This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/04e4c6-3349-4aed-88bc-5ee534fdb39b/1/EACCpkJUe6xsP4_nCRlj7NVGBLc.roa
File: EACCpkJUe6xsP4_nCRlj7NVGBLc.roa (raw, json)
Hash identifier: cbbyB5SvosFwqsVBAsWwnY8rZFf7hG0lJZ2R8+Yzr20=
Subject key identifier: 10:00:82:A6:42:54:7B:AC:6C:3F:8F:E7:09:19:63:EC:D5:46:04:B7
Certificate issuer: /CN=1d05dc740f6f4bb5bc4b03387e9b47530850743c
Certificate serial: 019B7CED9A83F3DEDA5B8C472BD9EBFF2878
Authority key identifier: 1D:05:DC:74:0F:6F:4B:B5:BC:4B:03:38:7E:9B:47:53:08:50:74:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQXcdA9vS7W8SwM4fptHUwhQdDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/04e4c6-3349-4aed-88bc-5ee534fdb39b/1/EACCpkJUe6xsP4_nCRlj7NVGBLc.roa
Signing time: Fri 02 Jan 2026 04:18:24 +0000
ROA not before: Fri 02 Jan 2026 04:18:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212185
IP address blocks: 76.74.180.0/23 maxlen: 23
76.74.182.0/23 maxlen: 23
2a07:3044:1::/48 maxlen: 48
2a07:3044:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/04e4c6-3349-4aed-88bc-5ee534fdb39b/1/HQXcdA9vS7W8SwM4fptHUwhQdDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/04e4c6-3349-4aed-88bc-5ee534fdb39b/1/HQXcdA9vS7W8SwM4fptHUwhQdDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HQXcdA9vS7W8SwM4fptHUwhQdDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:ed:9a:83:f3:de:da:5b:8c:47:2b:d9:eb:ff:28:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d05dc740f6f4bb5bc4b03387e9b47530850743c
Validity
Not Before: Jan 2 04:18:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=100082a642547bac6c3f8fe7091963ecd54604b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ea:d2:8c:a4:ae:39:d9:46:d8:38:e5:98:ec:
a9:60:b3:4e:f7:fb:14:c3:b6:c6:6a:2b:72:61:02:
a9:32:5a:0c:0f:6a:db:56:ed:28:1d:b9:e2:29:7b:
55:e7:7d:54:8c:37:c3:8f:2f:64:eb:bd:d4:df:43:
81:f6:c2:3a:f9:ca:14:1c:ad:5c:85:b9:93:8f:23:
b2:1f:27:66:91:cc:cf:61:30:34:94:18:08:c8:34:
87:e6:bd:cf:85:94:05:5b:80:0d:65:c0:bb:af:39:
a9:6b:93:4c:4c:45:e5:ab:55:60:4c:0d:2a:a1:f5:
70:62:64:b2:49:85:f1:ee:9e:0e:99:f9:7a:b7:0b:
a0:76:07:fd:ac:d5:01:18:5d:55:39:4f:6c:4e:c5:
43:43:09:33:3b:50:1a:4a:03:d9:3e:81:92:5b:72:
ab:14:89:13:1f:ef:e6:0a:3f:85:05:e6:de:89:61:
20:e9:55:c5:6c:2a:04:33:8a:c5:ac:bc:e0:7e:8f:
f9:95:47:e8:2c:fb:43:f5:58:06:33:48:1a:54:04:
10:4f:be:f2:b4:3c:b1:39:b6:6e:33:70:1b:9b:90:
82:10:fa:3e:4d:3f:89:68:97:56:5f:8c:39:b5:c4:
39:4a:15:3f:d9:a5:79:21:14:67:21:d6:37:e3:41:
a9:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:00:82:A6:42:54:7B:AC:6C:3F:8F:E7:09:19:63:EC:D5:46:04:B7
X509v3 Authority Key Identifier:
keyid:1D:05:DC:74:0F:6F:4B:B5:BC:4B:03:38:7E:9B:47:53:08:50:74:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQXcdA9vS7W8SwM4fptHUwhQdDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/04e4c6-3349-4aed-88bc-5ee534fdb39b/1/EACCpkJUe6xsP4_nCRlj7NVGBLc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/04e4c6-3349-4aed-88bc-5ee534fdb39b/1/HQXcdA9vS7W8SwM4fptHUwhQdDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
76.74.180.0/22
IPv6:
2a07:3044:1::-2a07:3044:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
ab:2e:e5:d4:7c:e6:19:0f:0c:35:c4:eb:96:a4:1a:d9:07:e6:
fa:16:3f:ad:7c:69:61:19:2c:79:18:73:05:f9:ba:0f:0e:0f:
a7:25:74:fc:c2:3c:6e:21:ac:49:41:ec:bf:36:5c:d3:14:92:
47:8c:fb:c9:88:05:1e:02:66:d5:f5:ea:6a:4b:fe:d0:56:73:
1f:75:c8:8f:0c:2d:43:42:8b:7a:7f:5f:7f:87:6d:d6:48:e3:
c2:fe:95:f4:5b:aa:1e:7a:16:06:ad:ec:df:2a:04:6c:1b:25:
5b:89:e4:98:d0:a7:3f:0f:0c:4b:5a:a1:30:f9:74:5b:12:d2:
eb:b1:3a:7d:fa:ce:6d:d4:6b:2d:53:bf:3f:14:37:bf:46:37:
38:3e:08:dd:a8:63:5b:85:0f:26:3f:36:f3:e5:1b:04:63:46:
4f:a5:c4:18:12:5d:9f:e0:2f:68:81:26:aa:77:00:ea:18:14:
ff:44:f0:12:81:8a:f9:11:51:ac:4b:bf:99:f2:0a:12:8c:68:
9f:14:f6:27:01:ab:15:84:a3:de:83:b6:ab:9a:68:1f:90:35:
a8:51:e4:1d:c4:62:84:00:38:a6:01:9a:c2:da:9d:af:b8:27:
f5:68:23:7b:27:3d:0f:89:88:ce:51:90:d4:37:84:09:02:7e:
43:31:50:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 23:54:31 2026 by rpki-client