This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/EA-NEOtP3uDP9jqB_OwjrtlomoQ.roa
File: EA-NEOtP3uDP9jqB_OwjrtlomoQ.roa (raw, json)
Hash identifier: f9ettJwQvG7z/vLtWszxNDWQ12P3Qi4WIIeHx0l0KMI=
Subject key identifier: 10:0F:8D:10:EB:4F:DE:E0:CF:F6:3A:81:FC:EC:23:AE:D9:68:9A:84
Certificate issuer: /CN=9145ead8d3f1284402b6f75614a87257503ce1bc
Certificate serial: 019B7AC8B373775375CFA0915B8DFBB824CB
Authority key identifier: 91:45:EA:D8:D3:F1:28:44:02:B6:F7:56:14:A8:72:57:50:3C:E1:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUXq2NPxKEQCtvdWFKhyV1A84bw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/EA-NEOtP3uDP9jqB_OwjrtlomoQ.roa
Signing time: Thu 01 Jan 2026 18:18:51 +0000
ROA not before: Thu 01 Jan 2026 18:18:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60233
IP address blocks: 94.177.80.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/kUXq2NPxKEQCtvdWFKhyV1A84bw.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/kUXq2NPxKEQCtvdWFKhyV1A84bw.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUXq2NPxKEQCtvdWFKhyV1A84bw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:c8:b3:73:77:53:75:cf:a0:91:5b:8d:fb:b8:24:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9145ead8d3f1284402b6f75614a87257503ce1bc
Validity
Not Before: Jan 1 18:18:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=100f8d10eb4fdee0cff63a81fcec23aed9689a84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:07:e3:a5:4b:38:1a:e4:b1:50:61:cc:4e:5d:
40:06:e6:2d:59:bf:cc:ca:c7:12:8c:27:7a:63:41:
27:33:9e:46:8d:75:60:75:41:f4:8e:60:0f:01:2c:
1b:31:a8:24:5e:d5:3c:6e:d8:59:bf:2f:07:37:cf:
10:a7:06:f6:38:f0:4f:ef:ff:ac:83:d2:9f:30:d8:
40:5c:37:f6:09:73:b9:9c:e7:08:5a:74:87:9d:9e:
4d:f3:52:84:56:83:7d:51:4b:bb:07:09:d7:7a:65:
99:6e:71:21:54:50:47:a2:7d:54:0a:0d:39:51:8b:
5e:cb:3b:bf:17:7f:31:21:ce:18:a1:42:d9:73:87:
90:2c:d4:d4:86:60:21:f6:00:89:73:c1:9b:4b:51:
5b:81:b2:4b:ce:1a:5d:4d:b8:36:e8:e1:59:27:41:
76:d8:00:ac:90:c2:f9:72:49:e7:3c:3b:fd:3e:54:
be:b0:60:7b:c4:43:0a:da:4a:02:09:c9:67:59:56:
44:59:18:5c:74:1b:dc:01:16:df:0f:ed:3d:44:8b:
0e:66:f0:a7:9b:16:0c:13:a0:3c:56:bc:15:20:a6:
1c:d2:21:f5:d1:9e:3c:11:e1:cb:bd:e3:7e:04:50:
dc:e7:5b:92:d8:8e:14:16:bd:17:25:72:01:72:b0:
75:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:0F:8D:10:EB:4F:DE:E0:CF:F6:3A:81:FC:EC:23:AE:D9:68:9A:84
X509v3 Authority Key Identifier:
keyid:91:45:EA:D8:D3:F1:28:44:02:B6:F7:56:14:A8:72:57:50:3C:E1:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUXq2NPxKEQCtvdWFKhyV1A84bw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/EA-NEOtP3uDP9jqB_OwjrtlomoQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/kUXq2NPxKEQCtvdWFKhyV1A84bw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.177.80.0/21
