This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/e8cfb0-9568-4157-b802-f0ed9a2ab654/1/SEbMX_kWUsX_R1OTVRjFem2rhCY.roa
File: SEbMX_kWUsX_R1OTVRjFem2rhCY.roa (raw, json)
Hash identifier: XiNk8rorUk0GfMBPxUagzsQDmXdqYnZd77EYh58Os5s=
Subject key identifier: 48:46:CC:5F:F9:16:52:C5:FF:47:53:93:55:18:C5:7A:6D:AB:84:26
Certificate issuer: /CN=78b0b19d50d61a7e333f3d300f1149cefde7b64f
Certificate serial: 019B7CEDAE2BD7D47F30E67B2AB653DD98D2
Authority key identifier: 78:B0:B1:9D:50:D6:1A:7E:33:3F:3D:30:0F:11:49:CE:FD:E7:B6:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eLCxnVDWGn4zPz0wDxFJzv3ntk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/e8cfb0-9568-4157-b802-f0ed9a2ab654/1/SEbMX_kWUsX_R1OTVRjFem2rhCY.roa
Signing time: Fri 02 Jan 2026 04:18:29 +0000
ROA not before: Fri 02 Jan 2026 04:18:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15962
IP address blocks: 193.193.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/e8cfb0-9568-4157-b802-f0ed9a2ab654/1/eLCxnVDWGn4zPz0wDxFJzv3ntk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/e8cfb0-9568-4157-b802-f0ed9a2ab654/1/eLCxnVDWGn4zPz0wDxFJzv3ntk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/eLCxnVDWGn4zPz0wDxFJzv3ntk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Jan 2026 15:22:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:ed:ae:2b:d7:d4:7f:30:e6:7b:2a:b6:53:dd:98:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78b0b19d50d61a7e333f3d300f1149cefde7b64f
Validity
Not Before: Jan 2 04:18:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4846cc5ff91652c5ff4753935518c57a6dab8426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:46:a6:2b:e3:57:3b:b6:98:15:3a:44:bc:d2:
ea:a5:22:1e:97:69:89:6e:42:60:7e:e0:85:1f:07:
c4:67:4b:9c:27:82:62:73:dd:a8:fa:30:9e:ba:e1:
41:b4:39:19:50:33:7e:83:ca:3e:12:d8:86:fd:ad:
cd:9c:8c:e8:93:16:c7:51:0e:b9:df:a2:4f:81:0f:
fd:35:fc:45:fd:b3:5a:ca:68:af:c5:05:45:5c:9f:
33:97:61:70:ee:e8:f1:53:bf:b6:37:44:88:87:e7:
e3:a7:c3:44:44:a3:10:4e:c2:45:41:41:df:99:2d:
00:6c:04:c6:4a:4e:f1:55:ac:0c:33:f0:bd:7c:28:
e1:64:19:02:74:59:d7:d6:11:09:0f:4c:95:b9:20:
82:2c:e4:2b:bb:57:2b:05:92:4b:86:92:3a:12:81:
95:ee:b7:8a:3e:28:41:d7:8f:91:eb:ac:9e:dd:9f:
99:51:0d:8b:e9:d3:98:c8:d3:37:30:51:db:dc:2d:
8b:6f:77:a7:06:bc:30:0c:c9:2d:da:87:68:bf:ef:
8e:44:4c:54:40:4c:90:5a:28:50:b3:db:06:df:b8:
df:e9:4a:a2:22:ce:59:d6:a5:1a:79:8d:51:66:6f:
9a:36:67:bf:a9:da:c8:6c:03:66:b0:05:5f:f6:8b:
5d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:46:CC:5F:F9:16:52:C5:FF:47:53:93:55:18:C5:7A:6D:AB:84:26
X509v3 Authority Key Identifier:
keyid:78:B0:B1:9D:50:D6:1A:7E:33:3F:3D:30:0F:11:49:CE:FD:E7:B6:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eLCxnVDWGn4zPz0wDxFJzv3ntk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e8cfb0-9568-4157-b802-f0ed9a2ab654/1/SEbMX_kWUsX_R1OTVRjFem2rhCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e8cfb0-9568-4157-b802-f0ed9a2ab654/1/eLCxnVDWGn4zPz0wDxFJzv3ntk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.193.170.0/24
Signature Algorithm: sha256WithRSAEncryption
78:62:5b:bb:b7:d2:bb:cc:5a:23:96:e1:4a:93:1c:59:f3:0f:
d8:ff:65:0d:ba:4a:67:9e:30:04:57:4a:1a:45:3a:7d:16:88:
89:64:41:9a:1e:73:c1:5b:b9:75:25:1a:91:fe:5a:6b:14:ce:
b2:2f:9b:b4:e9:fd:7d:7c:7d:69:05:65:3a:3d:b3:ce:71:36:
20:ea:7f:0f:59:4e:f5:29:35:17:a0:1b:24:2c:ac:aa:32:62:
66:39:41:ea:9d:54:15:fa:4a:f4:e9:c1:b1:4d:b9:b0:05:94:
17:2d:ba:5e:e6:05:6e:3b:fd:74:c8:85:4e:24:31:ec:a5:49:
bd:1c:51:43:61:9b:20:d6:15:fc:de:ed:8e:0b:45:58:46:52:
91:ee:20:4c:0f:27:12:d5:7f:ac:49:fe:f6:b6:7e:c9:12:c7:
b4:cb:a7:74:fc:24:c3:35:01:89:9d:4c:0d:1f:9f:da:d3:f7:
74:6b:92:fb:f5:37:a7:42:85:b6:1e:d2:db:5f:3a:80:b2:8d:
e0:eb:90:fe:f0:96:ef:b7:df:47:45:a0:a8:40:d0:d2:e8:e8:
9c:23:43:83:2b:dd:86:f4:3e:46:f2:51:10:7e:1f:0e:19:07:
1c:43:c4:48:59:24:0e:1c:5e:d2:f9:bd:69:ac:fb:81:ca:ab:
d2:9c:c2:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 21:01:29 2026 by rpki-client