This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/e1jQd52gcA6yXLGjiuknB8JEOwo.roa
File: e1jQd52gcA6yXLGjiuknB8JEOwo.roa (raw, json)
Hash identifier: XJANgx0hjgIGKYki1Gh7IwsZwbbuxC+ryDXFWZXhAuQ=
Subject key identifier: 7B:58:D0:77:9D:A0:70:0E:B2:5C:B1:A3:8A:E9:27:07:C2:44:3B:0A
Certificate issuer: /CN=1130a1d5e5c0901d19b4b707a73d17cae0e3b660
Certificate serial: 019B7B3678FA0872CB84590489A5E730D74F
Authority key identifier: 11:30:A1:D5:E5:C0:90:1D:19:B4:B7:07:A7:3D:17:CA:E0:E3:B6:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/e1jQd52gcA6yXLGjiuknB8JEOwo.roa
Signing time: Thu 01 Jan 2026 20:18:46 +0000
ROA not before: Thu 01 Jan 2026 20:18:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57395
IP address blocks: 176.124.36.0/24 maxlen: 24
176.124.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:36:78:fa:08:72:cb:84:59:04:89:a5:e7:30:d7:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1130a1d5e5c0901d19b4b707a73d17cae0e3b660
Validity
Not Before: Jan 1 20:18:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7b58d0779da0700eb25cb1a38ae92707c2443b0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:78:e9:fc:05:9c:9b:10:52:c4:50:ee:87:13:
8c:27:8e:66:14:cc:d2:67:bc:20:77:48:82:ab:ae:
d2:1f:c1:36:32:38:3b:18:02:ea:5b:6a:59:ab:d1:
07:30:d5:ec:85:0e:39:16:75:16:4d:00:f2:f6:12:
78:1a:ac:6c:1f:d5:62:47:4b:73:8e:82:39:91:5f:
3d:98:ad:d5:95:54:07:83:2d:e8:70:61:60:76:a2:
58:dd:62:5a:06:2c:2f:40:29:61:01:0e:a0:60:18:
f2:e4:c8:29:04:86:92:e4:f4:9b:5a:f1:82:28:f1:
19:52:61:f9:92:1e:93:59:90:09:cd:60:05:fb:10:
ab:d2:2a:a2:c1:fe:c7:89:03:7c:de:5e:8f:12:16:
8c:2d:2e:43:90:72:c1:b4:6e:f7:f1:dc:10:c8:68:
a7:63:e9:61:a9:4b:bc:7b:a3:fb:48:23:34:35:78:
5e:6e:30:f7:56:fe:95:57:5c:c8:bc:8f:7b:2f:a0:
3e:bf:29:63:e0:23:49:bc:be:b4:b2:7f:88:bb:a0:
61:98:ec:47:a5:f2:f5:f2:7a:f1:c9:c7:a6:45:b9:
d3:06:04:c5:6b:22:38:2c:48:5f:9c:02:03:81:12:
eb:2f:51:57:6c:cd:55:aa:2e:9a:ac:d4:29:8a:bd:
1e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:58:D0:77:9D:A0:70:0E:B2:5C:B1:A3:8A:E9:27:07:C2:44:3B:0A
X509v3 Authority Key Identifier:
keyid:11:30:A1:D5:E5:C0:90:1D:19:B4:B7:07:A7:3D:17:CA:E0:E3:B6:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/e1jQd52gcA6yXLGjiuknB8JEOwo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.124.36.0/23
Signature Algorithm: sha256WithRSAEncryption
98:d5:8b:38:b3:e1:8f:ea:63:76:3f:85:07:ed:37:64:f5:c4:
62:3b:7d:77:5e:1c:13:58:e9:1d:90:a4:91:c5:f2:4d:c8:bd:
b9:12:e6:58:aa:72:11:3d:75:60:52:ab:03:c3:40:bf:a4:1f:
16:0c:ad:03:a6:63:e3:6c:17:96:93:26:19:73:9d:39:bc:16:
5c:16:2d:a2:71:45:1a:99:00:f9:62:be:7e:0b:a5:a6:6c:b2:
07:a0:9b:94:68:75:47:1d:4d:1f:ae:8e:4e:27:e7:57:5e:a2:
3c:2c:db:b0:c4:a9:d0:97:57:59:34:86:18:1f:0e:a6:6c:9e:
e8:f5:d3:8e:c1:c7:eb:ef:78:60:a2:59:44:33:ed:5e:5a:35:
6a:96:69:df:0f:43:33:af:9a:89:f2:c1:32:4d:8d:b7:80:13:
7c:85:c9:f1:54:d1:28:7a:4b:b1:53:34:89:a5:78:df:08:06:
4d:19:11:cd:75:3b:a9:c4:e6:eb:5b:86:49:b4:00:21:26:d9:
bf:b1:bc:8f:eb:ca:7d:6b:b6:e0:dc:65:f7:9d:93:55:a8:33:
0d:4d:c0:27:0d:00:2f:7f:0a:3a:eb:1d:1a:59:f2:21:db:f7:
0a:59:f9:a5:9d:d4:cd:e7:dc:d9:25:e4:1d:4c:4e:82:da:a8:
a5:81:22:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:58:00 2026 by rpki-client