This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/rEoR-mgdOFshp3WK0KrRy38fGME.roa
File: rEoR-mgdOFshp3WK0KrRy38fGME.roa (raw, json)
Hash identifier: BUP8/Ijg4vxky0oGy+etXWcemBcfS6atL6F31eVnOgg=
Subject key identifier: AC:4A:11:FA:68:1D:38:5B:21:A7:75:8A:D0:AA:D1:CB:7F:1F:18:C1
Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial: 019B7AC7AAFE93080588BB09BBAEB17FD5F4
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/rEoR-mgdOFshp3WK0KrRy38fGME.roa
Signing time: Thu 01 Jan 2026 18:17:44 +0000
ROA not before: Thu 01 Jan 2026 18:17:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 193.219.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Jan 2026 14:32:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:c7:aa:fe:93:08:05:88:bb:09:bb:ae:b1:7f:d5:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Validity
Not Before: Jan 1 18:17:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ac4a11fa681d385b21a7758ad0aad1cb7f1f18c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:05:05:70:b6:b7:74:88:a7:32:5c:65:e1:dd:
ea:89:28:95:07:1a:db:3f:16:ce:20:84:ca:f6:ae:
1f:ca:5f:fe:52:d5:27:e4:e4:cf:39:51:3a:02:27:
12:3e:e0:1f:b1:d2:fd:9a:21:56:b1:97:6e:17:c3:
4c:e7:6e:c0:2f:23:1c:a3:58:0c:ce:4b:c2:3c:db:
62:74:47:4c:60:9b:8c:5a:62:02:e6:f1:a8:be:05:
47:13:71:a7:88:16:5f:41:9a:01:85:b7:b7:6e:aa:
a5:61:39:33:e8:67:5e:c8:7f:34:1b:15:17:53:e8:
a1:d6:c6:46:21:22:66:5c:77:60:60:e0:85:df:d4:
f8:3d:36:e2:a6:d8:89:2c:88:d9:92:70:51:6a:18:
09:e6:40:10:61:47:05:32:ad:d4:3a:2f:01:41:0c:
9a:e4:d8:6b:02:82:66:13:1c:5e:d8:f2:07:c3:df:
b6:5b:42:4d:16:20:6b:56:b6:05:65:b9:e0:16:c4:
9f:07:f2:ff:26:23:61:18:28:67:47:2a:fd:a7:e8:
e3:4c:43:cc:f3:23:26:fc:54:c5:a0:ab:80:50:90:
35:4a:91:e1:16:53:67:d0:5f:1a:61:78:af:0d:de:
06:49:97:99:a4:f4:f2:d6:e1:3e:f6:af:67:1b:8d:
84:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:4A:11:FA:68:1D:38:5B:21:A7:75:8A:D0:AA:D1:CB:7F:1F:18:C1
X509v3 Authority Key Identifier:
keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/rEoR-mgdOFshp3WK0KrRy38fGME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.219.99.0/24
Signature Algorithm: sha256WithRSAEncryption
87:2a:99:3a:02:de:1e:84:a2:56:93:51:db:bd:83:f5:76:48:
33:4b:a1:e3:2e:0e:ea:d1:01:81:c0:ce:44:eb:41:5c:1d:16:
8c:a9:62:95:40:83:03:8a:3b:e7:3a:28:70:ed:9e:7e:97:c1:
fc:a2:15:b5:36:45:9e:e7:5e:21:18:af:91:c9:c4:0b:c4:c6:
c9:3b:c0:bd:26:ba:52:86:85:77:9a:bf:47:57:74:06:ba:b6:
80:ac:61:36:bd:07:d6:22:89:2a:67:fd:9b:43:f6:93:4d:be:
03:f9:6c:96:2a:54:97:6d:a0:ce:7c:9d:f7:fc:3c:f8:e1:f0:
ec:d1:51:63:9d:4a:aa:9b:c3:da:a5:c2:dd:16:af:c5:70:29:
22:fa:20:d4:50:0b:01:6c:bb:c7:3d:eb:c5:e6:ed:a7:50:3d:
9d:3b:12:33:0d:b8:fe:da:37:fd:86:e0:0a:22:b5:63:b6:99:
8b:58:00:b6:04:8f:59:6b:93:6a:f5:32:35:4a:7c:b5:e2:ef:
5b:9f:d2:aa:ca:3b:b3:f9:aa:51:ea:8e:a1:af:38:9d:96:3e:
e9:20:92:77:48:58:ae:d5:b5:34:89:c3:b2:30:2c:db:56:86:
1b:20:11:48:58:2f:6e:4f:70:b3:95:5d:22:21:94:dc:29:b3:
00:75:f6:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 6 20:31:31 2026 by rpki-client