This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/ejTvaV2blN9QenSFLNnrpBZq49g.roa
File: ejTvaV2blN9QenSFLNnrpBZq49g.roa (raw, json)
Hash identifier: Y7jff0ticwpNpSgfsyRoCcnLBtZbRBWqW7cbBoyiVCM=
Subject key identifier: 7A:34:EF:69:5D:9B:94:DF:50:7A:74:85:2C:D9:EB:A4:16:6A:E3:D8
Certificate issuer: /CN=81fa48f40bc84540c46bd23be9b90897aa184f4d
Certificate serial: 019B7F16053D44304E454EE3EC0BF95C4EE6
Authority key identifier: 81:FA:48:F4:0B:C8:45:40:C4:6B:D2:3B:E9:B9:08:97:AA:18:4F:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gfpI9AvIRUDEa9I76bkIl6oYT00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/ejTvaV2blN9QenSFLNnrpBZq49g.roa
Signing time: Fri 02 Jan 2026 14:21:48 +0000
ROA not before: Fri 02 Jan 2026 14:21:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211947
IP address blocks: 195.64.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.mft
rsync://rpki.ripe.net/repository/DEFAULT/gfpI9AvIRUDEa9I76bkIl6oYT00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:16:05:3d:44:30:4e:45:4e:e3:ec:0b:f9:5c:4e:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81fa48f40bc84540c46bd23be9b90897aa184f4d
Validity
Not Before: Jan 2 14:21:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7a34ef695d9b94df507a74852cd9eba4166ae3d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ad:a2:5b:6e:84:15:47:7f:17:f3:fe:ec:39:
dd:f7:61:68:58:64:09:31:82:31:f8:22:56:43:10:
52:fa:45:bc:cc:2a:2e:20:c9:c3:b9:8a:d9:98:af:
7a:dc:42:c2:64:cb:ee:48:0a:d2:3c:e1:bb:71:c3:
4a:51:ad:7f:98:f4:8b:e5:44:db:5a:bf:56:d9:5e:
de:73:2b:60:d7:f0:23:8b:94:2b:eb:cb:93:f8:6a:
00:7c:d6:e5:ed:c3:df:09:f3:42:37:4b:e1:e9:c7:
60:5d:89:b3:bb:4f:d8:76:bf:1f:d5:1a:71:e3:0e:
46:3c:bd:c3:07:40:dc:cf:d9:bc:41:3f:8c:77:56:
1f:e2:df:ea:ea:8f:03:36:42:85:c0:80:83:37:10:
e6:67:b2:f3:5f:2e:8e:b8:da:1f:16:41:58:6d:6a:
4c:72:1b:34:ea:91:ba:ec:09:6e:0d:50:ca:bd:00:
f5:20:90:fa:c8:f0:15:a1:86:d5:58:11:04:0e:b5:
cd:a4:be:9f:35:2a:ad:77:50:eb:21:f9:9e:ae:30:
1d:e5:74:98:da:b2:f3:17:fd:ca:0e:78:d1:03:65:
ad:5a:5f:03:25:46:66:cc:5e:86:f6:98:54:1e:97:
36:aa:01:eb:58:0e:af:f1:56:1d:58:03:9c:ee:bd:
3d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:34:EF:69:5D:9B:94:DF:50:7A:74:85:2C:D9:EB:A4:16:6A:E3:D8
X509v3 Authority Key Identifier:
keyid:81:FA:48:F4:0B:C8:45:40:C4:6B:D2:3B:E9:B9:08:97:AA:18:4F:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gfpI9AvIRUDEa9I76bkIl6oYT00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/ejTvaV2blN9QenSFLNnrpBZq49g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.64.231.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:ce:69:ab:3b:7c:cf:ce:98:17:04:23:29:65:6c:9e:01:b4:
c6:50:2b:76:c1:4a:5b:6c:1c:e3:cf:21:1a:da:93:30:34:24:
6e:6a:8b:4b:13:82:05:b1:48:3f:dd:e5:4b:ee:96:58:9b:2c:
a0:6e:b6:53:8c:99:0b:34:9c:49:7b:bf:60:ab:71:c9:7a:9b:
35:c5:04:6f:fd:ac:97:93:a8:df:4b:2d:b0:f9:8e:a8:98:3c:
71:fc:3c:b6:b8:af:77:94:a0:1e:3c:50:a1:21:78:2d:4b:e3:
27:a7:52:59:5b:25:ea:30:23:88:77:eb:49:fe:08:b2:37:72:
77:44:fc:47:4f:63:90:45:26:eb:bf:33:c6:31:47:3d:17:b4:
ae:8f:c3:61:66:be:f1:38:c9:c1:cf:a5:e2:21:e7:36:d5:01:
43:77:5c:8f:c1:92:1f:63:b0:0f:6e:82:04:d3:91:45:ce:78:
10:d2:f2:4e:45:53:1d:91:fa:32:10:d5:62:ea:1a:8c:a8:e8:
18:bb:d5:37:87:a7:31:2e:36:80:d1:96:f9:d0:cf:fc:8f:8b:
e2:5f:35:eb:00:4b:2a:3e:ef:21:1f:76:4c:e8:05:e0:a9:14:
87:ab:24:8e:5b:3d:dd:18:76:7d:c8:2f:1e:1f:b4:90:9f:26:
6e:5d:64:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:28:12 2026 by rpki-client