This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/482633-c9a9-4633-b138-a17b82e6d786/1/eRXGxBwJlbiDcH7nJzSjyPxJr4E.roa
File: eRXGxBwJlbiDcH7nJzSjyPxJr4E.roa (raw, json)
Hash identifier: +PdqisLU84EBbEvA+O/DTTZgUzTBpNitn0IrUKYkAQo=
Subject key identifier: 79:15:C6:C4:1C:09:95:B8:83:70:7E:E7:27:34:A3:C8:FC:49:AF:81
Certificate issuer: /CN=ccf14230de9efec610ffdd339e0c4480b68bad45
Certificate serial: 019B79ED091CA8F50F60E9BAFEB29D360A00
Authority key identifier: CC:F1:42:30:DE:9E:FE:C6:10:FF:DD:33:9E:0C:44:80:B6:8B:AD:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPFCMN6e_sYQ_90zngxEgLaLrUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/482633-c9a9-4633-b138-a17b82e6d786/1/eRXGxBwJlbiDcH7nJzSjyPxJr4E.roa
Signing time: Thu 01 Jan 2026 14:18:55 +0000
ROA not before: Thu 01 Jan 2026 14:18:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50700
IP address blocks: 193.105.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/482633-c9a9-4633-b138-a17b82e6d786/1/zPFCMN6e_sYQ_90zngxEgLaLrUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/482633-c9a9-4633-b138-a17b82e6d786/1/zPFCMN6e_sYQ_90zngxEgLaLrUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zPFCMN6e_sYQ_90zngxEgLaLrUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:ed:09:1c:a8:f5:0f:60:e9:ba:fe:b2:9d:36:0a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccf14230de9efec610ffdd339e0c4480b68bad45
Validity
Not Before: Jan 1 14:18:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7915c6c41c0995b883707ee72734a3c8fc49af81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1f:5d:3b:76:44:68:46:cd:9d:26:ef:40:96:
8b:95:44:0e:07:a4:c0:b0:f5:79:77:f7:78:5b:38:
e4:1b:1a:60:a5:dc:0c:77:91:92:12:2c:d9:43:89:
fa:4b:f2:6c:1e:b6:75:29:ba:77:ba:e1:e8:6d:c3:
02:26:dc:3d:27:e7:02:27:a8:1e:9a:b6:2c:4b:93:
23:98:76:f2:04:db:a0:d4:38:67:7d:86:a2:6a:94:
21:f9:ff:61:ad:90:7f:11:9b:c6:da:eb:47:29:a4:
9c:9e:a4:9d:b3:22:85:02:71:5d:8a:3a:59:d4:12:
da:c2:2e:d0:2c:d4:63:60:e6:34:0f:18:2b:7f:70:
51:e5:ca:90:f0:73:f5:fa:f5:94:6f:89:1d:ae:c7:
cf:17:5f:6f:50:74:9a:ff:5b:02:7e:a7:a8:06:78:
f3:2c:12:57:cf:fb:25:ad:1c:8f:85:e4:13:f5:42:
51:e4:fe:93:da:26:e8:46:80:8b:2a:7d:f8:f0:a5:
77:0d:a9:c7:77:15:39:0d:bb:17:b6:68:3e:32:45:
9e:33:fd:f5:0a:2d:46:3a:2f:8f:b5:c5:92:6a:ae:
ed:89:ba:1b:04:0e:20:95:dc:69:18:32:80:ca:a7:
36:f2:e4:8d:1a:15:08:f2:b7:d8:ff:c6:fd:7f:ae:
c2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:15:C6:C4:1C:09:95:B8:83:70:7E:E7:27:34:A3:C8:FC:49:AF:81
X509v3 Authority Key Identifier:
keyid:CC:F1:42:30:DE:9E:FE:C6:10:FF:DD:33:9E:0C:44:80:B6:8B:AD:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPFCMN6e_sYQ_90zngxEgLaLrUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/482633-c9a9-4633-b138-a17b82e6d786/1/eRXGxBwJlbiDcH7nJzSjyPxJr4E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/482633-c9a9-4633-b138-a17b82e6d786/1/zPFCMN6e_sYQ_90zngxEgLaLrUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.195.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:2f:a2:52:36:76:ec:a4:73:19:44:80:a1:0c:29:e8:40:fa:
cc:bc:d8:3a:ec:52:c6:1a:5c:45:be:ae:c0:6a:42:f8:4e:bd:
84:11:63:6a:cb:0e:1b:3c:8d:fd:94:58:17:05:19:99:63:2b:
95:8a:36:5b:2b:c4:d5:ff:5c:5f:56:be:ee:c5:81:ca:12:df:
a3:f8:45:ae:74:e8:ab:fe:ff:d2:f1:2c:bd:2a:3a:e5:b2:14:
b0:00:3f:1e:bb:64:01:6a:f2:69:7b:7e:9a:cf:2f:e7:cb:b0:
06:7d:00:d3:d9:49:9a:06:6a:7b:b2:91:6c:01:5e:d1:57:f0:
27:48:f2:c8:42:1a:fe:24:45:70:74:bc:7a:a7:f4:81:4e:80:
7c:7a:75:31:b5:8b:54:3d:e1:9b:33:7a:95:2d:0d:28:b1:f1:
4e:4e:84:6c:5b:61:da:8e:40:14:37:e8:8f:7e:02:90:12:88:
8d:da:5b:f6:3e:47:a2:ab:69:c1:f7:bf:de:af:51:ee:c3:c3:
d0:7f:b2:0c:eb:3d:29:59:03:b8:f7:98:ab:39:84:37:9b:31:
bf:2c:b4:11:d2:45:48:c6:e6:11:3f:6f:98:51:b8:4d:42:1f:
82:9c:fc:66:c9:bb:35:0c:f3:72:38:f2:41:a8:c9:f9:81:a5:
df:b9:13:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:55:48 2026 by rpki-client