This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/dEeOe_thbpGi5o5rHJZySdJPCaQ.roa
File: dEeOe_thbpGi5o5rHJZySdJPCaQ.roa (raw, json)
Hash identifier: DP+Dji/RLZWa2YhZ353JQ3lkZHVyl7pwMVnUKr45Oy0=
Subject key identifier: 74:47:8E:7B:FB:61:6E:91:A2:E6:8E:6B:1C:96:72:49:D2:4F:09:A4
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 019B797EB876051CBF189FE87653289663CA
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/dEeOe_thbpGi5o5rHJZySdJPCaQ.roa
Signing time: Thu 01 Jan 2026 12:18:26 +0000
ROA not before: Thu 01 Jan 2026 12:18:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41889
IP address blocks: 88.203.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 15:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:7e:b8:76:05:1c:bf:18:9f:e8:76:53:28:96:63:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 1 12:18:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=74478e7bfb616e91a2e68e6b1c967249d24f09a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7f:44:96:94:17:08:3b:0a:b4:6c:dd:23:66:
78:93:d0:5f:b4:91:83:3c:25:16:dd:40:1c:44:0f:
31:0f:c8:18:9e:3b:9f:84:b2:25:e4:c2:2f:34:28:
f6:ca:08:e7:89:1e:62:8e:48:d1:77:1d:6f:f4:83:
fc:0a:42:b4:8c:a5:ab:22:e1:d1:49:ae:c5:1c:f2:
04:1f:e2:7f:09:60:41:08:bc:d7:35:1c:50:e5:81:
09:f8:18:1d:7d:b6:0f:c4:42:44:55:b4:3c:92:03:
76:f7:5a:59:eb:a8:fc:97:56:b2:82:00:eb:d7:f1:
09:81:82:d9:1b:14:54:9d:23:4b:18:27:1e:be:0d:
42:8e:ad:16:bf:c3:91:df:bc:f5:ec:83:d2:70:86:
44:a6:2d:d4:e5:0a:3e:be:60:7a:e2:30:83:e9:0c:
54:7f:33:1b:69:c9:85:9b:c3:91:2e:64:9b:a2:14:
96:10:d6:64:e3:f9:31:5f:8a:75:1c:38:87:ff:51:
30:a1:01:87:7d:3b:64:bd:4d:1b:5a:ed:df:4d:ca:
88:fd:7b:cd:1e:76:86:60:84:fd:0c:5f:ae:8e:fa:
01:a8:77:58:7a:65:89:73:dd:34:d2:7c:8d:5f:d8:
a8:e3:60:11:20:f5:4a:88:9d:4a:fe:8b:03:fe:b7:
7b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:47:8E:7B:FB:61:6E:91:A2:E6:8E:6B:1C:96:72:49:D2:4F:09:A4
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/dEeOe_thbpGi5o5rHJZySdJPCaQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.203.239.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:87:44:8b:9f:92:4f:7e:84:6a:db:95:48:ae:04:03:85:d5:
53:2f:02:7c:66:60:47:d4:49:70:88:15:05:0f:dc:d2:b6:c3:
3e:b9:f0:2a:b8:1e:b1:f8:0d:96:53:43:d2:b3:30:ba:77:9d:
12:e5:b0:fb:dc:21:be:94:89:bf:b1:08:25:5a:3c:65:65:e1:
c7:1a:ba:41:81:9b:ab:de:e6:0e:6f:05:65:38:0a:3d:b3:73:
e0:6e:31:7b:aa:3d:78:7f:80:d9:95:ab:f5:54:af:67:a0:cf:
20:3f:ba:2d:e7:eb:12:8c:14:e3:6a:0e:21:10:cf:3f:88:5d:
48:f3:bb:b8:d4:1e:bf:bb:e7:6e:4a:4d:73:6c:a0:0f:da:e5:
83:a9:ce:63:97:16:90:b8:37:53:7c:c3:29:25:70:f0:9b:92:
d2:73:19:17:46:53:ce:4b:4d:c0:d1:eb:c2:83:81:1a:bb:20:
0d:2a:28:41:3e:24:f0:58:ba:2b:06:38:30:70:3f:be:21:92:
3e:e0:49:2b:63:0f:46:2a:ea:61:04:a8:8b:31:ae:9a:1b:dc:
8d:90:e6:01:a4:8a:a5:71:b7:47:44:11:5d:d6:c1:78:43:47:
01:04:64:c2:2d:26:01:8e:c8:47:5e:50:76:57:1c:07:e7:e9:
de:aa:cb:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 17:24:28 2026 by rpki-client