89:2e:d2:7a:b2:14:87:a4:
0c:f5:e8:60:51:a4:18:34:1f:bd:c6:c7:d5:70:b6:3a:59:35:
de:90:a0:de:59:c9:80:bd:1c:de:91:40:d6:97:dc:35:d2:d0:
28:7e:64:9d:1a:b2:a4:7d:39:95:d2:d4:92:33:06:54:72:97:
19:de:14:c6:6d:79:49:d1:f1:a5:35:63:3e:58:13:4c:a5:fe:
a7:89:38:07:eb:4f:31:09:ac:62:d5:6e:ab:f3:bf:87:4d:41:
a0:40:42:ae:8a:94:f1:0a:22:d4:77:4b:38:50:db:b1:6c:01:
77:03:37:7b:7b:34:e1:84:66:77:2e:2d:c6:c9:41:e5:f0:22:
57:16:9a:ac:16:49:22:30:14:06:b5:e6:b5:a4:cc:c2:2f:cf:
3e:e5:1d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:41:44 2026 by rpki-client