This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/49768a-8d0b-490f-98be-74e1168a1164/1/EN5haMM7h6Rseqp1dMvz6VQjbyk.roa
File: EN5haMM7h6Rseqp1dMvz6VQjbyk.roa (raw, json)
Hash identifier: eEBiN2aBr9CTgCZwms33aRc4uqxn1VzQccF+F6LwRuA=
Subject key identifier: 10:DE:61:68:C3:3B:87:A4:6C:7A:AA:75:74:CB:F3:E9:54:23:6F:29
Certificate issuer: /CN=4608d71b772a031740e1d412def6857cc4b1d45a
Certificate serial: 019B7E9F73C561D92CD359436EAD13396198
Authority key identifier: 46:08:D7:1B:77:2A:03:17:40:E1:D4:12:DE:F6:85:7C:C4:B1:D4:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/49768a-8d0b-490f-98be-74e1168a1164/1/EN5haMM7h6Rseqp1dMvz6VQjbyk.roa
Signing time: Fri 02 Jan 2026 12:12:17 +0000
ROA not before: Fri 02 Jan 2026 12:12:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 11179
IP address blocks: 185.94.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/49768a-8d0b-490f-98be-74e1168a1164/1/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/49768a-8d0b-490f-98be-74e1168a1164/1/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Jan 2026 21:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:9f:73:c5:61:d9:2c:d3:59:43:6e:ad:13:39:61:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4608d71b772a031740e1d412def6857cc4b1d45a
Validity
Not Before: Jan 2 12:12:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=10de6168c33b87a46c7aaa7574cbf3e954236f29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:24:24:7e:69:97:1c:8d:0f:5c:1a:ae:39:2b:
37:3b:b2:0e:dc:76:a3:cb:25:13:78:2a:02:72:c8:
4d:9d:9a:d3:63:e3:16:1e:16:85:a6:b9:04:70:0b:
2b:5e:cc:96:82:ac:38:02:78:19:d7:a5:b2:a7:62:
65:35:98:91:80:21:03:51:b0:31:65:ac:08:5f:14:
d6:5f:55:e2:2c:cf:27:e1:4c:30:8a:c3:3e:af:c8:
10:1e:ff:63:d6:f0:2b:71:ab:53:a4:8d:84:e5:21:
ed:73:d0:5c:a2:09:2b:b7:18:ec:a0:b0:7c:bc:12:
12:c9:85:1f:44:9b:da:f0:f7:35:6a:99:ac:08:ca:
72:bc:ed:b0:d6:41:c6:46:fa:6b:5d:1e:9a:f1:58:
9a:be:d2:1a:19:25:6c:7a:21:81:44:eb:b4:c9:8c:
a6:ed:df:0c:58:32:f7:1e:11:09:6b:ff:04:a5:87:
7c:c0:6f:06:51:ab:1d:fa:a5:37:53:df:c8:c9:96:
ee:2b:36:4b:5a:b0:4c:c6:f1:b7:6d:56:1a:c4:5a:
0a:9e:aa:00:39:07:79:f1:50:4d:e9:75:c4:db:df:
bd:04:01:d0:e0:76:dd:8c:fa:47:66:89:06:8d:8f:
ec:ea:35:63:16:06:be:8b:7a:52:27:c0:31:3d:59:
b7:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:DE:61:68:C3:3B:87:A4:6C:7A:AA:75:74:CB:F3:E9:54:23:6F:29
X509v3 Authority Key Identifier:
keyid:46:08:D7:1B:77:2A:03:17:40:E1:D4:12:DE:F6:85:7C:C4:B1:D4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/49768a-8d0b-490f-98be-74e1168a1164/1/EN5haMM7h6Rseqp1dMvz6VQjbyk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/49768a-8d0b-490f-98be-74e1168a1164/1/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.94.18.0/24
