This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/euMg0PBrEwdg34FUafeH1CwRG_Y.roa
File: euMg0PBrEwdg34FUafeH1CwRG_Y.roa (raw, json)
Hash identifier: hIv94tAmUnb+bfy5u57zu0mwJIG8VdW8glZpcNFnYq0=
Subject key identifier: 7A:E3:20:D0:F0:6B:13:07:60:DF:81:54:69:F7:87:D4:2C:11:1B:F6
Certificate issuer: /CN=01bfe882d13e803fc194373ea40d8a5a9e69f304
Certificate serial: 019B79ECC06310A2F1ADF329E390CA1AE64C
Authority key identifier: 01:BF:E8:82:D1:3E:80:3F:C1:94:37:3E:A4:0D:8A:5A:9E:69:F3:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/euMg0PBrEwdg34FUafeH1CwRG_Y.roa
Signing time: Thu 01 Jan 2026 14:18:37 +0000
ROA not before: Thu 01 Jan 2026 14:18:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31424
IP address blocks: 77.245.16.0/20 maxlen: 20
185.22.104.0/22 maxlen: 22
185.83.60.0/22 maxlen: 22
217.147.208.0/20 maxlen: 20
2001:4168::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:ec:c0:63:10:a2:f1:ad:f3:29:e3:90:ca:1a:e6:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01bfe882d13e803fc194373ea40d8a5a9e69f304
Validity
Not Before: Jan 1 14:18:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7ae320d0f06b130760df815469f787d42c111bf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5a:df:31:14:1f:43:90:9d:9d:9e:c8:0a:1d:
0c:f8:32:ad:11:50:0f:eb:e6:7e:bd:3c:54:be:31:
f8:12:3b:52:ef:f6:d1:41:ed:ae:7d:52:df:19:8f:
6c:dc:22:ca:30:10:0a:7e:0f:b8:4a:a7:f3:b4:d1:
66:91:a1:99:79:a7:ab:2b:97:35:38:db:b5:d0:df:
e1:b9:f4:dc:12:3e:cd:d4:d8:69:c2:87:26:27:83:
37:cb:09:00:e0:08:80:38:76:1e:99:fa:bb:75:ab:
69:4e:15:b8:78:bd:70:63:14:d7:28:8a:c3:e3:26:
0f:21:00:57:f0:5e:60:5a:63:2d:b4:90:70:e1:f4:
c0:61:ea:c8:7b:ba:ac:00:25:a8:f7:82:0d:9d:68:
f2:74:fe:1c:22:26:13:63:5b:db:73:88:cf:fc:dc:
a4:3e:29:23:bc:fb:bf:31:cf:33:27:ea:80:71:05:
45:af:49:5d:9e:8d:23:2c:4a:f3:dd:bf:8d:20:20:
8d:e8:0a:3f:86:36:72:a8:e2:e4:ba:81:a6:b6:e4:
cc:62:da:cd:bd:24:da:a6:13:e1:70:75:7c:33:da:
f5:24:3f:36:59:fd:95:91:d3:8b:71:73:46:e2:67:
f2:3e:9f:46:1e:38:4b:40:67:68:85:1d:8c:c3:ce:
a6:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:E3:20:D0:F0:6B:13:07:60:DF:81:54:69:F7:87:D4:2C:11:1B:F6
X509v3 Authority Key Identifier:
keyid:01:BF:E8:82:D1:3E:80:3F:C1:94:37:3E:A4:0D:8A:5A:9E:69:F3:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/euMg0PBrEwdg34FUafeH1CwRG_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.245.16.0/20
185.22.104.0/22
185.83.60.0/22
217.147.208.0/20
IPv6:
2001:4168::/32
Signature Algorithm: sha256WithRSAEncryption
24:e4:db:6c:c4:ac:01:71:13:1d:0f:ba:d7:17:50:fc:ac:90:
