This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Eutl85DJa5Wvda8Ay8PusU7FvGw.roa
File: Eutl85DJa5Wvda8Ay8PusU7FvGw.roa (raw, json)
Hash identifier: 0UQ/kddOeRvGr5lY/YK4culyM9uyjud6DEWUEwmL8/g=
Subject key identifier: 12:EB:65:F3:90:C9:6B:95:AF:75:AF:00:CB:C3:EE:B1:4E:C5:BC:6C
Certificate issuer: /CN=064dcd0ee7014efb2e3b554fbb706384ef11d051
Certificate serial: 019B7F826F73EC8E0D565226A8395EB26DE3
Authority key identifier: 06:4D:CD:0E:E7:01:4E:FB:2E:3B:55:4F:BB:70:63:84:EF:11:D0:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bk3NDucBTvsuO1VPu3BjhO8R0FE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Eutl85DJa5Wvda8Ay8PusU7FvGw.roa
Signing time: Fri 02 Jan 2026 16:20:13 +0000
ROA not before: Fri 02 Jan 2026 16:20:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198949
IP address blocks: 193.135.123.0/24 maxlen: 24
2a09:fb00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bk3NDucBTvsuO1VPu3BjhO8R0FE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Jan 2026 13:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:82:6f:73:ec:8e:0d:56:52:26:a8:39:5e:b2:6d:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=064dcd0ee7014efb2e3b554fbb706384ef11d051
Validity
Not Before: Jan 2 16:20:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=12eb65f390c96b95af75af00cbc3eeb14ec5bc6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:c6:3b:06:e7:2b:41:87:e9:53:63:33:99:62:
aa:1e:42:d8:c3:43:1b:d0:33:ee:3d:d5:71:ac:cd:
22:84:46:7d:d7:98:09:f3:a1:dd:0c:64:dc:88:05:
54:6d:dc:bf:a6:16:c9:ac:81:1a:62:6f:a6:2d:4a:
ec:e6:34:2a:50:d7:46:b9:5c:1b:e0:80:ea:7f:6f:
f5:52:06:4d:a9:cf:44:35:3f:2a:49:03:1e:0d:1b:
94:b6:8e:ec:8e:09:87:fa:95:b3:36:2a:1d:7e:02:
e1:04:26:6a:f8:9e:ff:fd:8c:d2:d6:19:b5:af:40:
42:20:1d:d4:03:8f:60:d4:ba:35:dd:08:ea:50:a7:
99:e8:31:6e:24:67:1f:aa:32:d2:18:43:13:0a:80:
70:92:1b:a7:ad:90:25:f2:98:d6:1b:2e:79:6c:ca:
ba:bf:a9:b8:0c:bd:f1:00:8b:bb:a5:de:30:2e:59:
2e:f5:eb:fe:18:51:ad:01:5e:ae:fa:5f:a0:d9:93:
39:04:03:c1:e2:e0:2c:e2:30:b0:40:57:cb:31:49:
aa:05:14:b8:12:25:a6:e7:cc:6e:0a:e4:b4:d1:cb:
fd:f4:86:2e:ff:79:68:58:a4:98:a5:4b:26:18:c7:
13:78:d0:c7:7e:c5:ad:6d:8b:e0:bc:45:80:b5:8a:
cf:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:EB:65:F3:90:C9:6B:95:AF:75:AF:00:CB:C3:EE:B1:4E:C5:BC:6C
X509v3 Authority Key Identifier:
keyid:06:4D:CD:0E:E7:01:4E:FB:2E:3B:55:4F:BB:70:63:84:EF:11:D0:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bk3NDucBTvsuO1VPu3BjhO8R0FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Eutl85DJa5Wvda8Ay8PusU7FvGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.135.123.0/24
IPv6:
2a09:fb00::/29
Signature Algorithm: sha256WithRSAEncryption
98:78:7b:0b:f8:52:fb:7a:b1:24:0b:97:e0:76:92:02:30:86:
f7:4a:6e:d0:eb:64:d4:9d:a2:da:98:69:0e:44:f3:eb:60:84:
87:a4:d4:24:9c:72:23:20:52:ef:a8:b5:c7:be:5e:bc:c9:1c:
1b:74:f0:c7:da:ca:da:68:45:75:70:7c:39:e1:b1:4d:02:f8:
cc:ba:c6:4d:d9:00:bb:3d:1f:35:12:c4:87:1a:02:16:f0:a8:
ed:46:ed:22:a3:46:31:e0:e8:6b:23:60:f0:c3:ac:e8:ac:28:
27:66:92:f3:99:6e:bc:bf:06:d1:9f:c4:94:83:2b:ee:a6:7d:
0c:ca:5f:49:48:6d:15:8b:49:0c:93:c1:c2:a4:36:87:03:9b:
5a:f5:9c:7c:58:21:b3:2f:65:66:53:cd:5b:be:a2:fe:e4:c4:
ed:43:6c:cf:a2:b8:9a:5d:7d:68:71:c3:57:82:72:89:7f:da:
3b:e9:41:41:03:de:89:99:f5:5d:e6:a2:a5:79:d4:ff:35:1e:
46:48:f1:eb:4b:9d:ec:52:7e:7e:61:1e:f2:d6:52:60:8c:c7:
85:76:84:2f:18:d5:bd:1b:f7:95:aa:fc:54:b8:f8:4f:1d:70:
f1:8d:4e:34:bd:7b:a5:8e:d9:e5:e7:52:28:ed:0d:51:d5:eb:
6d:35:f5:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 7 22:29:19 2026 by rpki-client