This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/xEzLiuXT72IlmSlpaZ1gDZgUcxA.roa
File: xEzLiuXT72IlmSlpaZ1gDZgUcxA.roa (raw, json)
Hash identifier: MBkLJQWV2ZtMDdoyyRqknXzBBdtAikrUJIMeCoM/Wfw=
Subject key identifier: C4:4C:CB:8A:E5:D3:EF:62:25:99:29:69:69:9D:60:0D:98:14:73:10
Certificate issuer: /CN=e8477ad21cb789143313c40b19f8cc0023de88a6
Certificate serial: 019BF9B9036C948E4A652AC19693EB1CBF69
Authority key identifier: E8:47:7A:D2:1C:B7:89:14:33:13:C4:0B:19:F8:CC:00:23:DE:88:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Ed60hy3iRQzE8QLGfjMACPeiKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/xEzLiuXT72IlmSlpaZ1gDZgUcxA.roa
Signing time: Mon 26 Jan 2026 09:53:30 +0000
ROA not before: Mon 26 Jan 2026 09:53:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49127
IP address blocks: 86.106.75.0/24 maxlen: 24
2a05:cbc0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Ed60hy3iRQzE8QLGfjMACPeiKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 18:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f9:b9:03:6c:94:8e:4a:65:2a:c1:96:93:eb:1c:bf:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8477ad21cb789143313c40b19f8cc0023de88a6
Validity
Not Before: Jan 26 09:53:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c44ccb8ae5d3ef6225992969699d600d98147310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c4:76:1a:61:65:56:e5:48:44:cc:ed:f6:a0:
1f:c7:d7:c9:6d:de:e6:a2:9a:26:08:77:17:c9:f5:
04:1a:7e:23:3e:af:f3:c0:39:40:d5:e2:74:bb:6f:
0e:f6:bf:09:c6:a2:3c:a9:57:3e:ec:24:43:5e:05:
4d:15:60:aa:e5:ee:f0:3b:ce:6a:8b:30:dc:85:4a:
28:ca:ed:c3:c1:80:df:5e:48:fe:7c:b2:9f:ef:4d:
09:ce:b8:34:3e:d1:8c:c7:f7:0a:e9:3a:52:55:b0:
bb:25:c8:2f:66:4e:e4:00:47:0a:34:52:b7:ec:cf:
24:67:a7:5f:ae:fa:53:eb:95:75:0a:f0:7a:9c:06:
d7:bd:df:29:53:3e:a8:1d:89:b5:13:38:03:67:c4:
e0:ab:9e:6b:04:98:09:ce:86:5d:f6:a8:9f:c7:e1:
ac:2b:73:e2:b4:f3:8e:3b:ec:f1:a0:7a:23:4b:b9:
7b:10:e9:79:f4:5e:8e:38:9d:b4:46:cb:bd:55:04:
44:18:a0:6a:9a:36:e5:62:75:ce:73:01:68:10:35:
09:ff:40:88:ec:da:5c:c1:ef:7f:d5:5f:95:ad:2f:
cd:8a:51:74:e1:99:6b:64:5a:31:3a:78:28:fd:65:
04:fb:e1:97:44:b0:61:4d:25:cf:65:67:5f:2d:10:
1c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:4C:CB:8A:E5:D3:EF:62:25:99:29:69:69:9D:60:0D:98:14:73:10
X509v3 Authority Key Identifier:
keyid:E8:47:7A:D2:1C:B7:89:14:33:13:C4:0B:19:F8:CC:00:23:DE:88:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Ed60hy3iRQzE8QLGfjMACPeiKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/xEzLiuXT72IlmSlpaZ1gDZgUcxA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.106.75.0/24
IPv6:
2a05:cbc0::/32
Signature Algorithm: sha256WithRSAEncryption
b4:7c:97:bd:ed:b9:7c:0b:5a:ae:25:78:37:c8:39:6d:6a:d5:
5f:35:27:d2:73:d3:e7:34:59:92:63:8f:b6:7d:fc:69:c0:10:
6c:23:e2:92:6d:8d:67:32:2b:69:4f:63:f9:0b:bb:c9:4a:e4:
e0:bb:7b:f4:11:02:3a:ec:65:bb:78:59:6c:f8:0a:64:db:6e:
d3:d1:ce:8a:d2:1e:1b:57:1a:05:18:47:f7:18:f2:ac:ae:62:
59:e2:2e:3b:0a:eb:54:4a:2d:57:91:f0:72:85:aa:53:6e:81:
34:75:95:5b:3f:f4:95:a6:7c:9f:ad:2d:56:ca:33:c4:f9:5c:
c1:7e:db:b4:f6:cd:b9:98:97:54:69:ca:b5:69:b8:24:14:8a:
04:88:25:46:7f:97:4f:b4:53:6d:33:c7:bf:db:b3:82:b8:c6:
bf:cd:cc:98:e6:50:aa:6e:06:f8:89:58:83:08:b8:71:bb:0a:
2d:f5:9e:bd:fe:12:3e:52:ac:7a:f4:95:21:f5:c0:de:0d:94:
7b:fd:d6:e4:01:ac:99:db:c6:31:79:0b:63:63:58:03:ca:9e:
3c:f8:8c:55:c5:7d:f7:03:c4:82:bc:30:8a:46:eb:9e:98:bf:
3f:15:45:44:64:e8:92:7b:86:e5:20:ba:f4:79:53:6f:51:e2:
35:31:31:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 03:59:31 2026 by rpki-client