This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/eApVlYN99h20cM-V2vRnWwFVfZg.roa
File: eApVlYN99h20cM-V2vRnWwFVfZg.roa (raw, json)
Hash identifier: 3LvnzYeiweYoZ+sXDbx0U3QDiTakYRb9cR1rmZozUXU=
Subject key identifier: 78:0A:55:95:83:7D:F6:1D:B4:70:CF:95:DA:F4:67:5B:01:55:7D:98
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 019B797EC7EB96AD72D9C8034D9D7B8D26A7
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/eApVlYN99h20cM-V2vRnWwFVfZg.roa
Signing time: Thu 01 Jan 2026 12:18:30 +0000
ROA not before: Thu 01 Jan 2026 12:18:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48678
IP address blocks: 81.18.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 08:17:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:7e:c7:eb:96:ad:72:d9:c8:03:4d:9d:7b:8d:26:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jan 1 12:18:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=780a5595837df61db470cf95daf4675b01557d98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:78:dc:ef:2b:d1:d2:e1:25:71:94:9c:c9:64:
21:0d:66:cd:44:b6:ae:78:c2:2d:bd:93:a4:ed:bc:
3a:40:b2:3e:1d:7d:48:91:1c:4a:5c:d0:33:cf:03:
10:42:81:a2:5f:5d:d8:76:05:23:48:20:31:e2:72:
46:7f:5a:88:b2:3b:7a:71:1a:09:6c:39:3b:e5:70:
38:9a:f5:c9:37:4e:cd:b0:c4:ec:44:71:d5:1c:00:
33:e5:8f:f4:05:26:15:9b:61:9c:73:44:69:07:64:
71:c2:73:71:92:7a:2f:1d:4b:23:26:10:37:39:eb:
85:a7:ac:a1:23:f3:3b:47:a9:66:9c:0d:96:9f:33:
97:c5:49:90:97:3e:a4:cc:ac:c9:f8:ed:03:58:57:
82:68:af:98:57:f2:00:b4:b4:b6:52:81:e4:09:73:
eb:f4:db:3d:69:9a:39:83:40:4a:7b:ab:96:f9:42:
41:2c:20:37:da:9e:d5:d1:cf:36:20:07:99:73:46:
30:90:49:ad:3b:7e:f0:67:29:7d:7f:00:78:2c:55:
41:e5:12:3c:b5:82:f2:1c:d7:93:71:6c:67:83:c2:
24:66:40:f5:08:62:cf:5f:6e:09:a5:7b:bc:96:ef:
97:4e:4e:dd:fa:0e:ea:37:7a:a4:af:18:31:fd:cf:
96:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:0A:55:95:83:7D:F6:1D:B4:70:CF:95:DA:F4:67:5B:01:55:7D:98
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/eApVlYN99h20cM-V2vRnWwFVfZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.18.55.0/24
Signature Algorithm: sha256WithRSAEncryption
98:a6:90:df:64:4f:7f:f6:56:a8:11:d2:10:70:6f:82:dd:b1:
fb:3b:a0:40:58:36:62:0c:6f:7c:3b:31:3d:75:ed:96:5e:e4:
07:da:b3:ab:30:7e:31:3e:6f:10:b0:63:81:ac:0a:75:93:59:
e4:f7:9e:10:28:eb:65:c7:c0:8c:de:e3:41:4f:d1:87:7a:44:
84:f9:22:73:08:9d:8f:ea:09:81:ff:28:07:a0:06:39:05:06:
8c:a0:56:2a:27:ba:7d:3c:c3:3e:38:5c:57:05:95:db:72:c3:
09:83:72:27:ae:12:6b:85:cc:51:c1:96:5f:17:4a:99:35:83:
a2:c8:6e:57:a3:a6:7f:ef:bf:b4:d0:1b:53:d1:71:28:63:7d:
5b:62:f1:20:c1:af:e0:71:84:02:93:59:81:5a:32:d7:14:9d:
7f:99:c6:b1:5b:3f:ed:da:6b:8e:da:b7:b8:8c:96:88:15:34:
4a:be:6a:fc:fa:02:28:2a:b7:21:a9:36:79:ed:a4:5a:43:7e:
a6:32:a9:2e:70:52:d5:89:35:81:49:3e:d5:9d:7d:16:68:d9:
16:82:1b:66:43:b5:64:3a:33:cc:7b:0c:69:a0:0b:a1:cd:ae:
be:d9:03:c6:81:fb:a1:eb:d3:63:cd:84:33:e7:91:1e:cd:7a:
51:32:79:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 13:52:51 2026 by rpki-client