This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/ODMDEGyVLTmd47TMfFo6JexY6HQ.roa
File: ODMDEGyVLTmd47TMfFo6JexY6HQ.roa (raw, json)
Hash identifier: zruo3XY1xsZ3gUUyKc7wrw3okSMA8oCjUH3Rw6OmsMw=
Subject key identifier: 38:33:03:10:6C:95:2D:39:9D:E3:B4:CC:7C:5A:3A:25:EC:58:E8:74
Certificate issuer: /CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Certificate serial: 019B775895C4E347607C595FFC9EF9F454FC
Authority key identifier: 57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/ODMDEGyVLTmd47TMfFo6JexY6HQ.roa
Signing time: Thu 01 Jan 2026 02:17:32 +0000
ROA not before: Thu 01 Jan 2026 02:17:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209242
IP address blocks: 185.251.80.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:58:95:c4:e3:47:60:7c:59:5f:fc:9e:f9:f4:54:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Validity
Not Before: Jan 1 02:17:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=383303106c952d399de3b4cc7c5a3a25ec58e874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:d8:e1:2d:04:1a:9e:ec:3e:0d:9d:4a:8c:14:
8e:03:01:6d:78:73:91:c3:fb:1f:d3:be:3f:3c:87:
1a:b6:50:27:03:69:9b:ee:23:4a:4d:bb:e9:9b:f9:
6d:2a:98:e6:40:dc:7d:dd:13:b7:90:73:c7:e6:90:
bb:44:52:a1:e0:8b:c8:e3:3f:81:5c:8f:25:91:57:
a5:8d:e9:34:ba:26:60:0d:7a:35:55:0f:62:1a:3a:
dc:4f:da:7a:db:b6:61:d1:42:d0:e2:a5:4f:d9:ff:
12:d2:53:24:3f:d1:38:43:84:fb:3c:f9:b8:1f:5e:
35:b9:4e:b2:2d:05:5f:a1:dd:74:4b:61:19:29:57:
52:03:f2:98:97:81:ea:84:36:5d:3e:a2:4f:07:e8:
d0:52:23:15:9f:6b:cb:9b:05:a8:39:2f:de:63:21:
f4:db:05:c5:02:75:8a:ab:c0:d6:5c:be:a9:5a:c2:
7d:67:e6:82:cd:4d:97:95:e3:9d:78:18:1d:e5:d0:
64:d7:0c:0b:4b:31:10:4e:5a:b8:06:cc:cc:6a:3a:
37:bb:0f:1d:c1:4e:a0:9c:87:73:50:67:9c:58:6e:
18:f2:3f:12:5b:df:79:c8:ef:9b:88:0e:72:b4:e9:
08:c2:45:f1:48:71:1a:dd:e3:8f:68:c3:a7:cc:fd:
f5:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:33:03:10:6C:95:2D:39:9D:E3:B4:CC:7C:5A:3A:25:EC:58:E8:74
X509v3 Authority Key Identifier:
keyid:57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/ODMDEGyVLTmd47TMfFo6JexY6HQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.251.80.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:b1:e1:f4:a7:43:83:40:7b:d8:0c:c3:31:b3:ab:86:36:de:
99:56:18:48:be:60:3f:3e:7b:08:a3:8e:09:51:6d:ca:91:7e:
63:bd:d6:1c:72:43:1e:54:51:a7:65:b3:9e:36:26:f2:8c:81:
81:fe:62:bc:03:72:b0:c6:89:6e:b0:21:e8:a2:85:df:2a:0d:
b1:34:67:97:b2:d4:e1:8c:91:7d:60:58:29:04:2e:95:49:5d:
fc:20:6e:d0:d5:64:3e:91:e2:74:09:64:d1:d1:6d:96:78:18:
8d:63:5f:65:fb:34:0a:34:92:e1:58:6b:38:8a:22:3c:a5:af:
22:84:9e:b3:fd:dc:bf:64:f1:41:d6:30:c6:c6:51:52:4c:b0:
c9:65:5c:9f:ce:fc:0d:2a:91:0a:28:bc:1d:3e:91:9b:e6:7f:
81:da:d9:4c:bf:7c:68:30:a0:fa:df:46:0a:51:e5:a0:2d:f1:
f3:81:88:04:76:d9:08:5e:77:74:81:41:c8:34:1f:e7:6a:6b:
06:78:26:69:8e:0b:ef:d7:98:f5:a3:b3:77:1a:58:aa:00:76:
68:b3:7f:ab:32:ec:f6:22:80:0f:ad:d5:a3:35:b8:e3:2b:39:
60:95:df:cf:e9:4c:63:39:33:7f:d5:84:a9:0b:cb:0f:b0:ce:
83:4d:9a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:33:19 2026 by rpki-client