This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/EogTS1WEx_vkYhbZSi3vHNHhiHY.roa
File: EogTS1WEx_vkYhbZSi3vHNHhiHY.roa (raw, json)
Hash identifier: bP41/ID8ron8LWTYg41pAko9WG04aRJj5QuWiGa7VvM=
Subject key identifier: 12:88:13:4B:55:84:C7:FB:E4:62:16:D9:4A:2D:EF:1C:D1:E1:88:76
Certificate issuer: /CN=93515f25986e4b572a78b109d995c9ddf5da1266
Certificate serial: 019C0491CE990AAFACE2AAA8851B1E24FEBD
Authority key identifier: 93:51:5F:25:98:6E:4B:57:2A:78:B1:09:D9:95:C9:DD:F5:DA:12:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/EogTS1WEx_vkYhbZSi3vHNHhiHY.roa
Signing time: Wed 28 Jan 2026 12:26:30 +0000
ROA not before: Wed 28 Jan 2026 12:26:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2200
IP address blocks: 143.126.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.mft
rsync://rpki.ripe.net/repository/DEFAULT/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 12:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:04:91:ce:99:0a:af:ac:e2:aa:a8:85:1b:1e:24:fe:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93515f25986e4b572a78b109d995c9ddf5da1266
Validity
Not Before: Jan 28 12:26:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1288134b5584c7fbe46216d94a2def1cd1e18876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:99:00:14:23:87:45:24:98:fb:61:0a:8a:10:
63:3f:b7:66:63:c9:49:4e:09:27:4c:11:d9:0f:f7:
86:dd:2c:b1:77:a8:d2:08:94:a4:93:ca:2f:0b:9a:
2f:ca:97:d7:8c:ee:70:d1:32:93:60:6f:12:ca:d8:
f0:4b:9f:0b:55:de:e7:ec:f3:eb:05:c6:44:5f:86:
c3:91:a2:ec:1a:3b:3e:62:10:9a:e9:b9:18:8f:38:
0a:9f:74:cf:fe:f0:98:a0:7d:5f:a2:25:98:1b:06:
ec:96:92:cd:43:dc:d3:17:24:3b:d1:22:66:a4:4d:
4f:e7:cd:17:e4:70:51:7c:94:f9:b6:6f:10:7e:cb:
23:35:fa:bf:53:98:b5:cd:1c:fe:86:a5:b1:20:1e:
a7:65:b6:3a:8d:e4:0c:d9:73:f2:cd:bb:1b:54:ac:
7b:94:69:45:5e:27:55:3e:86:fc:8e:51:db:d2:c3:
95:6e:78:d5:0e:87:a6:86:e4:54:8c:09:56:ec:ed:
0a:a9:fb:fa:db:df:97:04:1c:42:dd:22:b8:e1:f4:
78:23:a0:a3:e3:8f:92:12:92:4d:f1:ac:6b:77:04:
79:4c:6b:41:4e:46:1f:93:e7:04:7e:04:01:c6:f2:
98:d8:88:44:42:b5:ee:a9:c1:3a:f0:05:11:d2:5f:
01:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:88:13:4B:55:84:C7:FB:E4:62:16:D9:4A:2D:EF:1C:D1:E1:88:76
X509v3 Authority Key Identifier:
keyid:93:51:5F:25:98:6E:4B:57:2A:78:B1:09:D9:95:C9:DD:F5:DA:12:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/EogTS1WEx_vkYhbZSi3vHNHhiHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.126.254.0/24
Signature Algorithm: sha256WithRSAEncryption
