This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/oidyzZNtucuXDORhUnc_enodjqc.roa
File: oidyzZNtucuXDORhUnc_enodjqc.roa (raw, json)
Hash identifier: DRv8W7PqvucKqgRhrWT7C5z20IqpO4qn8uXxa3BmMhc=
Subject key identifier: A2:27:72:CD:93:6D:B9:CB:97:0C:E4:61:52:77:3F:7A:7A:1D:8E:A7
Certificate issuer: /CN=2983841bc09f1fd4fe3de991016c0b7126fba52e
Certificate serial: 019B7B36E4A2FB27DF94A0034B300E5BF6BA
Authority key identifier: 29:83:84:1B:C0:9F:1F:D4:FE:3D:E9:91:01:6C:0B:71:26:FB:A5:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/oidyzZNtucuXDORhUnc_enodjqc.roa
Signing time: Thu 01 Jan 2026 20:19:13 +0000
ROA not before: Thu 01 Jan 2026 20:19:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61317
IP address blocks: 79.110.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Jan 2026 05:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:36:e4:a2:fb:27:df:94:a0:03:4b:30:0e:5b:f6:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2983841bc09f1fd4fe3de991016c0b7126fba52e
Validity
Not Before: Jan 1 20:19:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a22772cd936db9cb970ce46152773f7a7a1d8ea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0c:33:84:9e:59:7d:7d:a4:b6:10:51:07:ee:
f7:58:f5:82:52:84:63:2a:70:60:37:c5:86:25:42:
4a:72:e4:dd:82:7f:16:00:00:b8:58:dc:a8:a8:d7:
f9:f0:93:8d:89:70:8a:85:22:e2:6d:ec:d8:b6:32:
b6:4c:8b:01:73:3b:49:c3:09:bf:4c:37:27:f6:d7:
9c:71:69:e8:e4:dc:ba:59:ef:b0:5a:5d:b8:5c:d5:
90:8e:2c:3a:e6:ea:b3:91:b8:d0:24:e7:35:52:44:
b7:fc:e9:66:1e:60:77:5e:ac:f6:e4:75:58:8c:47:
48:57:4f:40:43:74:5c:27:13:b3:69:14:29:52:fe:
a7:36:3c:99:34:39:f5:87:28:60:c4:0f:58:30:e6:
af:bc:e4:74:ee:20:92:ea:b4:e9:a4:2c:be:41:1b:
b3:f1:27:fb:0a:ba:70:c0:1e:01:b7:4b:2e:90:54:
db:a1:4a:b5:2d:0a:11:ba:7c:c9:08:38:6d:47:e0:
44:d1:b0:17:59:cd:f4:36:f2:e0:06:90:5e:67:3c:
50:fb:f9:12:2f:c1:4c:27:d5:e7:f2:2a:43:03:fd:
48:52:b8:b4:a5:da:4f:6b:bd:f1:f4:57:e5:b7:ba:
e1:e4:39:2c:bc:37:c1:07:a3:fc:4b:9c:51:d0:59:
c6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:27:72:CD:93:6D:B9:CB:97:0C:E4:61:52:77:3F:7A:7A:1D:8E:A7
X509v3 Authority Key Identifier:
keyid:29:83:84:1B:C0:9F:1F:D4:FE:3D:E9:91:01:6C:0B:71:26:FB:A5:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/oidyzZNtucuXDORhUnc_enodjqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.166.0/24
Signature Algorithm: sha256WithRSAEncryption
45:89:95:37:85:16:32:f0:06:26:80:59:7a:bf:40:65:ab:42:
b7:2f:5e:f5:41:6a:2c:7e:2b:a2:bb:a1:8c:38:2e:8c:7e:46:
27:cd:25:32:5c:e3:2b:98:6c:d3:b8:6a:b8:f1:c4:5b:21:85:
91:4d:51:a5:5b:14:a0:f1:7c:d9:fe:53:00:51:a5:0b:05:b2:
c7:c2:0a:d6:58:24:c4:11:60:bc:73:81:70:86:0a:87:47:0f:
f4:13:8d:4b:a7:2b:22:f1:e5:7e:ee:05:8f:51:8a:35:a6:38:
a4:25:d5:f9:e5:71:6b:5b:6e:ef:9e:2a:46:45:1e:74:63:ca:
ff:3c:1a:28:88:cd:a9:b0:04:38:b4:3e:f3:f3:8e:b2:9c:57:
9a:01:20:ca:78:6f:f0:89:50:0b:51:75:7e:a8:44:13:f0:a7:
81:e4:8d:2d:fa:cd:a0:51:a5:8b:c1:84:64:77:b2:bb:be:03:
db:f0:26:bd:99:1f:3d:24:31:9a:9b:72:ce:04:c4:85:e1:46:
ab:88:da:d1:e7:30:49:04:f8:6a:6c:64:3f:e7:5d:d2:e4:39:
c8:7f:3a:9d:9d:7e:94:62:3c:96:c3:73:8d:e6:f1:30:e8:d2:
fe:e8:3c:9f:ee:08:e2:ee:a8:ef:38:b1:9e:95:2c:1b:ff:f9:
7e:2a:10:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 8 12:59:33 2026 by rpki-client