This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/E2swBCairndKm6EvT3G5x-gzRVU.roa
File: E2swBCairndKm6EvT3G5x-gzRVU.roa (raw, json)
Hash identifier: KEXbKpb965vgAy4xo2S9ZVcAB8h+ZBvk0E2PLJlZXto=
Subject key identifier: 13:6B:30:04:26:A2:AE:77:4A:9B:A1:2F:4F:71:B9:C7:E8:33:45:55
Certificate issuer: /CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Certificate serial: 019AA097D13F43F8C3BB0E31326EB0C3A3A7
Authority key identifier: 87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/E2swBCairndKm6EvT3G5x-gzRVU.roa
Signing time: Thu 20 Nov 2025 09:28:15 +0000
ROA not before: Thu 20 Nov 2025 09:28:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 85.237.92.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Dec 2025 21:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:a0:97:d1:3f:43:f8:c3:bb:0e:31:32:6e:b0:c3:a3:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Validity
Not Before: Nov 20 09:28:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=136b300426a2ae774a9ba12f4f71b9c7e8334555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:38:bc:cd:53:12:99:75:64:29:65:17:61:96:
57:29:71:5a:7f:70:34:14:b7:51:83:41:60:dd:4d:
53:d1:02:af:f2:02:d0:ec:77:4d:eb:6d:03:1a:8d:
d1:6e:a7:63:c8:10:22:ec:2b:80:8f:77:2b:dd:20:
a1:0f:fa:f6:26:68:5c:5b:70:d2:0a:be:fe:53:4f:
3f:da:fb:e6:e7:dd:53:ba:54:1e:55:a1:7f:63:0e:
88:83:6f:aa:16:ef:5c:3c:99:3e:2e:f1:e7:32:51:
fb:60:64:7a:11:33:20:09:6d:80:c1:b6:f8:65:6a:
52:14:14:c9:dd:2a:69:33:72:63:5e:b5:ac:f7:b3:
bc:30:9e:75:b2:3d:e5:9d:0d:2c:63:e0:eb:21:0d:
2a:b8:f7:16:ca:a9:0b:0c:24:1c:cb:04:07:0e:7c:
32:36:df:7d:45:91:fc:2b:41:f3:47:c8:54:7c:75:
02:9a:9e:5b:6f:f3:89:a0:ad:80:f7:e5:fe:01:78:
f9:37:1c:ba:b7:39:78:57:a0:84:c9:e9:3a:74:e3:
ad:a7:d6:fd:4b:82:ed:eb:63:ba:dc:2b:2e:07:de:
27:0b:05:66:40:31:14:29:1e:f7:e0:5b:04:9e:8e:
33:95:3f:89:b0:60:2f:16:55:df:9e:4f:9c:fa:e8:
ef:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:6B:30:04:26:A2:AE:77:4A:9B:A1:2F:4F:71:B9:C7:E8:33:45:55
X509v3 Authority Key Identifier:
keyid:87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/E2swBCairndKm6EvT3G5x-gzRVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.92.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:d7:a2:95:ec:c2:17:9f:88:bf:ba:31:21:70:fb:7f:79:66:
51:98:7a:22:d6:fb:a0:54:6a:58:92:e7:2e:9d:47:0d:a9:b2:
19:bd:d4:2d:f0:40:69:05:56:45:cb:03:da:c3:f7:0c:60:07:
dc:52:70:65:65:c9:be:28:76:77:90:49:20:cf:5c:8e:35:ab:
95:4e:5f:76:9c:44:86:69:0d:65:b6:a8:63:fd:bb:ca:99:76:
e6:b7:50:01:44:37:95:5b:53:a1:97:e6:04:ea:af:8f:7b:5f:
78:ea:e1:e0:81:44:6b:58:41:ad:d3:db:d7:24:17:5e:4f:51:
24:e9:61:36:b8:4f:f5:5f:34:ec:0b:9d:3b:46:5e:9e:a3:90:
0e:10:da:c6:6c:78:c7:88:e5:c6:46:36:3e:db:40:64:28:43:
fe:3d:2f:34:26:f7:09:99:7e:61:b4:dd:e7:3d:85:05:2b:cb:
71:e0:75:9b:5a:a5:97:ed:67:6c:f0:1b:83:ab:de:78:78:51:
7a:c5:44:f7:9d:17:97:ca:71:78:84:60:36:67:16:9f:0f:7c:
4c:91:9f:b7:48:ab:ac:32:b5:68:82:05:16:c5:d2:10:fe:c6:
8f:82:44:61:e5:f0:ab:8f:7d:30:03:9c:bc:b4:fd:eb:10:61:
5b:72:e4:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 4 04:21:26 2025 by rpki-client