This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/eKGc6DKbOMncZQro-L8ILIR8Mio.roa
File: eKGc6DKbOMncZQro-L8ILIR8Mio.roa (raw, json)
Hash identifier: a/EaLUbWAd/Lvp23z8W0KPeDxVXeYWz3C7Y7jr3ofCk=
Subject key identifier: 78:A1:9C:E8:32:9B:38:C9:DC:65:0A:E8:F8:BF:08:2C:84:7C:32:2A
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 019BF9D9F99B7E83BFAEEDDECAA528A8B78C
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/eKGc6DKbOMncZQro-L8ILIR8Mio.roa
Signing time: Mon 26 Jan 2026 10:29:30 +0000
ROA not before: Mon 26 Jan 2026 10:29:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9457
IP address blocks: 87.229.25.0/24 maxlen: 24
87.229.52.0/24 maxlen: 24
87.229.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Feb 2026 06:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f9:d9:f9:9b:7e:83:bf:ae:ed:de:ca:a5:28:a8:b7:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Jan 26 10:29:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=78a19ce8329b38c9dc650ae8f8bf082c847c322a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d3:3f:31:bf:83:f8:a8:c3:3c:38:2c:c5:cf:
6a:8c:23:d4:7e:81:ef:cf:2c:16:a5:27:74:55:e1:
27:a8:11:71:89:8b:e5:38:1a:71:8c:4f:4e:40:98:
8e:68:67:c2:83:65:df:95:e7:79:8e:fc:cd:5c:43:
0c:15:18:56:0c:81:41:15:53:75:62:5b:ed:2c:b3:
55:9c:4a:a4:4a:8d:c2:22:66:cd:ef:0f:4d:70:50:
26:05:24:6d:28:ef:ec:e4:fd:09:ed:78:7f:a6:ec:
ec:2d:bb:e3:24:90:75:19:6c:f4:15:eb:d9:c9:38:
a4:f5:95:88:95:51:b5:67:6e:91:28:f5:9c:2f:10:
31:8c:67:5b:49:2b:eb:29:ac:4f:38:21:31:5d:09:
52:60:8d:98:a9:55:98:a6:6d:78:c3:9f:17:5b:5f:
6c:72:3e:fd:10:55:db:11:53:23:1d:3b:18:66:6b:
50:17:f8:06:f7:72:6c:64:13:02:61:eb:bb:64:35:
b8:06:d9:25:25:5d:31:03:47:bf:81:7b:96:92:97:
19:56:60:ad:1e:d5:e3:0f:96:23:24:03:86:69:dd:
a9:a8:36:e7:a0:30:f4:79:38:b2:a7:3e:c3:5d:3e:
23:eb:4d:d4:8b:5d:37:4e:18:ae:6f:25:10:9e:2b:
bc:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:A1:9C:E8:32:9B:38:C9:DC:65:0A:E8:F8:BF:08:2C:84:7C:32:2A
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/eKGc6DKbOMncZQro-L8ILIR8Mio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.229.25.0/24
87.229.52.0/24
87.229.56.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:d3:c5:a3:32:42:ab:2b:07:6e:b4:47:f4:70:c2:4c:3a:fb:
b3:07:32:59:6d:a9:b4:d0:86:c8:f6:5e:3f:68:2c:9c:23:88:
05:ef:94:db:92:d1:0f:a9:31:38:bb:33:0f:44:82:4d:c5:b2:
fb:00:12:17:f9:d0:67:aa:cc:91:f4:b9:02:e8:2a:2e:7d:ef:
b4:01:96:72:6a:39:35:ba:1f:34:4e:4f:6d:5b:f1:ac:81:c9:
9c:ce:c1:28:03:3d:75:b4:7b:40:93:63:f8:9c:19:25:9f:1e:
7a:55:0b:f7:2d:db:c1:8b:c1:e5:e7:d6:3b:de:5b:c1:59:08:
a0:a3:39:da:c7:81:78:d6:09:66:45:13:30:b1:fa:40:20:ea:
92:be:c6:f9:d9:76:95:03:dc:18:24:5c:a0:25:62:0b:71:0a:
72:e2:9c:1d:29:7d:d5:09:5e:b0:a0:58:8c:de:1a:13:c1:98:
2b:7c:73:3d:4f:c9:6b:cc:27:67:47:10:91:7f:c7:b2:32:15:
c7:7b:72:ca:fa:8b:b7:4a:a3:a4:8b:1a:a6:57:76:0e:c8:7c:
f7:60:3f:e8:8c:6f:62:5a:bd:f0:6b:9a:72:d7:22:26:eb:4e:
ce:43:a8:48:fe:c2:32:93:57:17:cf:a3:2f:42:32:b0:8c:69:
52:24:73:1e
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZv52fmbfoO/ru3eyqUoqLeMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2
NDI0OTcwHhcNMjYwMTI2MTAyOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OGExOWNlODMyOWIzOGM5ZGM2NTBhZThmOGJmMDgyYzg0N2MzMjJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2NM/Mb+D+KjDPDgsxc9qjCPUfoHv
zywWpSd0VeEnqBFxiYvlOBpxjE9OQJiOaGfCg2Xfled5jvzNXEMMFRhWDIFBFVN1
YlvtLLNVnEqkSo3CImbN7w9NcFAmBSRtKO/s5P0J7Xh/puzsLbvjJJB1GWz0FevZ
yTik9ZWIlVG1Z26RKPWcLxAxjGdbSSvrKaxPOCExXQlSYI2YqVWYpm14w58XW19s
cj79EFXbEVMjHTsYZmtQF/gG93JsZBMCYeu7ZDW4BtklJV0xA0e/gXuWkpcZVmCt
HtXjD5YjJAOGad2pqDbnoDD0eTiypz7DXT4j603Ui103ThiubyUQniu8tQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFHihnOgymzjJ3GUK6Pi/CCyEfDIqMB8GA1UdIwQY
MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt
OTU5M2E0ODhhZmNjLzEvZUtHYzZES2JPTW5jWlFyby1MOElMSVI4TWlvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj
LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAV+UZAwQA
V+U0AwQAV+U4MA0GCSqGSIb3DQEBCwUAA4IBAQBf08WjMkKrKwdutEf0cMJMOvuz
BzJZbam00IbI9l4/aCycI4gF75TbktEPqTE4uzMPRIJNxbL7ABIX+dBnqsyR9LkC
6Coufe+0AZZyajk1uh80Tk9tW/GsgcmczsEoAz11tHtAk2P4nBklnx56VQv3LdvB
i8Hl59Y73lvBWQigoznax4F41glmRRMwsfpAIOqSvsb52XaVA9wYJFygJWILcQpy
4pwdKX3VCV6woFiM3hoTwZgrfHM9T8lrzCdnRxCRf8eyMhXHe3LK+ou3SqOkixqm
V3YOyHz3YD/ojG9iWr3wa5py1yIm607OQ6hI/sIyk1cXz6MvQjKwjGlSJHMe
-----END CERTIFICATE-----
Generated at Mon Feb 2 14:01:58 2026 by rpki-client