This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/eo_ZR-l1qlmF6pagcerlIk0exa8.roa
File: eo_ZR-l1qlmF6pagcerlIk0exa8.roa (raw, json)
Hash identifier: N87YGBjIca+5ITo/+cPLB9PRGC8agj0jQUAOrQFv1vI=
Subject key identifier: 7A:8F:D9:47:E9:75:AA:59:85:EA:96:A0:71:EA:E5:22:4D:1E:C5:AF
Certificate issuer: /CN=c089423af1be03027196d1f81df22992978cda6e
Certificate serial: 019B7C131545C9F4E13A8D68DDD28A91A4FF
Authority key identifier: C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/eo_ZR-l1qlmF6pagcerlIk0exa8.roa
Signing time: Fri 02 Jan 2026 00:19:43 +0000
ROA not before: Fri 02 Jan 2026 00:19:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5065
IP address blocks: 85.8.182.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 07:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:13:15:45:c9:f4:e1:3a:8d:68:dd:d2:8a:91:a4:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c089423af1be03027196d1f81df22992978cda6e
Validity
Not Before: Jan 2 00:19:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7a8fd947e975aa5985ea96a071eae5224d1ec5af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f2:9a:fe:9b:27:c1:b1:36:f9:c7:1f:7d:64:
52:dc:5a:0d:e1:79:2a:db:4a:37:76:4a:c0:95:7b:
91:db:4f:fb:87:48:bb:8e:44:b6:20:6d:8d:20:26:
46:28:4a:4e:12:8e:2f:58:60:3f:1d:48:eb:db:f6:
c4:bb:fa:4a:9e:84:5d:db:83:a5:b5:9f:5a:d4:f3:
71:c3:d1:59:ae:43:5e:84:2b:f9:bd:26:c9:84:42:
51:66:eb:00:a1:6a:c5:a4:86:9d:89:be:a9:db:74:
6b:63:84:ff:2d:6d:5c:2f:d6:90:39:ba:9c:91:3a:
a0:9b:07:64:33:b7:8e:59:e8:8e:5d:61:96:5a:a2:
a2:59:64:92:81:b9:da:30:be:13:9a:cc:f1:04:8d:
9a:7b:53:f8:2f:b6:20:d8:32:e3:38:e4:e1:60:dd:
7b:c1:6b:89:14:82:c8:60:f5:5e:cf:db:db:05:d8:
4e:73:e7:37:d1:99:86:ed:35:d1:83:e2:45:6d:03:
4e:7a:f7:7c:ef:f5:98:08:ba:cc:9d:e5:ea:6c:30:
b4:13:45:ad:f6:f2:47:ef:3a:38:b3:47:09:cb:a6:
25:dd:10:f8:cb:5e:d0:b8:5e:9c:37:29:5e:97:1e:
f9:1d:bb:4f:4f:67:6a:86:1b:d6:7d:64:11:86:b1:
a6:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:8F:D9:47:E9:75:AA:59:85:EA:96:A0:71:EA:E5:22:4D:1E:C5:AF
X509v3 Authority Key Identifier:
keyid:C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/eo_ZR-l1qlmF6pagcerlIk0exa8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.8.182.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:be:43:20:71:97:0f:ba:cc:d6:43:d7:f1:d5:12:66:9e:e5:
fe:2f:af:95:76:47:f2:be:48:11:49:ac:92:cd:4e:fa:c6:d1:
34:7b:df:33:da:66:1b:8c:7d:6e:a2:d2:80:6c:4a:80:3e:36:
5c:52:ad:9d:1a:30:d2:62:4c:2b:d2:5f:f3:d9:db:f0:ad:9b:
12:0c:b8:5e:5e:83:79:d3:00:7f:00:37:24:1d:01:75:69:1b:
82:06:8d:b1:56:8e:09:e9:54:6d:be:de:65:a5:50:49:12:8e:
3f:59:e1:df:76:ea:f8:50:87:b1:a6:01:ca:f4:42:bb:14:ca:
99:18:b4:c6:83:a5:8f:c9:90:63:0d:8f:52:a0:9c:d5:d0:19:
66:bc:5c:17:d5:a8:23:ec:00:ad:e8:bb:e2:5c:e0:ab:13:e9:
c1:55:49:eb:9f:7b:0a:d0:3d:75:f3:1d:cc:66:08:74:bb:19:
49:5a:2e:50:63:cf:52:f4:13:bb:cc:8f:ae:08:c8:59:14:3a:
ac:0d:d2:f1:6f:ab:d9:66:98:c8:81:b0:62:1b:f6:53:84:91:
1b:b7:d4:a2:2f:26:7c:cd:97:d8:45:01:e8:87:b7:fa:27:9e:
cd:ef:cc:48:81:62:73:0d:27:b5:69:b6:99:58:50:3a:57:dd:
11:38:ab:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 11:23:46 2026 by rpki-client