This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/O0zR1L9MgT5YwBbq6ISw_Bf7MB0.roa
File: O0zR1L9MgT5YwBbq6ISw_Bf7MB0.roa (raw, json)
Hash identifier: cICGD+vgHpne8r3yKqEMRJZStOofj1K0i19NpAHXpU4=
Subject key identifier: 3B:4C:D1:D4:BF:4C:81:3E:58:C0:16:EA:E8:84:B0:FC:17:FB:30:1D
Certificate issuer: /CN=e909ee3d618974da0cbd805a2da80410a4989881
Certificate serial: 019B7B369C773A436CB24B4E661C34B0586F
Authority key identifier: E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/O0zR1L9MgT5YwBbq6ISw_Bf7MB0.roa
Signing time: Thu 01 Jan 2026 20:18:55 +0000
ROA not before: Thu 01 Jan 2026 20:18:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59413
IP address blocks: 37.110.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 11:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:36:9c:77:3a:43:6c:b2:4b:4e:66:1c:34:b0:58:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e909ee3d618974da0cbd805a2da80410a4989881
Validity
Not Before: Jan 1 20:18:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3b4cd1d4bf4c813e58c016eae884b0fc17fb301d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:71:cc:d8:5b:8b:4f:4f:e8:d2:fd:06:ff:69:
f4:29:6f:54:81:43:2a:50:e0:3e:b0:3b:1c:81:52:
38:6c:f5:b6:b8:5f:bd:53:c7:af:ac:75:5b:38:af:
b5:a0:7f:cc:1b:0d:65:3f:87:4a:84:f3:aa:53:0d:
4b:88:af:ac:65:dc:26:eb:65:0a:5f:58:57:ec:cf:
d2:69:12:9f:40:08:f4:ee:08:ea:22:a2:3c:27:26:
1d:8a:7d:e2:bc:f7:5b:58:40:a4:e9:63:27:70:3a:
06:64:30:e1:c5:6c:20:45:cf:f4:f2:ae:b9:b8:60:
0e:e3:dc:68:45:4a:58:70:1f:35:b5:35:f2:6c:22:
bb:ea:48:b1:eb:7c:59:68:da:3a:23:19:40:2b:f7:
66:6b:43:81:86:7f:ae:e2:5a:52:6e:6b:a3:c4:e4:
e3:79:33:23:f1:08:4e:25:9e:67:ba:58:4e:d0:70:
94:d2:9d:d5:20:52:c9:a6:fb:e0:40:8c:3e:6f:f1:
74:16:dd:6e:20:e2:09:24:7f:8b:e4:eb:a3:5f:2d:
af:93:09:11:2d:9b:64:82:58:9c:78:2f:c0:6a:4f:
2c:ec:e2:51:94:e2:59:ad:e1:34:83:f7:0e:8b:d9:
2d:ce:d1:45:d9:18:b8:3f:cc:99:b5:78:16:58:78:
05:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:4C:D1:D4:BF:4C:81:3E:58:C0:16:EA:E8:84:B0:FC:17:FB:30:1D
X509v3 Authority Key Identifier:
keyid:E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/O0zR1L9MgT5YwBbq6ISw_Bf7MB0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.110.192.0/24
Signature Algorithm: sha256WithRSAEncryption
18:b6:b6:c5:36:c5:95:b8:36:0b:e8:61:0e:f2:2c:ab:e0:7e:
77:31:e1:38:a6:1a:52:b1:fd:f8:d2:92:f3:42:ca:3b:21:1d:
48:70:69:67:f9:ed:ab:84:bb:63:63:17:32:bf:ab:fb:11:62:
3c:50:b0:d4:82:84:81:3e:8d:64:c1:6f:31:a4:b1:27:2b:fe:
6c:4c:68:97:0e:a4:f2:22:27:70:17:93:2f:ac:82:3f:3b:e2:
ed:53:e3:24:c6:de:27:91:f0:10:f4:dc:d0:25:fb:a2:e2:0d:
9d:43:bc:34:03:6a:49:92:be:30:76:bf:99:2e:e8:5d:61:8d:
35:5b:a3:e8:88:27:ca:84:40:fb:2d:ff:0c:d1:70:07:71:83:
0a:ea:3e:1b:53:49:91:fa:b3:4c:47:29:ae:d4:b0:fc:4c:cc:
3e:d1:14:66:ab:bb:7c:5e:47:6b:c4:9d:a6:b5:24:81:78:ce:
95:22:2b:51:4b:51:71:14:c5:45:17:89:9d:50:dd:87:67:34:
bf:9f:54:df:3d:67:78:66:f0:f9:f9:99:14:59:e8:32:39:84:
a2:63:c9:75:70:0b:32:3a:c6:52:92:e8:ee:9a:b7:2a:d2:1b:
47:67:6b:f8:37:63:dc:ed:f5:63:01:5f:aa:8f:d4:ea:a5:ed:
3d:81:d0:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:36:53 2026 by rpki-client