This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/E0WOservMgR3JKWcCGOeeSVBFRU.roa
File: E0WOservMgR3JKWcCGOeeSVBFRU.roa (raw, json)
Hash identifier: wh3qW4F8kxypeloNC06p2uUoMCHJdfMPgMolntJXb0k=
Subject key identifier: 13:45:8E:B1:EA:EF:32:04:77:24:A5:9C:08:63:9E:79:25:41:15:15
Certificate issuer: /CN=48a2e811f00bae16a447423f11e24217142cff7c
Certificate serial: 019B7BA5414B206EF6C5052188ED63B4E912
Authority key identifier: 48:A2:E8:11:F0:0B:AE:16:A4:47:42:3F:11:E2:42:17:14:2C:FF:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SKLoEfALrhakR0I_EeJCFxQs_3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/E0WOservMgR3JKWcCGOeeSVBFRU.roa
Signing time: Thu 01 Jan 2026 22:19:46 +0000
ROA not before: Thu 01 Jan 2026 22:19:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216393
IP address blocks: 89.37.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/SKLoEfALrhakR0I_EeJCFxQs_3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Jan 2026 00:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:a5:41:4b:20:6e:f6:c5:05:21:88:ed:63:b4:e9:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48a2e811f00bae16a447423f11e24217142cff7c
Validity
Not Before: Jan 1 22:19:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=13458eb1eaef32047724a59c08639e7925411515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e3:71:8d:ef:73:6b:a0:f0:cc:5f:5d:9f:74:
f9:98:74:ad:fa:d2:3c:2c:a4:db:5f:82:7b:32:c0:
4b:4f:e6:1b:d5:e5:72:98:f4:00:ce:ec:58:c2:f0:
00:a4:cf:0e:74:7c:50:42:50:85:6c:d6:ea:ec:e6:
ee:1b:8a:e9:57:c3:7c:75:89:d3:72:c5:8e:e8:cf:
6b:e0:2e:c4:92:48:5d:30:e7:1b:aa:75:13:86:9a:
af:43:a2:4e:fa:bf:b8:60:98:00:25:36:14:98:69:
4b:33:43:0c:5f:da:10:94:8d:5c:e0:9f:99:b9:a6:
12:bd:17:34:ee:d8:df:b5:3a:cc:41:a3:d6:69:9b:
65:a9:b5:f4:f8:ff:f9:c4:eb:11:95:a2:1d:87:3b:
38:43:2c:55:c8:b5:94:ab:a0:0a:20:da:1d:ac:1e:
37:0f:ea:56:2c:f0:6d:e4:f5:86:27:8a:82:5e:18:
33:85:f9:46:32:28:8a:3e:67:4d:cc:b7:d4:91:7b:
97:ed:dd:f0:ce:18:b2:97:5d:c2:27:c8:6a:25:c7:
6a:0a:6c:b3:01:69:fc:f1:01:8f:fc:b2:f8:81:13:
28:70:70:24:89:d7:ca:aa:d5:0a:40:2b:c3:84:a7:
84:c4:e3:cd:a0:00:05:d1:4c:02:28:13:39:1b:38:
a8:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:45:8E:B1:EA:EF:32:04:77:24:A5:9C:08:63:9E:79:25:41:15:15
X509v3 Authority Key Identifier:
keyid:48:A2:E8:11:F0:0B:AE:16:A4:47:42:3F:11:E2:42:17:14:2C:FF:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SKLoEfALrhakR0I_EeJCFxQs_3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/E0WOservMgR3JKWcCGOeeSVBFRU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.37.41.0/24
Signature Algorithm: sha256WithRSAEncryption
98:6c:64:6f:2d:16:f9:bc:cf:1e:d7:f6:80:1c:2d:70:b6:03:
95:c6:f7:0e:0e:09:ab:71:ca:c0:ea:cd:8b:32:24:b5:ba:87:
c9:de:c9:2b:86:0b:76:b0:31:4d:29:4f:c9:83:68:84:89:fa:
c4:bf:6a:5e:81:f8:f6:86:2a:c6:ac:27:13:4b:6b:58:07:a4:
6b:be:07:de:dc:b2:98:21:b6:e6:fb:23:ea:5b:fb:cc:f1:dd:
0d:99:cf:74:1f:ef:51:ae:11:41:19:6c:c3:f4:54:d9:4a:6a:
fd:f1:11:6e:02:68:7c:1f:56:5c:48:56:a2:00:bb:98:34:dd:
79:e6:e3:8c:51:08:c0:6d:97:30:5e:0c:04:5c:3a:e0:a5:85:
da:7d:0d:c1:10:4d:21:12:60:35:0f:f5:80:9f:4f:97:9c:7b:
35:df:aa:54:cc:b7:af:58:ee:90:94:0d:0b:f7:e2:89:d4:81:
29:cf:8d:01:df:93:59:2a:ff:98:6d:d8:74:7f:7f:93:53:04:
3c:fe:51:73:5e:a6:8a:e9:f8:c8:ae:2d:5e:2d:ee:d5:89:97:
e3:72:d5:3f:a6:37:ef:17:ce:e6:fc:e7:e6:6e:a0:57:ba:12:
35:8a:b5:9e:29:d9:02:b9:d9:82:1d:c0:74:f7:f2:67:6b:c4:
ed:d7:1e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 07:43:41 2026 by rpki-client