This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/0EalOX44qspmegVtsk1N4TSFVRU.roa
File: 0EalOX44qspmegVtsk1N4TSFVRU.roa (raw, json)
Hash identifier: JwbWuG88BTSL/M3LKZ7+Inf9JGSQF9i+jJ1NXUZ8/VQ=
Subject key identifier: D0:46:A5:39:7E:38:AA:CA:66:7A:05:6D:B2:4D:4D:E1:34:85:55:15
Certificate issuer: /CN=614e19a2275816a28e5e80c8f9a28cc5a1d9c0d5
Certificate serial: 019B797DE3E3F77F6774315749FA27ADAC2D
Authority key identifier: 61:4E:19:A2:27:58:16:A2:8E:5E:80:C8:F9:A2:8C:C5:A1:D9:C0:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YU4ZoidYFqKOXoDI-aKMxaHZwNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/0EalOX44qspmegVtsk1N4TSFVRU.roa
Signing time: Thu 01 Jan 2026 12:17:32 +0000
ROA not before: Thu 01 Jan 2026 12:17:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43567
IP address blocks: 31.25.200.0/21 maxlen: 21
37.157.24.0/22 maxlen: 22
37.157.28.0/23 maxlen: 23
37.157.30.0/24 maxlen: 24
77.73.88.0/22 maxlen: 22
77.73.92.0/24 maxlen: 24
77.73.93.0/24 maxlen: 24
77.73.94.0/24 maxlen: 24
188.164.136.0/21 maxlen: 21
188.164.160.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YU4ZoidYFqKOXoDI-aKMxaHZwNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:7d:e3:e3:f7:7f:67:74:31:57:49:fa:27:ad:ac:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=614e19a2275816a28e5e80c8f9a28cc5a1d9c0d5
Validity
Not Before: Jan 1 12:17:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d046a5397e38aaca667a056db24d4de134855515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:fd:fc:d4:8a:74:6f:b3:1e:d5:97:7b:f9:c4:
f8:22:c2:31:96:c9:22:4b:de:43:6e:fe:7b:08:a0:
9c:55:22:aa:0d:e4:4a:18:93:93:97:22:41:ca:95:
33:95:34:d1:5f:71:17:89:52:82:9f:34:03:9f:59:
ab:36:fa:6a:b2:3f:ac:ea:0a:bf:1d:9c:a8:6a:12:
9d:cd:6f:18:73:66:56:a8:35:a9:57:d3:b6:37:81:
70:52:4b:68:bb:23:39:bf:78:53:46:4b:b4:68:19:
2f:eb:55:1a:45:40:7e:33:84:6a:d4:63:bf:67:f5:
fe:96:46:66:2c:34:30:11:25:6c:46:38:c3:95:b6:
7c:01:c9:90:3e:a1:51:86:2f:51:49:b7:05:c3:7f:
a2:08:46:37:d0:2c:e9:94:85:c7:a6:bf:b0:56:bf:
69:fa:bf:d2:ed:76:ac:3f:6d:26:28:c1:13:97:85:
96:45:f0:a6:63:ae:f6:a0:29:13:6f:f7:01:b4:19:
bf:3f:66:26:ec:a2:be:28:b1:8f:cc:be:76:e1:21:
12:53:7f:38:ee:02:5f:47:f2:c2:2d:0c:bc:7a:bf:
bc:73:b2:18:34:16:65:43:0d:73:e1:02:44:5f:f4:
d8:4b:f9:0d:05:79:18:c8:9b:9e:ac:a4:15:b2:d1:
11:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:46:A5:39:7E:38:AA:CA:66:7A:05:6D:B2:4D:4D:E1:34:85:55:15
X509v3 Authority Key Identifier:
keyid:61:4E:19:A2:27:58:16:A2:8E:5E:80:C8:F9:A2:8C:C5:A1:D9:C0:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YU4ZoidYFqKOXoDI-aKMxaHZwNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/0EalOX44qspmegVtsk1N4TSFVRU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.200.0/21
37.157.24.0-37.157.30.255
77.73.88.0-77.73.94.255
188.164.136.0/21
188.164.160.0/19
Signature Algorithm: sha256WithRSAEncryption
1c:d0:48:b9:f7:db:ad:29:8f:5b:09:fd:5c:45:23:fd:d9:9e:
86:3a:59:13:ea:c4:e5:60:eb:ac:17:2f:e6:b9:a2:23:b8:cb:
7b:dd:e5:2e:b9:50:58:9a:13:a5:72:c0:73:64:5e:ea:be:4c:
37:97:28:7d:31:d7:b0:83:73:a2:64:e8:ad:a4:8a:d7:c0:4d:
7a:7f:5c:87:33:d2:17:ae:14:b0:6a:de:27:1a:4d:99:81:5c:
89:d1:d4:2c:ee:78:a9:13:79:46:a2:b8:20:29:00:89:6f:72:
03:bd:8f:11:64:0e:47:6f:4d:52:67:3c:07:9f:e5:cb:b2:44:
f9:53:87:b0:47:78:f7:5d:0e:3d:09:d3:73:37:00:67:51:c2:
11:11:db:d4:ef:5e:38:e2:be:51:d6:fc:56:83:b9:a5:03:6d:
21:4d:a6:85:0a:c7:d2:dd:ef:c0:1a:dd:12:ba:77:05:1a:c8:
9b:7f:09:62:6e:18:88:00:50:9b:a4:72:12:39:2e:8d:11:34:
7a:61:89:f1:38:a9:c7:a0:78:7a:67:77:3a:66:5a:22:e3:0b:
cf:ab:dd:af:34:90:2f:9a:77:66:8b:f2:7b:60:83:5a:ed:5f:
e6:57:11:6c:ef:03:a9:e7:8d:11:5d:36:c5:bf:d5:47:7e:5e:
d8:00:d2:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:02:45 2026 by rpki-client