This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/eBvpsuwuMxonT5MYi-3vsq7VY1s.roa
File: eBvpsuwuMxonT5MYi-3vsq7VY1s.roa (raw, json)
Hash identifier: aQ8vAJ8j165GdDcaYbjO79LnCj9vBq11xEzIZcGZI3I=
Subject key identifier: 78:1B:E9:B2:EC:2E:33:1A:27:4F:93:18:8B:ED:EF:B2:AE:D5:63:5B
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019B78A34DC60D748C6B9A9863456A49733C
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/eBvpsuwuMxonT5MYi-3vsq7VY1s.roa
Signing time: Thu 01 Jan 2026 08:18:46 +0000
ROA not before: Thu 01 Jan 2026 08:18:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215411
IP address blocks: 87.121.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Jan 2026 02:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:a3:4d:c6:0d:74:8c:6b:9a:98:63:45:6a:49:73:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 1 08:18:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=781be9b2ec2e331a274f93188bedefb2aed5635b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:bd:06:e9:77:2a:d4:d7:c6:06:5e:8a:56:53:
ec:4f:49:2b:fe:b4:21:f8:04:71:04:d5:ad:a0:d1:
f7:e3:f0:21:a6:66:c4:bb:a0:e6:b0:dd:ff:98:13:
40:5a:28:ba:47:ee:38:16:55:fe:4f:60:4d:6e:2c:
c5:c6:73:ba:f2:9b:20:f4:0c:2e:03:00:3f:70:f7:
81:77:36:20:7e:33:d4:26:1b:92:86:ea:ec:df:b6:
ee:6d:97:5c:59:48:2a:a5:be:96:3f:2e:de:8f:57:
40:4b:0d:5f:92:b7:e2:fe:c1:e1:35:5d:cb:b0:52:
1b:2a:c5:24:36:20:0d:83:94:f2:b7:fd:87:b8:c5:
f7:bb:e1:ee:95:ea:28:70:c5:15:45:d3:7b:c5:d7:
3c:43:0b:3e:a5:b2:80:84:d6:b1:d6:62:46:e9:01:
4d:22:91:ee:2f:ef:14:73:da:fa:1d:ca:b1:ef:08:
37:2f:83:d0:80:ad:22:64:c9:ec:6f:4d:fa:17:cf:
57:21:ad:0f:cb:48:16:87:fc:36:0f:86:05:3f:f6:
c4:99:d7:36:68:4b:a8:59:fb:b2:bb:a1:14:fc:d4:
5b:4c:c4:c1:2d:9b:6d:a4:23:67:10:ae:af:88:bb:
b7:76:47:c1:45:3f:4a:5e:71:2e:80:68:3d:a4:85:
75:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:1B:E9:B2:EC:2E:33:1A:27:4F:93:18:8B:ED:EF:B2:AE:D5:63:5B
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/eBvpsuwuMxonT5MYi-3vsq7VY1s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.104.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:a1:68:21:d3:36:8e:9a:79:38:20:6b:ed:3f:65:cd:03:15:
61:b6:62:db:57:9c:e0:df:ff:46:9a:b3:25:a0:8c:37:f0:ba:
7e:a2:f9:ac:4e:77:8f:f2:41:be:60:31:50:5a:eb:7a:ff:b5:
2b:da:f4:56:88:44:0e:5a:93:94:6a:d8:08:23:fb:d7:04:12:
37:3c:8e:66:c3:1e:51:30:35:a0:5c:9c:a6:d2:95:95:91:de:
63:b3:15:ba:db:01:97:33:80:62:a5:02:e0:c9:f8:d9:38:75:
a5:b2:d4:64:7c:60:7b:97:e1:89:b0:23:6f:52:67:41:86:6b:
0b:0e:d5:15:b9:42:f6:3b:2f:d1:00:b0:c6:ae:dd:87:c8:86:
59:15:7c:4d:93:db:13:f4:27:fd:6d:50:c3:28:ef:58:b0:18:
07:09:83:ab:b6:ad:be:11:95:9a:ab:97:cb:3b:4a:f6:c5:aa:
83:62:d7:64:89:9c:82:0f:ee:76:86:65:0e:8b:80:86:81:3c:
75:02:99:67:f9:c0:d5:24:1d:66:1e:f3:ac:10:bd:4a:d3:8d:
a3:ab:df:7e:2c:f7:74:50:64:0d:5e:e8:a7:d1:bd:09:de:29:
dc:23:2d:52:dc:19:16:fc:c8:9d:29:aa:1e:e7:1f:7a:e8:ba:
59:38:93:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 12:02:56 2026 by rpki-client