This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/1014c6-dfd7-43cf-830a-30ab064bb30b/1/c0G-pi-MHoUVy10JBLyR5eJ9LDE.roa
File: c0G-pi-MHoUVy10JBLyR5eJ9LDE.roa (raw, json)
Hash identifier: DZTMStTrvuwcy5k73Rjjqjnb39nj0Wc3hKlmSRtn5ko=
Subject key identifier: 73:41:BE:A6:2F:8C:1E:85:15:CB:5D:09:04:BC:91:E5:E2:7D:2C:31
Certificate issuer: /CN=eb8253477ef40787a4874ab315234470a7814731
Certificate serial: 019C227FDA7E8C4A86664748C09BB4FDAEF3
Authority key identifier: EB:82:53:47:7E:F4:07:87:A4:87:4A:B3:15:23:44:70:A7:81:47:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/64JTR370B4ekh0qzFSNEcKeBRzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/1014c6-dfd7-43cf-830a-30ab064bb30b/1/c0G-pi-MHoUVy10JBLyR5eJ9LDE.roa
Signing time: Tue 03 Feb 2026 07:55:30 +0000
ROA not before: Tue 03 Feb 2026 07:55:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29355
IP address blocks: 185.134.236.0/22 maxlen: 22
185.134.236.0/24 maxlen: 24
185.134.237.0/24 maxlen: 24
185.134.238.0/24 maxlen: 24
185.134.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/1014c6-dfd7-43cf-830a-30ab064bb30b/1/64JTR370B4ekh0qzFSNEcKeBRzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/1014c6-dfd7-43cf-830a-30ab064bb30b/1/64JTR370B4ekh0qzFSNEcKeBRzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/64JTR370B4ekh0qzFSNEcKeBRzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:22:7f:da:7e:8c:4a:86:66:47:48:c0:9b:b4:fd:ae:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb8253477ef40787a4874ab315234470a7814731
Validity
Not Before: Feb 3 07:55:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7341bea62f8c1e8515cb5d0904bc91e5e27d2c31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:fe:a0:3c:e3:16:b3:46:fe:24:19:a5:d6:38:
c6:e2:7c:8e:17:26:65:00:4a:4e:35:40:ef:f5:b4:
24:4a:db:37:ec:6e:d5:37:9c:23:49:4c:b3:02:3a:
8a:aa:9d:66:aa:7c:65:8b:5f:fb:ae:be:d6:f4:ac:
1d:c0:02:60:64:f5:1b:2e:f1:4b:5b:d2:c1:9e:91:
d1:8f:5d:5d:dd:84:a3:7e:fb:3b:89:eb:c8:c9:20:
10:6f:53:27:37:da:3b:2f:4c:b6:96:e1:1c:1b:13:
d8:0f:88:fa:bd:0d:bd:da:27:64:43:54:b4:5c:f0:
55:7c:a2:76:67:b9:41:8a:09:3b:e4:43:1c:1d:69:
4a:1e:21:bb:18:ef:21:64:d9:d9:f4:4f:d2:5e:a5:
fb:37:32:c5:1d:d6:2a:b6:82:40:6b:ff:69:83:b6:
a2:7e:52:68:37:72:b2:b9:37:5f:49:13:7a:8d:c4:
f8:58:6e:25:a9:40:b4:15:f6:68:d9:e3:78:81:51:
e7:77:a4:db:2c:fc:29:70:8c:a4:30:5a:74:00:dc:
f4:04:08:42:e9:98:51:94:b1:ad:79:36:3b:b4:a6:
69:de:15:ab:dc:3e:9d:3c:c3:86:81:55:04:53:82:
c8:57:99:82:7f:cd:84:f9:18:57:c2:6c:23:7d:f0:
ac:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:41:BE:A6:2F:8C:1E:85:15:CB:5D:09:04:BC:91:E5:E2:7D:2C:31
X509v3 Authority Key Identifier:
keyid:EB:82:53:47:7E:F4:07:87:A4:87:4A:B3:15:23:44:70:A7:81:47:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/64JTR370B4ekh0qzFSNEcKeBRzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/1014c6-dfd7-43cf-830a-30ab064bb30b/1/c0G-pi-MHoUVy10JBLyR5eJ9LDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/1014c6-dfd7-43cf-830a-30ab064bb30b/1/64JTR370B4ekh0qzFSNEcKeBRzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.134.236.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:2b:0c:53:29:d0:ea:52:94:5f:59:40:35:c6:c3:42:a4:ff:
73:98:11:65:42:95:ad:8a:1b:43:36:ad:d7:f5:a4:e7:7e:33:
b6:b3:f9:2e:9e:a0:5f:87:12:e0:69:15:f0:a4:74:22:53:a7:
c5:8e:3c:e6:9c:2b:c3:ec:d6:3c:e4:c4:66:72:e5:15:97:60:
44:ff:f9:74:ee:9b:46:56:87:4a:f9:f4:e6:ed:61:79:de:e5:
ed:69:36:60:f4:5c:27:39:c6:9e:a6:b8:5d:73:4b:7c:ad:42:
47:ce:ff:57:cf:c7:0d:41:eb:a1:50:91:86:85:62:9a:65:ec:
f9:0f:08:9b:6d:3b:b9:18:1e:30:52:62:16:7d:17:23:50:d9:
42:f0:5e:45:53:54:dc:a6:76:fb:94:bc:cc:aa:6c:c2:03:47:
dc:ed:0e:59:b6:b4:34:c8:3f:5a:cb:b4:9d:dc:ac:52:4f:1b:
e5:9d:f0:c9:51:11:57:a1:8d:1b:75:ff:6b:84:12:d0:66:1d:
fd:76:57:9c:9f:97:b8:3a:12:93:08:cd:0e:84:fe:04:38:a3:
c7:d8:f9:ee:68:57:50:a1:55:c7:90:92:94:0f:fc:c8:86:f1:
35:da:1f:f4:62:5c:fb:31:96:42:11:32:c9:9c:b3:23:7d:04:
c5:60:94:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:23:28 2026 by rpki-client