This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/2ixhfEikxksljZta27LQrDoTauQ.roa
File: 2ixhfEikxksljZta27LQrDoTauQ.roa (raw, json)
Hash identifier: XQteM1cNrwebXQAKpW0VZ/zeYzjTmDP02b7E+myH6K0=
Subject key identifier: DA:2C:61:7C:48:A4:C6:4B:25:8D:9B:5A:DB:B2:D0:AC:3A:13:6A:E4
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 019B7CEE4E2D5F2E2C10877F8BD82B5882D6
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/2ixhfEikxksljZta27LQrDoTauQ.roa
Signing time: Fri 02 Jan 2026 04:19:10 +0000
ROA not before: Fri 02 Jan 2026 04:19:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 18186
IP address blocks: 87.229.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 04:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:ee:4e:2d:5f:2e:2c:10:87:7f:8b:d8:2b:58:82:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Jan 2 04:19:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=da2c617c48a4c64b258d9b5adbb2d0ac3a136ae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e0:7c:71:c9:be:8c:6f:a1:1f:81:dd:d1:6b:
8a:bb:9b:b4:8b:0d:da:67:da:fc:72:b5:3a:1b:5b:
a7:6a:e5:82:b5:03:6c:a6:08:1b:e0:5e:02:99:90:
d3:99:1c:c0:45:77:97:96:40:67:fb:dc:24:20:48:
ad:f8:42:f1:69:12:2e:92:12:58:ef:b2:c2:92:ce:
95:08:51:3a:e8:fd:31:ac:e4:b2:f2:4c:b5:6c:1b:
74:60:bc:1d:66:d7:45:c6:2c:b9:39:03:fc:93:aa:
71:75:6f:b0:c8:ac:d2:8e:45:1e:c1:57:41:c4:e7:
d6:e3:5f:14:5f:32:9e:42:d6:bd:d4:8a:66:fb:b5:
a4:b1:18:51:2b:d5:71:b9:b6:a9:e2:68:0a:98:31:
f1:cc:ba:d1:44:5f:36:63:98:e1:23:f5:f3:8c:70:
6a:13:80:2f:2d:d9:f4:aa:70:a5:c4:59:ea:14:26:
eb:22:cf:dc:74:eb:69:fb:22:02:26:e4:24:24:05:
25:63:37:f6:9f:93:9d:61:e7:04:00:1f:38:9a:08:
66:85:f2:6b:d7:93:95:51:41:dc:8a:a6:ed:4d:51:
7e:c5:4c:65:f7:bc:79:b7:4a:8e:9d:4a:5e:07:80:
db:54:29:07:04:07:2d:93:db:75:3e:08:94:44:4d:
e6:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:2C:61:7C:48:A4:C6:4B:25:8D:9B:5A:DB:B2:D0:AC:3A:13:6A:E4
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/2ixhfEikxksljZta27LQrDoTauQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.229.92.0/24
Signature Algorithm: sha256WithRSAEncryption
05:57:ba:f4:84:75:8b:30:c6:f2:c3:36:f4:47:22:1e:39:d3:
04:e2:7e:70:5c:45:26:95:f2:86:fa:27:7c:81:d4:73:4a:3c:
d6:bf:1d:f7:95:99:1d:18:a9:f3:14:c7:53:33:46:a1:2a:7e:
25:55:d7:e6:57:a7:fb:3c:85:19:97:ca:e5:6d:ef:22:2d:4b:
ef:2d:cb:7d:52:74:4d:29:2f:92:dd:67:43:3b:1c:c0:9f:15:
e8:29:ab:6b:77:7c:15:0e:55:af:ce:e9:3b:50:4e:b5:e7:ac:
14:8e:ef:fa:2d:4b:99:23:10:cf:4f:87:44:5b:dd:4c:7d:d5:
f0:6c:7b:54:96:d5:76:b7:16:ee:30:a8:3e:39:e9:09:79:01:
58:f1:49:61:99:1e:ed:61:9f:9b:05:44:56:5f:f0:72:19:32:
39:71:63:5f:c0:0b:f7:a7:29:67:90:6c:bd:00:70:4c:0e:56:
10:bd:fd:c5:c7:7f:d4:a2:d8:17:96:b6:04:e1:ed:30:fd:b9:
f4:31:8d:f0:ec:03:af:09:74:60:34:d3:a2:eb:2c:04:26:bc:
b5:28:2c:a1:ba:a9:24:65:9b:cc:b2:ad:d1:84:10:32:bf:b3:
01:82:7c:48:cf:23:dc:2f:ba:6a:26:3a:a2:3e:dc:ab:50:d7:
d1:e3:93:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 11:49:12 2026 by rpki-client