This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/EXopuR5ESiK7_JfMXbRvvwemOwM.roa
File: EXopuR5ESiK7_JfMXbRvvwemOwM.roa (raw, json)
Hash identifier: /csuVRW3pPg52UWTPGC8VigLMZFh8XPz4sQJGV29ruU=
Subject key identifier: 11:7A:29:B9:1E:44:4A:22:BB:FC:97:CC:5D:B4:6F:BF:07:A6:3B:03
Certificate issuer: /CN=758621623ac6cab8f6bde5526e7a2931d626fe8c
Certificate serial: 019B76EB06943E075051C5ADF8F0E0699E7A
Authority key identifier: 75:86:21:62:3A:C6:CA:B8:F6:BD:E5:52:6E:7A:29:31:D6:26:FE:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dYYhYjrGyrj2veVSbnopMdYm_ow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/EXopuR5ESiK7_JfMXbRvvwemOwM.roa
Signing time: Thu 01 Jan 2026 00:17:52 +0000
ROA not before: Thu 01 Jan 2026 00:17:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21385
IP address blocks: 194.88.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.mft
rsync://rpki.ripe.net/repository/DEFAULT/dYYhYjrGyrj2veVSbnopMdYm_ow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:76:eb:06:94:3e:07:50:51:c5:ad:f8:f0:e0:69:9e:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=758621623ac6cab8f6bde5526e7a2931d626fe8c
Validity
Not Before: Jan 1 00:17:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=117a29b91e444a22bbfc97cc5db46fbf07a63b03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d9:71:dc:f7:09:54:a0:f6:91:f2:97:7c:a9:
5c:84:95:34:15:12:38:87:d5:5c:4a:e8:dd:03:79:
82:7f:8a:97:92:87:d2:8f:cb:27:f4:3c:2d:7f:cf:
d5:fc:83:ab:58:6f:d7:d6:e5:c5:d9:c3:d8:32:00:
f6:61:32:23:d7:7f:5e:84:76:cf:2b:5d:de:aa:3c:
71:f9:e6:30:70:20:6f:0f:82:b9:b9:d7:7b:a9:04:
52:70:44:cd:8b:48:8a:6b:7f:28:c6:b3:85:90:a0:
97:a6:46:e4:0f:f3:70:72:8a:1c:f0:6f:58:e1:c7:
c8:e6:48:07:84:1b:7c:c6:97:d2:b0:e7:eb:79:1b:
d4:f1:40:f8:9d:53:b4:c0:21:d9:cb:eb:59:6a:6d:
d7:2c:a6:36:50:ad:34:7c:d2:27:4f:e2:bf:ac:23:
c3:98:cd:a2:e9:4b:7e:69:72:81:0a:9e:9c:eb:8e:
4e:ff:8c:61:87:76:e8:72:be:ab:c2:f5:a1:90:b8:
f4:f7:58:7c:df:6d:ea:41:02:24:da:5f:d3:8d:65:
6c:3d:d2:c8:ef:fa:20:c1:9d:8c:fb:14:50:80:5c:
55:4c:0c:04:61:3a:5f:20:d9:0c:01:20:a0:c9:cb:
93:94:40:5d:09:38:b0:48:0d:7e:aa:fb:e6:fb:d4:
ab:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:7A:29:B9:1E:44:4A:22:BB:FC:97:CC:5D:B4:6F:BF:07:A6:3B:03
X509v3 Authority Key Identifier:
keyid:75:86:21:62:3A:C6:CA:B8:F6:BD:E5:52:6E:7A:29:31:D6:26:FE:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYYhYjrGyrj2veVSbnopMdYm_ow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/EXopuR5ESiK7_JfMXbRvvwemOwM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.88.10.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:fc:67:3b:7c:77:8a:e2:b2:f8:fb:74:28:40:92:30:bf:bf:
8c:69:59:06:a9:2c:cd:be:24:05:91:4c:ee:06:ff:7e:58:0e:
6b:5b:64:78:46:6b:cc:2b:0a:97:ce:83:a8:3c:d5:9b:ac:2d:
f2:91:0d:d2:d0:bd:68:5d:4f:b8:60:8d:c8:a8:56:2c:95:fa:
f8:f7:8d:d1:47:8e:7d:18:3c:93:4a:5f:c7:59:36:3a:28:76:
d8:89:57:bf:27:82:68:b2:10:7d:33:3a:ed:09:69:8b:e9:fb:
1f:4c:87:49:9f:d8:b3:26:0a:e0:c4:6e:9a:0d:f5:e3:fa:11:
d0:7e:4a:e3:17:2e:c2:cd:ea:0d:81:02:b4:12:48:23:cc:16:
e4:65:e0:97:13:1b:1c:b6:cd:90:76:3e:a6:ed:30:6c:0b:a1:
c8:5d:53:12:f5:b7:5b:3e:db:6b:cd:fc:24:93:3c:a5:18:12:
ab:26:d2:71:19:0b:e2:03:56:5d:43:d9:f1:95:11:fc:55:e5:
7c:bf:b6:a4:b4:7d:78:2d:1c:0b:ca:46:21:b3:3e:21:c9:c9:
b2:ff:da:a9:b4:bb:a4:ab:39:1d:a9:c2:b7:58:c7:81:9f:60:
a6:46:19:54:c0:1a:6c:11:75:5b:67:fc:7e:70:9b:c1:71:29:
c6:01:15:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:23:49 2026 by rpki-client