This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ejricRUq0IzG80f-2fAVl8clYY4.roa
File: ejricRUq0IzG80f-2fAVl8clYY4.roa (raw, json)
Hash identifier: gEfVQ46c7f/KpOXHXY93etU/fLLZOv08qgidIaj29qk=
Subject key identifier: 7A:3A:E2:71:15:2A:D0:8C:C6:F3:47:FE:D9:F0:15:97:C7:25:61:8E
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019B78347CF8A970FCD6B299F060C082E20A
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ejricRUq0IzG80f-2fAVl8clYY4.roa
Signing time: Thu 01 Jan 2026 06:17:44 +0000
ROA not before: Thu 01 Jan 2026 06:17:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200881
IP address blocks: 193.235.86.0/23 maxlen: 23
193.235.88.0/23 maxlen: 23
193.235.90.0/24 maxlen: 24
193.235.91.0/24 maxlen: 24
193.235.92.0/23 maxlen: 23
193.235.94.0/23 maxlen: 23
194.68.138.0/23 maxlen: 23
194.68.140.0/22 maxlen: 22
194.68.144.0/22 maxlen: 22
194.68.148.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:34:7c:f8:a9:70:fc:d6:b2:99:f0:60:c0:82:e2:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 06:17:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7a3ae271152ad08cc6f347fed9f01597c725618e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:83:2c:89:9e:d1:1b:07:a3:33:84:1a:47:de:
dc:eb:f3:82:64:62:e3:4b:f7:84:09:6d:85:fc:33:
6c:71:c4:40:b9:d2:3f:98:2d:c2:a7:81:62:ef:c3:
d1:37:75:01:e0:ba:1b:7d:15:ce:1e:97:4f:98:29:
29:ad:01:fb:c7:a4:b0:50:7b:ae:63:2a:89:8a:c1:
c2:7f:d4:ad:11:60:5b:49:a4:0f:f9:5f:6b:f5:3f:
7a:4e:df:8f:d4:38:15:c7:70:a4:9a:90:19:df:54:
6b:c1:c3:83:8d:3a:8c:46:b9:93:76:d3:30:83:6c:
55:4e:c1:5e:f1:eb:ec:cf:c7:0d:8b:c6:3a:7e:2a:
55:ef:1c:5d:19:e2:dd:1a:48:9b:ef:cd:24:52:c6:
74:e7:68:11:98:9d:3d:84:79:09:36:0a:20:38:80:
7c:c1:77:66:33:f3:c2:52:60:cb:78:4b:ce:bc:b9:
f1:57:bc:39:50:d9:72:ca:74:80:78:bf:28:26:9f:
df:ca:5b:32:98:01:5c:25:9d:4c:d3:f5:e8:2d:db:
00:0f:5c:63:8d:fe:3a:35:01:72:70:09:ca:f4:ee:
3f:f2:97:af:01:2c:bf:09:cf:67:cb:5d:76:6c:70:
4b:12:2b:2f:c8:f3:72:cc:fe:42:e5:c3:37:0c:5b:
ed:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:3A:E2:71:15:2A:D0:8C:C6:F3:47:FE:D9:F0:15:97:C7:25:61:8E
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ejricRUq0IzG80f-2fAVl8clYY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.235.86.0-193.235.95.255
194.68.138.0-194.68.149.255
Signature Algorithm: sha256WithRSAEncryption
99:9f:e4:47:a1:ef:e1:f0:8f:39:c0:85:ea:fd:11:ef:49:62:
4a:12:aa:27:e0:c0:05:2f:ea:15:f9:7a:fc:e3:d3:0d:f3:e0:
e0:0f:8b:59:c4:af:43:60:3c:45:8d:3b:d9:7d:bb:6a:3c:d2:
67:5e:c8:a1:bb:e3:1d:54:79:86:4d:70:83:ea:4d:2f:4a:89:
b9:d1:0f:d4:22:14:ac:90:90:b0:1f:d7:1b:fb:f4:eb:66:40:
9c:24:91:01:8f:7f:b1:3d:d2:1e:25:8a:ad:1c:26:f4:0d:b2:
2a:d1:50:85:ec:0a:08:f5:17:07:5c:97:57:2d:c3:7d:59:d3:
3f:e5:c8:25:41:a1:ba:b3:81:da:3b:06:70:6b:dc:13:17:2c:
fd:a1:2a:e4:a5:ef:ea:dc:75:09:2c:f5:da:5d:ec:ba:8e:3a:
f0:b9:08:72:46:a9:15:a9:e1:2a:21:e7:4f:0f:82:87:da:e4:
7e:f8:ed:b8:57:5d:0c:06:80:1b:77:1e:67:56:14:3e:41:75:
5c:9a:74:e6:1b:51:12:ec:17:72:58:bc:e3:55:90:94:4f:25:
40:69:7b:01:0c:9e:a3:6c:86:12:4f:93:42:7c:cc:5c:30:11:
d6:db:5a:72:f7:55:ec:88:4e:f3:de:d3:63:2f:bb:81:b0:79:
f9:59:91:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:04:43 2026 by rpki-client