This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/h8VusyvFygMniL7AA6ANP70RnB8.roa
File: h8VusyvFygMniL7AA6ANP70RnB8.roa (raw, json)
Hash identifier: s7z2PciT+JcsK78pungkQ14zfBEzCrpixiOQvhEcI4g=
Subject key identifier: 87:C5:6E:B3:2B:C5:CA:03:27:88:BE:C0:03:A0:0D:3F:BD:11:9C:1F
Certificate issuer: /CN=eb7bbbfef59509e7263986f780589ab1e7998423
Certificate serial: 019B78345161961E0B36276157D9BF4B9B14
Authority key identifier: EB:7B:BB:FE:F5:95:09:E7:26:39:86:F7:80:58:9A:B1:E7:99:84:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/63u7_vWVCecmOYb3gFiaseeZhCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/h8VusyvFygMniL7AA6ANP70RnB8.roa
Signing time: Thu 01 Jan 2026 06:17:33 +0000
ROA not before: Thu 01 Jan 2026 06:17:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12831
IP address blocks: 89.191.160.0/20 maxlen: 20
89.191.176.0/20 maxlen: 20
213.192.64.0/20 maxlen: 20
213.192.80.0/20 maxlen: 20
213.192.96.0/20 maxlen: 20
213.192.112.0/20 maxlen: 20
2001:4070:8000::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/63u7_vWVCecmOYb3gFiaseeZhCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/63u7_vWVCecmOYb3gFiaseeZhCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/63u7_vWVCecmOYb3gFiaseeZhCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:34:51:61:96:1e:0b:36:27:61:57:d9:bf:4b:9b:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb7bbbfef59509e7263986f780589ab1e7998423
Validity
Not Before: Jan 1 06:17:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=87c56eb32bc5ca032788bec003a00d3fbd119c1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:eb:c9:97:e3:7e:79:38:c5:00:5f:ff:36:39:
7c:e8:02:39:e4:4c:ec:db:f6:99:ea:5f:70:2b:2a:
b0:cc:0b:e0:f8:a5:af:8a:81:86:cc:51:da:34:de:
69:74:05:d8:04:a4:97:b0:81:2b:f0:e5:bc:41:29:
66:ec:25:a6:3a:c9:84:ce:ac:64:5a:68:ae:92:ec:
e7:d8:65:22:bc:43:bd:62:b1:da:66:26:d0:1e:13:
78:8c:92:dc:40:f8:f3:5b:04:37:33:b2:22:87:ed:
ba:b5:ee:bb:54:a9:31:48:df:e7:f8:1d:8e:f9:8e:
3b:3b:a0:90:5a:0c:c0:11:54:17:71:c7:83:29:73:
a5:89:32:1e:38:02:91:1e:6a:b7:77:cd:74:2e:92:
9d:89:c1:46:a6:69:bf:2c:c3:c2:38:76:4b:83:6a:
40:59:92:8f:55:f1:73:7f:ea:56:91:9b:d9:fb:9d:
59:ac:ad:d2:22:da:2c:bb:9d:f6:98:8d:53:25:02:
6c:87:83:1e:a9:be:06:c4:89:85:ba:e5:b8:69:6f:
a6:cc:81:26:19:db:0d:03:97:2b:86:98:1f:0d:f4:
20:0a:bd:c8:e9:04:9c:f9:4c:1a:a8:25:a6:23:be:
23:00:82:9b:a5:21:5d:b9:96:11:fc:36:4e:a3:11:
0f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:C5:6E:B3:2B:C5:CA:03:27:88:BE:C0:03:A0:0D:3F:BD:11:9C:1F
X509v3 Authority Key Identifier:
keyid:EB:7B:BB:FE:F5:95:09:E7:26:39:86:F7:80:58:9A:B1:E7:99:84:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63u7_vWVCecmOYb3gFiaseeZhCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/h8VusyvFygMniL7AA6ANP70RnB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/63u7_vWVCecmOYb3gFiaseeZhCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.191.160.0/19
213.192.64.0/18
IPv6:
2001:4070:8000::/33
Signature Algorithm: sha256WithRSAEncryption
41:93:6b:95:d1:c5:d2:2e:6b:48:84:ea:de:65:b5:79:6d:2c:
87:88:a3:33:f2:50:f0:f0:4a:05:14:99:16:9f:d3:a2:51:3f:
3c:0d:83:ad:78:2c:a9:b0:70:50:a0:cb:98:62:fa:88:13:65:
78:db:0d:3a:c8:2a:6f:9a:ee:cb:7e:70:d5:b6:f7:d1:8c:d7:
8e:7f:bc:c2:9a:b5:89:1a:5e:50:19:01:ca:5f:db:30:97:14:
c3:4e:28:c3:78:04:91:9c:f6:3e:fa:76:37:0e:ab:0d:2b:b4:
9c:6c:34:64:5e:69:83:9c:59:56:0f:99:ac:85:c3:8c:4f:42:
b4:58:a6:c2:22:18:61:61:c7:1a:6c:f0:ad:5a:b4:f6:59:d2:
0d:f7:37:66:5a:0c:c7:cd:2e:0e:f1:78:93:58:64:89:b7:68:
8f:b1:03:c7:cb:11:44:6c:eb:3e:2d:a3:73:0d:cc:62:a7:bf:
eb:96:f4:d2:b4:4a:59:ed:8c:ec:50:95:92:f6:87:08:e0:69:
63:71:5b:72:90:ea:45:d7:28:08:ab:1a:75:cd:4a:83:ea:8e:
fe:ed:4b:28:42:3f:17:46:68:0c:00:d4:a1:18:e2:87:06:5b:
8e:c7:ef:29:2c:e3:cb:5a:9e:8b:df:45:4c:0c:96:a0:bb:dd:
1a:11:c1:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:36:46 2026 by rpki-client