Signature Algorithm: sha256WithRSAEncryption
7c:b8:ca:05:a3:79:28:fb:1e:ba:c3:da:a8:1a:a7:30:37:1d:
f9:f4:74:62:60:f3:14:af:6a:ca:45:ad:05:eb:e9:41:7f:ab:
ef:19:c2:08:77:d7:db:7a:2b:06:94:25:90:b4:46:7e:1b:5b:
33:58:fd:21:b3:5b:a8:9e:38:1a:4a:75:42:f7:f2:c0:ee:1b:
34:ec:5a:ad:84:db:1c:44:fa:77:85:dd:f7:cf:6c:c2:2c:29:
a0:2c:4d:78:a7:2f:26:d8:ee:cb:f4:a7:87:56:32:bc:7b:46:
21:f5:44:03:c2:90:2c:ea:79:41:ba:49:97:3f:dd:80:8d:14:
52:8e:1a:d7:53:f2:25:1a:09:74:44:46:7a:26:f5:e6:92:d7:
91:cc:c0:5e:24:57:74:3b:6d:57:3e:dd:d2:13:cb:f1:f7:53:
0b:e2:be:a0:0e:f3:2b:c9:05:da:3f:d5:ad:38:29:5d:9c:b7:
25:dd:02:ee:14:0a:35:6b:8d:73:99:70:27:fb:4c:74:8d:42:
5c:b3:17:0b:14:04:2d:d0:40:a0:42:97:27:c0:c7:1c:25:aa:
20:58:e6:17:46:30:5d:39:e5:68:e3:50:dc:01:ac:56:ce:54:
fe:d0:7a:6d:eb:06:13:41:d9:b1:84:45:df:a6:27:0b:26:04:
64:83:fe:2b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt6yLNzd1N1z6CRW437uCTLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxNDVlYWQ4ZDNmMTI4NDQwMmI2Zjc1NjE0YTg3MjU3NTAz
Y2UxYmMwHhcNMjYwMTAxMTgxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMDBmOGQxMGViNGZkZWUwY2ZmNjNhODFmY2VjMjNhZWQ5Njg5YTg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAfjpUs4GuSxUGHMTl1ABuYtWb/M
yscSjCd6Y0EnM55GjXVgdUH0jmAPASwbMagkXtU8bthZvy8HN88Qpwb2OPBP7/+s
g9KfMNhAXDf2CXO5nOcIWnSHnZ5N81KEVoN9UUu7BwnXemWZbnEhVFBHon1UCg05
UYteyzu/F38xIc4YoULZc4eQLNTUhmAh9gCJc8GbS1FbgbJLzhpdTbg26OFZJ0F2
2ACskML5cknnPDv9PlS+sGB7xEMK2koCCclnWVZEWRhcdBvcARbfD+09RIsOZvCn
mxYME6A8VrwVIKYc0iH10Z48EeHLveN+BFDc51uS2I4UFr0XJXIBcrB1tQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBAPjRDrT97gz/Y6gfzsI67ZaJqEMB8GA1UdIwQY
MBaAFJFF6tjT8ShEArb3VhSocldQPOG8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1VYcTJOUHhLRVFDdHZkV0ZLaHlWMUE4NGJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9hNTIzNWYtNjJmYi00YWJiLTgwMzct
MmFkMTk1MjY0YzcyLzEvRUEtTkVPdFAzdURQOWpxQl9Pd2pydGxvbW9RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9hNTIzNWYtNjJmYi00YWJiLTgwMzctMmFkMTk1MjY0Yzcy
LzEva1VYcTJOUHhLRVFDdHZkV0ZLaHlWMUE4NGJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDXrFQMA0G
CSqGSIb3DQEBCwUAA4IBAQB8uMoFo3ko+x66w9qoGqcwNx359HRiYPMUr2rKRa0F
6+lBf6vvGcIId9fbeisGlCWQtEZ+G1szWP0hs1uonjgaSnVC9/LA7hs07FqthNsc
RPp3hd33z2zCLCmgLE14py8m2O7L9KeHVjK8e0Yh9UQDwpAs6nlBukmXP92AjRRS
jhrXU/IlGgl0REZ6JvXmkteRzMBeJFd0O21XPt3SE8vx91ML4r6gDvMryQXaP9Wt
OCldnLcl3QLuFAo1a41zmXAn+0x0jUJcsxcLFAQt0ECgQpcnwMccJaogWOYXRjBd
OeVo41DcAaxWzlT+0Hpt6wYTQdmxhEXfpicLJgRkg/4r
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:43:54 2026 by rpki-client