This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/EIzTw546AijLugfy7SUrbXCZrhI.roa
File: EIzTw546AijLugfy7SUrbXCZrhI.roa (raw, json)
Hash identifier: bhQWssA6f/y6TGTZl6FaCqwcG1dy8XrxyrdV5VpM640=
Subject key identifier: 10:8C:D3:C3:9E:3A:02:28:CB:BA:07:F2:ED:25:2B:6D:70:99:AE:12
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 019B7E38A49D8D1AF3F6591DC41ECC4F2797
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/EIzTw546AijLugfy7SUrbXCZrhI.roa
Signing time: Fri 02 Jan 2026 10:19:59 +0000
ROA not before: Fri 02 Jan 2026 10:19:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6939
IP address blocks: 77.47.144.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Jan 2026 21:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:38:a4:9d:8d:1a:f3:f6:59:1d:c4:1e:cc:4f:27:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jan 2 10:19:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=108cd3c39e3a0228cbba07f2ed252b6d7099ae12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fa:c8:75:0f:23:e2:2a:af:b7:64:18:fd:c8:
5e:d5:60:a0:af:c5:d6:93:fe:37:dc:7e:14:77:d8:
23:52:57:6e:aa:ce:96:aa:40:53:43:58:5f:34:94:
22:2f:90:4a:7d:e3:a8:96:a2:06:1e:eb:d6:4e:e0:
2a:c4:60:3f:04:d1:12:1c:0c:b9:65:25:4a:7d:ab:
86:09:39:48:a8:e8:29:59:be:86:3f:d8:83:e3:aa:
44:ae:19:ab:4c:1c:f7:c8:79:0f:9d:f7:31:c8:8a:
30:c7:9e:94:fc:43:7d:f2:64:0c:37:2c:44:d3:cd:
08:e7:92:ee:e1:2c:16:0b:78:04:ed:08:15:02:f9:
d3:30:c8:b4:4b:e5:ce:9f:54:aa:bd:05:c3:fc:79:
4b:9e:83:d9:42:86:c0:d2:07:ba:7e:96:89:aa:c5:
a5:0f:45:5e:c9:fb:ef:d5:4e:3b:27:95:aa:16:3e:
e5:27:14:ae:52:18:11:56:04:42:e5:2e:5e:67:3c:
2c:ea:df:dc:79:d9:eb:92:1a:6a:0e:80:e6:e0:1c:
5d:91:84:e4:ae:43:dc:80:c7:6a:d7:e3:27:fe:a5:
c9:28:87:b0:80:bc:e8:df:3f:ef:55:62:ca:e5:da:
a5:e7:49:76:05:d0:b2:c0:1a:92:63:14:ea:c8:a2:
36:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:8C:D3:C3:9E:3A:02:28:CB:BA:07:F2:ED:25:2B:6D:70:99:AE:12
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/EIzTw546AijLugfy7SUrbXCZrhI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.144.0/22
Signature Algorithm: sha256WithRSAEncryption
84:50:8f:47:98:17:27:33:45:d0:1c:eb:40:d9:07:b6:84:21:
17:e0:3e:21:e0:53:5b:e2:85:de:15:6e:5a:37:a8:e4:f6:12:
51:2d:db:52:85:88:f0:cc:8d:7f:e7:3e:1e:39:f0:cb:55:69:
5e:e5:6d:44:c8:c7:73:29:53:82:8b:4d:54:10:12:c3:65:47:
fb:1f:40:d2:63:43:15:32:c8:83:5c:d4:d1:a5:99:20:ba:09:
fd:ec:88:08:f8:ba:0e:4d:21:be:87:22:77:cd:b6:b5:76:af:
02:4b:1b:0f:fd:1f:9b:2f:fd:bf:2e:f1:df:92:fa:6b:f0:9a:
33:51:00:d0:d5:e7:45:32:f1:63:b2:95:c9:f3:15:37:c2:a3:
e7:0a:83:f1:40:35:11:83:c5:e9:d1:9b:cb:8a:bb:dd:c2:8d:
41:16:b1:e2:6d:ee:3f:73:79:3d:41:db:9a:b7:7c:3d:15:82:
09:2a:22:3f:d8:22:87:74:b3:48:ff:a8:80:7c:8d:66:97:c0:
d7:0a:aa:50:b3:d0:28:7d:ae:bb:af:d8:37:34:68:5b:51:be:
4d:04:c1:79:dc:7c:3e:4a:d2:cc:11:06:26:88:9a:4e:94:60:
e0:cd:f3:03:8b:5a:23:12:4b:f2:11:14:5c:a6:92:06:d6:84:
90:10:fd:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 10 04:59:36 2026 by rpki-client