This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/L_eXFdCQUF-9eDxelAnxZKL6wnQ.roa
File: L_eXFdCQUF-9eDxelAnxZKL6wnQ.roa (raw, json)
Hash identifier: 7d4nHmuLNm2MvlXBb1jvivzyW1JkmgHoj/AiRQe6d+Q=
Subject key identifier: 2F:F7:97:15:D0:90:50:5F:BD:78:3C:5E:94:09:F1:64:A2:FA:C2:74
Certificate issuer: /CN=7a478c5aa226a278e8b1906f371c60cfc7d87e8e
Certificate serial: 019B76EB723DFBE3EA1E7F63ED26C548F88A
Authority key identifier: 7A:47:8C:5A:A2:26:A2:78:E8:B1:90:6F:37:1C:60:CF:C7:D8:7E:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ekeMWqImonjosZBvNxxgz8fYfo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/L_eXFdCQUF-9eDxelAnxZKL6wnQ.roa
Signing time: Thu 01 Jan 2026 00:18:20 +0000
ROA not before: Thu 01 Jan 2026 00:18:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8075
IP address blocks: 94.143.105.0/24 maxlen: 24
94.143.106.0/24 maxlen: 24
94.143.107.0/24 maxlen: 24
94.143.108.0/24 maxlen: 24
94.143.109.0/24 maxlen: 24
94.143.110.0/24 maxlen: 24
185.236.124.0/24 maxlen: 24
185.236.125.0/24 maxlen: 24
185.236.126.0/24 maxlen: 24
185.236.127.0/24 maxlen: 24
212.1.218.0/24 maxlen: 24
212.1.219.0/24 maxlen: 24
212.1.222.0/24 maxlen: 24
212.1.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ekeMWqImonjosZBvNxxgz8fYfo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Jan 2026 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:76:eb:72:3d:fb:e3:ea:1e:7f:63:ed:26:c5:48:f8:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a478c5aa226a278e8b1906f371c60cfc7d87e8e
Validity
Not Before: Jan 1 00:18:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2ff79715d090505fbd783c5e9409f164a2fac274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e5:88:27:31:17:4f:2b:ba:1d:07:cd:5e:a3:
60:31:dc:2d:50:96:da:48:26:61:64:6c:0a:49:89:
28:33:9a:51:63:87:d3:6c:e6:2c:4c:2f:84:06:86:
1f:05:47:77:9e:59:87:7f:80:29:34:a0:c3:7e:e3:
2e:7a:37:60:ce:71:26:dd:ee:cf:8f:d6:96:e3:fd:
91:c7:56:62:82:ff:07:76:de:d4:47:56:8e:a2:08:
6d:c4:78:48:2f:d6:1e:6e:f3:77:07:27:c5:a9:d9:
2a:b5:9a:de:d7:a4:73:61:78:71:7e:6f:a5:ea:c7:
3f:63:c5:9a:52:62:9f:53:95:cd:86:f0:5f:6d:8d:
3c:a6:78:2f:91:5a:1f:26:41:a1:bc:31:6b:f7:f4:
65:00:44:7a:76:30:2d:0b:7e:80:fb:62:92:c6:9e:
c0:7a:41:fa:7f:2d:9f:a4:b4:3e:45:46:58:0c:41:
e2:9a:69:59:0e:27:89:6f:4d:6b:e4:d5:89:cc:cf:
76:c5:01:5d:f4:a4:e6:48:98:17:fd:79:fa:4c:5c:
fa:28:33:4a:a7:54:4e:3c:7c:b7:7c:0d:dc:f4:ab:
7f:7d:0e:2f:7b:f4:28:5a:55:b4:9f:01:4c:e6:b7:
e8:fc:4f:e5:42:79:c0:2e:56:28:f9:dc:5b:26:98:
7a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F7:97:15:D0:90:50:5F:BD:78:3C:5E:94:09:F1:64:A2:FA:C2:74
X509v3 Authority Key Identifier:
keyid:7A:47:8C:5A:A2:26:A2:78:E8:B1:90:6F:37:1C:60:CF:C7:D8:7E:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ekeMWqImonjosZBvNxxgz8fYfo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/L_eXFdCQUF-9eDxelAnxZKL6wnQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.143.105.0-94.143.110.255
185.236.124.0/22
212.1.218.0/23
212.1.222.0/23
Signature Algorithm: sha256WithRSAEncryption
67:a7:df:54:b0:28:9d:a1:fa:3a:c3:65:c4:47:46:0f:be:2c:
f5:08:3a:41:ce:ea:3e:a5:f6:a9:27:24:c9:e0:cc:9a:5a:0b:
fc:09:0e:55:5d:d5:70:1f:7b:de:3d:f4:c7:61:3a:6a:96:9c:
3d:a7:df:4e:22:08:49:ff:7c:bc:e4:5f:64:12:e0:66:c8:78:
1c:86:dc:87:82:58:13:c6:8a:a0:1f:df:b2:19:e9:6a:d5:02:
ba:69:fc:33:d8:73:4e:3e:4e:b5:83:99:d4:7f:ec:07:e7:f8:
1b:c3:e9:00:29:68:12:36:79:a4:24:d9:16:8d:63:75:f2:c4:
f6:16:9d:24:e7:b9:62:88:97:a5:4a:10:db:fc:47:a7:f6:ad:
fe:25:9d:23:9b:78:3b:93:4a:43:a1:32:11:99:b4:f8:32:f1:
23:01:29:8d:5f:9c:f2:63:78:cd:dc:3a:95:03:d4:06:10:45:
d7:b7:3e:07:68:0e:49:07:47:36:11:18:64:db:8d:70:06:f5:
39:1b:34:ba:43:3d:e7:7d:1d:6e:69:44:30:65:f4:8d:be:26:
7a:f2:fe:5f:36:9a:73:d7:d6:4d:6e:a1:01:06:39:64:2e:47:
45:9c:b8:05:e7:b5:46:37:ca:55:7a:84:85:0d:40:b0:98:17:
ba:14:8a:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 16:37:24 2026 by rpki-client