This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/9e86ab-bc7f-4bc4-b127-42262161e940/1/_ekj4fBCC-1LoTKEQYbL18NkSAc.roa
File: _ekj4fBCC-1LoTKEQYbL18NkSAc.roa (raw, json)
Hash identifier: W/KYBONJ/KDpkHUwnZKOouDs1yaqFFr42Io+j+CB21A=
Subject key identifier: FD:E9:23:E1:F0:42:0B:ED:4B:A1:32:84:41:86:CB:D7:C3:64:48:07
Certificate issuer: /CN=c38c3a1c05c899ebfe15d2361909a63597c68078
Certificate serial: 019B7910FCCE3A84FC25E504D2732CC873E1
Authority key identifier: C3:8C:3A:1C:05:C8:99:EB:FE:15:D2:36:19:09:A6:35:97:C6:80:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w4w6HAXImev-FdI2GQmmNZfGgHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/9e86ab-bc7f-4bc4-b127-42262161e940/1/_ekj4fBCC-1LoTKEQYbL18NkSAc.roa
Signing time: Thu 01 Jan 2026 10:18:34 +0000
ROA not before: Thu 01 Jan 2026 10:18:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197999
IP address blocks: 185.202.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/9e86ab-bc7f-4bc4-b127-42262161e940/1/w4w6HAXImev-FdI2GQmmNZfGgHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/9e86ab-bc7f-4bc4-b127-42262161e940/1/w4w6HAXImev-FdI2GQmmNZfGgHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/w4w6HAXImev-FdI2GQmmNZfGgHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:10:fc:ce:3a:84:fc:25:e5:04:d2:73:2c:c8:73:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c38c3a1c05c899ebfe15d2361909a63597c68078
Validity
Not Before: Jan 1 10:18:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fde923e1f0420bed4ba132844186cbd7c3644807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:96:a8:fb:d7:9c:0d:78:91:07:5c:e2:37:b4:
90:28:e0:f6:73:3f:bd:7f:f3:29:fa:32:75:c6:50:
9b:c1:9e:b2:aa:91:47:b1:d5:71:bb:f3:4a:fe:7b:
f8:e5:d5:e7:ca:1b:69:69:4b:8d:77:7d:04:07:20:
29:f9:12:20:1c:0f:c1:c4:74:33:3b:eb:7d:bd:04:
bf:ee:05:7b:50:00:d0:c6:34:e3:da:f5:cc:ce:a7:
69:90:77:36:fe:fd:2c:13:f9:f0:58:c6:d0:0a:ab:
bd:f0:95:a3:02:dd:9e:a9:7e:f6:cc:2a:e9:cf:ee:
98:46:49:71:24:b0:2f:5f:38:96:62:13:a3:ab:d5:
2d:7e:2d:2e:b0:a9:cb:36:e0:f6:35:2e:63:c0:f0:
77:b6:e6:69:76:e9:e4:e5:c2:24:eb:40:fc:4c:62:
39:7f:fe:90:cb:cc:30:64:ae:c9:d9:89:a8:cc:6b:
95:6b:99:33:6f:c5:33:8a:27:7b:28:d4:58:b6:55:
92:92:0b:59:d9:5c:f5:dd:67:83:0c:18:f1:99:9f:
60:41:61:df:b0:4b:84:80:dd:ad:a2:5e:cd:10:7b:
41:eb:00:9b:69:24:c4:3b:41:90:56:b8:7a:aa:3a:
33:96:3d:ef:a3:8a:bf:9d:18:c6:6e:0a:a7:d5:7b:
a2:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:E9:23:E1:F0:42:0B:ED:4B:A1:32:84:41:86:CB:D7:C3:64:48:07
X509v3 Authority Key Identifier:
keyid:C3:8C:3A:1C:05:C8:99:EB:FE:15:D2:36:19:09:A6:35:97:C6:80:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4w6HAXImev-FdI2GQmmNZfGgHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9e86ab-bc7f-4bc4-b127-42262161e940/1/_ekj4fBCC-1LoTKEQYbL18NkSAc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9e86ab-bc7f-4bc4-b127-42262161e940/1/w4w6HAXImev-FdI2GQmmNZfGgHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.7.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:de:d9:67:e5:f4:d4:23:2e:a6:34:f5:05:37:4a:8d:aa:6c:
bd:57:b4:23:ae:f8:3a:69:f0:75:21:3e:77:a5:92:96:7e:86:
3c:52:ff:71:6e:ac:55:eb:05:40:c4:9e:95:49:7b:38:2b:9f:
e3:07:49:d5:7a:3d:f2:26:a7:e8:83:ec:60:22:70:ef:99:cd:
09:5c:0f:28:18:45:58:a7:28:93:d7:0e:fb:71:69:78:32:0b:
88:f7:84:b6:b6:10:21:88:56:f1:51:6b:f0:b4:f0:c0:9e:fb:
c4:df:99:7d:a0:31:27:d0:a7:3a:8d:ec:67:11:fe:d7:1e:c1:
d1:58:e7:2a:d5:34:fa:a2:0a:25:7c:8a:a7:96:67:7f:59:7f:
06:36:12:fe:0f:8f:1a:5a:c4:db:8d:28:ae:9a:5d:9d:bb:ef:
34:54:d5:98:9d:96:33:e2:31:86:87:c5:25:06:ca:f2:e6:b7:
29:e3:46:b9:2c:f4:db:c2:f9:37:1f:f1:56:6a:5f:34:39:50:
30:27:9f:6e:16:d7:d2:6e:41:93:fe:67:fe:b5:28:64:73:cd:
c4:99:3b:62:3b:03:63:07:c0:7c:3a:8a:b6:58:12:d2:ad:db:
44:e0:f0:ac:4d:dc:1a:48:0c:9e:35:f5:b7:99:3e:ce:59:ca:
82:85:62:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:32:10 2026 by rpki-client