This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/oxTAJtFulW-chvith-8zdTwvBaE.roa
File: oxTAJtFulW-chvith-8zdTwvBaE.roa (raw, json)
Hash identifier: lMuFQiucnW6U6CCluh31j9wYv07fkW63KYnYVmhuXBg=
Subject key identifier: A3:14:C0:26:D1:6E:95:6F:9C:86:F8:AD:87:EF:33:75:3C:2F:05:A1
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 019B77C78DFD420137526B5A7F1213071609
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/oxTAJtFulW-chvith-8zdTwvBaE.roa
Signing time: Thu 01 Jan 2026 04:18:45 +0000
ROA not before: Thu 01 Jan 2026 04:18:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205034
IP address blocks: 81.15.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft
rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 08:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c7:8d:fd:42:01:37:52:6b:5a:7f:12:13:07:16:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 04:18:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a314c026d16e956f9c86f8ad87ef33753c2f05a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:87:b7:be:d0:da:e1:44:f8:7c:cc:44:19:08:
a3:74:36:03:49:5e:de:83:40:dc:65:3b:80:eb:ac:
b8:0b:1c:b1:96:08:c7:f4:37:6b:af:a5:27:07:68:
bb:00:df:fd:ff:aa:5e:b7:a8:31:7d:a1:8d:3b:32:
40:d0:49:52:a8:43:a9:2b:c7:86:49:ca:83:6b:0c:
a3:31:dd:5f:4b:44:7f:2d:24:09:0e:09:91:94:72:
3b:eb:3f:e0:d1:7a:23:ee:d8:16:49:0a:e7:0b:c9:
f7:b0:e8:9e:24:f5:f8:3b:f4:95:db:1e:7d:4a:8c:
cf:0d:a7:3e:4c:25:c7:48:61:20:06:cf:da:78:73:
bf:2f:dc:d7:8c:83:fa:df:ac:ea:11:ba:aa:fe:dc:
d5:17:05:c5:e1:dd:90:f1:1d:47:99:1b:f9:8d:c5:
f4:89:99:ce:83:03:0b:f5:bb:03:73:fb:2a:05:e4:
2b:c3:c5:e8:d8:cf:e8:47:bb:60:6b:21:25:5e:44:
98:f8:f4:37:1e:02:e6:23:96:da:8f:8e:de:31:14:
d4:41:29:66:79:92:4f:4a:30:fb:6e:0f:7c:a8:6f:
d3:1e:d2:db:7b:97:95:ce:1d:61:46:f0:6e:9d:c2:
3b:e0:c5:c4:41:ac:d0:86:cc:28:48:17:81:84:f5:
27:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:14:C0:26:D1:6E:95:6F:9C:86:F8:AD:87:EF:33:75:3C:2F:05:A1
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/oxTAJtFulW-chvith-8zdTwvBaE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.15.145.0/24
Signature Algorithm: sha256WithRSAEncryption
07:7f:c6:ad:c9:7a:0b:ba:49:2d:f5:ec:80:f0:c0:84:50:05:
83:bb:44:d3:03:55:50:80:33:11:48:87:e3:19:51:bb:8b:dc:
fd:d3:6e:4a:4d:8d:70:82:88:aa:4c:8c:cc:a3:78:17:03:3b:
21:3b:8b:7a:42:ed:5f:d2:8d:fc:02:ff:3f:bd:89:b6:73:a3:
fa:79:0b:4c:a2:bb:3c:3a:ae:79:c4:b6:b0:47:c9:f8:90:3e:
bf:5d:ad:b2:96:20:43:e5:c7:35:95:b8:96:6b:d7:05:c1:59:
ad:e8:07:19:9b:f8:42:c9:9b:ae:33:67:95:26:fa:b5:8d:8c:
b6:fe:7a:26:9f:2e:27:30:67:f7:c2:d5:eb:f5:93:bd:4f:61:
80:95:75:98:28:3d:ad:d6:49:b1:b1:9f:af:23:07:cc:25:51:
2c:62:8e:14:bd:04:39:ed:31:40:ae:a8:eb:e9:97:33:5d:c3:
d9:eb:0b:41:91:77:ae:3b:3c:4f:46:9b:41:84:eb:16:41:e8:
b8:97:be:9c:c7:d7:74:69:89:ab:c7:01:c0:a1:3b:2d:7e:b8:
7a:62:a4:cd:0d:ae:91:58:54:47:87:00:fa:27:7f:87:f4:8f:
06:de:09:9f:cf:89:eb:50:36:2b:93:19:03:51:b5:16:ca:f6:
03:73:79:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:16:14 2026 by rpki-client