This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/ogeLgfFMk0tfTmUZf9Mc6hQMOKk.roa
File: ogeLgfFMk0tfTmUZf9Mc6hQMOKk.roa (raw, json)
Hash identifier: 6KJzsBOmWkWNjIPw+pN6XcIjmWVNJnyQyPCTB+CKohg=
Subject key identifier: A2:07:8B:81:F1:4C:93:4B:5F:4E:65:19:7F:D3:1C:EA:14:0C:38:A9
Certificate issuer: /CN=ab8c6c58b607ff23ae7175a61682c75480f1e214
Certificate serial: 019B7C80607FDC3F184004418F067A88BB59
Authority key identifier: AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/ogeLgfFMk0tfTmUZf9Mc6hQMOKk.roa
Signing time: Fri 02 Jan 2026 02:19:06 +0000
ROA not before: Fri 02 Jan 2026 02:19:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57444
IP address blocks: 188.247.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:80:60:7f:dc:3f:18:40:04:41:8f:06:7a:88:bb:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab8c6c58b607ff23ae7175a61682c75480f1e214
Validity
Not Before: Jan 2 02:19:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a2078b81f14c934b5f4e65197fd31cea140c38a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d8:b1:8a:23:73:60:3a:28:8c:39:3c:5b:38:
7c:72:bb:3f:b3:bd:b8:6c:da:55:41:f7:0e:d3:76:
8f:1b:ea:10:08:ed:3b:c6:f7:35:a2:8d:ae:71:78:
e3:48:a0:77:27:7a:a1:40:0f:12:79:17:82:37:19:
d9:1a:46:73:09:94:34:a4:cb:b4:f8:16:bc:76:dd:
d0:af:91:73:a8:e4:1b:de:d8:67:fa:0d:34:23:8a:
db:ba:57:eb:f3:ff:43:63:ee:d5:40:45:30:67:0b:
67:fe:42:16:f7:7c:e2:62:b6:ca:28:5f:29:44:9b:
2d:13:d2:e3:f4:36:30:2e:11:14:0f:89:50:83:39:
06:27:22:ec:2a:c8:f2:49:18:5a:36:1e:25:c9:1e:
4d:5a:da:bb:65:43:13:bc:d1:41:fe:1b:6d:68:85:
e2:08:bf:40:11:7b:e8:e8:ab:11:76:ce:ec:a8:39:
b8:cd:84:09:3d:75:82:e4:89:0d:2c:ee:98:7b:25:
60:be:41:3b:25:a1:04:11:e8:86:bc:f7:cb:22:91:
35:1e:66:02:92:16:a0:4b:f3:5b:c4:f4:8d:4d:45:
63:ee:93:14:78:96:65:e7:be:df:78:c9:a0:5f:79:
95:5b:d4:67:56:36:3c:a9:e1:50:93:da:4e:b9:7a:
ad:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:07:8B:81:F1:4C:93:4B:5F:4E:65:19:7F:D3:1C:EA:14:0C:38:A9
X509v3 Authority Key Identifier:
keyid:AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/ogeLgfFMk0tfTmUZf9Mc6hQMOKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.247.234.0/24
Signature Algorithm: sha256WithRSAEncryption
61:36:e6:71:d7:e1:c3:d4:8a:05:a8:02:ba:10:2b:e1:3a:b9:
d0:94:50:82:b3:40:dd:b9:1b:4c:39:79:7c:f7:89:6b:0c:c6:
db:39:ad:b1:59:58:f3:c8:7e:39:01:8e:d2:15:26:04:df:08:
86:49:39:76:6a:65:98:36:4e:a2:2e:9c:09:68:9e:a2:50:6f:
4d:9a:de:d7:71:5a:da:51:d2:14:e9:d6:66:89:a8:16:85:ef:
8c:26:a4:6f:b5:73:a4:21:10:79:b0:c0:6f:7b:a8:8c:3b:38:
bd:27:69:45:f9:ca:fb:81:ae:f5:58:80:ab:a7:09:eb:56:16:
f3:14:82:52:03:2d:14:36:c8:7f:75:9c:53:7e:1c:f6:8d:30:
12:d9:38:5d:fc:78:c0:dc:ee:98:1c:d2:fc:19:4f:d0:41:2c:
30:1b:50:c4:d9:cd:70:44:2b:21:d7:31:67:08:f6:69:36:b3:
4b:67:9c:11:7b:08:b2:f4:e5:51:83:53:78:1c:6c:ab:1e:78:
0a:80:62:30:b7:de:27:53:98:5e:4e:0e:1a:6a:3c:0f:49:af:
d9:04:82:dc:c7:76:9e:32:b0:bd:62:31:6c:48:33:46:06:46:
06:ce:e8:99:f1:e8:40:68:15:07:1d:7a:dd:37:50:a3:d0:fe:
bc:a0:21:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:14:08 2026 by rpki-client