This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/mYEf7RuSo0e-j7rjPL7Q9zNgxFc.roa
File: mYEf7RuSo0e-j7rjPL7Q9zNgxFc.roa (raw, json)
Hash identifier: cGf42p5lM09FOWIL9NbqXkxRKlJYCNacEJNXdW+oi2c=
Subject key identifier: 99:81:1F:ED:1B:92:A3:47:BE:8F:BA:E3:3C:BE:D0:F7:33:60:C4:57
Certificate issuer: /CN=4e0a19d48c3547c2adb9f8effdeac6ad9e4f9d19
Certificate serial: 019B7AC8881226297DFA784524531CA883D0
Authority key identifier: 4E:0A:19:D4:8C:35:47:C2:AD:B9:F8:EF:FD:EA:C6:AD:9E:4F:9D:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/mYEf7RuSo0e-j7rjPL7Q9zNgxFc.roa
Signing time: Thu 01 Jan 2026 18:18:40 +0000
ROA not before: Thu 01 Jan 2026 18:18:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42731
IP address blocks: 194.110.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 18:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:c8:88:12:26:29:7d:fa:78:45:24:53:1c:a8:83:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e0a19d48c3547c2adb9f8effdeac6ad9e4f9d19
Validity
Not Before: Jan 1 18:18:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=99811fed1b92a347be8fbae33cbed0f73360c457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:aa:11:e3:dd:06:17:23:de:81:a8:f2:79:ea:
ca:b8:34:86:d5:c4:cf:b8:c3:92:2b:a9:5e:84:31:
7b:06:c7:45:b2:ff:18:49:a9:da:10:7d:29:02:f0:
d0:9f:22:92:d8:32:fb:af:80:5e:cd:7a:01:5a:b2:
94:c8:83:37:95:ea:17:98:6d:bc:a7:4f:b0:14:bc:
ea:06:57:66:13:d9:8e:e7:33:5b:1a:4b:a2:cb:68:
d4:f1:5f:af:ba:5c:a0:8b:ee:c3:40:0b:ea:ba:7d:
fb:2a:5d:64:bb:2f:35:f6:30:af:5b:d5:71:89:70:
24:65:88:13:bf:35:c4:96:80:d2:ed:3f:de:81:1b:
1c:96:ce:dc:bb:06:da:8d:2d:b5:bb:c3:b4:82:cc:
b3:45:b7:af:e1:ff:eb:df:7e:64:7b:4a:3f:11:d9:
d3:cf:84:d7:6a:66:97:32:41:eb:a3:cd:ac:d0:33:
5e:5e:9d:71:d8:93:7f:c0:14:60:8c:56:e7:be:cb:
27:6c:eb:44:bc:88:17:9f:92:d4:a6:17:25:3b:78:
8f:6e:35:be:0e:35:2b:c9:34:e1:c8:c2:65:fa:30:
7d:b1:a6:3f:ae:a4:8f:b6:64:1d:9b:b1:b1:de:f5:
5c:0c:fa:48:f5:5f:cf:b3:18:26:0b:3c:08:9b:9e:
03:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:81:1F:ED:1B:92:A3:47:BE:8F:BA:E3:3C:BE:D0:F7:33:60:C4:57
X509v3 Authority Key Identifier:
keyid:4E:0A:19:D4:8C:35:47:C2:AD:B9:F8:EF:FD:EA:C6:AD:9E:4F:9D:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/mYEf7RuSo0e-j7rjPL7Q9zNgxFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.110.212.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:8a:e7:c2:1b:15:bd:aa:fa:74:c5:31:b7:f3:ca:bf:9f:54:
c5:01:69:e2:b1:f4:21:82:fc:ee:70:d7:da:5a:05:f9:7d:a9:
a4:88:9b:30:fa:4d:9e:29:9b:49:2c:4c:12:9e:6d:34:21:cc:
3a:47:18:bc:50:c1:cf:1e:a9:82:05:49:94:20:53:68:a5:e9:
09:bb:6d:a5:ff:2f:da:1a:36:e8:fa:60:1e:46:1a:03:62:d2:
f1:0a:c0:29:af:c6:46:41:17:24:9c:19:8d:c1:d6:f7:9f:3f:
8d:57:3a:fd:c5:fa:c5:08:e6:af:4c:c7:9c:de:1b:5c:e8:40:
e0:ee:a0:38:98:50:93:49:83:a8:a7:b3:72:aa:d5:63:b6:5f:
2d:c9:e0:d9:7a:1b:ce:8f:e4:84:b3:8d:bd:f6:69:43:2f:97:
3c:93:c6:d5:65:d8:35:9c:c6:c6:22:8e:dd:e7:cf:ae:58:84:
78:81:42:f1:c6:a2:a7:75:db:51:fa:ac:c7:d6:10:7c:b3:b8:
43:da:03:c9:4a:6a:33:d3:11:2d:0d:bd:a1:05:cd:42:2f:3c:
f6:d2:71:1c:4e:ce:09:41:19:01:31:07:9b:43:91:72:4f:c8:
54:8b:ba:b6:47:44:ee:ff:ba:0d:eb:c0:85:48:d5:44:8f:a4:
b7:42:41:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:46:28 2026 by rpki-client