This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/0xO-5vymUugulcEvyamlXoIstyM.roa
File: 0xO-5vymUugulcEvyamlXoIstyM.roa (raw, json)
Hash identifier: 6l6s/Vt8fLxGt6mK+KU71gi0MpAS1smlkn4Fo0XbV3o=
Subject key identifier: D3:13:BE:E6:FC:A6:52:E8:2E:95:C1:2F:C9:A9:A5:5E:82:2C:B7:23
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 019B7F84B0101D4862112DC630BDFA00E825
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/0xO-5vymUugulcEvyamlXoIstyM.roa
Signing time: Fri 02 Jan 2026 16:22:40 +0000
ROA not before: Fri 02 Jan 2026 16:22:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47726
IP address blocks: 92.38.8.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:84:b0:10:1d:48:62:11:2d:c6:30:bd:fa:00:e8:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 16:22:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d313bee6fca652e82e95c12fc9a9a55e822cb723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3e:00:9c:8d:13:6e:c3:a8:92:e7:43:a8:e6:
0b:4f:ef:ba:a6:c8:7d:ba:a2:78:3f:29:76:d9:d6:
6d:ad:9e:26:46:34:b5:28:ff:70:a4:9c:05:ec:f6:
1e:d5:cb:b5:b2:38:7c:90:35:50:40:ef:fe:9f:c9:
b5:b9:95:3f:ee:a6:37:a4:02:6c:d1:66:49:2c:a6:
d8:6a:6e:ae:bc:c8:e7:50:d1:ee:25:0f:57:6d:4a:
ad:e9:01:c3:6a:78:46:0a:7c:49:ca:5f:cb:09:7a:
04:cf:1d:a6:38:3e:20:dc:f3:4b:ba:ff:fc:ff:6c:
3c:a0:2a:1b:89:84:ec:c0:43:fe:79:de:5c:49:34:
f5:35:c9:74:e0:58:8c:29:ce:d3:24:5d:4a:5b:2a:
66:ba:10:e8:13:df:bf:72:e0:4c:e8:7b:d2:13:20:
f5:45:d9:2c:5f:97:fa:ee:58:17:42:20:1e:57:ad:
bf:d4:18:62:dc:26:2d:98:fd:29:18:c8:57:02:30:
b3:10:b7:86:04:71:e3:fb:f5:2b:0c:da:c1:a9:6f:
12:b7:a7:33:6c:41:4b:9a:91:32:04:63:2f:21:8a:
69:f4:85:6e:b2:ea:9c:9a:37:31:99:41:cb:84:42:
e5:22:86:29:75:a7:1b:0f:e9:12:59:42:1e:dc:cd:
b2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:13:BE:E6:FC:A6:52:E8:2E:95:C1:2F:C9:A9:A5:5E:82:2C:B7:23
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/0xO-5vymUugulcEvyamlXoIstyM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.38.8.0/21
Signature Algorithm: sha256WithRSAEncryption
4a:bf:94:64:3b:18:97:f0:ed:ab:b0:d4:da:fa:f0:fd:81:f3:
6c:61:f0:a2:50:57:1d:38:9e:dd:ba:8b:68:cb:f1:de:c1:4a:
4b:e6:84:25:49:45:15:a4:6e:0d:48:47:0d:c9:67:d6:7c:4e:
57:5c:28:30:5d:a7:ea:20:84:57:8a:c0:86:e2:ae:28:d6:d2:
fa:a6:35:2c:e8:2b:38:e0:8d:05:79:79:79:80:b8:dd:16:a9:
30:73:a3:35:41:f1:29:22:01:83:d4:fc:e7:81:a1:2d:82:69:
df:15:49:24:02:bc:f6:37:9d:59:61:a1:91:23:f3:93:14:84:
20:ec:ef:62:5b:5b:d9:fa:a4:41:78:58:82:6c:aa:9b:ee:5f:
3b:8a:05:5d:17:db:d1:5c:75:cb:e2:ab:ec:7b:3f:21:5d:06:
66:a4:10:34:35:2a:dd:ca:b7:9a:e2:4b:fc:dc:89:8c:aa:33:
ed:94:28:70:c6:ae:e9:78:0b:f2:a1:f2:46:e0:32:88:93:bd:
1f:88:99:59:ad:77:9e:ba:79:ab:a6:39:3c:2c:b8:5f:9c:32:
67:24:41:88:10:5c:64:f5:c8:e5:ac:68:49:64:3b:84:a5:6d:
06:58:3a:77:07:a3:f2:f8:7a:cd:6a:44:e7:4e:ac:20:b8:1e:
89:7f:57:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:48:35 2026 by rpki-client