This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/eF_Iql01f6Mj_BVm584xV8IssYA.roa
File: eF_Iql01f6Mj_BVm584xV8IssYA.roa (raw, json)
Hash identifier: iPi/R187ECcID1empgHZAsvXPyLUYT8zATjgc8Yt7/o=
Subject key identifier: 78:5F:C8:AA:5D:35:7F:A3:23:FC:15:66:E7:CE:31:57:C2:2C:B1:80
Certificate issuer: /CN=aca1f4713024804c445403af63fa644b2a935d24
Certificate serial: 019B7F138862294976BF7E039E00505189B9
Authority key identifier: AC:A1:F4:71:30:24:80:4C:44:54:03:AF:63:FA:64:4B:2A:93:5D:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKH0cTAkgExEVAOvY_pkSyqTXSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/eF_Iql01f6Mj_BVm584xV8IssYA.roa
Signing time: Fri 02 Jan 2026 14:19:05 +0000
ROA not before: Fri 02 Jan 2026 14:19:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 194.180.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKH0cTAkgExEVAOvY_pkSyqTXSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 20:39:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:13:88:62:29:49:76:bf:7e:03:9e:00:50:51:89:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca1f4713024804c445403af63fa644b2a935d24
Validity
Not Before: Jan 2 14:19:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=785fc8aa5d357fa323fc1566e7ce3157c22cb180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:8f:94:fb:2d:b7:60:ba:bf:bf:fa:73:96:05:
1b:3e:73:04:7e:ba:82:5a:0b:b5:d6:26:ca:15:0b:
31:7c:b7:1e:fd:fd:4a:29:bb:b0:33:bc:93:e4:e6:
9b:7a:af:52:8e:5f:d1:bb:54:03:e3:19:75:7c:8e:
14:45:9b:b7:a8:5d:4e:68:48:ea:1b:85:f6:57:c5:
47:ee:60:f0:af:47:c1:75:48:d7:82:d7:63:31:e9:
1a:7c:71:7a:08:f1:a0:8c:fc:46:9d:6b:f8:77:84:
e4:3c:ce:d2:f6:66:9e:f7:58:4b:4c:5c:2f:37:63:
7b:8a:f1:07:42:5f:34:1b:4c:65:1f:fd:a1:2e:4b:
e4:d4:53:5b:75:c4:d5:55:ca:cd:c6:65:3c:16:ef:
84:e9:06:b9:1c:74:ef:c2:e1:56:bd:8a:56:32:20:
fd:69:6a:50:9e:15:16:c0:89:80:8e:bc:a5:2a:29:
4c:d3:a4:dd:8b:e2:f8:10:0a:cd:3c:64:06:6f:3a:
51:e8:75:0c:05:6c:44:b7:1b:45:ee:8d:01:46:69:
26:7e:83:03:12:e0:c5:64:e2:58:26:36:a9:8a:6e:
64:f2:d2:b2:64:21:41:8f:26:22:41:4b:d3:10:88:
43:f5:33:81:55:8d:00:3a:8b:81:15:aa:8b:63:78:
79:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:5F:C8:AA:5D:35:7F:A3:23:FC:15:66:E7:CE:31:57:C2:2C:B1:80
X509v3 Authority Key Identifier:
keyid:AC:A1:F4:71:30:24:80:4C:44:54:03:AF:63:FA:64:4B:2A:93:5D:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKH0cTAkgExEVAOvY_pkSyqTXSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/eF_Iql01f6Mj_BVm584xV8IssYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.180.219.0/24
Signature Algorithm: sha256WithRSAEncryption
59:35:4f:ad:e0:fe:9e:97:11:42:7d:49:95:43:84:cc:2b:f2:
76:48:47:68:da:32:d6:be:af:f7:ab:24:24:98:d5:ff:ad:63:
a1:be:b0:15:07:3b:07:34:c7:29:fd:f3:af:6d:ed:e8:46:22:
5a:42:60:c3:70:70:4e:08:65:58:41:35:14:1e:47:4e:82:e3:
53:0d:d9:d0:04:25:f8:45:a2:3b:f2:33:59:c6:35:e1:05:df:
13:e1:98:27:89:28:c2:2f:39:ff:07:3e:46:5e:d2:71:16:16:
d4:9e:d0:78:5c:fd:90:2d:fe:aa:63:47:64:56:c5:a9:14:f5:
2d:4b:82:1a:3b:8e:72:33:61:8b:c9:a5:34:6d:2f:bf:51:f9:
4b:72:b7:89:b2:d4:6a:bd:ab:46:c0:3d:50:83:0f:3d:ef:40:
ec:39:56:17:13:71:91:5b:4f:be:01:b7:56:f5:d3:27:ff:a5:
54:a8:09:01:1b:1c:c6:d6:81:44:37:e3:7a:80:be:ea:f8:0b:
5a:9c:d6:2a:c5:d9:fa:6e:36:15:16:ac:b5:fb:40:70:57:7b:
6b:4e:4d:35:ca:2b:55:4b:ac:27:f5:83:c3:ca:06:0c:35:f5:
ec:59:12:d8:f6:83:7a:03:37:b3:8b:44:9e:3e:3e:e3:ea:f6:
e0:3a:33:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 02:50:37 2026 by rpki-client