This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/Eq5ioVwY0Z8MJRoQEKvMar-suRA.roa
File: Eq5ioVwY0Z8MJRoQEKvMar-suRA.roa (raw, json)
Hash identifier: x5+YRcpOPcZJN6v4+CqB6CF57wC48AN2GfCAXoRkaME=
Subject key identifier: 12:AE:62:A1:5C:18:D1:9F:0C:25:1A:10:10:AB:CC:6A:BF:AC:B9:10
Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial: 019B7FF16B43C34C1F14CDEE5DF787F269D5
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/Eq5ioVwY0Z8MJRoQEKvMar-suRA.roa
Signing time: Fri 02 Jan 2026 18:21:26 +0000
ROA not before: Fri 02 Jan 2026 18:21:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60150
IP address blocks: 45.12.100.0/22 maxlen: 24
185.96.56.0/22 maxlen: 24
185.136.16.0/22 maxlen: 24
2a05:ff00::/29 maxlen: 48
2a07:5b40::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 05:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:f1:6b:43:c3:4c:1f:14:cd:ee:5d:f7:87:f2:69:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Validity
Not Before: Jan 2 18:21:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=12ae62a15c18d19f0c251a1010abcc6abfacb910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ab:c6:4f:fa:85:d1:b2:3b:93:fc:5e:7b:9e:
60:73:fc:21:9c:4e:c7:17:a9:e3:82:8c:67:9a:fe:
02:ca:f1:fc:27:c8:6b:d7:e6:58:81:7a:72:9d:7b:
d1:ed:a9:3c:2b:a0:53:a4:06:8b:40:c3:98:86:d1:
43:a2:99:4d:4d:a3:d0:7a:24:60:4b:5e:4c:cb:36:
05:46:09:8a:2b:3b:9b:62:8d:1d:da:fb:7e:bf:05:
dd:95:aa:75:64:f9:d8:71:18:0e:ab:5c:79:f2:8d:
89:3c:b0:de:7a:85:94:0c:91:33:9e:ae:df:c5:39:
b8:90:de:1d:79:c4:f5:c7:d0:6a:01:46:6d:04:0f:
83:e0:47:51:63:69:0e:99:6b:39:92:f2:6b:8f:6b:
5a:40:0b:b3:68:76:45:63:74:e2:87:05:b0:19:80:
0a:f5:4e:2d:18:66:b0:75:96:8a:7c:3e:8c:5c:45:
50:10:f8:bd:dc:40:6d:4b:47:80:ea:b0:13:f4:f7:
6f:2f:2a:fe:02:68:16:ee:b2:71:19:f2:af:98:86:
39:e9:1a:f9:29:84:0f:da:21:c1:d3:b0:e1:3f:6b:
51:1c:e2:30:8f:74:2f:9e:0d:8a:55:00:24:b8:6c:
7a:e0:4d:5d:0a:3b:8e:65:72:5d:13:82:ad:4f:2b:
e0:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:AE:62:A1:5C:18:D1:9F:0C:25:1A:10:10:AB:CC:6A:BF:AC:B9:10
X509v3 Authority Key Identifier:
keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/Eq5ioVwY0Z8MJRoQEKvMar-suRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.100.0/22
185.96.56.0/22
185.136.16.0/22
IPv6:
2a05:ff00::/29
2a07:5b40::/29
Signature Algorithm: sha256WithRSAEncryption
4e:6c:4e:7b:8d:41:aa:63:f9:58:3c:e6:bc:c5:e2:7f:ca:0e:
11:3f:ae:fd:c2:9f:d8:80:27:3d:73:b3:e4:e7:ea:cc:54:ed:
70:7f:b6:a2:df:11:41:8c:4f:52:1d:7c:6e:bb:bb:18:23:7d:
b0:f7:a5:74:cc:00:a2:23:6f:25:52:63:1a:17:78:fb:69:09:
c2:e2:23:6e:a8:1f:c5:1b:0b:43:c1:72:20:f3:7a:a4:84:91:
e0:63:f9:8b:6e:c4:df:df:f0:a8:4e:0f:29:e1:e1:4e:31:26:
2b:70:fd:34:83:0a:f8:e6:5d:da:f9:e6:d0:2f:99:48:54:a3:
fb:ad:45:37:90:ef:b1:8d:9c:97:92:f7:e7:37:2b:54:82:e7:
d5:fa:85:48:f3:e5:2b:d9:ef:ed:ef:6e:c7:9f:ff:42:e2:a4:
d8:a9:d0:8f:d1:7c:06:ef:da:5c:50:d3:54:17:c6:d3:e8:88:
92:c8:33:bd:3c:e5:27:21:8e:0e:80:56:1a:b4:27:10:a0:0b:
b2:d2:61:84:16:95:b8:1f:97:14:4d:08:2e:a8:bb:98:95:1a:
8a:3c:9b:e3:c5:b6:11:47:67:1f:3c:cc:02:3a:0f:82:ef:f8:
99:83:35:f2:ee:7f:89:68:35:7a:ed:62:e1:7d:b5:f7:3b:68:
89:11:dc:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 14:43:31 2026 by rpki-client