This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/LqOsnOdaamiNEVSveB0DDpoeGtA.roa
File: LqOsnOdaamiNEVSveB0DDpoeGtA.roa (raw, json)
Hash identifier: 1OsMgdSZi3oc8CaIPLodcRSXQPCf9apYWepMVJpFIG8=
Subject key identifier: 2E:A3:AC:9C:E7:5A:6A:68:8D:11:54:AF:78:1D:03:0E:9A:1E:1A:D0
Certificate issuer: /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Certificate serial: 019B79100095A352DFB5B78D922E78F7778B
Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/LqOsnOdaamiNEVSveB0DDpoeGtA.roa
Signing time: Thu 01 Jan 2026 10:17:30 +0000
ROA not before: Thu 01 Jan 2026 10:17:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201119
IP address blocks: 185.32.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:10:00:95:a3:52:df:b5:b7:8d:92:2e:78:f7:77:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Validity
Not Before: Jan 1 10:17:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2ea3ac9ce75a6a688d1154af781d030e9a1e1ad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ba:c6:4e:be:55:fb:c1:5d:50:19:7e:30:36:
0e:2e:8c:d4:ae:dc:d3:aa:bf:54:d0:46:42:7f:0f:
a6:b2:22:70:d9:93:23:70:1a:cb:56:f7:0d:24:0a:
82:00:2c:ac:5c:05:5c:05:f8:5d:e3:65:22:4e:e0:
95:59:11:c2:83:ce:d4:4b:1d:bf:fe:a6:80:f4:a3:
5e:0c:3e:07:71:5b:01:f9:01:ce:08:66:d3:b0:b5:
b7:8c:9a:27:09:cc:2a:0d:29:ae:23:f1:ef:be:51:
48:84:8a:f8:c1:8b:35:3c:bd:21:3e:72:c8:ca:20:
53:8c:79:da:c2:4a:2b:49:19:bc:a7:60:07:ad:28:
cc:80:b6:2e:1a:57:b2:b7:46:15:2f:1a:ba:97:cc:
fd:43:f7:3d:11:f5:72:0d:21:61:09:cb:58:1f:6b:
34:f5:9c:31:d0:96:ae:0b:d2:e9:d3:3d:ed:3c:93:
9b:13:16:93:6c:73:b1:a6:44:b3:5e:9c:b6:2c:5b:
38:59:98:de:db:50:c2:b0:f3:46:bd:9c:8d:97:0f:
e0:c0:f6:87:7a:d7:43:52:8f:ae:7a:e9:bd:ee:c8:
d5:8b:63:4e:90:d7:c4:12:79:48:bb:40:48:c4:b0:
60:22:24:76:20:a4:8a:d4:2a:79:d9:0a:15:dd:64:
0a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:A3:AC:9C:E7:5A:6A:68:8D:11:54:AF:78:1D:03:0E:9A:1E:1A:D0
X509v3 Authority Key Identifier:
keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/LqOsnOdaamiNEVSveB0DDpoeGtA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.32.180.0/24
Signature Algorithm: sha256WithRSAEncryption
07:74:a7:24:61:c2:ea:ff:cf:d3:86:88:a4:69:aa:88:c2:b4:
a2:bf:b2:be:94:49:59:fb:7a:ed:85:16:f1:2f:1f:79:6f:ff:
ac:3d:0c:9a:5c:ce:b2:f2:4b:5d:d8:f3:d7:4a:d2:e8:e9:cc:
42:ac:38:fc:61:b1:e6:b8:7e:6b:98:2d:61:e5:83:ac:1c:47:
4f:b7:69:c0:64:69:a3:40:a6:ba:b6:ed:72:02:45:f6:15:00:
d1:f2:9d:6a:08:82:ff:3f:50:05:0c:38:83:10:b8:f6:ef:40:
ff:4e:a6:dc:3a:72:61:7e:0b:a1:c0:88:34:fe:15:9e:09:19:
60:fa:6f:b2:f7:06:79:98:52:e7:36:6b:1e:c1:18:56:a8:0e:
84:2c:21:51:02:6d:9d:b0:6f:ca:35:6b:86:79:6e:7d:b7:ff:
d8:17:3a:6b:e1:a5:04:c1:03:50:7c:11:72:be:b0:db:f4:35:
f8:bb:4a:17:66:f9:ef:31:1d:cd:75:aa:cd:74:ab:51:47:97:
c9:49:cf:46:af:00:9d:d0:cb:6b:a0:b3:4e:7b:05:a9:7c:f6:
e3:f7:ca:10:fc:29:85:fb:5e:6e:fb:11:ad:04:e9:e2:e8:1d:
bd:5e:a8:f8:45:4e:a8:de:0e:0f:e5:27:d4:ed:a7:9d:57:94:
01:93:12:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:02:44 2026 by rpki-client