This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/HO--5wVYjTks1d4pGuEUndfhIc8.roa
File: HO--5wVYjTks1d4pGuEUndfhIc8.roa (raw, json)
Hash identifier: PSZ01mmnd3IXqRjRDT7Afa21Y0Y9+VVQ6A0uP0yE5t4=
Subject key identifier: 1C:EF:BE:E7:05:58:8D:39:2C:D5:DE:29:1A:E1:14:9D:D7:E1:21:CF
Certificate issuer: /CN=e1ef9694aa48d81279e8ede430795f2768d2dd52
Certificate serial: 019B7FF17CCB7E93958E01D02A292AF23656
Authority key identifier: E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/HO--5wVYjTks1d4pGuEUndfhIc8.roa
Signing time: Fri 02 Jan 2026 18:21:31 +0000
ROA not before: Fri 02 Jan 2026 18:21:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208905
IP address blocks: 194.76.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:f1:7c:cb:7e:93:95:8e:01:d0:2a:29:2a:f2:36:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ef9694aa48d81279e8ede430795f2768d2dd52
Validity
Not Before: Jan 2 18:21:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1cefbee705588d392cd5de291ae1149dd7e121cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a6:d7:42:0b:bb:ed:a0:41:fb:f6:75:fd:c0:
0b:70:f2:ec:66:24:b7:17:10:68:73:5e:09:e2:47:
2e:f0:f6:07:f5:c9:03:0b:6a:6a:5b:f7:1d:56:9f:
c4:ab:5d:94:c3:e2:03:fb:63:07:7c:25:7d:71:47:
6a:a1:ae:a5:c2:52:99:d3:c0:4b:c3:b0:de:01:b5:
cd:38:5a:b0:75:20:0d:5d:b3:67:8c:35:5a:68:dd:
5f:ff:4c:d1:70:a5:27:0d:90:a8:8e:5a:0f:0e:96:
c2:8e:db:d6:af:14:f4:a4:bc:23:bc:99:03:47:96:
58:d2:9b:68:e1:b1:cc:fb:79:d4:f6:b2:03:4a:e4:
bb:3c:90:70:56:bb:2e:d0:9f:28:6a:3f:1a:47:cc:
47:8b:02:5e:ed:3c:1d:9d:48:89:61:de:08:53:4e:
d2:e5:4a:2b:57:4c:cb:bd:4e:79:40:d8:80:3b:b3:
a7:3f:cd:de:a7:d7:4d:5e:e0:b6:b2:40:be:e4:04:
30:c4:28:10:95:35:58:8c:60:0b:88:f8:d4:13:57:
16:f8:83:dd:13:44:db:1c:bb:9c:84:22:76:5a:f5:
ae:6e:2d:a6:73:b1:37:4a:bb:3f:cd:78:45:d9:49:
01:15:3b:87:4b:10:5c:ee:b9:a3:c0:3f:8e:bf:3e:
47:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:EF:BE:E7:05:58:8D:39:2C:D5:DE:29:1A:E1:14:9D:D7:E1:21:CF
X509v3 Authority Key Identifier:
keyid:E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/HO--5wVYjTks1d4pGuEUndfhIc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.76.115.0/24
Signature Algorithm: sha256WithRSAEncryption
43:62:26:7c:82:23:36:ed:c5:77:4f:07:8f:76:32:f3:da:9c:
ba:d6:20:42:9e:9e:d8:f8:f0:c5:44:c0:ac:64:7f:06:b9:06:
ce:1a:9a:6f:df:85:44:91:11:40:71:7e:69:67:9f:5f:27:2f:
ed:bc:d4:0f:a0:e0:36:c1:07:36:c7:39:7d:d5:5a:20:56:3f:
99:9c:c7:15:e2:90:95:6c:fe:b8:bd:22:2a:65:00:22:a8:14:
16:79:99:2c:f7:c0:0f:d4:97:ec:8f:7e:4f:e2:43:b2:1e:0f:
55:17:4b:61:8a:eb:6a:34:12:9b:f2:fa:49:be:ca:3a:08:77:
4e:77:c5:cb:80:02:b8:90:5d:78:11:e0:c5:71:8d:0c:ab:ba:
9d:94:64:c7:f4:55:8e:bc:86:95:30:27:e5:d7:0b:bc:0d:54:
71:c2:ef:04:7a:78:98:80:22:37:21:09:be:3b:1f:76:f3:70:
e1:a4:2f:cf:92:3b:bf:1d:11:4f:89:e5:d5:fc:b4:a3:af:68:
79:9a:3c:22:a9:08:23:33:be:d2:b5:bc:c6:aa:d4:00:98:7e:
b8:34:4f:0c:b7:07:de:7e:a7:a8:5d:f0:fd:47:28:25:10:52:
0b:1c:1a:ef:7b:7f:19:a1:af:6f:1c:49:77:cf:f9:70:24:10:
26:36:ad:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:12:33 2026 by rpki-client