This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/2ef848-3611-40c0-a6bc-44a7a1588162/1/e-UyDpfAgeCXwVCZG2C_8K2xub8.roa
File: e-UyDpfAgeCXwVCZG2C_8K2xub8.roa (raw, json)
Hash identifier: 9M9KcCzKHonhmbTtNOcC9taMG1LtCMlTc8IfcKGHBuU=
Subject key identifier: 7B:E5:32:0E:97:C0:81:E0:97:C1:50:99:1B:60:BF:F0:AD:B1:B9:BF
Certificate issuer: /CN=13fc5ddf49e36d69936301ad22bf243a471b524c
Certificate serial: 019B7C7FF299EEDEE4A8374D13BDA801BB3E
Authority key identifier: 13:FC:5D:DF:49:E3:6D:69:93:63:01:AD:22:BF:24:3A:47:1B:52:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E_xd30njbWmTYwGtIr8kOkcbUkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/2ef848-3611-40c0-a6bc-44a7a1588162/1/e-UyDpfAgeCXwVCZG2C_8K2xub8.roa
Signing time: Fri 02 Jan 2026 02:18:38 +0000
ROA not before: Fri 02 Jan 2026 02:18:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204478
IP address blocks: 185.11.168.0/22 maxlen: 22
185.41.76.0/22 maxlen: 22
185.70.68.0/22 maxlen: 22
185.108.244.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/2ef848-3611-40c0-a6bc-44a7a1588162/1/E_xd30njbWmTYwGtIr8kOkcbUkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/2ef848-3611-40c0-a6bc-44a7a1588162/1/E_xd30njbWmTYwGtIr8kOkcbUkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/E_xd30njbWmTYwGtIr8kOkcbUkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:7f:f2:99:ee:de:e4:a8:37:4d:13:bd:a8:01:bb:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13fc5ddf49e36d69936301ad22bf243a471b524c
Validity
Not Before: Jan 2 02:18:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7be5320e97c081e097c150991b60bff0adb1b9bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a2:04:fb:37:63:7f:59:16:2c:95:58:71:4d:
e5:26:52:23:66:3e:fa:30:8f:ea:47:5c:39:32:29:
65:47:80:36:ea:e4:67:52:47:0b:b3:80:07:80:03:
18:d8:73:c7:8b:2b:91:0a:77:64:2c:73:6c:87:6e:
51:c0:e5:6e:f1:23:52:01:e6:83:ff:b2:40:bd:ec:
cd:0a:a8:cf:56:ad:bd:62:c4:fb:b5:a7:e8:4b:a2:
24:5c:49:9d:81:6f:fb:21:a0:bc:09:3e:86:f2:f4:
93:de:2c:5f:1a:77:13:41:23:62:9d:6b:63:6c:e0:
ef:a5:28:a4:63:b5:f9:04:cd:51:f2:0c:1b:2a:1f:
3b:34:8f:97:3e:ca:4e:8d:b0:32:ef:7b:12:8d:c1:
45:5f:33:1a:db:e3:f9:c9:bc:29:2b:26:42:29:ea:
e0:13:b8:06:16:74:fc:f1:34:98:52:68:ab:9d:1b:
cf:83:c9:d1:36:72:ae:37:06:45:59:ef:bb:b4:f6:
1e:a9:5c:95:28:a3:17:2b:5e:14:cd:2b:9e:3d:95:
8a:ed:4d:7e:da:bf:c0:78:41:f5:c0:0f:5b:af:80:
70:dd:46:aa:83:b3:37:51:06:1b:44:7b:2b:0d:56:
54:f5:0d:45:98:9b:19:21:ce:49:32:5f:16:64:05:
0e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:E5:32:0E:97:C0:81:E0:97:C1:50:99:1B:60:BF:F0:AD:B1:B9:BF
X509v3 Authority Key Identifier:
keyid:13:FC:5D:DF:49:E3:6D:69:93:63:01:AD:22:BF:24:3A:47:1B:52:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_xd30njbWmTYwGtIr8kOkcbUkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2ef848-3611-40c0-a6bc-44a7a1588162/1/e-UyDpfAgeCXwVCZG2C_8K2xub8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2ef848-3611-40c0-a6bc-44a7a1588162/1/E_xd30njbWmTYwGtIr8kOkcbUkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.11.168.0/22
185.41.76.0/22
185.70.68.0/22
185.108.244.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:b8:5f:6c:87:2a:bc:e9:15:ec:c0:01:c4:9b:20:6b:a6:51:
b0:3b:40:48:45:00:73:8f:7e:9a:1e:79:00:83:ec:51:64:99:
a7:6a:04:a5:32:4f:27:ca:49:0a:d4:ac:32:93:d2:fb:3e:ea:
67:41:f2:5b:70:92:8b:f6:e3:be:08:3d:a7:d7:92:b1:69:d8:
97:1a:a3:65:b7:06:94:9f:26:a1:f6:c4:3b:c0:6b:43:36:8c:
4d:76:86:11:9c:0e:67:6b:d7:98:e8:2c:4b:a7:26:b8:f9:4b:
05:36:01:be:b0:48:f3:94:ab:ed:e2:24:e3:0a:1a:a3:73:3e:
19:7c:8d:4d:a4:1f:a5:c1:9e:df:76:91:c0:fa:8d:ca:3f:6d:
83:94:d6:32:7f:fa:6c:55:0a:25:94:3c:e8:9e:ae:bf:e1:01:
20:f3:65:be:1a:dc:31:06:4a:b0:8c:4d:58:54:25:cc:ed:06:
d2:f3:34:b2:4a:f7:7e:10:4d:96:f0:17:57:2a:f2:ca:0c:63:
8b:d9:4b:27:2d:f1:9d:f4:ad:71:6c:85:7b:65:6d:0b:45:f9:
69:64:bb:40:4d:cd:6d:b1:d1:f7:96:ee:28:b2:28:a9:ed:6c:
78:eb:2c:32:14:73:5d:d5:93:bb:f5:be:6a:a3:14:f4:d5:47:
43:a4:7c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:00:45 2026 by rpki-client