This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/Ez_H479ioNcL335UJpY8pQVTWTA.roa
File: Ez_H479ioNcL335UJpY8pQVTWTA.roa (raw, json)
Hash identifier: wEHPbaiFwqkq3MQPzH4qFJ6NOnkRRVzvlv5bawiSpNo=
Subject key identifier: 13:3F:C7:E3:BF:62:A0:D7:0B:DF:7E:54:26:96:3C:A5:05:53:59:30
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 019B7AC7C1D9EC90E2A94643348DC21B4C2F
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/Ez_H479ioNcL335UJpY8pQVTWTA.roa
Signing time: Thu 01 Jan 2026 18:17:50 +0000
ROA not before: Thu 01 Jan 2026 18:17:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 159.148.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Jan 2026 15:30:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:c7:c1:d9:ec:90:e2:a9:46:43:34:8d:c2:1b:4c:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 1 18:17:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=133fc7e3bf62a0d70bdf7e5426963ca505535930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:26:6b:c1:ed:61:20:41:08:ab:63:fc:9f:85:
2e:ee:c1:3e:b9:e1:df:3d:1b:c8:66:78:a3:fc:be:
cb:55:8a:0a:84:92:aa:3f:55:ad:8f:6b:cf:7b:58:
a0:b8:2f:75:3e:27:d4:f4:ef:18:6d:90:49:45:42:
cb:1d:50:b2:8c:50:94:d3:9e:41:7e:8e:c2:35:36:
17:be:10:52:83:25:f4:2f:56:ce:aa:31:90:40:5a:
e5:af:08:00:03:df:b1:b9:0b:84:5c:51:bd:de:9e:
f5:28:ff:a0:a3:6a:53:b5:e9:42:62:01:84:3c:10:
7f:9f:44:66:35:8a:b2:ea:94:e3:a0:b3:42:91:00:
8f:dc:03:64:2a:91:cc:61:b9:43:06:0e:4c:2a:db:
67:3c:08:c7:d0:0f:54:77:6b:41:e4:44:e4:8f:22:
2f:38:a9:60:30:35:3b:e6:db:d3:7d:bb:c0:ae:13:
26:29:13:fa:7d:e4:45:f4:6e:44:38:d7:4c:b4:46:
87:80:49:3a:86:94:ee:87:dd:06:55:1a:3c:c3:19:
e5:a7:5e:18:64:c9:a2:a0:6a:f0:d2:58:d5:3c:d6:
ad:5d:82:14:24:87:70:77:0d:96:12:ec:1c:de:0a:
63:8f:55:cd:94:d6:d7:63:8f:8b:88:17:c7:63:4c:
07:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:3F:C7:E3:BF:62:A0:D7:0B:DF:7E:54:26:96:3C:A5:05:53:59:30
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/Ez_H479ioNcL335UJpY8pQVTWTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.148.186.0/24
Signature Algorithm: sha256WithRSAEncryption
66:c7:ce:05:cf:a1:7a:38:ce:8f:ce:0c:8c:72:39:9f:80:06:
23:ba:5a:18:d4:fb:e7:78:5a:48:9a:5b:0b:dd:82:3f:a9:c4:
c2:d2:a3:a4:08:52:8d:fa:02:8e:63:9b:a9:b1:20:bb:63:b9:
35:cd:3c:ae:2a:4c:71:af:ba:7e:7f:8a:b6:c8:2a:69:af:9c:
4f:49:72:45:92:5e:32:64:7f:6c:38:e7:da:d2:7b:75:b1:7e:
33:47:a3:e0:02:85:9b:7c:7c:09:09:ae:14:23:45:0a:c1:97:
91:01:ed:18:a5:e7:a6:1c:e3:1e:99:41:e1:f6:5a:54:bf:bb:
60:6a:79:dc:92:7d:36:8e:4c:22:e9:c2:ea:55:a4:37:ec:85:
ce:dd:97:7c:9a:75:aa:cf:05:77:27:f9:4f:85:a4:3e:99:e9:
39:3f:e2:23:36:23:48:a6:a1:f7:8e:1d:1d:94:7e:02:33:24:
f2:e5:b7:49:c4:08:56:16:87:60:dc:94:d9:13:0e:f5:b6:1d:
bd:e9:c0:f8:a9:87:5b:f5:f6:dc:a3:54:a2:a4:85:88:aa:17:
4d:19:9c:b6:ce:fc:db:c0:73:5b:35:35:70:02:97:00:73:68:
cf:24:5a:5c:d1:74:d7:16:7a:c1:ba:2a:b3:ad:4b:64:55:60:
d7:17:e2:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 7 23:48:04 2026 by rpki-client