This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/0d4aff-42db-427d-ad5e-c637b0dcdc8e/1/eG3Ghd4QY251cC0oyrBwUOx4vJU.roa
File: eG3Ghd4QY251cC0oyrBwUOx4vJU.roa (raw, json)
Hash identifier: uu184Za6cbaBnX1S2FGNXjt2OHJZDRN2y2HwY8usDSo=
Subject key identifier: 78:6D:C6:85:DE:10:63:6E:75:70:2D:28:CA:B0:70:50:EC:78:BC:95
Certificate issuer: /CN=175124a17b87215f79205cd1486f61839cf9e6f8
Certificate serial: 019B77C71C7E517139319928F002E0E353CE
Authority key identifier: 17:51:24:A1:7B:87:21:5F:79:20:5C:D1:48:6F:61:83:9C:F9:E6:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1EkoXuHIV95IFzRSG9hg5z55vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/0d4aff-42db-427d-ad5e-c637b0dcdc8e/1/eG3Ghd4QY251cC0oyrBwUOx4vJU.roa
Signing time: Thu 01 Jan 2026 04:18:16 +0000
ROA not before: Thu 01 Jan 2026 04:18:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51932
IP address blocks: 91.221.140.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/0d4aff-42db-427d-ad5e-c637b0dcdc8e/1/F1EkoXuHIV95IFzRSG9hg5z55vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/0d4aff-42db-427d-ad5e-c637b0dcdc8e/1/F1EkoXuHIV95IFzRSG9hg5z55vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/F1EkoXuHIV95IFzRSG9hg5z55vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c7:1c:7e:51:71:39:31:99:28:f0:02:e0:e3:53:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=175124a17b87215f79205cd1486f61839cf9e6f8
Validity
Not Before: Jan 1 04:18:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=786dc685de10636e75702d28cab07050ec78bc95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:36:ce:8c:d9:bf:ea:10:7e:18:01:ad:83:c3:
27:af:83:fd:94:58:ac:52:cf:32:c5:bd:f6:d3:1b:
62:d5:0c:df:41:a0:9a:3b:d7:14:ce:60:08:fb:72:
67:00:70:47:0a:50:0e:62:57:99:68:15:fe:2b:6e:
89:de:e2:b8:ad:33:8e:46:11:0e:0c:53:aa:eb:e6:
4b:3e:43:2e:59:d5:07:6a:23:08:9a:ae:09:9f:c2:
2a:c5:36:8c:5a:d6:64:00:10:9d:ea:2a:ff:7e:d1:
f2:1e:00:49:07:78:d2:f7:ae:fe:c2:c6:4f:76:48:
6c:72:d5:44:97:f6:19:00:35:4e:cd:5e:89:e6:bf:
34:7d:03:20:5d:33:e7:b8:b2:d7:55:ed:e8:b3:a9:
20:18:e3:96:2c:33:a2:9e:e8:4c:1c:95:79:6c:58:
9b:12:ee:5b:f2:2a:1f:c4:e6:7b:a1:07:4b:11:c7:
0c:26:71:e0:60:8a:4f:73:d7:5e:32:fa:28:b1:38:
e9:88:28:6a:e2:b1:74:bf:48:92:d9:c2:6b:0c:a9:
5d:53:97:4b:a5:d0:7f:18:ae:f4:6b:fc:13:cc:e5:
e1:2a:76:4a:45:4c:79:12:fd:28:86:bd:03:e4:0f:
c5:0f:c5:98:ea:ca:ef:5a:1d:c8:97:1f:fc:15:a7:
7a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:6D:C6:85:DE:10:63:6E:75:70:2D:28:CA:B0:70:50:EC:78:BC:95
X509v3 Authority Key Identifier:
keyid:17:51:24:A1:7B:87:21:5F:79:20:5C:D1:48:6F:61:83:9C:F9:E6:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1EkoXuHIV95IFzRSG9hg5z55vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0d4aff-42db-427d-ad5e-c637b0dcdc8e/1/eG3Ghd4QY251cC0oyrBwUOx4vJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0d4aff-42db-427d-ad5e-c637b0dcdc8e/1/F1EkoXuHIV95IFzRSG9hg5z55vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.221.140.0/23
Signature Algorithm: sha256WithRSAEncryption
34:fb:20:34:f5:96:75:99:48:93:90:ad:19:ac:1f:53:13:78:
cb:93:c9:59:fe:20:bc:f9:69:c7:aa:12:33:61:71:08:d7:1e:
36:bf:99:d6:ad:eb:b6:0b:86:29:af:fc:13:53:2c:8d:5b:8a:
a2:01:6e:62:d5:91:db:8d:67:2d:8b:11:9d:e9:41:7f:b9:75:
79:59:d2:d9:9f:a0:c5:db:e1:9e:9e:c0:d1:92:dd:42:6b:02:
c4:7a:27:79:8d:f5:85:0e:93:27:eb:57:76:43:a7:02:63:c9:
70:92:cf:f3:be:13:c8:0b:6e:e2:75:51:6c:fe:1d:d1:17:c5:
55:c1:84:5b:f7:ce:d4:4c:b9:80:4a:d9:4d:44:bd:0a:a3:0e:
df:49:61:1d:9f:57:d0:8b:fe:44:f3:69:56:84:30:32:5f:0a:
40:bf:d9:54:6b:9b:59:aa:35:70:b2:3b:b0:1b:23:86:77:f0:
bf:6f:3f:81:29:5b:6c:79:a1:8c:ea:03:85:4d:55:76:2f:e0:
b5:75:e1:a9:9e:1b:f9:f0:f4:af:65:dd:62:9b:a5:56:4e:b2:
4d:b5:d9:db:83:21:dc:2a:6d:aa:6e:04:05:c1:d9:bd:ca:9d:
89:f7:dc:2d:86:c9:89:5a:19:7a:54:e3:c9:9a:df:e3:33:0a:
50:2c:7f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:42:27 2026 by rpki-client