This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/0OHFR3u6ZXPU60e_Kpdpjm7xdtw.roa
File: 0OHFR3u6ZXPU60e_Kpdpjm7xdtw.roa (raw, json)
Hash identifier: W4HSwATsQSpsxelPBRvCUZgXsPPIeFu2oVqzLSkQvRE=
Subject key identifier: D0:E1:C5:47:7B:BA:65:73:D4:EB:47:BF:2A:97:69:8E:6E:F1:76:DC
Certificate issuer: /CN=49596cecc21dd02677a727ef37f0689546ea5097
Certificate serial: 019B77588D09508F7D9E0DE133F7F1A04F1F
Authority key identifier: 49:59:6C:EC:C2:1D:D0:26:77:A7:27:EF:37:F0:68:95:46:EA:50:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SVls7MId0CZ3pyfvN_BolUbqUJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/0OHFR3u6ZXPU60e_Kpdpjm7xdtw.roa
Signing time: Thu 01 Jan 2026 02:17:30 +0000
ROA not before: Thu 01 Jan 2026 02:17:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49206
IP address blocks: 83.118.224.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/SVls7MId0CZ3pyfvN_BolUbqUJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/SVls7MId0CZ3pyfvN_BolUbqUJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SVls7MId0CZ3pyfvN_BolUbqUJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 02:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:58:8d:09:50:8f:7d:9e:0d:e1:33:f7:f1:a0:4f:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49596cecc21dd02677a727ef37f0689546ea5097
Validity
Not Before: Jan 1 02:17:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d0e1c5477bba6573d4eb47bf2a97698e6ef176dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fd:69:05:1e:10:b2:0b:7f:f0:7c:22:95:39:
80:86:88:5f:5f:b0:76:9a:11:31:55:6e:5d:14:de:
c2:f9:6c:69:83:94:9a:37:c7:e7:b7:d5:a9:0f:a6:
eb:c8:7d:bb:b9:08:71:ca:9a:48:71:d3:89:cd:ad:
7c:ea:4b:75:e5:c1:45:3b:db:1c:80:7c:90:57:cd:
c3:8d:dd:29:a4:41:33:8c:94:aa:19:b5:96:29:2a:
f3:e0:34:99:cb:ca:36:a6:2c:90:18:b9:53:ee:d2:
69:5a:a8:aa:b2:7b:ba:cf:8a:8e:ea:6f:f6:a7:52:
ed:44:78:5d:4e:94:a9:b6:b8:5f:c3:36:97:ba:9a:
6f:19:aa:a1:32:8e:91:56:6a:95:bd:a9:eb:89:22:
45:66:00:5f:56:03:fd:ed:b4:9a:dc:21:d1:a3:ed:
17:39:e8:25:29:ce:9d:81:a5:d3:21:b8:59:17:40:
60:a0:65:41:96:99:03:20:25:a1:55:3a:31:f2:2f:
09:ca:6f:ca:fc:63:8a:d2:c7:63:aa:8e:15:92:b1:
d8:f4:59:fa:96:f6:e7:22:6e:4e:9c:0a:0d:29:d8:
d9:6c:74:5f:28:de:32:dd:17:47:1f:99:4c:5e:6d:
36:94:cd:6f:ac:a5:2f:7f:53:53:b1:ef:51:a3:d9:
3c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:E1:C5:47:7B:BA:65:73:D4:EB:47:BF:2A:97:69:8E:6E:F1:76:DC
X509v3 Authority Key Identifier:
keyid:49:59:6C:EC:C2:1D:D0:26:77:A7:27:EF:37:F0:68:95:46:EA:50:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SVls7MId0CZ3pyfvN_BolUbqUJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/0OHFR3u6ZXPU60e_Kpdpjm7xdtw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/SVls7MId0CZ3pyfvN_BolUbqUJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.118.224.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:71:64:10:15:ae:23:8f:0b:1d:9b:cd:b5:1a:97:c9:ee:ba:
35:45:d2:18:80:03:58:b6:3b:5b:dc:1f:7a:b4:eb:05:a0:ae:
b5:e8:ad:d3:65:f5:59:18:11:56:4a:4a:bf:b0:a1:0c:cb:91:
88:fd:cf:14:4a:53:13:7e:ee:6c:60:63:f0:3f:44:2d:90:f3:
3d:61:80:89:4d:93:54:4d:92:48:03:52:de:b8:eb:70:33:b3:
df:37:3c:5a:f3:7b:a5:2e:3c:90:a7:06:5c:67:ab:e0:14:38:
55:7e:9d:2b:4c:ed:10:20:77:36:2b:0e:10:5e:6e:d1:5f:33:
8b:d1:5c:bd:c4:76:63:69:7f:3f:c1:ed:7f:fa:bf:98:4c:12:
a8:2b:44:f3:c4:02:a4:12:e1:64:34:6d:00:7f:ce:fa:c1:2d:
85:ea:33:46:ed:87:a0:93:0c:7f:a4:b5:83:d2:fc:66:41:ff:
ea:34:48:0a:10:9a:66:6b:92:21:42:fd:eb:0e:3d:31:1c:7a:
57:10:4f:3b:e0:9b:ad:9e:71:c7:c6:13:5b:78:a8:44:c3:18:
66:10:df:55:b7:0c:8b:2b:3e:19:dd:3f:1f:16:78:9c:05:df:
d8:e7:e7:60:4d:b0:9f:9e:e6:1b:7b:2b:4f:d7:f0:9f:45:87:
26:b3:77:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:17:16 2026 by rpki-client