This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/OLmArH5IwWhE4X1-1oyWlt70SoU.roa
File: OLmArH5IwWhE4X1-1oyWlt70SoU.roa (raw, json)
Hash identifier: qoAN1qHyDfHOZo1EmYKxtK2xB81mzjXDuLB7f175zdw=
Subject key identifier: 38:B9:80:AC:7E:48:C1:68:44:E1:7D:7E:D6:8C:96:96:DE:F4:4A:85
Certificate issuer: /CN=2f2a0fa20383332a3f414f054753a0b60b25ba10
Certificate serial: 019B78A2634AC3FFDC2DAC440454C92C8776
Authority key identifier: 2F:2A:0F:A2:03:83:33:2A:3F:41:4F:05:47:53:A0:B6:0B:25:BA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/OLmArH5IwWhE4X1-1oyWlt70SoU.roa
Signing time: Thu 01 Jan 2026 08:17:46 +0000
ROA not before: Thu 01 Jan 2026 08:17:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31742
IP address blocks: 91.208.114.0/24 maxlen: 24
91.241.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:a2:63:4a:c3:ff:dc:2d:ac:44:04:54:c9:2c:87:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f2a0fa20383332a3f414f054753a0b60b25ba10
Validity
Not Before: Jan 1 08:17:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=38b980ac7e48c16844e17d7ed68c9696def44a85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:bf:2f:e3:bb:40:be:dd:96:60:cf:8f:e0:df:
6a:e1:04:16:f6:69:c9:f5:8f:57:23:27:05:45:13:
12:7e:ba:bc:48:83:e1:4e:e9:31:f1:b9:9b:15:9d:
86:c0:1d:a3:21:74:a4:be:03:ab:ba:1b:30:4f:59:
03:3e:04:c8:7a:8d:fa:99:89:32:74:44:6f:bb:31:
d7:7f:95:6b:8e:00:7a:17:7d:ce:b8:b5:bb:83:6a:
02:48:1e:46:80:fb:c1:f1:31:65:c2:1c:34:8a:56:
d8:4b:9c:2d:e5:cf:93:de:da:ac:d1:ad:62:88:de:
70:7a:af:96:dc:cb:c6:54:d0:2a:96:18:cf:2b:69:
3f:b2:c2:8a:b9:cd:3a:c5:d5:32:2d:91:e4:03:02:
bd:dd:b8:43:aa:8b:c6:ce:b8:5f:9f:fe:a3:43:f7:
77:17:0e:c1:12:d7:a2:55:16:9d:51:8e:e4:e4:6a:
52:5f:5d:81:33:be:36:a9:0e:b8:f0:b0:76:75:0c:
ce:2e:30:0d:36:65:e9:db:7b:98:7f:f9:fe:d4:12:
bf:59:ea:68:cb:8d:bd:36:c8:f4:56:41:2b:df:67:
9e:53:11:2e:35:54:29:32:97:9b:87:f1:29:f7:c3:
02:68:28:22:b8:68:7d:e2:09:c6:04:c7:38:13:e2:
0a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:B9:80:AC:7E:48:C1:68:44:E1:7D:7E:D6:8C:96:96:DE:F4:4A:85
X509v3 Authority Key Identifier:
keyid:2F:2A:0F:A2:03:83:33:2A:3F:41:4F:05:47:53:A0:B6:0B:25:BA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/OLmArH5IwWhE4X1-1oyWlt70SoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.114.0/24
91.241.78.0/24
Signature Algorithm: sha256WithRSAEncryption
19:fb:df:1c:aa:3c:ff:f3:89:eb:76:7a:e9:57:08:ae:fb:05:
02:62:82:0c:6e:37:02:50:b5:bc:61:00:ad:98:be:fa:09:d3:
d2:ea:3e:f3:3f:dd:b1:cb:7e:0b:7c:13:37:75:aa:5c:6d:29:
4a:5c:f5:84:d3:2c:b7:69:2a:25:cb:48:7b:ce:c0:75:b7:8b:
35:73:f9:0d:48:58:d7:cf:88:48:23:c2:58:b3:54:ef:49:11:
a7:fb:7b:c9:35:c5:8f:8b:d9:f0:45:88:40:ca:ba:e2:87:5f:
ce:92:aa:0d:c1:23:e5:10:d0:5d:c1:f7:bd:b4:45:4d:f5:13:
7c:04:37:46:e1:87:c1:f5:2c:55:02:33:78:98:d5:3f:79:d3:
c9:12:fa:c6:da:20:fc:fa:45:1c:11:5e:f7:b6:5b:16:30:a8:
d5:57:d8:13:ff:bb:7d:f2:f1:86:87:9c:e7:81:ad:95:8b:9d:
cb:29:a5:26:15:f9:c8:ce:fa:04:31:84:1d:09:91:e8:56:ea:
59:92:25:a7:50:48:1c:d6:25:05:51:f4:02:51:13:8c:e6:d7:
d6:f5:fe:e8:f1:4d:ac:6e:3f:e2:3b:cc:73:52:8d:86:97:b5:
59:2d:ab:6a:a3:8b:eb:0f:d6:d5:97:04:ca:8a:05:a8:a5:2c:
82:fc:be:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:07:49 2026 by rpki-client