35:6b:1d:b3:59:23:66:4e:7e:0f:f7:64:3a:ca:1c:52:a5:6b:
51:cb:74:f0:44:36:81:1a:40:ef:83:f1:bb:3f:88:c2:40:d5:
9b:27:ef:e1:d7:5b:f3:2e:15:6e:70:90:fe:88:b3:d3:40:f3:
dd:2e:b0:87:d8:93:9c:c0:57:8f:80:de:c6:6b:ec:c2:12:c9:
47:ee:1a:16:9b:07:b9:66:bf:01:6c:9f:36:d8:b3:08:64:f5:
06:47:c5:12:bd:22:2b:a3:f2:06:b2:ee:77:d1:54:56:7b:3d:
9b:bf:5c:e9:93:43:a2:f6:17:fc:67:85:ad:eb:86:78:22:0f:
38:f6:f4:c7:f6:63:ed:24:7e:af:fe:b7:2d:40:76:d1:2c:78:
16:20:88:64:2e:7a:c8:b1:a6:22:f0:be:ab:70:40:a4:ab:a0:
c9:ac:c5:32:38:a9:ad:3c:78:19:9b:1a:94:37:29:c4:ba:9e:
52:f9:1e:78:bc:4c:c4:b0:ab:54:a1:11:73:02:ba:b2:ff:da:
5f:02:5d:a8:13:96:cb:3b:13:47:b1:6f:36:18:10:64:76:77:
16:60:38:3a:45:62:09:f9:b4:a0:03:7a:92:b8:0b:c2:6b:7d:
ad:3a:b1:9c:b2:a9:00:ee:2a:2d:53:d9:00:d6:5f:77:a8:c4:
89:de:c1:0d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZwEkc6ZCq+s4qqohRseJP69MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNTE1ZjI1OTg2ZTRiNTcyYTc4YjEwOWQ5OTVjOWRkZjVk
YTEyNjYwHhcNMjYwMTI4MTIyNjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMjg4MTM0YjU1ODRjN2ZiZTQ2MjE2ZDk0YTJkZWYxY2QxZTE4ODc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ZkAFCOHRSSY+2EKihBjP7dmY8lJ
TgknTBHZD/eG3Syxd6jSCJSkk8ovC5ovypfXjO5w0TKTYG8SytjwS58LVd7n7PPr
BcZEX4bDkaLsGjs+YhCa6bkYjzgKn3TP/vCYoH1foiWYGwbslpLNQ9zTFyQ70SJm
pE1P580X5HBRfJT5tm8QfssjNfq/U5i1zRz+hqWxIB6nZbY6jeQM2XPyzbsbVKx7
lGlFXidVPob8jlHb0sOVbnjVDoemhuRUjAlW7O0Kqfv629+XBBxC3SK44fR4I6Cj
44+SEpJN8axrdwR5TGtBTkYfk+cEfgQBxvKY2IhEQrXuqcE68AUR0l8BZQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBKIE0tVhMf75GIW2Uot7xzR4Yh2MB8GA1UdIwQY
MBaAFJNRXyWYbktXKnixCdmVyd312hJmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazFGZkpaaHVTMWNxZUxFSjJaWEozZlhhRW1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS84NGIwM2ItNTYxOS00MjcyLTk0N2Yt
MTNkNTEzMjhhOWY3LzEvRW9nVFMxV0V4X3ZrWWhiWlNpM3ZITkhoaUhZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS84NGIwM2ItNTYxOS00MjcyLTk0N2YtMTNkNTEzMjhhOWY3
LzEvazFGZkpaaHVTMWNxZUxFSjJaWEozZlhhRW1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAj37+MA0G
CSqGSIb3DQEBCwUAA4IBAQA1ax2zWSNmTn4P92Q6yhxSpWtRy3TwRDaBGkDvg/G7
P4jCQNWbJ+/h11vzLhVucJD+iLPTQPPdLrCH2JOcwFePgN7Ga+zCEslH7hoWmwe5
Zr8BbJ822LMIZPUGR8USvSIro/IGsu530VRWez2bv1zpk0Oi9hf8Z4Wt64Z4Ig84
9vTH9mPtJH6v/rctQHbRLHgWIIhkLnrIsaYi8L6rcECkq6DJrMUyOKmtPHgZmxqU
NynEup5S+R54vEzEsKtUoRFzArqy/9pfAl2oE5bLOxNHsW82GBBkdncWYDg6RWIJ
+bSgA3qSuAvCa32tOrGcsqkA7iotU9kA1l93qMSJ3sEN
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:23:32 2026 by rpki-client