This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/eY4k3nVHNXhDpAbf9zD-eyh_Nvg.roa
File: eY4k3nVHNXhDpAbf9zD-eyh_Nvg.roa (raw, json)
Hash identifier: yBq3nhPr9ZGCP1KOMc5XIOBCBvNy7/PGtea/Nu+S5pA=
Subject key identifier: 79:8E:24:DE:75:47:35:78:43:A4:06:DF:F7:30:FE:7B:28:7F:36:F8
Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial: 019B7DCAE0BE2596B5B5AE847718D0A021F3
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/eY4k3nVHNXhDpAbf9zD-eyh_Nvg.roa
Signing time: Fri 02 Jan 2026 08:20:06 +0000
ROA not before: Fri 02 Jan 2026 08:20:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63023
IP address blocks: 87.254.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 07:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:ca:e0:be:25:96:b5:b5:ae:84:77:18:d0:a0:21:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Validity
Not Before: Jan 2 08:20:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=798e24de7547357843a406dff730fe7b287f36f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6c:ec:56:2b:eb:6b:fd:4d:9c:ac:e9:24:dc:
f1:e0:ed:2f:a9:91:49:45:20:29:c1:03:00:8f:68:
81:c9:56:91:cf:23:6c:b4:58:28:43:07:6b:e5:c3:
53:c0:67:c6:12:a9:e7:51:5c:75:65:de:cc:42:96:
46:73:31:bf:88:d9:22:35:49:fa:a7:07:24:8e:7a:
65:e5:ed:13:bd:a7:aa:cf:15:5a:91:0d:d4:c5:6c:
14:9c:8b:86:15:64:6b:33:5a:e0:67:a7:07:30:46:
e0:f3:48:48:8a:27:42:2f:98:13:62:fe:fd:92:9b:
9d:ae:a9:8d:17:43:68:38:67:82:78:06:0d:aa:1f:
9f:b0:cb:8c:26:49:d1:6b:82:88:75:9d:9c:4f:9f:
fe:08:c2:27:42:00:3e:1e:86:77:54:9f:c0:18:79:
da:43:ac:da:0b:c7:9e:22:8f:22:4b:36:65:1c:87:
d7:45:d5:18:57:a2:4c:c4:47:f4:57:5c:ab:4e:fc:
a6:83:f8:ae:12:e3:b1:0e:60:49:cc:ca:8c:ca:fb:
e2:55:24:39:3e:01:08:50:97:27:82:ec:c2:88:d7:
77:07:3e:c6:12:ee:02:5c:c8:ef:be:ff:45:d7:27:
51:8b:67:30:8d:49:9a:6b:dd:c1:23:cf:09:c1:93:
61:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:8E:24:DE:75:47:35:78:43:A4:06:DF:F7:30:FE:7B:28:7F:36:F8
X509v3 Authority Key Identifier:
keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/eY4k3nVHNXhDpAbf9zD-eyh_Nvg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.8.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:01:a7:87:44:75:54:7f:09:a8:a4:c5:3a:5f:81:d9:2d:61:
83:6f:b3:fd:60:73:a1:6a:61:47:a7:9c:69:8e:1b:97:6f:6a:
81:e3:c8:e4:d4:45:84:c5:e7:f9:26:20:ec:67:49:88:dc:21:
56:ad:60:5b:f2:62:da:43:b0:df:42:44:08:10:9d:ca:e3:c8:
7c:42:8e:19:f9:36:8a:06:dc:19:72:42:13:bc:8e:74:7a:ce:
4e:5e:3d:ff:34:91:d7:53:09:27:7a:99:e2:41:cc:30:4e:3c:
cd:a7:49:cc:21:8e:a4:6d:1a:39:36:3c:e9:ec:b8:85:8d:76:
7e:29:16:93:ac:dd:8e:a4:dc:f1:cf:51:1b:5a:40:33:9b:e1:
d6:9a:7e:ac:20:6a:b2:e0:f3:55:19:be:1e:fb:04:a1:ad:33:
0b:f8:e8:d0:c6:1d:fb:69:e9:d2:fb:6b:93:5a:c3:a0:be:83:
8d:63:5f:61:27:0a:84:94:38:4b:8f:94:29:6b:57:9d:3d:8e:
e5:00:0b:c3:b8:65:7b:ed:3d:9f:3b:8a:7f:cf:52:72:e4:88:
28:5a:16:28:2f:60:15:a6:4a:40:b8:10:83:08:44:b5:3a:9f:
a1:95:b3:1b:b9:3c:dc:b2:ec:88:3b:4a:e0:8a:e6:4f:2f:8b:
a4:de:8a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 18:04:58 2026 by rpki-client