This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/eBl8fjEDi_bzM9o4e5xKIdR8ca4.roa
File: eBl8fjEDi_bzM9o4e5xKIdR8ca4.roa (raw, json)
Hash identifier: BfuIVukiDtzihzfQ4gw6mZ6lR5/EYYRABfHkY7DcUFE=
Subject key identifier: 78:19:7C:7E:31:03:8B:F6:F3:33:DA:38:7B:9C:4A:21:D4:7C:71:AE
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 019B7DCA2D7C9475673F7CD7BDDD675E1F41
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/eBl8fjEDi_bzM9o4e5xKIdR8ca4.roa
Signing time: Fri 02 Jan 2026 08:19:20 +0000
ROA not before: Fri 02 Jan 2026 08:19:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209371
IP address blocks: 193.9.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 18:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:ca:2d:7c:94:75:67:3f:7c:d7:bd:dd:67:5e:1f:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Jan 2 08:19:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=78197c7e31038bf6f333da387b9c4a21d47c71ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:49:8b:65:4e:60:b1:5c:56:6a:67:06:fd:eb:
bf:fc:01:25:dc:5e:e3:7e:b4:99:0b:11:14:38:6d:
1e:73:33:63:72:a3:a7:d9:86:b4:10:fd:82:3a:95:
06:a0:5b:7e:98:df:54:59:12:99:02:ef:67:83:c5:
25:91:08:0c:dd:80:d5:4a:96:db:b2:84:a2:b0:eb:
6b:90:14:c1:84:e0:ea:db:93:07:8d:d3:f3:a1:cc:
65:29:f3:8a:b8:2b:1b:9b:1e:06:7d:6b:e9:0c:c0:
83:2d:6b:e0:1e:bf:94:ea:02:ff:9e:82:80:f5:9f:
d9:81:3a:44:c3:b1:23:36:5b:d9:4e:14:44:06:87:
ad:7b:5d:ce:7b:4c:ee:95:eb:26:33:89:fa:4d:61:
6e:93:08:fd:3b:ea:5e:2a:38:09:9a:45:e2:bf:72:
9a:a3:82:f0:65:eb:d8:54:c4:3d:ad:8e:dc:4e:03:
16:b7:f8:b9:a4:e2:17:c3:21:ed:bc:3a:bb:25:d0:
6e:21:8e:5b:39:61:24:da:6e:8b:60:8e:c5:de:39:
c8:0c:93:8f:be:e0:dc:09:67:ab:f6:cd:fd:60:22:
98:92:5f:a8:e9:c1:0b:cd:7e:61:1c:9f:63:4e:0f:
08:fc:d0:e0:03:5a:4d:87:de:df:45:b2:25:11:7f:
ad:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:19:7C:7E:31:03:8B:F6:F3:33:DA:38:7B:9C:4A:21:D4:7C:71:AE
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/eBl8fjEDi_bzM9o4e5xKIdR8ca4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.9.56.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:9d:78:ed:00:4f:d8:47:12:b8:2e:d7:54:4f:da:56:09:d8:
04:a2:b9:02:fe:aa:cf:4c:f5:c3:76:c7:73:ad:d0:25:6a:55:
c3:8e:14:f6:dc:04:6e:47:f4:0a:16:8e:a5:ba:be:c7:67:4e:
8e:c1:ed:02:07:30:ef:32:bf:e4:31:79:9b:58:94:c0:c4:0d:
83:70:c7:07:81:2c:6b:91:2a:fa:37:ee:8c:9f:bb:a7:5e:49:
c4:ca:ca:35:98:a7:8c:a6:d8:e9:7e:b1:62:37:41:a0:f6:f1:
7b:23:cf:c0:8b:47:fb:6a:ee:c7:ec:8f:60:ae:c7:31:80:0d:
16:9b:33:b1:a9:61:7d:da:0e:61:6e:8a:ac:d5:53:7b:f6:da:
52:e2:4a:5b:6d:28:51:a2:62:e2:44:78:22:9a:33:7a:d4:82:
d9:93:74:a1:2a:5a:58:c7:7e:55:65:c6:35:06:47:0b:e8:37:
74:6d:b8:8a:32:90:6d:72:f6:60:e3:01:cb:a5:a4:16:ef:60:
79:26:dd:2c:5e:92:33:e7:89:05:f9:4f:e4:43:5d:8b:ac:23:
f6:69:81:58:d6:38:c2:0d:c1:bb:22:af:cd:f4:bb:d7:54:c6:
4b:93:0a:33:87:2a:a8:4d:71:78:eb:3f:7f:1c:b5:cc:ae:b8:
ec:5f:3c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 21:22:46 2026 by rpki-client