This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/VoOhBjJumAgCMJMoH4e-N9NcLHg.roa
File: VoOhBjJumAgCMJMoH4e-N9NcLHg.roa (raw, json)
Hash identifier: QFwlPoK1cPXcOu91b7nzGCD5wbSglI9IWnhhdfXoswA=
Subject key identifier: 56:83:A1:06:32:6E:98:08:02:30:93:28:1F:87:BE:37:D3:5C:2C:78
Certificate issuer: /CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Certificate serial: 019B7DC8898E6957CDECF0B2D6CC38146B88
Authority key identifier: 62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/VoOhBjJumAgCMJMoH4e-N9NcLHg.roa
Signing time: Fri 02 Jan 2026 08:17:32 +0000
ROA not before: Fri 02 Jan 2026 08:17:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208117
IP address blocks: 95.140.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:c8:89:8e:69:57:cd:ec:f0:b2:d6:cc:38:14:6b:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Validity
Not Before: Jan 2 08:17:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5683a106326e9808023093281f87be37d35c2c78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0f:25:52:bb:e5:86:77:57:75:41:6e:d5:79:
58:fb:48:04:7b:e7:11:26:c9:27:b2:9f:e3:f3:c6:
a1:2d:02:e2:dd:36:27:80:b2:c0:c2:6b:92:44:02:
40:f4:42:4e:7e:4f:6d:81:a2:9e:84:34:77:51:0e:
ef:df:f8:ca:19:66:f8:23:e4:24:d8:13:f6:11:d6:
c3:a7:a9:3e:d2:3e:a8:29:fd:ec:ef:57:69:f7:55:
90:5e:50:7b:e4:53:b2:97:ba:06:86:e3:34:c5:1e:
87:46:6f:96:d5:e9:47:39:ed:16:34:ac:dc:73:d7:
7c:dd:cf:d7:c5:d0:2f:bb:d9:0b:1c:b1:a8:8f:03:
8f:d3:98:63:c1:ce:23:20:c8:56:38:15:33:86:a9:
0f:2a:5f:1d:1b:d1:1b:40:0a:a2:f6:df:f9:c9:0f:
0c:bc:7b:aa:00:2e:f5:dc:12:ef:50:1e:34:bc:66:
a8:85:88:ff:9a:9d:43:f1:5b:2e:e0:bb:8f:85:ba:
e1:cb:93:46:15:a9:3b:b3:9e:b9:5c:be:6a:0a:65:
f7:f9:24:90:a0:e2:ec:6c:72:e2:a6:18:c9:d8:c1:
85:55:76:17:c9:4b:d3:8c:75:41:a6:a8:b2:83:40:
e2:0d:fe:74:10:b3:37:ff:59:f5:e9:83:e5:37:45:
96:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:83:A1:06:32:6E:98:08:02:30:93:28:1F:87:BE:37:D3:5C:2C:78
X509v3 Authority Key Identifier:
keyid:62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/VoOhBjJumAgCMJMoH4e-N9NcLHg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.140.82.0/24
Signature Algorithm: sha256WithRSAEncryption
27:bb:8c:86:bd:48:46:23:d6:d4:80:3a:2e:66:15:a2:11:76:
e0:b1:ba:00:79:f6:8f:c3:c5:71:41:bf:ef:bf:5e:75:de:74:
1e:41:d9:c4:91:b9:97:e0:53:03:a1:9e:62:e1:21:32:5f:0b:
55:50:8b:f9:c9:fd:ad:2a:90:23:76:b3:9b:fd:f4:2b:83:ad:
8c:ac:54:91:32:54:92:64:b1:83:17:c6:49:36:3c:63:56:96:
17:3f:42:6f:b6:2c:04:21:7e:af:2a:48:a0:19:76:bd:04:3e:
51:ab:0f:c9:4e:84:b3:8d:53:1c:b1:80:e2:67:43:fd:95:c6:
e5:cd:63:8e:cc:34:53:a7:87:9d:69:de:53:bb:31:da:6a:95:
0b:1a:38:3b:8e:7c:dc:e0:5d:b2:d8:72:c5:c6:e5:fc:ba:81:
3d:dc:e8:dc:a4:c0:4f:4b:dc:d6:36:85:2a:59:f6:3a:bd:6a:
76:8e:ef:66:93:cb:65:0e:7e:ef:ec:67:a7:2f:2f:0d:16:a1:
92:9b:0d:1e:20:b1:ae:ce:0d:86:f3:d8:21:3b:87:e1:87:c6:
b4:55:7b:a3:ac:fb:1d:33:82:b8:63:70:87:1d:67:bb:bb:7c:
15:c7:ab:02:56:b7:e9:46:91:24:a2:d0:0c:35:a1:d8:e7:81:
ca:61:45:6c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt9yImOaVfN7PCy1sw4FGuIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMjhlN2UwMWZhZGE0OWMxYTUyZmExM2YzNjI2YzQxYjQx
YTUxYjgwHhcNMjYwMTAyMDgxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NjgzYTEwNjMyNmU5ODA4MDIzMDkzMjgxZjg3YmUzN2QzNWMyYzc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArg8lUrvlhndXdUFu1XlY+0gEe+cR
Jsknsp/j88ahLQLi3TYngLLAwmuSRAJA9EJOfk9tgaKehDR3UQ7v3/jKGWb4I+Qk
2BP2EdbDp6k+0j6oKf3s71dp91WQXlB75FOyl7oGhuM0xR6HRm+W1elHOe0WNKzc
c9d83c/XxdAvu9kLHLGojwOP05hjwc4jIMhWOBUzhqkPKl8dG9EbQAqi9t/5yQ8M
vHuqAC713BLvUB40vGaohYj/mp1D8Vsu4LuPhbrhy5NGFak7s565XL5qCmX3+SSQ
oOLsbHLiphjJ2MGFVXYXyUvTjHVBpqiyg0DiDf50ELM3/1n16YPlN0WWKwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFaDoQYybpgIAjCTKB+HvjfTXCx4MB8GA1UdIwQY
MBaAFGIo5+AfraScGlL6E/NibEG0GlG4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWlqbjRCLXRwSndhVXZvVDgySnNRYlFhVWJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iYWFmZjMtYWViNC00NjE2LThmYjUt
NzY3NDE2NTI1MTBkLzEvVm9PaEJqSnVtQWdDTUpNb0g0ZS1OOU5jTEhnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9iYWFmZjMtYWViNC00NjE2LThmYjUtNzY3NDE2NTI1MTBk
LzEvWWlqbjRCLXRwSndhVXZvVDgySnNRYlFhVWJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX4xSMA0G
CSqGSIb3DQEBCwUAA4IBAQAnu4yGvUhGI9bUgDouZhWiEXbgsboAefaPw8VxQb/v
v1513nQeQdnEkbmX4FMDoZ5i4SEyXwtVUIv5yf2tKpAjdrOb/fQrg62MrFSRMlSS
ZLGDF8ZJNjxjVpYXP0JvtiwEIX6vKkigGXa9BD5Rqw/JToSzjVMcsYDiZ0P9lcbl
zWOOzDRTp4edad5TuzHaapULGjg7jnzc4F2y2HLFxuX8uoE93OjcpMBPS9zWNoUq
WfY6vWp2ju9mk8tlDn7v7GenLy8NFqGSmw0eILGuzg2G89ghO4fhh8a0VXujrPsd
M4K4Y3CHHWe7u3wVx6sCVrfpRpEkotAMNaHY54HKYUVs
-----END CERTIFICATE-----
Generated at Sun Jan 25 17:39:56 2026 by rpki-client