This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/E0o_FE2T3DZ1D-UezcaaMgIR4Cc.roa
File: E0o_FE2T3DZ1D-UezcaaMgIR4Cc.roa (raw, json)
Hash identifier: 5MnQxHTjDi2NDKJrwnJ1AAzWp+hIpNaMlweOYJUqXj8=
Subject key identifier: 13:4A:3F:14:4D:93:DC:36:75:0F:E5:1E:CD:C6:9A:32:02:11:E0:27
Certificate issuer: /CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Certificate serial: 019B797ECE5796894F1039148D3FB7601D4B
Authority key identifier: 92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/E0o_FE2T3DZ1D-UezcaaMgIR4Cc.roa
Signing time: Thu 01 Jan 2026 12:18:32 +0000
ROA not before: Thu 01 Jan 2026 12:18:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25369
IP address blocks: 79.143.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 09:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:7e:ce:57:96:89:4f:10:39:14:8d:3f:b7:60:1d:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Validity
Not Before: Jan 1 12:18:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=134a3f144d93dc36750fe51ecdc69a320211e027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4a:2b:a2:ac:5f:11:6e:aa:ed:98:06:33:ab:
5c:c0:8c:d5:d3:8d:1c:a9:fa:ed:7c:d9:35:f1:0d:
3f:2a:01:31:4d:3a:dc:e6:23:c8:dc:f1:5b:e3:b4:
63:f7:b5:53:e1:d3:4e:12:ba:00:f0:00:8f:85:bc:
5f:fd:d4:ca:82:36:23:d8:4f:ca:e3:7c:47:9e:fe:
18:6a:04:aa:5a:84:6c:76:8a:94:da:34:18:7b:e0:
9e:48:5f:06:1b:99:ef:18:c3:81:fc:db:71:ff:a2:
d4:e9:0d:11:c1:54:bb:53:04:bc:96:ff:7c:86:db:
02:c1:af:25:f3:c2:ee:f3:80:f9:40:53:b9:07:6c:
2e:3e:43:de:b8:cc:44:0b:04:3f:0a:00:fc:6d:b2:
c9:ba:2f:bd:25:cf:fe:d9:83:24:9a:45:c7:8c:0d:
ce:07:ea:2b:43:a3:91:8f:3c:1b:18:46:fb:4d:b4:
0b:6e:a1:53:06:39:56:a2:30:57:c9:af:71:e0:27:
95:72:d1:db:88:ef:43:7c:1b:ac:f5:c9:ba:a8:09:
70:d3:25:ed:fa:4a:c9:4c:3b:3c:95:9f:9b:29:ab:
68:20:e6:3a:80:b2:b9:d0:6b:8e:ce:f4:52:6d:f2:
a7:f1:bb:cc:26:d4:68:1f:83:01:1e:47:79:77:26:
cc:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:4A:3F:14:4D:93:DC:36:75:0F:E5:1E:CD:C6:9A:32:02:11:E0:27
X509v3 Authority Key Identifier:
keyid:92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/E0o_FE2T3DZ1D-UezcaaMgIR4Cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.143.87.0/24
Signature Algorithm: sha256WithRSAEncryption
86:2b:35:69:fc:0a:a0:98:ff:e2:7c:95:49:91:2f:ef:e3:ad:
64:c3:57:b3:52:91:fe:77:72:86:47:40:ae:7c:95:2f:b2:24:
32:d8:1d:bf:11:ba:17:c9:92:dd:9a:2b:81:fb:64:8f:bd:a3:
87:5d:90:94:84:b4:6d:58:bc:d8:21:80:d1:be:03:18:46:71:
b9:d0:38:37:e8:d1:20:e3:a0:74:af:78:a7:fc:9c:95:b2:2c:
c2:58:f7:28:dd:2d:46:33:ad:e4:c5:18:c1:b5:5a:29:dd:8b:
a7:8a:81:70:73:33:94:c1:f5:86:52:ab:05:6a:8d:83:fc:b2:
d8:fc:df:a4:98:36:03:47:89:81:8c:28:4a:40:a4:73:ba:d2:
2f:36:31:48:59:fb:4c:36:e3:83:d7:00:0f:b4:eb:9f:d6:5d:
f7:fe:f5:7b:d5:3f:d4:d6:10:4d:09:89:b3:28:86:51:59:01:
f5:0f:d4:6c:c9:14:0c:3a:a4:fb:a2:32:e9:4d:f4:68:4e:7d:
17:09:db:ff:30:1b:7e:f8:e6:dd:f3:5d:97:95:75:b8:f3:1c:
b2:8c:4e:d3:5b:c5:f9:a1:3d:4f:53:13:02:90:0b:58:2e:f5:
dc:fa:32:7c:c2:4e:5d:f9:a1:34:dd:50:f9:23:39:58:47:ea:
e6:fe:2b:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 17:03:35 2026 by rpki-client