This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/EQEuBryRxEtPlweSUJeuZZ3EudM.roa
File: EQEuBryRxEtPlweSUJeuZZ3EudM.roa (raw, json)
Hash identifier: t5gpiKl+cjOje+0MxgLYfbY+toiD/bOlBv49FVybdJ8=
Subject key identifier: 11:01:2E:06:BC:91:C4:4B:4F:97:07:92:50:97:AE:65:9D:C4:B9:D3
Certificate issuer: /CN=297ae7592ca52491dc166a30fe1477d712bd465d
Certificate serial: 019B7C805FAD9F0B05446445FA78824502F4
Authority key identifier: 29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/EQEuBryRxEtPlweSUJeuZZ3EudM.roa
Signing time: Fri 02 Jan 2026 02:19:06 +0000
ROA not before: Fri 02 Jan 2026 02:19:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 28762
IP address blocks: 94.159.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:80:5f:ad:9f:0b:05:44:64:45:fa:78:82:45:02:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297ae7592ca52491dc166a30fe1477d712bd465d
Validity
Not Before: Jan 2 02:19:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=11012e06bc91c44b4f9707925097ae659dc4b9d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:61:27:ee:f3:88:bd:81:b2:df:2b:7b:08:c4:
d1:cf:b7:45:7c:7c:14:f3:4c:23:24:0d:2f:c2:cf:
4f:ac:4b:19:4e:a8:d0:6d:10:bc:37:51:29:7f:79:
7c:51:15:ea:5b:45:7f:eb:ee:3f:35:73:d1:19:7d:
62:09:8e:b5:ea:b3:8f:35:65:3a:e6:b4:61:3b:a3:
78:d9:f3:11:1e:83:c2:99:67:92:2b:81:30:c3:81:
95:4b:b2:d3:e7:71:12:b1:10:e7:27:e3:ff:0a:f3:
e3:51:f8:03:83:28:29:ed:38:62:a3:92:10:c0:24:
79:71:c3:fa:1e:f9:0b:2a:bd:e9:15:ae:46:e9:f0:
4a:9d:8b:21:f1:38:d5:2c:eb:35:ef:07:f9:5c:a3:
e5:78:e6:a2:ed:45:8e:3e:78:a0:48:20:d8:e1:51:
d2:b3:aa:41:d1:ee:a8:e3:33:0c:38:6b:e1:00:24:
b3:75:cc:ad:d3:5f:df:72:3c:42:76:bd:cf:63:67:
a8:28:ee:62:21:c0:a5:f4:f9:19:17:38:fa:ef:94:
14:d4:03:bc:e4:16:42:b5:67:b1:d8:76:c7:d3:85:
f7:cf:e1:44:5f:ad:4f:f2:c6:a6:08:a0:eb:d0:5a:
a7:e4:2f:48:49:2d:3c:1b:ae:cd:9e:d2:c2:a8:0e:
af:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:01:2E:06:BC:91:C4:4B:4F:97:07:92:50:97:AE:65:9D:C4:B9:D3
X509v3 Authority Key Identifier:
keyid:29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/EQEuBryRxEtPlweSUJeuZZ3EudM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.159.86.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:b6:37:ec:a7:7b:69:12:fa:6c:f8:36:af:b9:44:bb:4e:e2:
b0:35:be:08:9e:4f:49:31:8b:51:8c:fb:7d:4a:1f:56:12:cc:
3a:3c:94:cc:50:09:50:55:dd:fe:65:e5:2f:51:2f:d0:9e:6f:
11:28:14:a7:30:89:f5:3c:04:10:3f:46:ae:ec:69:ad:6e:c4:
e9:c4:93:e9:27:94:7e:04:f9:d1:b0:7b:ed:e5:21:38:ed:10:
33:d3:8c:0d:13:2c:15:5d:90:9b:ce:2b:f4:30:74:61:73:03:
dd:ac:2d:69:25:d4:56:e9:1a:c6:43:74:b1:be:8f:05:2e:a2:
d9:82:fa:e3:b4:25:a3:44:a8:c6:fd:18:ac:9f:1a:5c:0f:9d:
40:2d:48:1c:2d:dd:1f:68:71:05:02:f9:fa:c6:22:c6:11:1d:
f0:1f:59:e3:b6:25:43:17:f5:b9:6b:21:c6:63:2b:2c:3c:7d:
e8:af:d6:ce:15:6c:41:f4:10:0a:d4:2c:7f:51:be:25:9d:cf:
ad:57:0f:b2:b3:42:13:e0:9c:18:4d:5b:bd:91:fd:3d:83:b9:
41:25:3a:e9:fa:58:2b:eb:36:56:e1:36:ec:43:f4:bd:89:a7:
00:26:4c:e5:c4:e7:65:b8:14:92:5a:2d:2e:a4:ea:94:c3:ba:
d2:2d:e1:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:00:24 2026 by rpki-client