This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/965580-8736-4173-bde3-2c3028fcece9/1/ea-vywNHOW21DX1J0UWlRSQDW38.roa
File: ea-vywNHOW21DX1J0UWlRSQDW38.roa (raw, json)
Hash identifier: OJoJt8JCpBrtsjmCA+UGULfvX9hBfPj+o3dHNR77dnI=
Subject key identifier: 79:AF:AF:CB:03:47:39:6D:B5:0D:7D:49:D1:45:A5:45:24:03:5B:7F
Certificate issuer: /CN=93ecccde85c40b154f919baf64ef032ec70d751e
Certificate serial: 019B7CEE233E9E39F0E142371C4F8038924C
Authority key identifier: 93:EC:CC:DE:85:C4:0B:15:4F:91:9B:AF:64:EF:03:2E:C7:0D:75:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-zM3oXECxVPkZuvZO8DLscNdR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/965580-8736-4173-bde3-2c3028fcece9/1/ea-vywNHOW21DX1J0UWlRSQDW38.roa
Signing time: Fri 02 Jan 2026 04:18:59 +0000
ROA not before: Fri 02 Jan 2026 04:18:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50324
IP address blocks: 2001:67c:138::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/965580-8736-4173-bde3-2c3028fcece9/1/k-zM3oXECxVPkZuvZO8DLscNdR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/965580-8736-4173-bde3-2c3028fcece9/1/k-zM3oXECxVPkZuvZO8DLscNdR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/k-zM3oXECxVPkZuvZO8DLscNdR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 13:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:ee:23:3e:9e:39:f0:e1:42:37:1c:4f:80:38:92:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93ecccde85c40b154f919baf64ef032ec70d751e
Validity
Not Before: Jan 2 04:18:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=79afafcb0347396db50d7d49d145a54524035b7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:30:e9:6b:d0:6e:e9:aa:9e:91:46:e3:51:d5:
61:25:29:41:de:29:6b:8f:eb:fb:96:51:4c:11:5d:
ec:99:1a:ec:d8:79:2b:da:d3:e7:46:34:4a:08:8c:
58:6f:51:6a:ad:16:29:de:e6:1f:d7:a3:81:e2:b2:
b6:b8:ed:6f:4f:29:c7:c5:ab:c1:66:ac:7c:71:32:
0d:20:b8:41:25:8e:81:db:95:0d:14:36:f9:47:9f:
cd:c4:42:b5:f9:9d:4e:3a:98:b6:63:cb:38:5f:91:
3e:25:db:76:49:80:9a:d8:88:36:81:09:f4:89:8a:
98:46:d2:e1:38:7c:60:46:05:49:36:fb:93:5d:fb:
fb:73:2c:53:75:22:2b:52:a1:2b:44:88:da:cc:73:
5e:e9:6c:b0:57:a2:9c:88:ba:a6:37:15:5d:53:05:
6e:bd:74:5d:34:f0:45:ae:d3:98:ed:94:e6:cc:08:
25:6f:a2:a9:56:37:fc:3f:02:90:8d:6c:26:f7:e3:
a9:76:50:eb:08:46:77:f3:57:d2:d6:c1:d3:31:ca:
0e:db:53:ce:53:f0:34:40:32:ba:5c:f7:6b:d5:13:
19:06:b9:86:67:c2:9d:a9:83:c9:11:77:e4:8a:90:
c4:f4:61:fe:45:05:d0:e8:a4:56:0f:84:34:4f:ab:
5f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:AF:AF:CB:03:47:39:6D:B5:0D:7D:49:D1:45:A5:45:24:03:5B:7F
X509v3 Authority Key Identifier:
keyid:93:EC:CC:DE:85:C4:0B:15:4F:91:9B:AF:64:EF:03:2E:C7:0D:75:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-zM3oXECxVPkZuvZO8DLscNdR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/965580-8736-4173-bde3-2c3028fcece9/1/ea-vywNHOW21DX1J0UWlRSQDW38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/965580-8736-4173-bde3-2c3028fcece9/1/k-zM3oXECxVPkZuvZO8DLscNdR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:138::/48
Signature Algorithm: sha256WithRSAEncryption
41:13:8d:23:97:f1:2a:21:17:36:e2:d0:84:21:ca:96:f5:c5:
6a:ed:79:ca:b3:96:ef:54:51:38:7c:6f:f4:3f:55:ca:16:bf:
72:05:0c:b1:1a:0e:e5:a6:33:7e:e7:be:5f:0a:2d:99:ae:5e:
0b:9c:28:9e:31:e9:8c:81:ef:9f:80:91:b8:c7:38:6d:90:c0:
f2:ea:ee:da:de:e2:fe:98:07:56:29:bd:68:4f:d9:15:af:ce:
08:40:9b:4f:c3:36:a6:33:5b:c5:ad:e8:9d:55:2a:7f:c5:08:
8e:62:7d:d3:f8:3b:a3:69:e9:01:b4:11:2c:3f:b1:5c:b5:52:
10:1e:86:b5:93:ee:db:96:c7:54:93:a6:17:21:8b:db:51:1f:
e6:62:03:e8:6b:39:52:6a:f6:bc:5a:53:28:3c:ba:96:e4:2f:
17:70:ff:38:0f:a4:82:28:6c:0f:a3:33:3d:56:d2:5d:4e:bc:
ac:11:5e:e1:f3:23:37:5a:21:03:b8:3b:04:bf:74:4c:a0:40:
a7:ce:35:9b:5a:60:fc:36:f0:51:fa:14:7b:14:75:9b:ff:fd:
4b:a8:2d:f6:aa:12:a0:f4:04:db:f4:bf:d4:64:a4:9d:50:de:
be:fd:84:b4:08:52:a6:7f:75:05:ea:71:77:77:7d:14:3d:20:
e1:5f:95:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 18:55:07 2026 by rpki-client