This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/3NE1-ierdloX8nhN3iBkvRLmeck.roa
File: 3NE1-ierdloX8nhN3iBkvRLmeck.roa (raw, json)
Hash identifier: gQY+8HGUw14ADa6TeHXGdaEBXGR4Hxky1qeV/2hoxfs=
Subject key identifier: DC:D1:35:FA:27:AB:76:5A:17:F2:78:4D:DE:20:64:BD:12:E6:79:C9
Certificate issuer: /CN=eb960982e82bf9e9875445009308de7ecbd05c54
Certificate serial: 019B78A25982016CF00A858681E5C7CAD708
Authority key identifier: EB:96:09:82:E8:2B:F9:E9:87:54:45:00:93:08:DE:7E:CB:D0:5C:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/65YJgugr-emHVEUAkwjefsvQXFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/3NE1-ierdloX8nhN3iBkvRLmeck.roa
Signing time: Thu 01 Jan 2026 08:17:44 +0000
ROA not before: Thu 01 Jan 2026 08:17:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211820
IP address blocks: 94.154.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/65YJgugr-emHVEUAkwjefsvQXFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/65YJgugr-emHVEUAkwjefsvQXFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/65YJgugr-emHVEUAkwjefsvQXFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:a2:59:82:01:6c:f0:0a:85:86:81:e5:c7:ca:d7:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb960982e82bf9e9875445009308de7ecbd05c54
Validity
Not Before: Jan 1 08:17:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dcd135fa27ab765a17f2784dde2064bd12e679c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6e:83:26:9d:be:f0:d9:97:a2:d4:f1:15:b7:
aa:60:1a:1b:28:05:7d:e6:f8:b4:24:62:5b:a5:81:
b2:69:e4:c2:34:f2:46:26:d9:e8:fc:7b:39:50:1b:
a4:95:e3:90:69:35:ca:86:f3:09:ab:69:fc:e7:06:
d6:ba:d9:b9:70:c3:4c:ea:6a:85:3f:38:fc:0e:f5:
02:aa:a5:f8:26:6c:e6:86:b4:db:e4:ea:21:e7:7e:
5c:55:d6:16:a6:d5:e0:aa:33:2b:28:73:b4:9f:59:
d6:50:ce:6c:72:41:a0:87:59:75:d3:61:c8:da:f2:
a7:5b:10:cb:d9:56:58:b3:55:ba:42:f1:27:ed:9b:
fc:96:0c:55:da:17:68:c2:4c:00:db:db:cb:c6:3c:
41:5f:22:56:1d:e8:8c:6d:1b:62:a4:f9:5b:00:7a:
dd:f4:8c:34:b1:db:00:68:31:58:1f:69:04:50:c8:
03:ee:5d:11:b6:ba:e9:a2:4f:a0:dd:4e:c0:31:01:
02:5a:ce:09:c9:0b:c2:c0:f5:c2:5d:00:73:26:9a:
a2:89:37:97:95:c1:2b:cb:70:19:37:66:c5:80:9f:
da:3e:11:b0:aa:66:bd:83:af:68:cd:36:9d:58:e6:
26:70:d8:6f:53:8e:15:25:e5:c3:78:34:3c:9d:14:
ab:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:D1:35:FA:27:AB:76:5A:17:F2:78:4D:DE:20:64:BD:12:E6:79:C9
X509v3 Authority Key Identifier:
keyid:EB:96:09:82:E8:2B:F9:E9:87:54:45:00:93:08:DE:7E:CB:D0:5C:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/65YJgugr-emHVEUAkwjefsvQXFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/3NE1-ierdloX8nhN3iBkvRLmeck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/65YJgugr-emHVEUAkwjefsvQXFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.5.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:49:2b:8e:70:aa:16:33:9c:09:58:f7:d5:e5:3a:66:57:29:
94:45:cf:a4:ba:39:c3:31:0b:20:1f:0c:62:79:d4:f8:94:91:
25:c6:9c:95:66:10:99:53:94:43:23:6e:26:4d:2d:a7:69:4d:
84:42:37:cc:3b:e7:be:c1:c2:dc:76:41:43:30:e1:e2:22:db:
23:c1:12:2c:bb:57:8e:fd:d0:4c:a4:35:df:f3:0f:db:01:c5:
49:ed:b7:be:c4:7e:ef:63:ea:b5:d0:fc:eb:85:a0:f0:c1:f9:
27:d1:90:82:42:89:38:15:13:b0:d2:d6:05:9e:06:58:32:44:
d3:4b:25:60:4c:15:dc:79:aa:e0:b4:a6:87:8a:b8:bf:04:0d:
51:b7:e1:bf:c9:4b:b8:9a:17:c3:c4:d0:ab:34:5c:d9:5b:73:
a2:39:88:f8:22:d5:0c:67:b9:43:8a:ba:1e:ef:e2:f5:aa:65:
bf:e2:03:b2:44:a1:f6:dd:7e:05:4c:83:21:18:f4:2d:f3:fb:
50:ad:21:74:68:f2:c4:8a:28:ba:14:66:3e:ed:9b:84:e8:e7:
4a:cf:be:65:8b:ed:5d:73:b5:48:41:17:46:ff:de:70:dd:92:
10:c7:be:0f:91:b7:45:fb:5b:2d:7e:66:48:1f:43:e9:d9:1f:
2e:88:ce:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:13:09 2026 by rpki-client