This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/EKynAMYgPjw0oPtAzNG9Bf_1jrw.roa
File: EKynAMYgPjw0oPtAzNG9Bf_1jrw.roa (raw, json)
Hash identifier: sBJGHZRR//ShLKCu0otFo6KYcAN2JoMGd5WaxRgQK80=
Subject key identifier: 10:AC:A7:00:C6:20:3E:3C:34:A0:FB:40:CC:D1:BD:05:FF:F5:8E:BC
Certificate issuer: /CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
Certificate serial: 019B791084913C753459D5C8666055519F1D
Authority key identifier: 4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/EKynAMYgPjw0oPtAzNG9Bf_1jrw.roa
Signing time: Thu 01 Jan 2026 10:18:04 +0000
ROA not before: Thu 01 Jan 2026 10:18:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 46746
IP address blocks: 82.112.107.0/28 maxlen: 28
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Jan 2026 00:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:10:84:91:3c:75:34:59:d5:c8:66:60:55:51:9f:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
Validity
Not Before: Jan 1 10:18:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=10aca700c6203e3c34a0fb40ccd1bd05fff58ebc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:cf:72:78:a0:96:6d:de:ae:9f:0a:de:ea:6a:
b1:c1:33:45:fd:b2:00:31:af:e6:d7:22:92:6d:b9:
79:5c:10:04:cf:83:31:36:ab:8f:03:bc:0b:df:65:
2f:18:9c:2c:7e:55:d4:42:38:91:51:a4:09:db:cb:
58:82:6b:66:1a:28:4a:c8:09:f3:8e:db:6a:d4:d4:
59:48:90:0b:48:f4:32:e3:60:d3:89:81:63:18:09:
72:ae:a2:6e:2e:85:0a:2a:9c:f6:0e:99:87:30:ef:
58:6b:1c:9d:40:08:d2:ec:5f:c5:d4:cc:2d:c1:a5:
b9:82:4a:b1:21:44:92:c7:e6:df:a8:74:ca:88:09:
68:e2:5f:41:52:0f:70:33:d4:c9:42:b3:07:ad:f7:
4e:4b:be:1e:3d:06:77:cb:a6:b2:36:a9:51:1f:ca:
67:ce:d9:9d:fb:bc:7e:14:c4:d5:d2:e7:c9:db:25:
ee:7a:cf:ff:99:27:02:93:ad:8f:2d:58:5a:8a:36:
c2:b9:02:4e:04:0c:98:04:e5:c8:ca:50:aa:67:64:
31:2f:7f:24:bc:1d:6d:a0:3a:c9:f7:99:ec:1c:25:
f2:16:58:d1:ac:4d:a0:9b:3b:0b:3c:9b:bf:79:08:
54:c0:c5:1a:f0:7a:ba:19:be:d1:3e:0b:96:10:24:
e4:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:AC:A7:00:C6:20:3E:3C:34:A0:FB:40:CC:D1:BD:05:FF:F5:8E:BC
X509v3 Authority Key Identifier:
keyid:4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/EKynAMYgPjw0oPtAzNG9Bf_1jrw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.112.107.0/28
Signature Algorithm: sha256WithRSAEncryption
9f:75:92:e3:1c:84:db:61:56:ff:a9:6c:7c:4d:d8:03:69:5f:
cf:b4:0a:32:2d:a6:30:04:e9:3e:2e:d6:5e:12:7c:6c:e0:6f:
