This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/bc2f53-8e75-4e0e-bfd4-29b9bf53a57f/1/BerANeusZYuUv5h1O8bjEQcko68.roa
File: BerANeusZYuUv5h1O8bjEQcko68.roa (raw, json)
Hash identifier: YSh58W/wodSbxUdvNx3hzcm1gIq/y+oIFpaq31oMDOs=
Subject key identifier: 05:EA:C0:35:EB:AC:65:8B:94:BF:98:75:3B:C6:E3:11:07:24:A3:AF
Certificate issuer: /CN=e0e53bb30d07520f857ae656f7ad813f22efd152
Certificate serial: 019B0CBA1937D7CF12C46F69178ADB6D9D90
Authority key identifier: E0:E5:3B:B3:0D:07:52:0F:85:7A:E6:56:F7:AD:81:3F:22:EF:D1:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4OU7sw0HUg-FeuZW962BPyLv0VI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/bc2f53-8e75-4e0e-bfd4-29b9bf53a57f/1/BerANeusZYuUv5h1O8bjEQcko68.roa
Signing time: Thu 11 Dec 2025 09:24:41 +0000
ROA not before: Thu 11 Dec 2025 09:24:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203914
IP address blocks: 158.94.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/bc2f53-8e75-4e0e-bfd4-29b9bf53a57f/1/4OU7sw0HUg-FeuZW962BPyLv0VI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/bc2f53-8e75-4e0e-bfd4-29b9bf53a57f/1/4OU7sw0HUg-FeuZW962BPyLv0VI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4OU7sw0HUg-FeuZW962BPyLv0VI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 15:46:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:0c:ba:19:37:d7:cf:12:c4:6f:69:17:8a:db:6d:9d:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0e53bb30d07520f857ae656f7ad813f22efd152
Validity
Not Before: Dec 11 09:24:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=05eac035ebac658b94bf98753bc6e3110724a3af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:79:5b:42:e1:24:b4:34:24:47:6d:be:dc:b2:
4a:6a:56:ff:61:a4:0c:61:38:ca:7a:3d:1a:27:56:
0a:62:89:11:e5:e6:e9:2f:62:09:33:6d:7c:78:4b:
58:ca:6a:87:06:ef:4a:82:17:dd:38:da:bf:86:74:
be:51:70:03:6b:f7:5d:bb:eb:61:29:2c:99:9e:24:
6f:31:4b:5e:d4:0a:6f:b6:9d:89:a3:d5:65:b3:f0:
c3:21:9e:3f:5d:cf:17:40:1a:d2:74:fc:9a:7c:8c:
2b:a8:c0:b8:ca:13:6e:48:ac:32:56:ae:b3:d7:7f:
f9:0b:06:f2:a6:29:f8:83:c0:1b:71:c4:80:8d:63:
8e:17:b9:d5:a7:23:10:e2:ce:8f:bd:70:83:01:5c:
54:28:9c:c3:f7:59:9b:20:8b:d9:a9:c3:7a:af:0b:
c2:35:de:78:b4:2a:41:89:35:c4:c9:37:0a:5a:ec:
42:f7:d4:60:80:4e:cc:72:2a:ad:8b:2a:6a:7c:9a:
79:ae:65:98:3d:a2:00:85:a3:84:7f:dc:ea:63:2a:
b9:3d:bf:81:cc:93:23:8c:63:c0:e0:50:2b:b7:d3:
b8:a1:c8:31:3c:f3:a5:7f:a9:2b:12:b7:96:4c:7d:
2a:82:85:09:a6:d8:e7:d6:d5:24:c9:70:dc:e9:fc:
12:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:EA:C0:35:EB:AC:65:8B:94:BF:98:75:3B:C6:E3:11:07:24:A3:AF
X509v3 Authority Key Identifier:
keyid:E0:E5:3B:B3:0D:07:52:0F:85:7A:E6:56:F7:AD:81:3F:22:EF:D1:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4OU7sw0HUg-FeuZW962BPyLv0VI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/bc2f53-8e75-4e0e-bfd4-29b9bf53a57f/1/BerANeusZYuUv5h1O8bjEQcko68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/bc2f53-8e75-4e0e-bfd4-29b9bf53a57f/1/4OU7sw0HUg-FeuZW962BPyLv0VI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.94.183.0/24
Signature Algorithm: sha256WithRSAEncryption
55:60:46:4d:d9:25:0b:91:f7:de:30:06:fa:75:ae:41:4b:67:
3a:eb:1d:ee:54:37:d8:de:64:7b:36:dc:50:51:ab:1a:e3:34:
94:cd:a0:8d:56:16:0f:8e:65:b7:b7:03:57:2b:65:ec:74:a9:
e7:f4:c0:21:8f:87:67:f7:ef:e6:f0:79:24:17:05:ec:12:ac:
f1:46:1a:2b:2d:b4:36:46:fa:dc:dd:c0:7f:65:d6:e5:90:3a:
5e:c6:f5:3d:11:f3:83:25:91:2d:e4:33:97:b5:ba:f9:73:de:
30:6f:68:98:7d:61:07:c3:40:80:07:83:57:87:14:01:e0:93:
c9:0e:f9:7f:8a:e4:61:c7:d9:81:4a:81:72:5f:4f:57:1b:ae:
94:19:32:8c:6a:1f:13:74:fa:8a:13:83:8c:05:9a:8b:95:de:
ca:81:76:91:f0:37:3a:36:c7:eb:74:75:c6:ee:42:4c:26:23:
de:c6:6a:02:ef:b8:4f:41:ce:a1:e8:bd:ad:f8:08:33:7c:b5:
f9:47:b2:41:1a:86:e1:c8:68:75:b4:59:c1:f9:ef:24:40:11:
0e:17:56:e8:0e:72:36:d5:17:bc:17:81:6b:89:b5:6a:9b:a8:
05:e6:0c:4f:3b:d7:62:ca:2e:13:4f:f6:ac:5f:1c:26:8f:51:
7f:a7:d3:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 23:36:00 2025 by rpki-client