This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/eoJQmOi00RtisYT69k2lcfpvuTI.roa
File: eoJQmOi00RtisYT69k2lcfpvuTI.roa (raw, json)
Hash identifier: zyn9MIC0PYdNEQ/1NTEkC1cOqVRsDhiTSo2jAFn7xpI=
Subject key identifier: 7A:82:50:98:E8:B4:D1:1B:62:B1:84:FA:F6:4D:A5:71:FA:6F:B9:32
Certificate issuer: /CN=d2c2b0ee187928409065d19ee9c0858e8c17ea13
Certificate serial: 019B7CEDF3C3B33E8A27CA90B68D8404C513
Authority key identifier: D2:C2:B0:EE:18:79:28:40:90:65:D1:9E:E9:C0:85:8E:8C:17:EA:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0sKw7hh5KECQZdGe6cCFjowX6hM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/eoJQmOi00RtisYT69k2lcfpvuTI.roa
Signing time: Fri 02 Jan 2026 04:18:47 +0000
ROA not before: Fri 02 Jan 2026 04:18:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48283
IP address blocks: 194.0.28.0/24 maxlen: 24
194.0.30.0/24 maxlen: 24
194.0.31.0/24 maxlen: 24
2001:678:2c::/48 maxlen: 48
2001:678:34::/48 maxlen: 48
2001:678:38::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0sKw7hh5KECQZdGe6cCFjowX6hM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:ed:f3:c3:b3:3e:8a:27:ca:90:b6:8d:84:04:c5:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2c2b0ee187928409065d19ee9c0858e8c17ea13
Validity
Not Before: Jan 2 04:18:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7a825098e8b4d11b62b184faf64da571fa6fb932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:4d:06:51:48:00:c4:fa:76:9f:b3:b2:9f:54:
f1:92:bc:69:ae:d7:09:47:57:fa:00:ce:10:ee:37:
d6:a2:50:6d:09:74:8b:78:b0:7a:29:02:ea:dc:8f:
de:8c:d3:18:a9:fd:6b:05:2c:f0:b3:c7:78:aa:6c:
fd:e2:92:94:dc:6d:84:50:f1:76:c7:14:29:1d:c3:
de:ae:c4:95:a0:c9:4e:dd:d9:d4:d7:34:bc:95:cc:
4c:ee:23:42:95:59:dd:bb:4b:f0:8c:c6:e8:fb:d8:
f4:6a:ae:17:8a:2e:b1:fb:64:51:48:f2:3a:ab:32:
56:10:b4:4b:ab:c0:cb:8a:cc:51:38:95:f8:f6:99:
41:8f:5b:ad:e5:5d:e7:03:a9:85:ce:32:52:50:95:
50:28:77:f7:79:a0:d7:32:db:15:7c:fc:b8:bc:e1:
a6:df:67:52:51:59:d8:82:a8:1c:d8:7c:f3:10:10:
b0:e5:5f:0b:0f:a2:54:b0:11:05:a6:1d:39:d7:10:
32:57:59:83:68:c7:7e:d2:fa:88:96:8c:88:2f:73:
3f:f6:a4:b7:78:3a:90:36:a9:71:0f:55:9c:63:d8:
d1:00:1e:27:13:5f:10:ce:1d:83:93:3c:c6:43:6e:
3d:6d:bd:cb:6d:63:98:9e:f4:5c:1e:11:1b:53:02:
11:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:82:50:98:E8:B4:D1:1B:62:B1:84:FA:F6:4D:A5:71:FA:6F:B9:32
X509v3 Authority Key Identifier:
keyid:D2:C2:B0:EE:18:79:28:40:90:65:D1:9E:E9:C0:85:8E:8C:17:EA:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sKw7hh5KECQZdGe6cCFjowX6hM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/eoJQmOi00RtisYT69k2lcfpvuTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.28.0/24
194.0.30.0/23
IPv6:
2001:678:2c::/48
2001:678:34::/48
2001:678:38::/48
Signature Algorithm: sha256WithRSAEncryption
3b:b6:bc:e0:67:ae:39:90:74:ac:a8:5a:0b:07:a3:10:0a:c6:
6c:87:71:e7:23:aa:cb:5d:f3:05:c1:cf:54:94:58:73:97:74:
84:7b:94:60:b8:cc:bb:d1:9d:61:0e:77:aa:a4:fd:3f:9f:c5:
86:3e:05:1a:06:98:90:ca:6b:90:2f:c1:7e:34:8f:54:fb:84:
51:79:1b:b9:73:08:94:ae:ce:53:9c:9e:fc:54:3c:b7:54:71:
fa:2a:07:ef:d7:0f:08:c6:8f:a0:8a:c6:b1:7b:f6:e5:a0:0e:
1e:67:0a:43:45:c1:64:1f:0a:af:0f:75:09:3f:d4:f5:14:2d:
c7:94:d2:43:ed:56:af:e3:df:89:30:ed:83:a9:4c:c1:56:e1:
d1:c2:50:ee:15:11:ae:00:37:37:8e:83:f6:da:f6:b4:ce:f7:
e6:41:43:33:fa:b1:49:8e:ce:63:d9:ee:af:78:c8:64:73:03:
87:ae:9e:37:b5:e7:c9:07:5c:ce:ef:53:1e:69:23:0c:76:71:
a6:a8:ec:8c:7c:a1:c8:c7:a5:c0:36:6c:e8:20:3d:5b:61:65:
3e:36:42:d2:8a:af:34:41:d4:af:ec:6d:2f:92:29:8c:7c:67:
91:80:cb:85:de:21:99:8a:e1:44:5a:38:c1:23:08:5a:35:9b:
bd:0f:56:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:30:17 2026 by rpki-client