This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/59681b-ef84-4cfd-80f4-b653a6c414a0/1/73qa9Ge1geu-Qx2QYpdH4DGLUcQ.roa
File: 73qa9Ge1geu-Qx2QYpdH4DGLUcQ.roa (raw, json)
Hash identifier: bRIojSaK0Bq+m3vmKKD1uT4o7T46KaQyR7+pwf57yb8=
Subject key identifier: EF:7A:9A:F4:67:B5:81:EB:BE:43:1D:90:62:97:47:E0:31:8B:51:C4
Certificate issuer: /CN=125bb4f41fa8a9912a0c356ccc274c75332ab244
Certificate serial: 019B7EA6C9351D1496DB7C1738CBA6905A9E
Authority key identifier: 12:5B:B4:F4:1F:A8:A9:91:2A:0C:35:6C:CC:27:4C:75:33:2A:B2:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Elu09B-oqZEqDDVszCdMdTMqskQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/59681b-ef84-4cfd-80f4-b653a6c414a0/1/73qa9Ge1geu-Qx2QYpdH4DGLUcQ.roa
Signing time: Fri 02 Jan 2026 12:20:18 +0000
ROA not before: Fri 02 Jan 2026 12:20:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 24978
IP address blocks: 185.5.14.0/23 maxlen: 23
2a02:c740::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/59681b-ef84-4cfd-80f4-b653a6c414a0/1/Elu09B-oqZEqDDVszCdMdTMqskQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/59681b-ef84-4cfd-80f4-b653a6c414a0/1/Elu09B-oqZEqDDVszCdMdTMqskQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Elu09B-oqZEqDDVszCdMdTMqskQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:a6:c9:35:1d:14:96:db:7c:17:38:cb:a6:90:5a:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=125bb4f41fa8a9912a0c356ccc274c75332ab244
Validity
Not Before: Jan 2 12:20:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ef7a9af467b581ebbe431d90629747e0318b51c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c7:de:50:bd:d9:5c:bf:4d:7c:00:39:cf:0a:
bd:e3:f5:4e:9b:8f:b8:62:4f:46:5b:70:a4:49:3c:
64:db:07:a6:d8:6e:5d:7d:d3:9f:0e:5d:2e:1a:9a:
4a:45:34:36:6d:5d:6d:bd:ce:8b:f2:44:0a:dd:9f:
a5:26:6e:12:b5:65:57:39:cf:18:dd:a1:1c:d8:6b:
17:37:f7:10:06:5d:9b:6e:1d:ce:ef:4c:91:47:39:
db:fd:61:63:83:10:69:8e:fc:99:85:25:63:47:43:
a8:e2:c8:c8:f1:19:85:ca:79:bc:00:84:6f:69:87:
fa:ea:40:3c:eb:ef:9a:35:de:7c:1a:77:c7:ca:14:
bc:cd:2a:99:9c:f3:6c:48:e7:c5:63:c8:67:63:95:
94:97:b3:5a:94:dc:9d:a0:7f:ad:7c:b7:18:6b:a5:
64:c9:75:1c:36:c0:f4:58:90:7e:43:7c:c5:58:c3:
61:4e:72:cd:1b:f1:61:6c:fb:db:a2:1d:76:fe:92:
a1:d6:66:c7:e9:78:4a:85:87:0a:a2:6d:8d:a9:cb:
0a:36:eb:77:b7:b0:cc:d1:ca:ef:a4:db:d5:06:1e:
fb:cc:f4:1b:15:5c:65:bc:6f:fc:69:7c:72:db:74:
f4:be:95:c0:7f:89:42:5b:ab:e2:d2:cb:90:6c:23:
ca:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:7A:9A:F4:67:B5:81:EB:BE:43:1D:90:62:97:47:E0:31:8B:51:C4
X509v3 Authority Key Identifier:
keyid:12:5B:B4:F4:1F:A8:A9:91:2A:0C:35:6C:CC:27:4C:75:33:2A:B2:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Elu09B-oqZEqDDVszCdMdTMqskQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/59681b-ef84-4cfd-80f4-b653a6c414a0/1/73qa9Ge1geu-Qx2QYpdH4DGLUcQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/59681b-ef84-4cfd-80f4-b653a6c414a0/1/Elu09B-oqZEqDDVszCdMdTMqskQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.5.14.0/23
IPv6:
2a02:c740::/30
Signature Algorithm: sha256WithRSAEncryption
83:81:52:70:ea:52:26:f9:8b:77:f8:5b:0d:aa:c4:dd:55:85:
1a:ae:f4:1d:ef:f8:a1:9b:5d:76:2c:b4:47:dc:30:4e:32:fa:
0a:ee:0b:e5:78:fa:d9:40:77:ae:01:ca:e1:a4:0f:0f:f2:a1:
1d:00:c1:fd:d9:9f:06:23:99:49:79:04:ca:90:f5:27:ad:4a:
d9:71:e3:a9:02:59:4f:13:80:42:ac:bf:a0:90:70:98:f2:a8:
34:cf:90:7c:63:62:69:b0:99:8e:d0:24:5e:33:5d:b7:47:85:
87:17:8c:eb:d0:5b:07:68:73:3c:49:fa:bb:3b:ac:95:63:30:
e9:6d:69:4a:a8:ae:23:aa:85:48:7e:63:28:e5:f6:5a:1a:c9:
a7:99:de:53:c6:70:4e:88:19:f9:db:f6:e0:21:8a:24:94:ec:
a0:17:f1:54:ca:0a:a5:98:b0:73:60:83:57:6b:ec:2c:5e:94:
b0:a2:f9:0c:6a:54:94:63:7c:bf:01:d8:12:9c:9f:dc:c3:1c:
77:5a:f8:ec:91:a9:b8:19:8f:a9:c9:5e:40:3a:a6:4b:ca:3a:
fe:d5:88:0b:60:1f:dc:b4:51:4e:c2:74:7d:4f:12:c6:2f:39:
6c:c1:10:fd:50:ba:30:73:75:61:b1:ef:5c:a3:2b:0b:0e:89:
6e:23:d1:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:59:23 2026 by rpki-client