This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/eA65wx7dfEjqGbM1EHc_ScLtbeI.roa
File: eA65wx7dfEjqGbM1EHc_ScLtbeI.roa (raw, json)
Hash identifier: 3BReD96Xa95scjtdlLaPCDGKgSbzvYPLuH1Mv6tn+/8=
Subject key identifier: 78:0E:B9:C3:1E:DD:7C:48:EA:19:B3:35:10:77:3F:49:C2:ED:6D:E2
Certificate issuer: /CN=80615315dc750c03e60fc36a750c5e3ff66eac94
Certificate serial: 019B77C6E80D83A84ACF2F9F93CCD3F651BA
Authority key identifier: 80:61:53:15:DC:75:0C:03:E6:0F:C3:6A:75:0C:5E:3F:F6:6E:AC:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/eA65wx7dfEjqGbM1EHc_ScLtbeI.roa
Signing time: Thu 01 Jan 2026 04:18:02 +0000
ROA not before: Thu 01 Jan 2026 04:18:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25446
IP address blocks: 93.183.104.0/24 maxlen: 24
93.183.105.0/24 maxlen: 24
93.183.106.0/24 maxlen: 24
185.71.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c6:e8:0d:83:a8:4a:cf:2f:9f:93:cc:d3:f6:51:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80615315dc750c03e60fc36a750c5e3ff66eac94
Validity
Not Before: Jan 1 04:18:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=780eb9c31edd7c48ea19b33510773f49c2ed6de2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:c7:9b:79:30:75:f2:e5:eb:64:54:cd:f2:1b:
18:a4:0d:12:36:a0:41:51:1b:5d:8d:e9:40:b7:a6:
53:d3:1d:6c:7f:32:76:47:91:9a:98:ea:e2:e2:b6:
77:61:25:fb:0e:e8:7f:74:d1:0a:e3:13:44:72:f8:
0b:99:7d:d1:7f:61:8e:84:90:af:16:c2:8f:bd:ad:
ec:a8:9a:b2:50:b0:26:85:cc:a4:f3:53:83:e7:7b:
05:e2:af:77:0c:ff:98:f9:c3:b1:49:8a:92:39:e3:
44:00:75:16:e5:0f:4f:a8:9a:ea:a0:de:19:45:03:
e1:0e:cf:fd:53:23:79:67:7e:36:56:5f:c6:4f:32:
55:03:6b:d3:e6:2a:a6:eb:37:c9:af:11:d7:f1:22:
60:15:ef:69:ad:f0:43:94:ee:3c:4d:56:28:d9:e8:
a8:f4:fc:fd:00:ac:80:00:a9:d2:a7:bc:2c:83:ba:
6c:38:ec:7f:79:51:8c:6f:64:90:e9:a3:96:94:06:
3b:92:19:19:50:a3:c6:41:1b:cd:cb:b7:81:ba:c7:
f3:a8:a9:8a:01:70:19:55:08:ba:76:12:05:ea:ef:
8a:a1:f2:4b:b3:56:57:21:54:9f:d8:5f:84:8a:e9:
fd:6d:b8:ae:f6:44:b4:3a:45:a1:28:2a:0f:fc:0e:
e1:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:0E:B9:C3:1E:DD:7C:48:EA:19:B3:35:10:77:3F:49:C2:ED:6D:E2
X509v3 Authority Key Identifier:
keyid:80:61:53:15:DC:75:0C:03:E6:0F:C3:6A:75:0C:5E:3F:F6:6E:AC:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/eA65wx7dfEjqGbM1EHc_ScLtbeI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.183.104.0-93.183.106.255
185.71.196.0/24
Signature Algorithm: sha256WithRSAEncryption
21:e4:d4:9f:85:e3:8b:e1:8f:87:ea:6b:4c:03:ae:16:ae:8b:
5e:57:13:dc:43:f3:6d:6f:2b:e9:3d:32:b8:9c:f3:10:9d:db:
61:2e:97:f2:10:05:42:ad:31:66:a4:60:74:5b:f7:f3:f7:77:
80:a1:02:9a:6a:d8:56:ad:77:be:9d:3e:e0:b6:90:1b:5d:6e:
a3:4c:6b:5c:6f:7b:d1:38:73:67:84:97:46:c3:4c:f4:b8:1d:
60:08:09:f1:19:df:41:05:37:f6:dc:74:03:78:d5:cc:67:2c:
d9:61:17:d0:70:c6:e7:b2:88:d1:db:3d:c0:75:f0:51:99:a1:
ce:33:5e:59:80:d4:5e:36:d9:f9:09:06:93:be:f0:40:68:b6:
d1:27:b3:ea:64:2a:1a:f8:90:d2:f0:45:15:1e:e7:a1:a8:64:
bc:37:c0:67:4a:02:79:91:76:e8:ca:d9:2b:20:fe:a9:cb:33:
5a:60:7d:2f:18:de:a7:25:90:b8:36:2c:45:a6:d3:36:34:52:
7e:3b:09:9a:44:01:c0:97:0e:21:aa:bd:14:5d:68:5a:0b:92:
6e:21:5b:e0:41:34:4a:72:9e:cc:66:be:2f:5a:89:05:e0:59:
ca:ad:56:26:b4:32:cd:f1:78:c0:b9:e3:59:ae:d2:8e:0a:ab:
13:4a:3d:a3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Jan 26 02:43:54 2026 by rpki-client