This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/EFN9YwFJCU7kNjD-inbl882svF8.roa
File: EFN9YwFJCU7kNjD-inbl882svF8.roa (raw, json)
Hash identifier: sq2W1W9dUjzCwv/SjjaSHqQODkUq7DuN/5S08gEHSQo=
Subject key identifier: 10:53:7D:63:01:49:09:4E:E4:36:30:FE:8A:76:E5:F3:CD:AC:BC:5F
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 019BA1AE05463FE02B3849630B10F71AE698
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/EFN9YwFJCU7kNjD-inbl882svF8.roa
Signing time: Fri 09 Jan 2026 07:34:54 +0000
ROA not before: Fri 09 Jan 2026 07:34:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63199
IP address blocks: 79.172.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 09:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:a1:ae:05:46:3f:e0:2b:38:49:63:0b:10:f7:1a:e6:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Jan 9 07:34:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=10537d630149094ee43630fe8a76e5f3cdacbc5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:43:17:c8:45:3f:85:67:75:7c:90:ce:8c:4c:
98:5a:a9:ff:14:2e:ec:9f:24:af:5e:de:d4:a8:9f:
07:ff:7e:cc:3e:ba:03:90:c5:45:96:e5:59:61:f6:
19:15:df:84:78:d3:8e:b1:7b:97:7f:d8:aa:74:e8:
7c:56:9a:06:0c:ef:2c:ce:49:36:bc:1e:e8:a3:c8:
4b:3f:e7:cd:56:77:30:5d:cd:fe:c5:8e:f5:7d:c1:
46:f2:7b:9e:e1:3f:ac:9b:88:fe:a0:d8:04:22:ba:
bb:4f:90:51:9c:68:96:d0:14:3f:42:12:93:18:0e:
05:06:2c:e4:1b:70:6c:19:31:4e:f8:08:0b:c3:0a:
02:f8:0f:5d:85:ef:4c:c9:08:9b:bb:c7:35:86:6f:
18:aa:68:b8:40:12:8c:72:c4:36:52:8a:ec:b0:1f:
aa:33:b4:bb:11:9b:e1:f0:28:10:d1:04:72:db:db:
3f:04:af:d4:ab:83:57:50:b6:19:b5:ec:26:4c:fd:
0a:62:b4:a9:78:5c:22:3b:46:2d:5b:48:16:fa:cc:
70:35:a8:73:b0:87:3c:62:70:a5:c6:6a:29:d2:75:
56:ec:e3:d7:1c:43:f0:2c:85:48:e7:c6:80:0a:83:
66:a9:ad:b3:2b:47:38:95:df:a6:23:bc:5e:fe:13:
25:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:53:7D:63:01:49:09:4E:E4:36:30:FE:8A:76:E5:F3:CD:AC:BC:5F
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/EFN9YwFJCU7kNjD-inbl882svF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.193.0/24
Signature Algorithm: sha256WithRSAEncryption
71:fe:5b:16:63:e5:d7:4a:e1:42:35:c3:f9:59:3c:ca:7f:c8:
79:71:c1:f1:8a:1d:4d:63:f7:06:10:d0:fe:0d:81:84:28:a4:
9e:4e:91:1d:66:d5:c0:bb:09:ee:dc:6b:94:b4:70:4c:50:84:
a1:c6:46:fa:ce:43:10:ed:22:cf:d9:23:3f:49:ed:95:fc:fe:
47:73:c6:c3:21:c4:82:4d:18:3f:05:1c:28:8c:d9:a2:56:f4:
ea:50:aa:85:4b:96:87:3d:e5:24:27:f3:d9:d9:42:0d:db:9e:
dc:41:11:24:5b:11:5e:57:63:79:61:6f:6d:a3:7f:70:1e:a3:
fc:56:61:ac:9e:46:c5:8e:37:97:80:69:cf:eb:96:23:88:e5:
6a:83:c3:0c:6e:58:d6:3a:9d:d2:12:c3:f3:4f:e3:d0:9b:4f:
0b:45:e7:56:ff:2a:3e:67:e7:0e:e3:f7:0f:54:d5:34:aa:83:
75:c8:76:44:6d:e3:d6:82:62:ef:23:3d:bc:84:d1:d3:ba:dd:
45:95:82:2a:c7:4a:ca:dd:4e:b6:81:de:ab:49:81:02:d2:1b:
dc:e0:c4:66:e6:62:fd:49:86:18:ee:27:0f:fa:bf:7d:9a:4a:
59:15:5a:ab:06:3e:45:e6:5b:df:68:ba:b2:cc:6b:49:27:f4:
f6:a7:81:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 17:08:58 2026 by rpki-client