This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/eahgufCfOHHAIx8MFOHNTLtP6M4.roa
File: eahgufCfOHHAIx8MFOHNTLtP6M4.roa (raw, json)
Hash identifier: kkQvc1W1aYM6K9ernxdLo8LTVXVyQLjFAFQYaCBKHkk=
Subject key identifier: 79:A8:60:B9:F0:9F:38:71:C0:23:1F:0C:14:E1:CD:4C:BB:4F:E8:CE
Certificate issuer: /CN=3d65564a8954d6ae952f8a1f7af6c1cfba78094a
Certificate serial: 019B7AC94A87F38D75013A7CF0018D25B02B
Authority key identifier: 3D:65:56:4A:89:54:D6:AE:95:2F:8A:1F:7A:F6:C1:CF:BA:78:09:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PWVWSolU1q6VL4ofevbBz7p4CUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/eahgufCfOHHAIx8MFOHNTLtP6M4.roa
Signing time: Thu 01 Jan 2026 18:19:30 +0000
ROA not before: Thu 01 Jan 2026 18:19:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49964
IP address blocks: 91.216.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PWVWSolU1q6VL4ofevbBz7p4CUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:c9:4a:87:f3:8d:75:01:3a:7c:f0:01:8d:25:b0:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d65564a8954d6ae952f8a1f7af6c1cfba78094a
Validity
Not Before: Jan 1 18:19:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=79a860b9f09f3871c0231f0c14e1cd4cbb4fe8ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:fe:95:2c:b7:50:46:4d:49:20:9e:f5:ae:02:
21:9b:e8:5e:70:8f:17:07:16:f8:ac:48:f7:d5:de:
7e:19:f4:d6:c6:1b:e3:0a:75:93:de:30:26:2f:3a:
a1:f6:25:e0:de:df:78:09:8b:7f:db:9b:94:b3:e5:
ee:20:e7:d5:80:12:99:d1:55:48:d5:de:c1:ef:95:
e4:57:ff:7e:6f:50:57:04:b5:c6:b1:e9:9d:4a:59:
f4:d2:cb:91:e4:74:7d:54:a5:24:db:17:92:c8:18:
e8:16:e4:a3:76:f9:ed:5b:67:f7:b2:8c:f9:94:d2:
95:d0:ed:64:b6:ce:84:0c:d1:91:68:da:25:25:c1:
4b:9a:e1:d3:c8:15:a1:1b:66:70:ec:19:0a:f2:6f:
0a:12:35:f7:c9:5c:4e:9a:19:57:e0:e2:5f:55:0e:
ef:7c:55:3d:c3:3c:71:92:24:fe:d1:bc:c0:b3:17:
52:02:34:22:fa:4f:04:09:1d:49:4d:17:a3:a4:53:
c7:95:57:d7:99:ca:18:ef:30:6b:54:54:b7:29:5d:
96:d6:10:8e:b3:13:6a:15:73:1a:fb:50:b9:f3:a8:
8c:77:64:7c:11:e7:2f:1c:f8:aa:d2:24:e2:ec:69:
f4:ce:9f:1f:6a:8e:3e:df:07:b4:6d:3c:af:d6:22:
98:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:A8:60:B9:F0:9F:38:71:C0:23:1F:0C:14:E1:CD:4C:BB:4F:E8:CE
X509v3 Authority Key Identifier:
keyid:3D:65:56:4A:89:54:D6:AE:95:2F:8A:1F:7A:F6:C1:CF:BA:78:09:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PWVWSolU1q6VL4ofevbBz7p4CUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/eahgufCfOHHAIx8MFOHNTLtP6M4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.145.0/24
Signature Algorithm: sha256WithRSAEncryption
14:d8:ca:c7:5e:98:c0:55:ab:a8:bc:29:7c:c5:bb:c1:72:fd:
77:af:0f:cb:c4:58:3c:0b:99:69:50:f9:18:0d:f3:0a:00:cc:
ea:e9:57:40:c7:a5:44:59:9f:00:96:d5:ba:35:48:6b:a8:66:
72:10:96:80:c9:78:0a:57:9e:8c:6e:d4:8d:8c:ca:8d:0f:3e:
5e:9d:a5:7e:7e:e0:8a:00:41:a0:1f:18:72:34:66:84:6c:ea:
2d:d7:fd:ab:f8:d0:8c:57:f1:c7:d2:5a:91:62:d3:58:5a:84:
6b:e0:5d:4d:84:9c:6f:08:69:b6:cb:b6:08:16:3d:9f:3e:39:
e6:ee:37:60:b6:a8:8b:ab:74:2f:59:20:7c:13:60:ff:08:42:
07:4a:11:08:1a:7c:8e:30:c8:f2:af:9a:6b:c9:06:9e:a1:a3:
66:c9:b2:43:5e:2d:e5:0e:17:d3:10:d7:fa:e6:8b:5a:79:b3:
b3:f3:41:6c:e1:3e:0d:94:2f:7f:5f:75:d2:02:82:c2:70:c3:
22:91:98:c8:55:ed:da:a2:51:34:8d:59:d6:b7:4a:d5:7b:94:
f6:8a:79:76:2d:3b:09:0a:b8:97:fe:0a:5c:b9:5f:27:02:d6:
dc:bb:d3:77:1a:6a:41:4d:9e:b4:02:be:e3:e5:ac:cf:07:ec:
45:14:da:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 23:55:45 2026 by rpki-client