This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/645f6a-2653-4d31-bb4e-1f87976137a0/1/Enpd7RSzC3L6emd7pGDdiVehZtE.roa
File: Enpd7RSzC3L6emd7pGDdiVehZtE.roa (raw, json)
Hash identifier: WWtbFjYeptz2lkJzGb3OE5GVhYZDAyY+VdSSKK6ahKw=
Subject key identifier: 12:7A:5D:ED:14:B3:0B:72:FA:7A:67:7B:A4:60:DD:89:57:A1:66:D1
Certificate issuer: /CN=b4089f84483057ac364647c80a1b23c976b93016
Certificate serial: 019B7AC8920FC0E921A1A227DCE3E08A8FFC
Authority key identifier: B4:08:9F:84:48:30:57:AC:36:46:47:C8:0A:1B:23:C9:76:B9:30:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tAifhEgwV6w2RkfIChsjyXa5MBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/645f6a-2653-4d31-bb4e-1f87976137a0/1/Enpd7RSzC3L6emd7pGDdiVehZtE.roa
Signing time: Thu 01 Jan 2026 18:18:43 +0000
ROA not before: Thu 01 Jan 2026 18:18:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20582
IP address blocks: 185.113.20.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/645f6a-2653-4d31-bb4e-1f87976137a0/1/tAifhEgwV6w2RkfIChsjyXa5MBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/645f6a-2653-4d31-bb4e-1f87976137a0/1/tAifhEgwV6w2RkfIChsjyXa5MBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tAifhEgwV6w2RkfIChsjyXa5MBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Jan 2026 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:c8:92:0f:c0:e9:21:a1:a2:27:dc:e3:e0:8a:8f:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4089f84483057ac364647c80a1b23c976b93016
Validity
Not Before: Jan 1 18:18:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=127a5ded14b30b72fa7a677ba460dd8957a166d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:5c:a6:66:50:46:80:f5:97:8a:e5:53:ea:f3:
b4:df:0c:fe:1e:f7:45:9b:59:03:3a:b0:77:65:84:
28:a0:f2:c6:19:6d:02:0f:7f:95:e6:82:b0:f2:02:
b9:6a:65:8e:64:57:a1:be:28:cf:93:35:a1:ee:ac:
05:b1:df:36:e6:a6:c0:e0:47:67:18:9d:fe:6b:85:
7e:7d:0f:bd:51:ca:3d:a3:45:dd:c3:47:86:8d:7e:
73:e4:28:a9:95:3e:81:11:07:bd:72:45:08:ac:bb:
01:bb:ff:18:1a:56:5b:97:32:e1:32:77:f1:06:14:
96:01:27:76:c2:61:e4:dc:f6:33:85:11:3e:00:c5:
b7:77:18:fc:10:8c:66:d4:c8:07:11:33:8a:04:af:
05:30:a3:a6:2c:a8:84:54:c2:66:69:fb:05:26:fa:
7b:a9:42:f2:d3:37:b5:69:48:ca:bd:42:17:ab:c2:
ca:ab:a8:63:24:7a:07:a7:5b:32:ad:26:6a:f2:6e:
db:10:29:ab:ec:3d:ef:37:e8:74:b2:01:3f:1b:4a:
1a:3c:67:ad:cd:0f:33:be:0f:f4:b4:1e:97:a0:12:
60:51:cc:76:cd:c9:2d:ef:0b:35:a8:71:bf:bc:3c:
13:a1:32:b6:fc:cb:07:8e:d7:0f:98:e9:ed:b3:36:
df:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:7A:5D:ED:14:B3:0B:72:FA:7A:67:7B:A4:60:DD:89:57:A1:66:D1
X509v3 Authority Key Identifier:
keyid:B4:08:9F:84:48:30:57:AC:36:46:47:C8:0A:1B:23:C9:76:B9:30:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tAifhEgwV6w2RkfIChsjyXa5MBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/645f6a-2653-4d31-bb4e-1f87976137a0/1/Enpd7RSzC3L6emd7pGDdiVehZtE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/645f6a-2653-4d31-bb4e-1f87976137a0/1/tAifhEgwV6w2RkfIChsjyXa5MBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.113.20.0/22
Signature Algorithm: sha256WithRSAEncryption
93:98:98:ba:38:ad:11:6c:3e:72:3a:86:f9:21:08:9c:8a:4d:
68:5b:83:98:c1:82:94:c1:da:d6:19:17:0e:c7:6a:d4:f4:a8:
f5:65:3b:d8:1c:31:06:c5:48:1a:ab:29:d9:64:62:02:40:a6:
6f:c1:ea:a2:50:a5:ff:1c:38:0e:c8:53:16:f7:e6:f7:53:d0:
a0:8b:b2:b4:43:8f:87:e9:d0:03:12:89:7e:40:8c:47:98:79:
2b:73:b5:f9:c0:4c:c4:37:7d:3b:bb:88:00:1d:4d:b7:49:ab:
15:a9:3b:60:76:59:1a:2b:98:7f:96:de:cb:8b:f5:10:e0:71:
3b:9e:77:a8:c1:b2:7f:5a:7a:8a:c9:82:31:e6:f7:5f:56:73:
77:6b:49:95:5f:79:9d:bb:73:cf:f0:15:b0:c3:da:21:de:66:
83:76:48:dc:1e:5e:b8:af:69:f4:b0:af:36:fe:15:3d:30:00:
29:cc:6c:7b:19:84:b3:d5:87:4c:1f:13:62:42:c3:3e:49:23:
b4:de:3b:48:82:77:84:fa:85:c1:d9:a8:9b:15:a5:3d:0b:e6:
be:b6:45:f4:bf:c6:f5:85:fd:31:ac:a7:d7:3b:f3:61:12:f2:
c3:b3:0b:25:28:ce:a6:c0:38:ba:aa:c8:d2:52:fc:fc:89:cd:
d2:57:4b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 1 22:52:50 2026 by rpki-client