This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/5fDAqi2rFEHtInraiSde7GANkUg.roa
File: 5fDAqi2rFEHtInraiSde7GANkUg.roa (raw, json)
Hash identifier: b9nf6zb2SaDjg3E1+4anu9eL8907pUGUdUsxBMNrJ6Q=
Subject key identifier: E5:F0:C0:AA:2D:AB:14:41:ED:22:7A:DA:89:27:5E:EC:60:0D:91:48
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019B7AC866F072C5A5C9EA6E88259F9D0839
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/5fDAqi2rFEHtInraiSde7GANkUg.roa
Signing time: Thu 01 Jan 2026 18:18:32 +0000
ROA not before: Thu 01 Jan 2026 18:18:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 393406
IP address blocks: 94.229.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:c8:66:f0:72:c5:a5:c9:ea:6e:88:25:9f:9d:08:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jan 1 18:18:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e5f0c0aa2dab1441ed227ada89275eec600d9148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:15:41:78:f2:bb:bf:5c:02:25:97:70:2c:f8:
c3:34:98:48:d6:28:bd:92:d1:21:96:51:90:00:1e:
9f:98:3b:2a:54:28:a5:d1:84:ec:eb:b7:cc:ff:c5:
a8:b6:17:cd:a2:64:e0:f5:f4:b9:b5:fc:9c:4e:4a:
78:13:d4:7a:db:c3:96:85:25:23:e0:cf:d4:38:8b:
1c:13:aa:76:a3:bc:37:43:a9:c8:b5:5b:7b:56:d0:
0a:f4:46:f2:74:fb:2f:c0:a5:6c:40:50:88:77:c2:
a0:a7:a0:7b:2a:fc:4c:7c:15:10:e3:31:de:57:91:
b4:d8:1c:fe:7e:49:1d:e3:9e:21:69:10:c7:a3:df:
4c:1c:5a:31:f1:5a:e1:6a:cc:6c:e0:78:0e:b8:28:
20:47:41:f0:6f:0c:1a:b8:8f:b9:48:d3:64:56:6c:
b3:1e:8d:3a:e1:77:3d:9c:1a:7b:2b:e1:9a:65:31:
cf:8d:99:c3:7e:fd:a0:de:74:56:dd:cd:67:4f:f4:
da:ce:d8:41:f1:a6:2a:3e:06:2d:b9:23:87:ea:83:
f8:b2:ea:63:9a:96:54:43:b3:55:96:ca:6f:4a:e3:
5b:cb:ae:f2:4a:76:57:7a:10:65:e8:bd:21:37:07:
1f:84:fa:98:00:3f:66:e8:56:06:86:d9:38:f2:b5:
11:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:F0:C0:AA:2D:AB:14:41:ED:22:7A:DA:89:27:5E:EC:60:0D:91:48
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/5fDAqi2rFEHtInraiSde7GANkUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.229.211.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:b6:1a:df:f6:83:79:f1:82:05:93:30:cc:99:30:a8:b2:97:
c6:1e:9d:ee:07:ea:2d:5b:0b:22:e3:86:24:15:83:d9:51:62:
30:cb:1a:e3:5c:61:05:36:c1:1e:4a:62:b1:a6:66:bd:2a:f1:
5b:1c:08:a5:5f:19:9c:14:7b:92:a9:2d:9a:35:28:bb:ad:9a:
91:a2:8b:f0:4c:3c:ca:9e:f6:d9:cc:e9:6e:38:13:eb:be:01:
a7:87:90:43:f2:46:1a:9a:f6:50:0c:00:37:71:68:e7:e2:d1:
d0:13:10:9b:b3:c8:f7:18:9d:da:7e:53:80:be:8a:a3:5a:b6:
52:f4:08:e8:a1:eb:4f:26:33:e5:74:ae:12:4d:12:8b:da:05:
01:05:b4:d1:c4:23:9c:2f:69:c6:2b:d6:df:35:81:30:2f:16:
16:45:19:22:cd:70:f9:da:0e:ea:b6:1f:db:28:0d:41:78:b5:
ee:e5:c5:e3:90:9c:ce:ec:11:11:65:5d:63:db:54:ef:07:59:
22:64:4b:42:80:44:fc:29:e6:25:cb:32:51:5b:47:ce:ef:32:
da:d2:ba:5f:f1:74:df:71:28:87:b7:90:86:b3:60:bd:10:0c:
91:04:1d:69:ba:46:a7:07:bf:46:7e:98:07:9b:ef:b7:d6:6e:
45:01:0f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:33:42 2026 by rpki-client