This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/e0bzE7I798JyP17GLDFXPRJiVH0.roa
File: e0bzE7I798JyP17GLDFXPRJiVH0.roa (raw, json)
Hash identifier: Yhotc+UtqlhBqu0SRVQeqH+Q/Mp28/ftrNlXHzifKKU=
Subject key identifier: 7B:46:F3:13:B2:3B:F7:C2:72:3F:5E:C6:2C:31:57:3D:12:62:54:7D
Certificate issuer: /CN=cb6af52f7824553af3b6cbaa73af3a178c1c5913
Certificate serial: 019B79ECC2C90251185FF8DEBF2B68ACC6E6
Authority key identifier: CB:6A:F5:2F:78:24:55:3A:F3:B6:CB:AA:73:AF:3A:17:8C:1C:59:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y2r1L3gkVTrztsuqc686F4wcWRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/e0bzE7I798JyP17GLDFXPRJiVH0.roa
Signing time: Thu 01 Jan 2026 14:18:38 +0000
ROA not before: Thu 01 Jan 2026 14:18:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210550
IP address blocks: 195.178.12.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/y2r1L3gkVTrztsuqc686F4wcWRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 14:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:ec:c2:c9:02:51:18:5f:f8:de:bf:2b:68:ac:c6:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb6af52f7824553af3b6cbaa73af3a178c1c5913
Validity
Not Before: Jan 1 14:18:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7b46f313b23bf7c2723f5ec62c31573d1262547d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:06:4c:a1:df:c0:01:fe:76:e4:8e:20:b6:46:
2e:fd:96:ca:4d:d5:02:51:58:22:96:05:d5:7f:26:
77:b4:7b:7c:f8:f8:cb:04:90:5b:a7:e6:fe:f3:a0:
85:65:cc:50:8f:43:c0:18:87:a0:88:7f:1a:fe:68:
84:d3:8a:55:22:3f:3a:35:80:91:e8:35:40:a7:35:
e4:f5:ca:4e:59:a8:86:f0:9c:dd:ee:80:0f:3d:5f:
11:cf:3f:9e:d1:3a:aa:72:e9:1a:a2:17:a0:10:82:
ed:87:c1:77:a1:c5:5d:08:13:30:06:ee:01:ab:f4:
e5:eb:3c:61:ed:17:0b:0c:49:80:46:0b:7a:25:d0:
9b:c1:d7:e1:a5:05:dd:98:b9:86:97:d1:87:a3:9f:
7d:9d:77:04:17:10:14:66:ac:f5:cc:c9:9f:90:90:
64:5d:54:a7:02:04:77:4c:13:61:b1:b7:8c:43:8b:
71:bb:d5:33:71:ca:3f:91:02:47:d6:33:8f:36:7e:
6a:0e:38:68:5a:f3:a5:26:60:24:cb:b1:41:ca:31:
ba:55:ed:8c:46:bc:5e:94:3b:b5:61:c1:f6:25:a3:
0d:1c:c8:85:06:40:f1:65:58:4b:3c:21:30:0c:bf:
c5:f3:54:10:44:3d:77:65:cb:7e:26:20:ad:e7:3a:
b9:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:46:F3:13:B2:3B:F7:C2:72:3F:5E:C6:2C:31:57:3D:12:62:54:7D
X509v3 Authority Key Identifier:
keyid:CB:6A:F5:2F:78:24:55:3A:F3:B6:CB:AA:73:AF:3A:17:8C:1C:59:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2r1L3gkVTrztsuqc686F4wcWRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/e0bzE7I798JyP17GLDFXPRJiVH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.178.12.0/23
Signature Algorithm: sha256WithRSAEncryption
50:c6:5d:03:a6:12:76:51:17:55:c4:80:c8:12:e2:51:8d:f9:
e2:ec:0f:0b:bd:4f:cc:84:2d:a4:92:06:00:43:12:2b:57:fd:
64:2e:90:a1:7b:d9:7c:de:34:e6:3e:4d:c0:f3:0f:b6:43:88:
d9:3e:3e:93:bf:44:81:34:58:a8:f2:4f:f2:72:93:d1:66:a4:
fa:54:06:05:a1:36:a1:d0:58:72:b5:d6:5b:a0:6a:ef:25:58:
c3:93:c9:9c:a5:44:9f:96:99:2e:99:a4:1d:af:bc:50:85:3d:
b1:e0:3f:1f:ca:21:25:ff:0e:9b:00:f2:21:72:99:c6:23:69:
64:3b:2d:0a:11:b9:d4:bb:4b:18:c6:6e:c5:6b:b6:a8:31:55:
e3:ac:57:39:a6:65:86:cd:bf:f4:19:f3:b0:d1:58:68:20:62:
fb:83:7f:5f:c0:8d:14:39:b1:77:89:a8:aa:71:97:45:f7:90:
d4:5b:fc:c9:1e:a6:f9:de:40:d3:82:12:2b:6a:ca:ee:0e:c8:
1d:50:10:c3:81:44:4d:94:e5:38:18:97:37:6e:0d:04:83:c1:
97:b6:63:cc:0d:ac:3c:6b:ac:2e:82:87:5c:e0:86:26:31:e4:
b0:ad:24:d2:04:7b:c0:3c:1e:85:77:75:ef:55:f5:48:01:cc:
15:39:35:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 23:22:05 2026 by rpki-client