This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/782447-ec8b-4289-9c1c-28f960eb7a39/1/EhG-iYZNFoJEhs2X2OptzmxOfqw.roa
File: EhG-iYZNFoJEhs2X2OptzmxOfqw.roa (raw, json)
Hash identifier: aCu6x2h9aVNHZRLsGFz7tjoYTapCoh/tz4jAafHyEh0=
Subject key identifier: 12:11:BE:89:86:4D:16:82:44:86:CD:97:D8:EA:6D:CE:6C:4E:7E:AC
Certificate issuer: /CN=79df50e26894bb0e81359606d82b7190c17598cc
Certificate serial: 019B7C80C5C784454E104475ABCF59FA02F8
Authority key identifier: 79:DF:50:E2:68:94:BB:0E:81:35:96:06:D8:2B:71:90:C1:75:98:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ed9Q4miUuw6BNZYG2CtxkMF1mMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/782447-ec8b-4289-9c1c-28f960eb7a39/1/EhG-iYZNFoJEhs2X2OptzmxOfqw.roa
Signing time: Fri 02 Jan 2026 02:19:32 +0000
ROA not before: Fri 02 Jan 2026 02:19:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201059
IP address blocks: 185.81.148.0/22 maxlen: 22
2a05:68c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/782447-ec8b-4289-9c1c-28f960eb7a39/1/ed9Q4miUuw6BNZYG2CtxkMF1mMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/782447-ec8b-4289-9c1c-28f960eb7a39/1/ed9Q4miUuw6BNZYG2CtxkMF1mMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ed9Q4miUuw6BNZYG2CtxkMF1mMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:80:c5:c7:84:45:4e:10:44:75:ab:cf:59:fa:02:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79df50e26894bb0e81359606d82b7190c17598cc
Validity
Not Before: Jan 2 02:19:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1211be89864d16824486cd97d8ea6dce6c4e7eac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:72:b1:a0:00:aa:b4:9b:3b:31:b0:23:1c:7e:
56:ce:c9:b3:ca:12:9d:d5:49:86:12:34:81:08:04:
5a:2d:40:9c:66:c4:4d:38:db:d0:b2:bc:21:f0:e2:
6c:c0:20:43:18:33:b5:db:07:8b:8c:0e:d7:bf:17:
e8:1d:94:8d:e8:57:e2:03:d6:3c:71:de:6a:7d:a8:
37:a8:d7:9d:ed:bd:68:69:9f:28:58:24:39:dc:98:
07:e2:dc:b8:8f:09:86:97:4b:9f:44:dd:2a:07:1c:
94:9f:e1:28:f4:54:79:ea:56:c2:51:a3:61:f1:fd:
3a:8c:d6:3e:f9:b9:95:63:30:2b:c3:48:f2:17:7b:
31:dc:1e:f2:bf:24:d5:0c:af:6e:de:86:06:db:b6:
9c:93:49:f9:9d:52:43:a7:d6:dc:87:90:9e:dd:91:
e5:6d:df:3f:69:21:33:d1:66:88:39:3a:0a:f4:22:
88:4c:63:6e:d5:7e:81:cf:63:4f:9c:32:46:0c:81:
25:1c:2f:2f:ee:07:8f:e0:c9:9b:8f:33:5e:58:68:
2f:5a:04:33:e6:1d:fe:44:75:15:ac:04:b3:38:bd:
88:4b:f9:2e:8f:c0:2a:7d:98:81:1d:ff:b1:be:e8:
75:e1:6a:19:10:c5:a2:b2:3e:60:3d:cb:bc:5c:80:
5e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:11:BE:89:86:4D:16:82:44:86:CD:97:D8:EA:6D:CE:6C:4E:7E:AC
X509v3 Authority Key Identifier:
keyid:79:DF:50:E2:68:94:BB:0E:81:35:96:06:D8:2B:71:90:C1:75:98:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed9Q4miUuw6BNZYG2CtxkMF1mMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/782447-ec8b-4289-9c1c-28f960eb7a39/1/EhG-iYZNFoJEhs2X2OptzmxOfqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/782447-ec8b-4289-9c1c-28f960eb7a39/1/ed9Q4miUuw6BNZYG2CtxkMF1mMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.148.0/22
IPv6:
2a05:68c0::/29
Signature Algorithm: sha256WithRSAEncryption
8c:ce:ae:ab:98:45:fd:cb:87:11:c4:a1:ec:70:b0:0d:6b:05:
82:58:89:d0:4e:2c:57:39:99:b4:dd:04:33:45:b6:84:37:25:
3c:17:e2:78:02:2e:21:5b:c1:c1:fe:e5:7e:19:11:87:4a:aa:
a9:0b:a2:d0:97:c8:2b:40:40:c2:55:66:56:f0:bd:d2:2d:87:
f6:e5:ab:cd:ad:fb:ab:09:a7:d0:e9:8d:c6:b2:c2:c1:a6:cf:
6e:b5:24:d3:ab:9b:0d:cd:65:65:b0:8d:5b:b7:e8:c6:ea:86:
2b:da:f7:1c:ec:6d:ea:0e:50:90:12:9e:e7:08:c4:a7:c2:ad:
5f:af:4e:06:2d:ca:59:b5:b4:52:cc:8c:fd:43:cb:64:7d:de:
9a:60:b6:c5:3b:81:46:5d:09:67:8f:eb:a5:44:eb:e8:da:2f:
8f:1c:59:ea:89:51:db:38:f4:af:91:8e:66:6a:2a:e2:18:27:
00:64:95:c1:66:09:6c:6a:18:b8:e6:93:9a:28:40:d8:30:28:
e4:03:4d:f2:28:75:54:ec:b0:3b:b2:42:5d:87:e1:6f:b6:23:
1c:23:fd:86:e8:8c:7d:90:c8:75:e9:00:4f:71:25:c2:65:54:
c7:c9:77:36:52:aa:02:ab:21:3e:70:e2:5f:94:1b:5f:60:4a:
8c:a5:83:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:00:38 2026 by rpki-client