This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/E_0leT_uDRkXv7WB57p6ohdYHcA.roa
File: E_0leT_uDRkXv7WB57p6ohdYHcA.roa (raw, json)
Hash identifier: of3SrKQ/OM0hwqJUJsuqK6bsFn3lmbUXAT1QC0UR01k=
Subject key identifier: 13:FD:25:79:3F:EE:0D:19:17:BF:B5:81:E7:BA:7A:A2:17:58:1D:C0
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 019B7AC7D350215F6C0438ACC796694F5E40
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/E_0leT_uDRkXv7WB57p6ohdYHcA.roa
Signing time: Thu 01 Jan 2026 18:17:54 +0000
ROA not before: Thu 01 Jan 2026 18:17:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56323
IP address blocks: 159.148.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 16:55:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:c7:d3:50:21:5f:6c:04:38:ac:c7:96:69:4f:5e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 1 18:17:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=13fd25793fee0d1917bfb581e7ba7aa217581dc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9c:06:68:1c:e3:fa:6e:81:a0:5d:98:5e:02:
7c:70:3f:33:b3:6e:e9:10:2a:40:c0:ed:ee:a9:75:
aa:e6:7b:18:91:0c:47:22:cb:ff:93:a2:46:53:b9:
e2:db:99:94:be:f4:1c:f3:ba:3e:68:07:48:f4:74:
09:ff:c4:03:9e:b0:39:fb:7e:eb:b8:d8:59:e0:45:
18:ad:0b:35:bf:c0:0c:27:8a:54:fc:2f:60:32:3f:
14:40:70:26:27:2e:e4:28:0a:2f:39:7c:aa:cf:59:
ee:ac:94:58:bd:65:64:4b:db:dd:95:d0:91:7b:0f:
aa:26:59:8b:1b:73:0e:96:a7:8d:e8:8d:e2:f7:0c:
06:15:bb:09:e1:c0:2d:74:66:69:ce:ad:86:d8:e1:
43:af:84:9d:12:7e:39:09:d9:62:38:fa:9c:ad:22:
f9:2f:23:9a:ce:bb:3a:43:83:f5:c5:1d:91:43:81:
69:bf:f8:6e:c5:cd:d4:45:94:0f:e8:15:a8:3c:61:
55:79:3a:5d:18:01:cb:16:fd:53:52:36:46:ac:7e:
98:64:16:9e:59:a5:d3:7b:d4:94:06:9d:96:a9:c1:
87:aa:9f:4a:b5:31:f6:2f:2a:53:44:7d:49:1c:83:
21:42:52:ad:f0:90:ef:c6:6e:00:dc:48:e8:37:05:
84:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:FD:25:79:3F:EE:0D:19:17:BF:B5:81:E7:BA:7A:A2:17:58:1D:C0
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/E_0leT_uDRkXv7WB57p6ohdYHcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.148.141.0/24
Signature Algorithm: sha256WithRSAEncryption
54:c0:f6:c9:6b:d1:d8:d6:ad:ac:15:61:e4:bb:50:3d:2c:b6:
d8:35:37:07:9b:41:4e:e0:22:15:ff:1c:64:3c:30:f9:93:b0:
d3:cb:60:f8:2f:e2:12:c4:a7:51:96:8c:b5:25:2b:c5:13:89:
19:d1:f5:40:d0:98:4e:45:49:1d:6c:34:22:1c:e9:55:c2:70:
5d:f4:48:55:16:1a:d5:48:bf:a1:27:67:f4:61:c0:18:75:7e:
db:18:5b:59:79:c5:20:da:d4:40:45:1a:8c:bc:42:03:c4:5d:
08:f9:68:1e:aa:7e:aa:81:32:52:15:c1:59:c0:51:68:d4:70:
f9:4a:5a:fe:22:40:a4:38:c6:2e:ce:2b:72:30:7f:e7:e9:76:
d7:f5:de:d1:7a:04:b0:34:6b:12:f2:a9:88:c2:6c:f5:1c:8c:
4b:e3:28:fb:06:ba:6c:71:0c:39:91:0a:51:77:c8:19:00:ca:
cd:30:1e:2d:b7:f3:ec:4f:cd:1e:d5:c9:e0:86:2a:08:74:57:
7c:72:9a:37:f1:f6:87:9e:d1:dd:45:58:41:5d:b5:64:c5:9c:
e0:1a:3d:ae:00:ce:1b:80:da:f7:53:2e:d7:3b:89:57:c9:c9:
11:50:b3:dc:36:c8:5d:e2:e2:b5:55:31:46:ef:7a:c5:62:7a:
15:9d:36:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 20:00:42 2026 by rpki-client