This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/eQZKGZ2aBM0yBF905-r8c86PiNY.roa
File: eQZKGZ2aBM0yBF905-r8c86PiNY.roa (raw, json)
Hash identifier: Ih70b8QzHB6XF9meZM8P6Y7eTavMkPPydbwU5tJHSkQ=
Subject key identifier: 79:06:4A:19:9D:9A:04:CD:32:04:5F:74:E7:EA:FC:73:CE:8F:88:D6
Certificate issuer: /CN=9aeecb353f1cdc5fd3a9d54a8873531efd285c46
Certificate serial: 019B7E3911FA326F3D230026802D28FDF065
Authority key identifier: 9A:EE:CB:35:3F:1C:DC:5F:D3:A9:D5:4A:88:73:53:1E:FD:28:5C:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu7LNT8c3F_TqdVKiHNTHv0oXEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/eQZKGZ2aBM0yBF905-r8c86PiNY.roa
Signing time: Fri 02 Jan 2026 10:20:27 +0000
ROA not before: Fri 02 Jan 2026 10:20:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210924
IP address blocks: 195.96.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/mu7LNT8c3F_TqdVKiHNTHv0oXEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/mu7LNT8c3F_TqdVKiHNTHv0oXEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mu7LNT8c3F_TqdVKiHNTHv0oXEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:39:11:fa:32:6f:3d:23:00:26:80:2d:28:fd:f0:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aeecb353f1cdc5fd3a9d54a8873531efd285c46
Validity
Not Before: Jan 2 10:20:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=79064a199d9a04cd32045f74e7eafc73ce8f88d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:51:6e:5d:97:75:5c:66:39:46:d7:a6:32:3d:
d4:4b:d3:13:3d:2c:08:fb:ad:84:de:5c:dd:19:ea:
46:2d:a3:75:d7:21:b4:8c:3c:ca:81:74:ba:94:54:
c9:18:a6:00:9c:8b:33:40:d5:11:0d:83:5b:85:f2:
a3:28:31:e1:47:0d:1b:36:38:de:e8:a0:88:60:60:
e5:a2:2f:08:35:55:84:bc:c2:12:64:49:d9:d9:01:
5c:6d:0e:1f:e0:63:13:7b:58:76:25:25:91:96:8c:
b0:6f:6d:dc:33:08:f0:c4:0b:7f:4f:ad:9d:da:74:
84:31:a0:43:21:e9:64:9f:7e:f6:1a:d3:df:c0:83:
3b:26:82:fb:7f:dd:fc:60:d6:16:bf:06:47:61:21:
ff:39:c1:67:b3:c6:cc:11:eb:8d:70:8d:68:97:10:
32:37:0f:4f:04:07:8c:2c:f1:46:8e:70:5a:de:a7:
e4:7b:56:18:20:0d:c0:1d:05:0e:44:3a:46:0a:b1:
9d:b1:7d:cc:fb:27:cf:8b:02:cc:74:39:dc:c0:2d:
44:4f:ef:d9:e5:fe:df:f8:e1:a2:7d:ad:bf:3b:08:
c1:a5:e1:ef:84:e6:8e:7c:df:0f:84:08:1a:47:db:
d7:69:bd:15:7a:aa:3b:f3:b3:fb:f9:84:ef:b5:de:
e6:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:06:4A:19:9D:9A:04:CD:32:04:5F:74:E7:EA:FC:73:CE:8F:88:D6
X509v3 Authority Key Identifier:
keyid:9A:EE:CB:35:3F:1C:DC:5F:D3:A9:D5:4A:88:73:53:1E:FD:28:5C:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu7LNT8c3F_TqdVKiHNTHv0oXEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/eQZKGZ2aBM0yBF905-r8c86PiNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/mu7LNT8c3F_TqdVKiHNTHv0oXEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.96.138.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:8b:81:b9:93:f6:fb:94:a9:cc:d4:cd:84:c4:92:9a:93:51:
4a:36:ab:79:1b:a9:ae:9a:c5:0e:2a:2b:24:65:b8:bc:3b:41:
d5:e5:8b:5a:c0:1a:54:5e:03:78:6b:1a:6b:96:d1:e3:67:87:
62:44:31:37:32:b7:70:ad:df:5b:84:c9:64:8f:ae:16:69:f3:
0c:15:b6:b7:77:ad:50:6b:43:57:57:47:52:de:61:1d:cb:44:
a5:4f:88:09:4e:ca:55:c6:ff:86:41:cb:f2:95:d5:20:96:5a:
10:63:62:12:92:92:04:b4:91:a8:15:20:68:2c:86:51:8c:77:
73:7a:60:9b:20:41:db:a6:23:b2:d2:6c:52:81:e7:5f:bf:2d:
32:4b:42:8d:ac:51:25:87:4b:8a:d5:5a:9d:6f:b9:5d:9d:d1:
ad:cf:48:2a:20:1d:d6:06:1b:ae:2d:81:48:a6:2c:7c:4d:9f:
e7:59:02:29:76:83:e4:43:10:ca:74:fb:64:fe:60:3b:ee:b0:
ed:27:c1:64:d7:ad:7d:ab:1a:58:18:56:2f:06:f8:86:c9:e9:
3c:ad:37:1d:27:73:33:32:58:3f:03:a8:30:0b:f9:6a:d6:3c:
5b:a8:1f:46:5f:70:ab:76:3b:7a:ac:a0:96:a0:23:dd:2b:4e:
41:9b:62:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:29:22 2026 by rpki-client