This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/EG39daLgR9HPpte0Senzayfzwe0.roa
File: EG39daLgR9HPpte0Senzayfzwe0.roa (raw, json)
Hash identifier: hM5eTq2EhN4ghAJTozyTzIBAYCIenfrKw142ndvb2MM=
Subject key identifier: 10:6D:FD:75:A2:E0:47:D1:CF:A6:D7:B4:49:E9:F3:6B:27:F3:C1:ED
Certificate issuer: /CN=7139bc5cef3aeadf32613f7d959ec8e40a742918
Certificate serial: 019B7F14FC498AA82C3380F06C5C02348813
Authority key identifier: 71:39:BC:5C:EF:3A:EA:DF:32:61:3F:7D:95:9E:C8:E4:0A:74:29:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cTm8XO866t8yYT99lZ7I5Ap0KRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/EG39daLgR9HPpte0Senzayfzwe0.roa
Signing time: Fri 02 Jan 2026 14:20:40 +0000
ROA not before: Fri 02 Jan 2026 14:20:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211450
IP address blocks: 193.36.90.0/24 maxlen: 24
2a10:e340::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/cTm8XO866t8yYT99lZ7I5Ap0KRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Jan 2026 13:16:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:14:fc:49:8a:a8:2c:33:80:f0:6c:5c:02:34:88:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7139bc5cef3aeadf32613f7d959ec8e40a742918
Validity
Not Before: Jan 2 14:20:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=106dfd75a2e047d1cfa6d7b449e9f36b27f3c1ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:2c:6f:d6:ef:76:14:e5:d7:a2:e4:72:34:16:
51:85:6b:7b:12:0f:f4:8a:e3:bf:10:b9:73:6e:17:
18:ce:8d:f8:74:78:54:bb:59:84:67:2c:84:4e:ec:
f5:d0:8a:2b:67:65:da:69:bc:f9:c3:83:18:c0:1a:
52:84:44:a0:fa:03:40:85:4b:bd:62:8e:ee:61:4f:
cb:b6:44:24:e2:61:5b:1d:af:02:a9:42:3c:71:2a:
4c:ed:56:0d:1a:40:da:87:c8:bc:e1:7b:06:26:86:
cc:62:31:97:e7:29:06:af:ff:51:f1:9e:5d:32:ea:
d1:d1:d9:15:68:17:89:74:5e:04:aa:6a:84:dd:04:
6e:1c:3e:7c:1d:7e:d1:4e:e5:23:8b:30:c7:d6:d2:
16:7f:21:2a:a1:fa:15:05:14:a1:82:a0:10:0f:57:
46:3a:29:55:cb:fe:ad:e6:c4:b8:47:a0:67:28:e4:
bd:f5:bf:df:71:32:a6:77:c4:c6:e7:6d:a2:6e:cf:
e4:31:b6:fa:12:34:bc:5b:04:99:3a:3e:05:55:f1:
3b:de:18:32:f9:c7:fc:6a:91:07:4b:25:52:5d:70:
9a:cc:45:ff:7e:4b:5a:f8:44:2c:4e:5d:2d:6d:14:
00:45:da:8b:ab:af:a0:67:2f:c5:63:fa:e8:78:d9:
a4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:6D:FD:75:A2:E0:47:D1:CF:A6:D7:B4:49:E9:F3:6B:27:F3:C1:ED
X509v3 Authority Key Identifier:
keyid:71:39:BC:5C:EF:3A:EA:DF:32:61:3F:7D:95:9E:C8:E4:0A:74:29:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTm8XO866t8yYT99lZ7I5Ap0KRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/EG39daLgR9HPpte0Senzayfzwe0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.36.90.0/24
IPv6:
2a10:e340::/32
Signature Algorithm: sha256WithRSAEncryption
21:36:b2:83:c1:45:8b:60:17:3b:f8:89:e1:51:59:6b:b5:c0:
c5:db:9e:56:73:7b:3d:9d:02:be:bf:87:a7:38:49:f7:e1:e7:
4b:c8:92:25:22:d2:a7:f2:0d:6c:9d:0e:24:2a:91:1f:bd:f4:
c9:10:9c:9e:21:59:ce:f2:8c:f2:1d:a6:35:6e:ee:1f:96:54:
44:b4:40:9d:70:67:16:08:36:66:fa:62:fe:0f:b2:d2:41:0e:
01:d3:30:d2:dd:df:c2:26:92:25:34:3d:4f:e8:7a:8e:bd:93:
62:69:4b:e8:4f:66:ce:68:85:c2:a7:84:ce:6c:e7:d8:30:6a:
5a:5b:ad:c2:6f:0f:14:e9:ee:75:01:4c:ff:49:f4:c3:6e:66:
cb:a7:ab:09:cd:e3:85:94:9c:ac:6e:55:e3:68:2d:a5:bb:c3:
5a:6b:af:11:6b:f3:b5:59:96:e7:13:ce:de:73:8a:72:db:d6:
41:95:72:49:24:59:b4:31:4d:ea:56:38:08:ad:e2:b0:3c:7e:
a4:53:eb:0d:ec:14:2b:78:d4:bb:57:f1:56:b2:4f:e0:b3:dd:
fc:ec:7c:82:5d:d1:10:9f:dc:18:e6:18:42:48:df:72:fa:0f:
94:5e:2f:05:e8:16:04:5d:83:90:c6:2c:64:c1:1d:96:19:27:
b5:ab:cf:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 10 22:32:31 2026 by rpki-client