This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/OgANtrj8j6WImSC_x9463NVhsNw.roa
File: OgANtrj8j6WImSC_x9463NVhsNw.roa (raw, json)
Hash identifier: 0EdUSPwLZaULLi34jwJduN5d3rfdYn4zQ6i+IIL5P2I=
Subject key identifier: 3A:00:0D:B6:B8:FC:8F:A5:88:99:20:BF:C7:DE:3A:DC:D5:61:B0:DC
Certificate issuer: /CN=5fa4d80464978f6ebfba95f745a3305726f72d93
Certificate serial: 019B79112F504519767D02F9DBE23AAE4C4E
Authority key identifier: 5F:A4:D8:04:64:97:8F:6E:BF:BA:95:F7:45:A3:30:57:26:F7:2D:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X6TYBGSXj26_upX3RaMwVyb3LZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/OgANtrj8j6WImSC_x9463NVhsNw.roa
Signing time: Thu 01 Jan 2026 10:18:47 +0000
ROA not before: Thu 01 Jan 2026 10:18:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5542
IP address blocks: 92.61.176.0/22 maxlen: 22
92.61.176.0/24 maxlen: 24
92.61.177.0/24 maxlen: 24
92.61.178.0/24 maxlen: 24
92.61.179.0/24 maxlen: 24
185.123.208.0/22 maxlen: 22
185.123.208.0/24 maxlen: 24
185.123.209.0/24 maxlen: 24
185.123.210.0/24 maxlen: 24
185.123.211.0/24 maxlen: 24
2a06:af80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/X6TYBGSXj26_upX3RaMwVyb3LZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 19:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:11:2f:50:45:19:76:7d:02:f9:db:e2:3a:ae:4c:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fa4d80464978f6ebfba95f745a3305726f72d93
Validity
Not Before: Jan 1 10:18:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3a000db6b8fc8fa5889920bfc7de3adcd561b0dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:46:88:6d:8a:9c:bf:90:f0:0b:26:c2:fe:10:
11:5d:17:95:3c:a6:61:a0:49:04:19:db:b0:71:c1:
05:74:1a:08:82:6f:ca:5c:60:fe:75:ca:65:2f:f0:
5e:6b:c1:4c:59:41:c4:6c:36:7a:72:20:83:02:1c:
a9:cf:a6:7b:6f:fa:9c:92:9d:87:db:cc:11:b6:4a:
27:02:18:f6:25:3a:25:10:5c:c5:a7:e5:a9:f2:3c:
b9:85:e1:a9:52:93:fc:a4:d0:24:22:ad:6a:9c:c2:
9c:c2:1a:29:8c:c9:45:a4:b7:05:5e:d7:d8:d1:f3:
88:f2:ce:8f:e6:cb:49:94:25:8d:82:ee:84:f4:6a:
e4:e5:0b:39:95:ec:b0:51:90:b1:cd:7a:3e:fa:01:
f3:a2:94:3e:0a:98:99:51:e2:28:ed:19:2d:1a:6f:
32:f2:a1:b4:77:3b:8c:7d:60:0e:9c:72:63:8b:2b:
73:94:79:20:78:2b:71:e3:58:4e:18:e2:4b:1b:4e:
68:cc:95:03:73:1b:2f:db:52:01:05:28:72:9d:22:
57:04:79:09:b6:49:b4:df:38:c3:61:60:b1:fa:2d:
d4:fd:17:da:0d:5e:6c:9c:19:b9:d6:8f:b8:22:27:
31:85:cb:ed:1c:ad:b9:0d:e5:57:3e:4b:f2:18:93:
cb:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:00:0D:B6:B8:FC:8F:A5:88:99:20:BF:C7:DE:3A:DC:D5:61:B0:DC
X509v3 Authority Key Identifier:
keyid:5F:A4:D8:04:64:97:8F:6E:BF:BA:95:F7:45:A3:30:57:26:F7:2D:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6TYBGSXj26_upX3RaMwVyb3LZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/OgANtrj8j6WImSC_x9463NVhsNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.61.176.0/22
185.123.208.0/22
IPv6:
2a06:af80::/29
Signature Algorithm: sha256WithRSAEncryption
1f:e2:7d:c3:d7:cf:60:0b:a9:c7:9b:7c:3d:e1:b8:f6:42:90:
32:34:3d:74:8e:64:87:8a:15:c2:21:ac:4b:d4:a6:99:ab:ae:
5a:5b:56:5d:a9:f5:01:28:62:33:6d:f0:de:2b:13:4f:1c:1b:
1d:9a:ec:e3:91:f1:ff:65:09:7e:a4:a5:d1:98:60:37:1f:6d:
29:e1:28:10:6f:dd:85:ef:75:af:5b:13:59:95:5a:70:8b:ef:
63:67:e2:38:9b:4f:3f:ca:0e:b6:dc:63:48:7a:b9:11:a6:b4:
3f:c0:e0:e7:89:19:7a:cd:f7:61:fd:e9:c2:85:fb:21:12:4c:
fe:95:11:71:b2:b2:be:2b:3b:d3:dd:4e:b7:24:37:86:55:2d:
a6:ae:9e:fb:a4:3a:5e:97:c3:47:9f:ae:d9:e5:00:e1:73:5e:
81:bf:2e:8a:6c:b9:f1:41:9a:a7:01:e0:8d:59:e8:54:ac:e7:
c6:60:db:08:55:9c:a4:bb:cb:48:92:94:03:42:07:19:3e:98:
64:17:33:a7:29:2e:ca:64:44:98:56:61:d4:c1:b1:2a:c3:f3:
48:be:35:29:f5:6e:92:3f:6b:af:90:ac:10:90:73:7c:6b:f0:
48:0a:fb:7b:36:fb:9b:c5:0f:ce:55:0c:6f:ee:2a:4d:6a:3f:
71:71:fc:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:50:16 2026 by rpki-client