This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/078960-3c3a-40e4-9342-b2afea6d06ab/1/r5EDeEdzSCZ0a6b-P5YGKnBGVhU.roa
File: r5EDeEdzSCZ0a6b-P5YGKnBGVhU.roa (raw, json)
Hash identifier: Lx5U2EtRmK/SMw+CSkQAbyTcgCy3VHiqTM7rtjngPZA=
Subject key identifier: AF:91:03:78:47:73:48:26:74:6B:A6:FE:3F:96:06:2A:70:46:56:15
Certificate issuer: /CN=7a3f897117599fe839a9940e81a1788244caad06
Certificate serial: 019B78352DEB58FF0547779BA6A5CEFAE4E1
Authority key identifier: 7A:3F:89:71:17:59:9F:E8:39:A9:94:0E:81:A1:78:82:44:CA:AD:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ej-JcRdZn-g5qZQOgaF4gkTKrQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/078960-3c3a-40e4-9342-b2afea6d06ab/1/r5EDeEdzSCZ0a6b-P5YGKnBGVhU.roa
Signing time: Thu 01 Jan 2026 06:18:29 +0000
ROA not before: Thu 01 Jan 2026 06:18:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57905
IP address blocks: 194.1.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/078960-3c3a-40e4-9342-b2afea6d06ab/1/ej-JcRdZn-g5qZQOgaF4gkTKrQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/078960-3c3a-40e4-9342-b2afea6d06ab/1/ej-JcRdZn-g5qZQOgaF4gkTKrQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ej-JcRdZn-g5qZQOgaF4gkTKrQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:35:2d:eb:58:ff:05:47:77:9b:a6:a5:ce:fa:e4:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a3f897117599fe839a9940e81a1788244caad06
Validity
Not Before: Jan 1 06:18:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=af91037847734826746ba6fe3f96062a70465615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:66:4f:3d:75:ee:94:29:23:15:dc:67:d5:d0:
eb:6a:11:25:a3:51:53:16:a0:80:44:80:9b:bb:8b:
22:68:bf:17:cb:80:ef:82:cf:95:1b:8f:65:7a:ff:
fe:c5:36:c6:bc:50:89:dc:6d:2f:53:1b:f0:ca:db:
60:e5:d7:33:45:18:a5:f1:1f:32:07:82:a4:6a:a0:
de:e0:0a:ca:f2:21:74:98:83:dc:d0:ce:eb:c8:8e:
73:b5:1b:94:0c:2f:1b:c3:95:b0:ed:b5:0e:9b:59:
f0:f2:1e:f8:d0:0c:f2:d7:43:90:7c:43:a4:2c:26:
38:c4:d8:1b:4b:c3:26:87:67:d8:74:f2:7e:f6:68:
dd:00:61:4d:ad:73:4f:3e:98:29:16:0e:e9:4d:03:
40:45:92:23:fa:e7:ee:86:60:55:ab:d0:65:2f:c9:
c7:c3:a3:92:86:79:53:59:e4:90:90:97:b9:72:ce:
53:73:6b:22:87:6e:86:c4:1d:d5:d4:9e:b9:d5:51:
fb:17:5f:e6:de:f2:e8:d7:15:be:4d:42:44:1a:7c:
f4:01:1b:19:fc:e6:31:0f:93:d1:c5:be:a2:8f:48:
ca:5d:0a:3f:4c:b3:ff:e6:08:bf:14:50:9d:ca:06:
3d:1a:7b:b0:6f:7b:bb:c6:94:a4:3f:9f:70:de:95:
45:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:91:03:78:47:73:48:26:74:6B:A6:FE:3F:96:06:2A:70:46:56:15
X509v3 Authority Key Identifier:
keyid:7A:3F:89:71:17:59:9F:E8:39:A9:94:0E:81:A1:78:82:44:CA:AD:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ej-JcRdZn-g5qZQOgaF4gkTKrQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/078960-3c3a-40e4-9342-b2afea6d06ab/1/r5EDeEdzSCZ0a6b-P5YGKnBGVhU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/078960-3c3a-40e4-9342-b2afea6d06ab/1/ej-JcRdZn-g5qZQOgaF4gkTKrQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.1.217.0/24
Signature Algorithm: sha256WithRSAEncryption
97:72:1c:76:30:2b:47:79:b8:74:0a:b3:15:79:e3:f1:a7:76:
ae:c2:c7:a6:aa:ef:35:7e:5a:85:b2:76:c1:cb:b6:52:e4:b4:
e3:02:1f:18:e9:a3:3a:a2:4e:9a:b9:40:95:81:fd:6b:a9:a4:
97:93:08:6d:00:20:df:8d:f3:d7:16:e3:bc:0e:f8:0e:43:71:
4f:e7:b3:f5:20:8b:d0:e4:8f:cb:c9:ef:cb:e9:13:c3:df:a4:
ae:ef:23:cf:e6:14:64:05:a3:f1:5e:0f:25:2f:54:23:47:2d:
b0:2c:df:5c:fd:6e:02:46:46:68:29:39:8a:bc:06:d1:52:45:
aa:9d:37:17:58:df:67:3c:93:70:d3:65:3e:9d:9d:70:39:c2:
06:30:ca:56:89:04:de:fe:f6:01:57:a3:c1:a5:16:3d:0c:02:
3d:76:63:be:96:66:27:ae:06:f8:61:7f:43:09:8a:6d:5b:5f:
be:f1:4a:f4:e6:87:cd:dd:bb:c7:91:b3:7a:5e:5f:a7:cc:24:
3a:13:5a:e3:fe:95:46:d6:30:b1:72:84:4f:d1:50:64:f9:26:
7a:e2:8a:5b:90:1a:6a:25:8e:cf:16:9b:f8:80:87:40:a9:ee:
51:16:8d:fe:7d:d5:1f:bb:01:a6:6d:a4:c5:1a:96:3c:b0:82:
e0:0d:6c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:05:18 2026 by rpki-client