This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/yeEabSTnkLeywBVAwxOdpvb42Eo.roa
File: yeEabSTnkLeywBVAwxOdpvb42Eo.roa (raw, json)
Hash identifier: PvqV+kMqmAte8XfLn6bjSK6JChkDgm/iDFgeeMv/yOs=
Subject key identifier: C9:E1:1A:6D:24:E7:90:B7:B2:C0:15:40:C3:13:9D:A6:F6:F8:D8:4A
Certificate issuer: /CN=5e3cb7d982c7f9edbc93d4cb42b94fa029c382df
Certificate serial: 019B7759124C881BE845C336CBFCADE6DC10
Authority key identifier: 5E:3C:B7:D9:82:C7:F9:ED:BC:93:D4:CB:42:B9:4F:A0:29:C3:82:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xjy32YLH-e28k9TLQrlPoCnDgt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/yeEabSTnkLeywBVAwxOdpvb42Eo.roa
Signing time: Thu 01 Jan 2026 02:18:04 +0000
ROA not before: Thu 01 Jan 2026 02:18:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207810
IP address blocks: 185.167.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xjy32YLH-e28k9TLQrlPoCnDgt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:59:12:4c:88:1b:e8:45:c3:36:cb:fc:ad:e6:dc:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e3cb7d982c7f9edbc93d4cb42b94fa029c382df
Validity
Not Before: Jan 1 02:18:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c9e11a6d24e790b7b2c01540c3139da6f6f8d84a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e4:99:55:01:96:66:9d:fb:13:67:41:54:fa:
02:0b:a7:bb:88:28:24:6e:23:3e:2c:28:6b:07:96:
26:66:a0:45:9f:7d:b2:f1:5f:9b:58:ea:06:13:4f:
c2:3e:eb:29:9b:0a:54:8a:1a:66:b6:a4:f1:b4:cf:
1d:80:e3:10:77:21:29:01:30:5f:85:43:b9:e1:08:
d9:e0:a8:54:f8:24:61:76:07:2a:fa:9d:b4:e7:d8:
9e:80:8e:65:1a:2e:09:a7:45:a2:65:b8:bf:29:34:
fc:94:c8:f4:68:39:6f:6e:70:31:49:a6:06:5b:fd:
19:21:19:c0:c6:5d:fd:83:1e:5e:c8:57:ca:3e:48:
62:fe:7c:ff:7d:43:50:73:4e:91:24:10:74:5f:1f:
be:93:20:ed:35:64:40:78:7c:4d:63:45:df:05:b9:
46:cc:b5:dc:b5:e8:32:4d:40:72:1b:ba:c1:42:b2:
28:69:27:1a:e0:84:30:6c:18:16:a7:93:04:d0:6e:
fc:b4:fa:6f:e7:e8:65:05:f5:9f:d2:89:ef:87:8c:
4e:b7:8f:21:af:97:fe:6d:bf:6d:80:0e:e2:c1:4b:
04:05:fd:35:98:0c:13:78:c4:a0:35:32:b7:e8:da:
c9:53:1c:5e:73:f6:ce:79:c2:89:d1:76:42:d4:73:
41:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:E1:1A:6D:24:E7:90:B7:B2:C0:15:40:C3:13:9D:A6:F6:F8:D8:4A
X509v3 Authority Key Identifier:
keyid:5E:3C:B7:D9:82:C7:F9:ED:BC:93:D4:CB:42:B9:4F:A0:29:C3:82:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xjy32YLH-e28k9TLQrlPoCnDgt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/yeEabSTnkLeywBVAwxOdpvb42Eo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.167.217.0/24
Signature Algorithm: sha256WithRSAEncryption
eb:ab:8b:61:59:c0:d8:f3:d8:96:7b:13:7c:48:7f:bd:e6:41:
8a:6c:55:0e:ef:c4:08:ee:d2:16:34:2e:57:5e:ba:4d:de:a2:
f8:d7:16:36:01:af:05:89:ce:8c:ba:e6:f1:f2:27:ea:30:9e:
bc:2a:62:7e:0c:d8:4d:6e:82:4f:19:e4:2e:0e:45:f7:ad:d9:
92:9e:8d:64:21:7e:6a:16:ab:9b:2f:db:9a:08:61:bc:b6:6c:
46:33:4c:1d:ba:b0:d4:ef:4a:e4:00:25:5a:14:79:ea:e4:90:
a7:9d:5e:bc:13:e7:93:cd:ab:a1:ee:6e:55:b4:19:a8:1b:0b:
87:30:cb:a7:be:2e:fd:94:4f:e2:ea:7a:36:b5:e3:38:be:cc:
ac:f5:e9:59:11:6f:49:61:6b:55:fa:b8:f6:e5:88:c6:a4:34:
5d:ec:0a:2c:32:b9:74:cd:b7:99:96:0c:8d:fa:e8:ce:38:ed:
d3:ff:2e:c7:8f:ca:a1:e9:77:4f:7b:75:cd:88:b4:1a:98:d9:
48:38:f0:5e:c9:c1:b2:d2:a0:77:b5:4e:4d:97:d0:2b:c5:4c:
44:ef:5a:02:b4:8a:65:1d:01:46:35:89:fd:e9:e8:5a:a3:a1:
85:8c:52:ad:98:12:56:1f:01:c4:a6:d1:ad:8b:11:77:58:7d:
a6:e3:c9:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:02:13 2026 by rpki-client