7a:c6:2c:72:01:52:2b:42:96:b5:6a:f7:12:2f:35:db:a4:6c:
3b:18:54:7c:63:48:e0:25:b0:62:88:69:c4:9a:e3:4c:e0:64:
46:0f:d8:fb:15:42:b7:d1:0b:00:d8:d5:fe:c4:c5:f1:a5:72:
9c:12:cd:f0:6e:64:dc:11:34:d9:24:08:8c:37:c2:8a:a9:73:
1b:51:16:a1:4d:05:de:03:22:2e:f4:7e:58:79:7e:98:b2:89:
5e:26:ff:e6:15:96:01:1e:62:3e:80:85:28:0b:6f:f2:7c:a0:
3a:a6:d9:7f:39:13:df:17:67:7a:f7:12:66:60:3c:3d:4f:93:
30:ee:4b:1a:7c:cf:0f:eb:88:bd:35:c4:1b:27:bd:41:1c:77:
16:a4:8f:b6:13:8f:76:21:f7:b6:da:38:06:b2:f1:b6:8c:8b:
e5:7e:7f:70:2f:d9:50:fd:42:e6:97:35:55:1c:c7:f3:67:b8:
bf:f1:5d:1b:67:bc:33:5c:ca:7f:9e:ea:38:89:12:c6:e5:6c:
b5:f7:17:e8:5f:19:ab:65:c7:e6:f2:fc:d8:ad:e9:be:5c:26:
c4:c7:7c:53
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZt5EISRPHU0WdXIZmBVUZ8dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkNWEyOTIxZmJlYjhhNDQ4ZTdhZTFlYzVhMTFiOGFiODk4
ZDIyZmQwHhcNMjYwMTAxMTAxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMGFjYTcwMGM2MjAzZTNjMzRhMGZiNDBjY2QxYmQwNWZmZjU4ZWJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxc9yeKCWbd6unwre6mqxwTNF/bIA
Ma/m1yKSbbl5XBAEz4MxNquPA7wL32UvGJwsflXUQjiRUaQJ28tYgmtmGihKyAnz
jttq1NRZSJALSPQy42DTiYFjGAlyrqJuLoUKKpz2DpmHMO9YaxydQAjS7F/F1Mwt
waW5gkqxIUSSx+bfqHTKiAlo4l9BUg9wM9TJQrMHrfdOS74ePQZ3y6ayNqlRH8pn
ztmd+7x+FMTV0ufJ2yXues//mScCk62PLVhaijbCuQJOBAyYBOXIylCqZ2QxL38k
vB1toDrJ95nsHCXyFljRrE2gmzsLPJu/eQhUwMUa8Hq6Gb7RPguWECTkywIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFBCspwDGID48NKD7QMzRvQX/9Y68MB8GA1UdIwQY
MBaAFE1aKSH764pEjnrh7FoRuKuJjSL9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFZvcElmdnJpa1NPZXVIc1doRzRxNG1OSXYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9lZThiOTgtNzI0MC00YjYyLWFjYzUt
NzgwYTI1Y2QwZGQ5LzEvRUt5bkFNWWdQancwb1B0QXpORzlCZl8xanJ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9lZThiOTgtNzI0MC00YjYyLWFjYzUtNzgwYTI1Y2QwZGQ5
LzEvVFZvcElmdnJpa1NPZXVIc1doRzRxNG1OSXYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUEUnBrADAN
BgkqhkiG9w0BAQsFAAOCAQEAn3WS4xyE22FW/6lsfE3YA2lfz7QKMi2mMATpPi7W
XhJ8bOBvesYscgFSK0KWtWr3Ei8126RsOxhUfGNI4CWwYohpxJrjTOBkRg/Y+xVC
t9ELANjV/sTF8aVynBLN8G5k3BE02SQIjDfCiqlzG1EWoU0F3gMiLvR+WHl+mLKJ
Xib/5hWWAR5iPoCFKAtv8nygOqbZfzkT3xdnevcSZmA8PU+TMO5LGnzPD+uIvTXE
Gye9QRx3FqSPthOPdiH3tto4BrLxtoyL5X5/cC/ZUP1C5pc1VRzH82e4v/FdG2e8
M1zKf57qOIkSxuVstfcX6F8Zq2XH5vL82K3pvlwmxMd8Uw==
-----END CERTIFICATE-----
Generated at Thu Jan 8 09:14:13 2026 by rpki-client