This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/1014c6-dfd7-43cf-830a-30ab064bb30b/1/74ND96wfWQblEmEn_XmLMDJc8Ms.roa
File: 74ND96wfWQblEmEn_XmLMDJc8Ms.roa (raw, json)
Hash identifier: fBrsi159ZXwbpr8tOXDtntruPENEKrwv65q61vBIq4U=
Subject key identifier: EF:83:43:F7:AC:1F:59:06:E5:12:61:27:FD:79:8B:30:32:5C:F0:CB
Certificate issuer: /CN=eb8253477ef40787a4874ab315234470a7814731
Certificate serial: 019BDB733E801B21B14CCBBADFDF849D4751
Authority key identifier: EB:82:53:47:7E:F4:07:87:A4:87:4A:B3:15:23:44:70:A7:81:47:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/64JTR370B4ekh0qzFSNEcKeBRzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/1014c6-dfd7-43cf-830a-30ab064bb30b/1/74ND96wfWQblEmEn_XmLMDJc8Ms.roa
Signing time: Tue 20 Jan 2026 12:48:41 +0000
ROA not before: Tue 20 Jan 2026 12:48:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29355
IP address blocks: 185.134.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/1014c6-dfd7-43cf-830a-30ab064bb30b/1/64JTR370B4ekh0qzFSNEcKeBRzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/1014c6-dfd7-43cf-830a-30ab064bb30b/1/64JTR370B4ekh0qzFSNEcKeBRzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/64JTR370B4ekh0qzFSNEcKeBRzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Feb 2026 06:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:db:73:3e:80:1b:21:b1:4c:cb:ba:df:df:84:9d:47:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb8253477ef40787a4874ab315234470a7814731
Validity
Not Before: Jan 20 12:48:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ef8343f7ac1f5906e5126127fd798b30325cf0cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:30:6f:98:55:78:9e:c3:7d:2d:04:ed:c3:51:
45:fe:1d:92:96:d7:ba:fc:8c:78:5a:c4:22:d9:ab:
f7:ae:c4:e8:0a:2b:2c:cc:a0:b9:e1:59:18:91:a5:
1b:6d:76:15:95:2c:da:9c:88:94:e4:82:57:8e:e3:
9b:27:d0:ee:97:d5:ea:44:08:ad:b6:f1:f6:7e:4d:
10:93:84:ca:b1:17:d7:2f:f5:0a:9b:82:8c:cb:80:
37:4e:40:c1:7c:89:5f:40:48:38:25:8d:5a:60:96:
a5:70:90:ad:40:38:5a:93:eb:85:ff:03:6b:7b:e6:
26:6c:27:5e:dd:c2:50:88:37:8d:3c:b9:74:d1:86:
49:06:38:e6:9b:00:ce:d1:62:7f:da:b4:0d:a2:2c:
ce:58:4b:c7:8a:6d:12:65:a3:a2:8b:4e:d8:1e:1f:
27:10:78:67:ca:d2:81:6d:90:73:79:71:d1:48:15:
fa:c6:65:5f:8f:31:08:c5:73:0b:5d:d2:f3:ea:50:
6b:44:e6:5d:7e:c9:f8:14:d6:20:a9:ee:ea:7f:bd:
f8:e9:f4:b7:f6:36:5c:a4:92:24:b6:93:9f:be:97:
7c:ef:eb:5a:31:2f:1b:d8:a5:a0:cc:7c:d4:40:3e:
9e:cb:d0:99:13:b5:86:7c:3a:9c:0c:32:33:fe:9f:
39:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:83:43:F7:AC:1F:59:06:E5:12:61:27:FD:79:8B:30:32:5C:F0:CB
X509v3 Authority Key Identifier:
keyid:EB:82:53:47:7E:F4:07:87:A4:87:4A:B3:15:23:44:70:A7:81:47:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/64JTR370B4ekh0qzFSNEcKeBRzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/1014c6-dfd7-43cf-830a-30ab064bb30b/1/74ND96wfWQblEmEn_XmLMDJc8Ms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/1014c6-dfd7-43cf-830a-30ab064bb30b/1/64JTR370B4ekh0qzFSNEcKeBRzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.134.237.0/24
Signature Algorithm: sha256WithRSAEncryption
85:77:57:1a:e4:83:d1:32:fa:a8:0c:e4:70:28:45:32:7d:af:
ec:f3:52:3c:c4:a1:5d:74:4d:45:a7:6d:7f:d5:b1:00:25:67:
f6:74:0e:61:07:43:27:5a:a1:42:32:7d:5a:b9:96:77:03:94:
4a:a5:9e:0c:12:2a:5e:7c:f2:1a:bf:a5:5a:14:a2:bc:49:f5:
35:a1:0e:df:0f:90:8e:f4:81:3c:dd:f8:05:8e:c8:46:32:95:
b1:14:fa:db:0e:ff:d7:9b:be:33:69:3c:64:1d:c3:99:dc:e3:
6d:40:65:2f:9a:0b:df:e8:51:57:0d:0b:4f:74:ec:fa:f6:cd:
59:02:66:4f:6a:a0:2b:ca:e8:5e:8d:51:ff:ce:ab:8f:6b:53:
9c:b2:ee:48:5f:61:54:93:3c:b1:50:42:b5:0b:fa:c3:85:6f:
4e:05:00:f4:d0:a3:1e:d7:0e:66:18:c9:e9:c4:2e:01:34:21:
0c:5d:1e:82:16:65:13:88:3e:6d:44:a5:ee:e7:23:c1:70:6f:
9f:10:45:71:86:3c:de:f7:88:5d:d7:76:81:55:c5:10:08:12:
24:b5:f0:b1:5a:4a:e3:32:92:7e:ae:02:a1:47:c7:a6:13:c9:
90:c0:5c:be:78:8d:07:d5:4e:f5:eb:98:af:75:c5:b6:7b:8a:
a9:31:23:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 12:41:10 2026 by rpki-client