This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/xeqelJo79Mi4ptPjtrax6cg2B_s.roa
File: xeqelJo79Mi4ptPjtrax6cg2B_s.roa (raw, json)
Hash identifier: t6o74vCypP/JXaPY7ExWQCtzzyBRmlLod50GjeunzUA=
Subject key identifier: C5:EA:9E:94:9A:3B:F4:C8:B8:A6:D3:E3:B6:B6:B1:E9:C8:36:07:FB
Certificate issuer: /CN=790d1ca78761310ac39a714ff62f3b92b2e77d8a
Certificate serial: 019B7CEDDCE01EB1B7DFD9B1E43860449B3D
Authority key identifier: 79:0D:1C:A7:87:61:31:0A:C3:9A:71:4F:F6:2F:3B:92:B2:E7:7D:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQ0cp4dhMQrDmnFP9i87krLnfYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/xeqelJo79Mi4ptPjtrax6cg2B_s.roa
Signing time: Fri 02 Jan 2026 04:18:41 +0000
ROA not before: Fri 02 Jan 2026 04:18:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 194.42.48.0/24 maxlen: 32
2001:7f8:c::/48 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/eQ0cp4dhMQrDmnFP9i87krLnfYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Jan 2026 18:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:ed:dc:e0:1e:b1:b7:df:d9:b1:e4:38:60:44:9b:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=790d1ca78761310ac39a714ff62f3b92b2e77d8a
Validity
Not Before: Jan 2 04:18:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c5ea9e949a3bf4c8b8a6d3e3b6b6b1e9c83607fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7a:11:ca:0a:f8:af:eb:33:73:7e:b4:4a:9a:
8f:d4:c3:77:77:fd:33:51:35:7e:71:fd:43:5e:dc:
a7:37:dc:0f:d9:62:87:de:4b:b1:93:ac:21:cb:64:
a6:c9:31:82:2b:1c:20:a1:6a:f9:4f:89:af:e6:2a:
a4:14:de:a6:52:ac:99:3a:75:ef:d2:bf:f8:37:9e:
5a:85:b4:c0:39:77:67:59:bc:bd:4a:6b:29:4e:0c:
f5:28:63:30:95:63:ee:03:77:5e:f9:f0:a4:55:cf:
02:41:82:21:33:10:42:5d:22:fe:35:e5:08:c4:1c:
1c:d0:ad:0b:07:4a:0a:60:50:55:5c:d4:87:2e:9e:
dd:43:23:e9:b3:56:b9:08:10:c0:2c:6a:5e:99:a6:
dc:b0:d4:50:91:fd:88:d8:67:b3:d5:f7:b4:87:ac:
4e:d4:a7:14:e3:a6:9f:9c:b2:40:1c:fd:ed:c4:7f:
ed:30:f0:d0:bd:7e:f0:e9:c2:85:74:52:8e:af:e6:
f3:72:8f:00:45:13:01:88:b0:f8:ec:09:ab:a1:f4:
1f:87:59:b9:97:2e:b2:c0:27:6a:43:47:8b:88:20:
d1:91:2f:7c:1c:fd:4e:75:18:77:2e:d7:5c:f8:63:
eb:74:cb:b4:05:f7:7e:d7:21:dd:ae:c8:6d:10:43:
91:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:EA:9E:94:9A:3B:F4:C8:B8:A6:D3:E3:B6:B6:B1:E9:C8:36:07:FB
X509v3 Authority Key Identifier:
keyid:79:0D:1C:A7:87:61:31:0A:C3:9A:71:4F:F6:2F:3B:92:B2:E7:7D:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQ0cp4dhMQrDmnFP9i87krLnfYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/xeqelJo79Mi4ptPjtrax6cg2B_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.42.48.0/24
IPv6:
2001:7f8:c::/48
Signature Algorithm: sha256WithRSAEncryption
7e:e4:ab:97:a3:44:f1:15:07:23:66:34:47:88:ae:57:72:f7:
38:98:be:a0:9b:a9:f8:39:5d:f5:6d:2a:59:17:8b:7c:6e:ab:
af:e6:9a:ae:b5:6d:e1:9c:2a:86:7e:40:76:65:bb:ca:a2:d0:
fb:84:8a:e8:26:8c:dd:d5:fb:7c:42:7a:ae:95:36:6a:d9:71:
a4:cd:4c:82:05:e1:ba:7f:e4:be:f1:06:64:a8:80:00:48:cd:
ca:11:3b:9e:62:77:af:8f:b9:38:8b:59:a5:00:6d:a9:b7:76:
f3:a4:43:ac:5e:1b:ca:e2:f3:9b:59:e4:36:a4:52:a5:7e:89:
3d:08:5e:51:a2:2d:b3:e0:46:ef:09:38:75:3d:92:51:1d:80:
8f:dd:05:41:b1:ba:38:14:10:00:86:0d:18:7d:4f:62:2e:c2:
92:7f:06:fb:03:f1:f9:e8:ed:ba:3e:45:83:14:77:d1:52:0a:
60:80:71:73:1c:ed:0e:d1:03:d7:77:9e:06:3f:1d:44:ab:90:
de:67:6b:ee:54:b8:89:bc:d2:77:52:4e:e6:a6:08:54:46:84:
f9:51:d0:d9:69:77:03:59:c8:f8:d3:6d:8b:b7:61:f0:27:63:
35:48:c1:f5:47:13:95:1d:c5:3c:af:ee:77:53:e9:6e:a8:c5:
54:0f:09:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 00:57:55 2026 by rpki-client