Signature Algorithm: sha256WithRSAEncryption
90:54:68:33:fa:7b:c1:33:87:45:77:b2:36:9e:ab:7c:59:94:
9b:6d:e1:8e:cf:dc:0c:68:5f:9e:27:17:10:18:bb:ba:02:a8:
c5:8d:7b:a0:47:5b:ed:ef:41:f0:f9:07:1a:df:2a:c1:ac:12:
e1:2c:a7:68:44:d8:c4:1d:71:2c:a2:5a:6b:6d:31:a0:1d:f4:
05:b2:57:dc:df:b2:1b:13:d9:35:d2:9d:23:39:ba:dc:2a:c0:
a0:92:9c:22:aa:a6:9e:b7:68:c6:a1:d0:d8:7a:ee:70:8c:b9:
d7:b3:3f:ab:16:8c:9d:34:da:48:b8:7f:c5:ef:76:ba:13:4b:
2b:a9:9e:a1:fc:10:62:47:6f:68:7a:86:4a:0a:87:97:57:ad:
87:21:95:ff:62:76:15:f2:d8:a1:ab:06:38:1b:c7:72:e8:3e:
6d:a7:b8:06:87:17:dc:5c:fc:94:c0:a2:3b:86:65:7d:46:24:
8e:c5:49:f3:b9:b4:14:4a:c5:3d:78:97:96:c2:dc:b4:8f:3d:
e7:db:9b:57:3a:1d:33:89:ea:ae:c7:93:00:9e:0c:17:b2:e1:
b1:77:94:02:f5:b8:c2:27:db:ea:c7:58:a6:bb:e5:d3:96:15:
e1:eb:d6:ae:5c:50:e2:77:93:f1:60:bd:1e:5f:5c:aa:4e:51:
3e:a5:4d:44
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt+n3PFYdks01lDbq0TOWGYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2MDhkNzFiNzcyYTAzMTc0MGUxZDQxMmRlZjY4NTdjYzRi
MWQ0NWEwHhcNMjYwMTAyMTIxMjE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMGRlNjE2OGMzM2I4N2E0NmM3YWFhNzU3NGNiZjNlOTU0MjM2ZjI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliQkfmmXHI0PXBquOSs3O7IO3Haj
yyUTeCoCcshNnZrTY+MWHhaFprkEcAsrXsyWgqw4AngZ16Wyp2JlNZiRgCEDUbAx
ZawIXxTWX1XiLM8n4UwwisM+r8gQHv9j1vArcatTpI2E5SHtc9BcogkrtxjsoLB8
vBISyYUfRJva8Pc1apmsCMpyvO2w1kHGRvprXR6a8ViavtIaGSVseiGBROu0yYym
7d8MWDL3HhEJa/8EpYd8wG8GUasd+qU3U9/IyZbuKzZLWrBMxvG3bVYaxFoKnqoA
OQd58VBN6XXE29+9BAHQ4HbdjPpHZokGjY/s6jVjFga+i3pSJ8AxPVm3uQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBDeYWjDO4ekbHqqdXTL8+lUI28pMB8GA1UdIwQY
MBaAFEYI1xt3KgMXQOHUEt72hXzEsdRaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmdqWEczY3FBeGRBNGRRUzN2YUZmTVN4MUZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS80OTc2OGEtOGQwYi00OTBmLTk4YmUt
NzRlMTE2OGExMTY0LzEvRU41aGFNTTdoNlJzZXFwMWRNdno2VlFqYnlrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS80OTc2OGEtOGQwYi00OTBmLTk4YmUtNzRlMTE2OGExMTY0
LzEvUmdqWEczY3FBeGRBNGRRUzN2YUZmTVN4MUZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuV4SMA0G
CSqGSIb3DQEBCwUAA4IBAQCQVGgz+nvBM4dFd7I2nqt8WZSbbeGOz9wMaF+eJxcQ
GLu6AqjFjXugR1vt70Hw+Qca3yrBrBLhLKdoRNjEHXEsolprbTGgHfQFslfc37Ib
E9k10p0jObrcKsCgkpwiqqaet2jGodDYeu5wjLnXsz+rFoydNNpIuH/F73a6E0sr
qZ6h/BBiR29oeoZKCoeXV62HIZX/YnYV8tihqwY4G8dy6D5tp7gGhxfcXPyUwKI7
hmV9RiSOxUnzubQUSsU9eJeWwty0jz3n25tXOh0ziequx5MAngwXsuGxd5QC9bjC
J9vqx1imu+XTlhXh69auXFDid5PxYL0eX1yqTlE+pU1E
-----END CERTIFICATE-----
Generated at Sat Jan 10 06:37:31 2026 by rpki-client