This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/d47be8-2ff0-4c93-b912-905e763f048d/1/E8wnMkiSbVSzBboh28_7QoxLc2I.roa
File: E8wnMkiSbVSzBboh28_7QoxLc2I.roa (raw, json)
Hash identifier: zCR5rbo9HIv2yKajw50w0oXIYg6lZF+5ym6K0CZI1dU=
Subject key identifier: 13:CC:27:32:48:92:6D:54:B3:05:BA:21:DB:CF:FB:42:8C:4B:73:62
Certificate issuer: /CN=29fcdf7629c4e00e906f1435f449dd109f410b6c
Certificate serial: 019B7AC951B60CF117C8EC887414F939600D
Authority key identifier: 29:FC:DF:76:29:C4:E0:0E:90:6F:14:35:F4:49:DD:10:9F:41:0B:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KfzfdinE4A6QbxQ19EndEJ9BC2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/d47be8-2ff0-4c93-b912-905e763f048d/1/E8wnMkiSbVSzBboh28_7QoxLc2I.roa
Signing time: Thu 01 Jan 2026 18:19:32 +0000
ROA not before: Thu 01 Jan 2026 18:19:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212296
IP address blocks: 88.135.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/d47be8-2ff0-4c93-b912-905e763f048d/1/KfzfdinE4A6QbxQ19EndEJ9BC2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/d47be8-2ff0-4c93-b912-905e763f048d/1/KfzfdinE4A6QbxQ19EndEJ9BC2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/KfzfdinE4A6QbxQ19EndEJ9BC2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 18:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:c9:51:b6:0c:f1:17:c8:ec:88:74:14:f9:39:60:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29fcdf7629c4e00e906f1435f449dd109f410b6c
Validity
Not Before: Jan 1 18:19:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=13cc273248926d54b305ba21dbcffb428c4b7362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:be:b2:a9:30:77:db:ba:56:a4:19:d2:41:e7:
8c:16:06:3a:63:1a:5e:8e:a2:1d:e8:4e:ca:f2:50:
1f:98:6e:0b:04:53:2d:92:31:f2:4c:5a:d2:2e:51:
d0:35:c2:38:49:90:29:31:ca:e3:81:2c:3f:18:ff:
be:17:d6:2e:5d:03:40:ec:14:c7:df:36:d4:97:a1:
93:41:f5:54:c8:e1:e9:47:14:70:10:af:b7:9e:5b:
c4:37:31:7c:86:44:22:91:4b:be:2a:00:47:a0:72:
f1:85:7b:20:51:35:0d:29:b9:2f:ea:91:85:b8:3c:
5c:d8:00:76:fd:49:52:d2:9c:cd:12:0a:59:a4:80:
6a:55:47:d3:30:fc:a6:0c:eb:71:ed:4c:57:37:03:
bf:d6:50:8d:fb:8f:84:6a:86:d4:21:f6:d8:d6:bb:
60:e1:e6:a8:f1:b8:c8:40:05:d5:d7:05:bd:32:b4:
6d:c6:ed:78:e3:8f:10:ae:6d:eb:9f:a7:05:be:85:
69:78:a5:d1:20:22:f6:90:fa:7b:b6:48:ad:c8:a7:
80:93:c7:cb:5a:09:40:2a:48:f3:22:38:88:8f:45:
67:60:0f:03:ac:5b:2c:f5:ca:9f:92:00:4e:d1:cd:
29:de:7f:2d:0a:95:88:b6:14:08:10:4b:f3:d8:83:
d9:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:CC:27:32:48:92:6D:54:B3:05:BA:21:DB:CF:FB:42:8C:4B:73:62
X509v3 Authority Key Identifier:
keyid:29:FC:DF:76:29:C4:E0:0E:90:6F:14:35:F4:49:DD:10:9F:41:0B:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KfzfdinE4A6QbxQ19EndEJ9BC2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d47be8-2ff0-4c93-b912-905e763f048d/1/E8wnMkiSbVSzBboh28_7QoxLc2I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d47be8-2ff0-4c93-b912-905e763f048d/1/KfzfdinE4A6QbxQ19EndEJ9BC2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.135.68.0/24
Signature Algorithm: sha256WithRSAEncryption
80:03:00:28:4f:8c:5f:07:e9:36:13:84:15:d2:51:b0:9e:07:
4b:b1:b3:9b:97:9d:13:e2:1f:15:35:cd:eb:2a:52:88:99:bd:
d2:15:1b:83:6f:ed:34:3d:92:0a:c7:45:59:73:06:d8:db:0f:
1a:d6:79:40:f6:7a:4d:da:44:98:a9:dc:dd:a9:e6:f4:36:47:
72:d3:4e:d3:b3:ca:ff:73:45:c7:43:e8:41:6b:c0:fa:95:3a:
2a:43:dc:fb:c7:50:af:36:cb:56:1e:bc:62:97:f7:33:7c:2e:
e5:81:6f:4e:85:12:14:d9:d5:2a:37:cb:97:ba:ec:1d:02:e1:
9e:fb:5a:0f:71:45:de:42:62:b1:e6:0b:68:e4:ec:a0:b9:e5:
2a:a0:3c:41:2e:19:fd:92:6b:6b:e4:b5:16:74:89:d4:03:80:
e6:62:ac:f2:20:54:a1:b4:6e:b6:e0:47:a4:b9:90:75:5c:5d:
25:e6:19:98:6a:7d:7c:2a:7c:38:bf:36:eb:bc:5f:91:e4:07:
78:41:d4:1b:af:b7:c2:e4:3f:29:04:63:aa:b8:2b:65:c8:95:
52:c4:01:59:5b:31:e6:cf:8e:8c:d7:ae:ee:20:50:29:9e:85:
f9:d4:2b:11:22:58:eb:34:6e:b1:e7:df:20:3a:9a:5a:cd:bc:
74:ec:7c:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:29:08 2026 by rpki-client