05:6f:98:93:a2:c9:3b:4b:3f:45:75:a5:1f:fb:75:e9:28:5e:
8c:df:72:c2:11:a4:2f:77:3f:e7:70:61:a6:ed:6d:b9:7d:a4:
34:35:b3:6f:2c:1d:e1:a7:2a:a9:a2:3c:14:43:69:01:52:e1:
5a:c0:b7:82:c7:a5:4c:ab:c8:18:07:91:43:bf:c8:e6:ad:84:
53:da:29:2f:78:af:83:49:3b:12:df:30:59:09:1e:1f:90:ff:
dd:8e:c4:9b:79:8d:16:db:ff:bd:9b:18:78:71:a4:94:5d:b5:
81:81:5f:34:a3:40:d0:50:51:77:70:26:c7:b7:68:d9:e5:42:
a8:bb:3c:4d:e5:2f:dd:a8:0d:83:64:c0:38:7a:5b:bf:a1:9e:
f5:13:08:92:c2:ab:01:61:43:00:f8:5b:4d:2b:bd:1d:a3:5c:
45:38:be:39:5f:63:2c:a1:19:2b:40:29:d6:9f:6a:30:9f:cc:
2d:72:fd:87:77:13:1c:c3:55:ca:8f:b0:de:6a:e1:7f:6e:9d:
28:7a:b7:f1:1e:c2:d9:7f:d1:f5:86:bc:5b:e3:a6:0e:f8:da:
17:75:12:9d:7e:7a:da:a0:4e:d5:db:88:7f:38:5c:c1:63:94:
ae:ca:0e:05
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAZt57MBjEKLxrfMp45DKGuZMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxYmZlODgyZDEzZTgwM2ZjMTk0MzczZWE0MGQ4YTVhOWU2
OWYzMDQwHhcNMjYwMTAxMTQxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YWUzMjBkMGYwNmIxMzA3NjBkZjgxNTQ2OWY3ODdkNDJjMTExYmY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlrfMRQfQ5CdnZ7ICh0M+DKtEVAP
6+Z+vTxUvjH4EjtS7/bRQe2ufVLfGY9s3CLKMBAKfg+4SqfztNFmkaGZeaerK5c1
ONu10N/hufTcEj7N1NhpwocmJ4M3ywkA4AiAOHYemfq7datpThW4eL1wYxTXKIrD
4yYPIQBX8F5gWmMttJBw4fTAYerIe7qsACWo94INnWjydP4cIiYTY1vbc4jP/Nyk
PikjvPu/Mc8zJ+qAcQVFr0ldno0jLErz3b+NICCN6Ao/hjZyqOLkuoGmtuTMYtrN
vSTaphPhcHV8M9r1JD82Wf2VkdOLcXNG4mfyPp9GHjhLQGdohR2Mw86mOwIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFHrjINDwaxMHYN+BVGn3h9QsERv2MB8GA1UdIwQY
MBaAFAG/6ILRPoA/wZQ3PqQNilqeafMEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWJfb2d0RS1nRF9CbERjLXBBMktXcDVwOHdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy82NmMwOGEtZWU1OS00NzcxLWE4ZjIt
MmE1NTM5OWE4MGIwLzEvZXVNZzBQQnJFd2RnMzRGVWFmZUgxQ3dSR19ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy82NmMwOGEtZWU1OS00NzcxLWE4ZjItMmE1NTM5OWE4MGIw
LzEvQWJfb2d0RS1nRF9CbERjLXBBMktXcDVwOHdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQETfUQAwQC
uRZoAwQCuVM8AwQE2ZPQMA0EAgACMAcDBQAgAUFoMA0GCSqGSIb3DQEBCwUAA4IB
AQAk5NtsxKwBcRMdD7rXF1D8rJAFb5iTosk7Sz9FdaUf+3XpKF6M33LCEaQvdz/n
cGGm7W25faQ0NbNvLB3hpyqpojwUQ2kBUuFawLeCx6VMq8gYB5FDv8jmrYRT2ikv
eK+DSTsS3zBZCR4fkP/djsSbeY0W2/+9mxh4caSUXbWBgV80o0DQUFF3cCbHt2jZ
5UKouzxN5S/dqA2DZMA4elu/oZ71EwiSwqsBYUMA+FtNK70do1xFOL45X2MsoRkr
QCnWn2own8wtcv2HdxMcw1XKj7DeauF/bp0oerfxHsLZf9H1hrxb46YO+NoXdRKd
fnraoE7V24h/OFzBY5Suyg4F
-----END CERTIFICATE-----
Generated at Mon Jan 26 13:28:20 2026 by rpki-client