This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/R84wROoCeZRCPbUs7Ib0UyTuxC4.roa
File: R84wROoCeZRCPbUs7Ib0UyTuxC4.roa (raw, json)
Hash identifier: Q6YMEZButrOoIhObHP4dYcfrrzpuagES1oIBIzupcEU=
Subject key identifier: 47:CE:30:44:EA:02:79:94:42:3D:B5:2C:EC:86:F4:53:24:EE:C4:2E
Certificate issuer: /CN=c15e7d7bb69efacb0c73902972c74d72d29bf77f
Certificate serial: 019B7F13B73E431E8CAD16A90825D6742B7B
Authority key identifier: C1:5E:7D:7B:B6:9E:FA:CB:0C:73:90:29:72:C7:4D:72:D2:9B:F7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wV59e7ae-ssMc5ApcsdNctKb938.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/R84wROoCeZRCPbUs7Ib0UyTuxC4.roa
Signing time: Fri 02 Jan 2026 14:19:17 +0000
ROA not before: Fri 02 Jan 2026 14:19:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51088
IP address blocks: 93.190.124.0/24 maxlen: 24
193.110.189.0/24 maxlen: 24
2a0f:d440::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/wV59e7ae-ssMc5ApcsdNctKb938.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/wV59e7ae-ssMc5ApcsdNctKb938.mft
rsync://rpki.ripe.net/repository/DEFAULT/wV59e7ae-ssMc5ApcsdNctKb938.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 11:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:13:b7:3e:43:1e:8c:ad:16:a9:08:25:d6:74:2b:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c15e7d7bb69efacb0c73902972c74d72d29bf77f
Validity
Not Before: Jan 2 14:19:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=47ce3044ea027994423db52cec86f45324eec42e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:66:05:62:c6:99:a7:1d:a1:09:c3:cf:a4:7d:
95:c7:99:8c:12:dd:06:15:7c:d4:fb:8f:c9:75:16:
cd:f2:93:c0:f9:d0:72:7f:e0:a2:b3:7f:3b:bf:c6:
06:f7:04:aa:28:d1:b4:6a:71:a4:46:7f:9b:eb:9f:
44:b9:c5:23:55:eb:47:64:f9:b9:1e:62:f7:16:16:
fa:45:6d:f4:30:e1:36:72:df:1e:e6:2e:8b:25:4a:
b6:ad:78:59:70:e5:b3:2a:0c:00:ba:2a:86:c5:1c:
4f:a7:f1:0c:66:39:75:83:82:1c:fa:52:04:d9:85:
94:48:21:1e:6d:d1:c9:44:ec:f3:31:63:ac:47:fc:
b1:95:07:a2:5a:da:80:b7:36:ef:67:f5:36:3d:74:
14:4a:08:bf:9a:59:39:9d:29:5a:7e:55:dc:7d:86:
8c:ca:4b:ea:85:25:95:f3:49:62:b8:62:a1:10:2a:
48:bf:53:1e:43:d1:1d:e8:c4:19:0b:c6:ce:9d:50:
8f:b1:8b:9b:0d:dc:12:14:cb:11:7a:54:d5:a4:dd:
4a:c4:5f:3e:14:f4:5f:34:f6:2a:64:da:21:9f:63:
13:ce:3f:87:42:ae:46:8d:61:99:2f:31:03:d7:15:
98:ef:1a:22:c4:46:aa:5e:9a:b2:25:0f:57:1f:6b:
54:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:CE:30:44:EA:02:79:94:42:3D:B5:2C:EC:86:F4:53:24:EE:C4:2E
X509v3 Authority Key Identifier:
keyid:C1:5E:7D:7B:B6:9E:FA:CB:0C:73:90:29:72:C7:4D:72:D2:9B:F7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wV59e7ae-ssMc5ApcsdNctKb938.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/R84wROoCeZRCPbUs7Ib0UyTuxC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/wV59e7ae-ssMc5ApcsdNctKb938.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.190.124.0/24
193.110.189.0/24
IPv6:
2a0f:d440::/29
Signature Algorithm: sha256WithRSAEncryption
0d:9b:98:d0:e3:c1:68:37:39:91:16:60:15:af:6c:49:6f:7b:
30:95:13:c2:d8:cb:7f:2f:4f:63:45:8d:5e:1b:0f:96:4a:88:
cf:21:a1:a8:7c:43:c1:36:ac:fd:70:63:7f:c6:85:4c:06:55:
2a:7d:fd:43:70:43:df:3e:7b:93:6d:a0:95:2c:1e:8a:76:91:
34:2e:b8:95:0d:67:5b:6f:26:9c:48:3f:80:f2:18:98:8f:35:
2c:19:ac:44:66:19:55:29:c9:9e:97:fa:05:8f:26:5d:b7:ff:
01:85:a5:86:cc:ab:97:8d:1d:4e:71:92:46:28:78:4f:92:cc:
70:a6:62:59:7b:04:f9:e0:4d:ec:e2:8b:2b:77:b9:5e:1b:f4:
84:88:53:8a:dd:37:c7:13:2b:a8:4a:91:0e:4d:50:4b:b8:f6:
51:f7:e7:1d:b6:25:5d:21:f6:cb:5a:05:9a:5d:19:a4:32:a7:
8e:30:b4:18:f2:29:a2:92:b6:77:25:80:62:77:cd:f8:7d:db:
dd:9c:65:d3:9d:27:c9:04:7b:56:83:a8:4a:72:6e:49:0c:0a:
8f:c3:b6:2b:c3:2b:79:1f:00:e9:57:ca:ca:b8:42:5b:26:4f:
02:a2:6d:e4:01:2a:0b:f6:b7:c5:f5:23:3f:a6:4e:b0:eb:67:
04:b0:a6:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:05:24 2026 by rpki-client