This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/eImEyRrzQaMBiFlZOhGNpdB8A3o.roa
File: eImEyRrzQaMBiFlZOhGNpdB8A3o.roa (raw, json)
Hash identifier: ohTX7uDCv7TQkH+WJ6CBAXHjVpePbGZrEFWaegxzw/A=
Subject key identifier: 78:89:84:C9:1A:F3:41:A3:01:88:59:59:3A:11:8D:A5:D0:7C:03:7A
Certificate issuer: /CN=51239a702b9b44119fc0efb00524e7dd12dea8f6
Certificate serial: 019B7834D81FD7F98EE2A702A16D46FCB76E
Authority key identifier: 51:23:9A:70:2B:9B:44:11:9F:C0:EF:B0:05:24:E7:DD:12:DE:A8:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/USOacCubRBGfwO-wBSTn3RLeqPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/eImEyRrzQaMBiFlZOhGNpdB8A3o.roa
Signing time: Thu 01 Jan 2026 06:18:07 +0000
ROA not before: Thu 01 Jan 2026 06:18:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42166
IP address blocks: 194.0.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/USOacCubRBGfwO-wBSTn3RLeqPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/USOacCubRBGfwO-wBSTn3RLeqPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/USOacCubRBGfwO-wBSTn3RLeqPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:34:d8:1f:d7:f9:8e:e2:a7:02:a1:6d:46:fc:b7:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51239a702b9b44119fc0efb00524e7dd12dea8f6
Validity
Not Before: Jan 1 06:18:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=788984c91af341a3018859593a118da5d07c037a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:b5:72:08:5b:25:9d:1d:64:a0:8e:95:d8:28:
1f:32:aa:cc:c2:37:6e:12:85:bd:fc:cd:05:91:07:
01:c1:6e:67:b4:37:50:8c:4c:e9:a5:36:b3:11:b2:
46:8b:0a:75:dd:a2:f0:1d:a5:06:6d:99:6d:69:8f:
d2:56:d0:81:ac:ff:49:18:de:27:35:03:b0:93:61:
dc:0f:83:26:f3:b5:71:67:c6:54:c2:6e:6d:68:da:
29:3e:f0:11:f6:41:ba:cb:5f:7b:d5:35:11:ce:5e:
66:7c:56:7c:b1:4d:78:8e:d0:4f:e5:62:7a:64:5c:
cb:9e:b9:fd:d6:85:f4:6d:f4:00:0c:97:b5:ac:01:
28:e7:2a:93:ad:72:a5:0a:97:64:b0:73:16:7d:be:
1d:5f:5e:4a:b2:16:8e:27:17:29:4a:1a:d9:12:92:
90:82:90:26:86:86:09:7d:0d:73:05:af:20:52:2f:
7d:c6:d5:7e:ca:b9:6c:be:cc:5a:ab:a5:ab:76:85:
14:a6:f9:21:c8:69:dc:bf:a8:52:f8:52:1e:a7:15:
60:48:ea:ad:b1:59:6f:a7:6a:0f:9e:33:bb:f7:6f:
de:22:c7:bc:a8:65:67:d5:67:19:b6:04:a4:8e:1c:
28:a8:5e:81:82:56:58:29:fa:0a:b4:a0:7e:95:3d:
ec:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:89:84:C9:1A:F3:41:A3:01:88:59:59:3A:11:8D:A5:D0:7C:03:7A
X509v3 Authority Key Identifier:
keyid:51:23:9A:70:2B:9B:44:11:9F:C0:EF:B0:05:24:E7:DD:12:DE:A8:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/USOacCubRBGfwO-wBSTn3RLeqPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/eImEyRrzQaMBiFlZOhGNpdB8A3o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/USOacCubRBGfwO-wBSTn3RLeqPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.149.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:4c:c5:dd:ea:29:b8:30:99:5b:c8:c1:66:bc:66:77:bb:e2:
ce:73:8d:ec:20:4d:c4:66:1c:58:0e:9e:00:16:41:d2:0e:85:
9c:f5:4a:01:cb:c5:76:a7:3f:29:98:52:44:d8:a6:5e:ff:2e:
a4:76:94:33:77:53:a9:dc:08:55:5a:5a:00:56:7f:a3:eb:60:
98:e9:1a:35:18:a2:74:f4:c4:7d:b4:46:d2:bf:83:74:fb:e0:
48:80:05:f8:06:24:03:b2:9f:d0:cc:30:c9:96:5b:73:0b:c5:
78:76:81:8f:b0:5e:cf:33:c1:ba:02:67:ea:f8:1b:54:c7:e2:
21:37:60:e9:91:a0:c0:d8:60:eb:10:b8:34:af:f0:a0:56:3a:
3a:38:a2:5d:d8:99:6c:74:ae:fd:09:5f:6a:62:85:2d:28:d4:
f5:86:4d:59:81:5a:a4:c6:22:48:b8:87:54:23:7a:e3:f7:56:
72:21:1c:00:ff:9a:7d:a4:4c:87:44:e5:59:44:18:81:5a:2f:
30:52:65:19:ea:99:f8:1d:de:18:fb:8b:f1:3c:ea:35:63:ea:
c3:6c:74:8f:07:df:0f:c1:73:c9:72:1c:65:4f:ff:03:ef:96:
ce:51:15:26:52:0c:5c:19:1c:8f:58:f0:3d:34:6e:7c:8f:c3:
41:32:b6:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:39:59 2026 by rpki-client