This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/EdVO9FKaVINf4-EcfDH2n-UZXgI.roa
File: EdVO9FKaVINf4-EcfDH2n-UZXgI.roa (raw, json)
Hash identifier: dwVT4CPLLp3oBHUxJmbUMjoihn96t4N47NrHTtml6ac=
Subject key identifier: 11:D5:4E:F4:52:9A:54:83:5F:E3:E1:1C:7C:31:F6:9F:E5:19:5E:02
Certificate issuer: /CN=5b087d1dc98e26e4c959d09f6146d7fdf869e4fc
Certificate serial: 019B7C134C489C17DE75B2CDBE6EE872C843
Authority key identifier: 5B:08:7D:1D:C9:8E:26:E4:C9:59:D0:9F:61:46:D7:FD:F8:69:E4:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/EdVO9FKaVINf4-EcfDH2n-UZXgI.roa
Signing time: Fri 02 Jan 2026 00:19:58 +0000
ROA not before: Fri 02 Jan 2026 00:19:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208336
IP address blocks: 193.17.53.0/24 maxlen: 24
193.203.24.0/24 maxlen: 24
193.203.110.0/24 maxlen: 24
193.203.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 18:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:13:4c:48:9c:17:de:75:b2:cd:be:6e:e8:72:c8:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b087d1dc98e26e4c959d09f6146d7fdf869e4fc
Validity
Not Before: Jan 2 00:19:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=11d54ef4529a54835fe3e11c7c31f69fe5195e02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a3:a2:be:38:08:c0:e1:c3:7b:06:a3:61:69:
78:57:2d:f7:05:91:7b:d5:0c:b1:df:68:d6:25:b9:
f9:a0:3a:79:6a:c6:59:87:78:39:79:a4:ed:03:98:
c2:b3:bb:db:e7:ca:6f:e7:c8:4f:ad:26:c5:03:76:
d1:ae:16:85:7a:0f:7c:73:5c:4d:dd:b7:5c:92:36:
6a:4f:f8:98:7d:6d:8e:d1:66:fc:81:0b:71:a9:45:
42:ff:2d:c7:53:bf:f9:84:c4:a1:73:10:e6:46:50:
7d:5d:75:1e:8c:d0:ff:f8:63:cf:3f:6c:96:fe:3c:
37:50:da:30:70:d9:15:f8:b9:2e:6b:b8:a8:40:91:
e9:4d:1a:eb:aa:1a:d2:53:76:95:a5:e8:06:7f:97:
3f:eb:b4:c6:5d:2b:a6:22:29:8f:4c:51:1b:8f:cd:
55:c7:aa:22:b0:18:6a:d5:fe:20:c0:42:68:1e:c7:
bf:aa:e3:29:21:1d:80:aa:fd:71:8c:6c:e1:3b:d1:
38:26:c8:8d:96:a6:5e:4b:c9:5b:cd:7f:67:a4:a7:
5f:c1:fe:65:59:be:b1:5e:5a:12:ad:d8:34:7b:c4:
a5:70:90:a5:a2:21:12:b1:19:df:f4:1f:d9:82:86:
e2:84:23:20:c1:ff:89:6c:3b:5e:e3:e4:54:81:70:
ec:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:D5:4E:F4:52:9A:54:83:5F:E3:E1:1C:7C:31:F6:9F:E5:19:5E:02
X509v3 Authority Key Identifier:
keyid:5B:08:7D:1D:C9:8E:26:E4:C9:59:D0:9F:61:46:D7:FD:F8:69:E4:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/EdVO9FKaVINf4-EcfDH2n-UZXgI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.53.0/24
193.203.24.0/24
193.203.110.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:ad:27:2f:b2:61:91:ab:95:60:e9:4c:4b:27:8f:43:4c:1a:
63:f9:9e:b3:e5:91:4a:ae:7f:9e:dd:49:48:c6:00:04:62:0d:
ec:b1:1a:d4:ef:f7:3b:0a:b2:57:0c:a9:45:4b:45:70:89:da:
1c:2b:ea:5a:e2:6f:5b:85:56:f3:5a:b3:88:d6:5b:bd:a7:f1:
41:75:ca:28:ad:25:26:82:fa:02:b1:21:28:18:c7:e4:af:61:
20:9a:00:ec:b8:cf:f8:68:c8:56:50:0e:45:e8:a8:7d:21:ba:
2b:e2:ac:8d:fa:3e:a3:3d:7c:c3:2d:f5:b3:13:2e:57:ee:6f:
3a:92:68:7d:cd:06:32:ed:9f:22:86:4a:c2:f7:74:41:09:f2:
0d:ff:f6:30:9d:1a:75:cd:29:4b:fc:49:65:1c:52:ac:10:eb:
d5:f1:be:fe:ff:05:bf:3d:a2:ce:97:05:bd:26:fb:14:69:ed:
e4:bb:2a:22:6d:6a:6f:bc:60:a9:89:54:bc:6e:4f:44:18:1b:
c4:1f:50:7e:16:f7:d8:60:cb:52:e0:7d:84:7b:81:db:a2:21:
a0:73:2e:01:d9:a3:ec:47:3d:f7:d8:05:8c:8e:71:c0:af:ee:
36:ba:53:34:f4:b8:eb:dc:52:e7:80:98:6f:ab:d1:b9:5f:ef:
e8:33:4c:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 04:28:27 2026 by rpki-client