This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/ekRgt1kJi2v662mflC7yokLhh34.roa
File: ekRgt1kJi2v662mflC7yokLhh34.roa (raw, json)
Hash identifier: 3lpPZiQnRkbCD6keXb41MVLx99s2aoWKQrtAqDsCux0=
Subject key identifier: 7A:44:60:B7:59:09:8B:6B:FA:EB:69:9F:94:2E:F2:A2:42:E1:87:7E
Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Certificate serial: 019B78A34CFA0AAE30E979821E4EFF4A82AA
Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/ekRgt1kJi2v662mflC7yokLhh34.roa
Signing time: Thu 01 Jan 2026 08:18:46 +0000
ROA not before: Thu 01 Jan 2026 08:18:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211373
IP address blocks: 178.253.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 09:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:a3:4c:fa:0a:ae:30:e9:79:82:1e:4e:ff:4a:82:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Validity
Not Before: Jan 1 08:18:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7a4460b759098b6bfaeb699f942ef2a242e1877e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:76:1e:6c:73:16:fd:bb:1e:a1:7f:64:be:e8:
4a:3b:ae:72:ff:06:c5:a9:ad:36:a0:f7:6b:56:40:
9b:21:5d:2b:0d:b1:7b:78:36:c5:39:68:97:83:12:
fe:9e:ea:3b:ca:88:ad:97:03:a2:c1:a8:63:9e:33:
58:f3:6c:41:6e:b4:15:62:0d:7a:57:56:94:6c:ad:
e9:36:0e:b7:d0:fc:b6:98:2c:5b:36:f2:83:54:ca:
f7:c1:0b:1a:5e:13:a1:09:85:38:a7:e7:b8:7d:3a:
e9:0b:bc:ff:cd:68:27:16:07:2a:55:ee:04:86:4f:
80:50:c0:02:9c:d7:0a:d1:96:76:d4:a5:ef:6a:9a:
3c:22:5f:57:53:2e:b7:27:d8:11:fc:fa:5b:66:19:
33:0c:90:1a:a4:a3:53:cf:30:b9:b6:d4:c2:44:a7:
bb:01:84:b8:81:f0:33:3f:61:65:7e:46:41:7c:ce:
38:c7:f4:37:c6:ac:00:ef:8a:03:f4:f5:c9:4b:8e:
49:78:2d:8f:3c:f8:db:b8:43:32:e0:6d:a2:21:a5:
cb:5a:0c:a4:5a:cc:c8:b8:3b:8f:e3:f1:77:f5:aa:
14:9f:f0:db:cf:90:03:3c:97:d8:43:b7:7c:4b:dc:
c9:c4:b5:8a:24:df:6c:3f:83:d4:a8:a8:7c:28:76:
c1:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:44:60:B7:59:09:8B:6B:FA:EB:69:9F:94:2E:F2:A2:42:E1:87:7E
X509v3 Authority Key Identifier:
keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/ekRgt1kJi2v662mflC7yokLhh34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.253.33.0/24
Signature Algorithm: sha256WithRSAEncryption
96:89:99:09:ad:13:9a:22:f7:9a:5c:db:fb:cf:20:05:68:66:
b7:b6:85:70:18:e3:59:1e:b3:7b:01:0a:a2:3e:9b:a5:0d:17:
64:61:f4:83:89:1c:93:84:59:1c:5b:57:8e:c6:c1:27:da:13:
1b:61:b5:e7:a4:af:5c:b8:7c:6f:17:08:1c:cd:0a:6a:7d:ba:
2c:94:31:a3:b1:09:d0:d6:06:fc:aa:70:bb:24:b0:42:8e:c7:
fc:94:a3:c1:1c:3b:86:50:85:cc:76:79:9a:b0:b8:02:f9:ac:
72:4e:01:63:09:58:b0:90:4f:74:bc:f1:33:5f:e2:95:7b:47:
4b:10:3c:59:80:b3:5e:26:71:f0:67:54:7c:86:9c:9b:7f:b8:
1b:87:63:da:78:29:57:9c:c3:2c:6a:f5:07:ef:e4:a8:78:ab:
73:0f:c4:a1:f7:2c:52:76:cd:6b:54:f1:d1:d0:1d:60:54:fa:
cb:19:53:7b:ad:9e:50:2c:9f:a7:62:5f:6e:16:98:a2:dd:0e:
87:9a:60:b0:7f:05:5b:88:21:7b:34:0c:de:c3:3c:8a:5b:91:
3e:04:11:01:dc:82:47:63:fc:9f:2a:5f:bc:e7:f5:88:c1:d5:
16:9c:01:3c:be:2d:04:89:0e:b3:aa:c7:cc:18:99:b5:fb:87:
f0:f0:39:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 10:58:19 2026 by rpki-client