This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/eKkqolXY2pyVZao7_XM83pmxfcI.roa
File: eKkqolXY2pyVZao7_XM83pmxfcI.roa (raw, json)
Hash identifier: W+Fqae1CC23FyZSUOU8LFw+yTFE21xDh60IW8rU7v6Q=
Subject key identifier: 78:A9:2A:A2:55:D8:DA:9C:95:65:AA:3B:FD:73:3C:DE:99:B1:7D:C2
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 019B7F1509A2F89762BBCC62AD0148BA6B1B
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/eKkqolXY2pyVZao7_XM83pmxfcI.roa
Signing time: Fri 02 Jan 2026 14:20:43 +0000
ROA not before: Fri 02 Jan 2026 14:20:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211990
IP address blocks: 87.107.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 15:35:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:15:09:a2:f8:97:62:bb:cc:62:ad:01:48:ba:6b:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Jan 2 14:20:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=78a92aa255d8da9c9565aa3bfd733cde99b17dc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7b:00:98:93:87:a8:d3:a7:ef:75:82:81:8b:
f7:fc:d2:22:6b:84:b4:e0:7c:c5:4e:15:3b:79:17:
5f:8a:11:f1:93:72:9e:8f:8f:e9:8e:33:77:27:63:
d8:c7:29:df:8a:31:2b:9b:0d:cc:f3:c0:e2:8b:05:
84:8d:7d:24:f7:b0:9f:3f:51:e2:c5:a1:0e:5c:17:
23:4a:43:50:93:34:6c:d3:83:2b:76:76:9d:11:f7:
44:b2:37:51:28:56:f1:29:3b:36:7d:c0:61:ee:12:
e5:7e:0c:ae:97:2f:fb:f7:22:d3:41:96:69:fb:32:
9e:72:45:4a:96:e2:ba:f2:39:ec:8c:20:c1:ad:3a:
c0:86:55:30:bd:11:53:ab:9d:97:94:8f:11:fb:4f:
a3:64:e7:97:08:48:6e:c4:b8:ed:f9:ff:e3:69:c7:
6f:0d:af:28:83:6d:ea:d5:c0:d6:21:68:a9:0d:c6:
42:64:13:d6:91:00:88:66:c0:5e:fa:5b:69:5f:89:
09:13:3d:71:24:a0:4a:87:f0:64:11:95:13:94:3b:
bb:4e:0b:d7:b3:e0:23:8c:17:f8:94:95:3e:97:1c:
21:e7:9b:e7:d1:77:b6:ee:65:fa:da:bd:48:bd:11:
21:b9:99:c8:ac:0f:af:b0:dd:ac:d8:2b:88:6d:98:
cd:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:A9:2A:A2:55:D8:DA:9C:95:65:AA:3B:FD:73:3C:DE:99:B1:7D:C2
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/eKkqolXY2pyVZao7_XM83pmxfcI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.107.145.0/24
Signature Algorithm: sha256WithRSAEncryption
40:27:ec:58:76:cf:23:42:0c:01:1b:fd:ee:eb:83:44:75:31:
dd:1d:e4:ae:b6:91:e7:b9:81:e1:84:2f:85:e4:ac:28:df:8d:
d4:73:12:18:f1:3b:11:86:ee:c8:82:85:5e:0f:5c:8a:68:64:
20:00:d8:6e:ff:09:ca:61:81:e7:47:14:d6:d1:cf:12:91:86:
cb:f5:58:86:1f:bb:f6:3e:a4:9a:8a:6d:3b:4c:bb:79:9b:2c:
9d:8f:f5:a7:11:ff:7b:23:75:8e:96:f0:36:1f:1d:31:3f:80:
0f:1a:d4:6f:1a:a4:d2:da:55:12:fc:b2:00:65:0c:1f:77:ac:
5c:8d:aa:6d:57:45:ac:31:e1:2c:a6:ae:70:11:d8:ae:7c:ae:
99:77:a0:29:f6:ee:84:ba:13:18:2b:6d:6a:3a:32:f3:49:c1:
70:aa:34:32:4e:cd:6a:b2:42:65:cf:68:fc:51:f5:d5:76:c3:
e1:fb:51:ad:02:1a:d4:1e:05:9d:e8:6a:11:fc:08:83:a8:35:
b1:fb:ea:14:48:d3:d6:85:89:ed:f5:88:b5:af:34:89:9e:e5:
de:7c:f7:db:b1:8c:0c:00:c6:94:be:67:8e:64:79:2f:03:fe:
65:74:e7:31:da:4a:e5:91:29:b5:4d:43:5d:14:36:e2:47:56:
a3:fa:e4:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 23:22:56 2026 by rpki-client