This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/c8ea46-9dc2-4036-9096-4cd77b38f1b1/1/oaJjif49aOtwhtdpNwsRYaoP_Rw.roa
File: oaJjif49aOtwhtdpNwsRYaoP_Rw.roa (raw, json)
Hash identifier: n1QGSuy4XICYBqS37wdCnghgVjW6ky2PfMzer7DCkkQ=
Subject key identifier: A1:A2:63:89:FE:3D:68:EB:70:86:D7:69:37:0B:11:61:AA:0F:FD:1C
Certificate issuer: /CN=ed73c26609b1b21d87a681302ef2d26fc0a00fa3
Certificate serial: 019B7F14F416AD619EE4BF3F15F24C40661A
Authority key identifier: ED:73:C2:66:09:B1:B2:1D:87:A6:81:30:2E:F2:D2:6F:C0:A0:0F:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XPCZgmxsh2HpoEwLvLSb8CgD6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/c8ea46-9dc2-4036-9096-4cd77b38f1b1/1/oaJjif49aOtwhtdpNwsRYaoP_Rw.roa
Signing time: Fri 02 Jan 2026 14:20:38 +0000
ROA not before: Fri 02 Jan 2026 14:20:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8218
IP address blocks: 194.8.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/c8ea46-9dc2-4036-9096-4cd77b38f1b1/1/7XPCZgmxsh2HpoEwLvLSb8CgD6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/c8ea46-9dc2-4036-9096-4cd77b38f1b1/1/7XPCZgmxsh2HpoEwLvLSb8CgD6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7XPCZgmxsh2HpoEwLvLSb8CgD6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 20:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:14:f4:16:ad:61:9e:e4:bf:3f:15:f2:4c:40:66:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed73c26609b1b21d87a681302ef2d26fc0a00fa3
Validity
Not Before: Jan 2 14:20:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a1a26389fe3d68eb7086d769370b1161aa0ffd1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9d:2d:bd:46:83:2c:ea:5c:cb:c5:74:9a:43:
fa:43:7c:95:4b:dd:0f:a8:02:0f:fe:4d:01:02:cb:
ee:86:56:53:ab:a7:cc:fe:d6:9f:cc:4d:a9:22:db:
9d:23:39:ec:9e:88:7f:73:08:00:29:14:30:c8:92:
a7:63:42:91:57:b6:38:f5:71:fe:7e:c7:c7:09:c7:
82:4a:0e:cd:13:c1:9d:bf:dd:37:d0:af:4f:fa:04:
24:3d:54:c0:d7:ef:35:7d:07:8a:66:5f:24:c9:55:
8f:09:12:ca:6f:d3:af:88:a6:5f:e5:d4:66:7a:cc:
84:f2:f1:21:55:a8:6f:1c:e1:6b:b8:78:f2:e6:67:
04:7b:d8:9e:f1:e5:4c:e0:8f:2e:ab:86:ae:fb:8a:
94:d9:0d:b4:9e:20:6f:cd:24:ef:22:e4:72:67:13:
0f:de:74:2c:c0:c7:c8:ab:37:56:a0:fd:88:22:b3:
fe:f8:c1:aa:c5:7a:ad:f4:20:bc:a7:a7:43:d9:de:
32:29:ab:d7:80:16:c7:3c:2c:d2:30:03:3c:bf:13:
6d:31:75:af:84:9c:9e:dd:b7:4a:6e:eb:9e:9a:39:
b2:42:59:42:36:c2:45:a7:1c:e7:c4:75:a3:0d:b1:
58:ca:e6:e2:b8:d8:66:cf:fc:af:c6:42:36:9b:f8:
45:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:A2:63:89:FE:3D:68:EB:70:86:D7:69:37:0B:11:61:AA:0F:FD:1C
X509v3 Authority Key Identifier:
keyid:ED:73:C2:66:09:B1:B2:1D:87:A6:81:30:2E:F2:D2:6F:C0:A0:0F:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XPCZgmxsh2HpoEwLvLSb8CgD6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c8ea46-9dc2-4036-9096-4cd77b38f1b1/1/oaJjif49aOtwhtdpNwsRYaoP_Rw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c8ea46-9dc2-4036-9096-4cd77b38f1b1/1/7XPCZgmxsh2HpoEwLvLSb8CgD6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.8.50.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:0b:31:20:c2:e8:a9:10:3f:2b:07:eb:6f:23:2b:08:45:0e:
ba:f5:6c:84:72:df:96:4b:6f:1c:e2:49:4a:dd:e0:45:d8:80:
28:41:56:11:ff:52:90:3f:e6:bc:93:51:2c:9f:59:03:bf:ca:
53:b7:f4:af:78:f7:9e:07:0b:c6:30:46:ae:ea:33:50:43:8a:
5d:4f:05:59:d8:9a:b8:0f:5c:fb:66:30:ca:6a:58:a2:8d:b1:
a9:85:8a:d6:60:d1:c1:6f:20:f8:e5:5f:e5:fe:ed:1e:00:5a:
c7:f7:68:b9:d8:6e:0e:3f:44:3b:22:a8:2c:5f:9e:9e:4c:40:
d4:d1:1e:1d:92:74:64:2d:8a:b7:bc:cb:fd:d9:ab:d9:78:0a:
fc:63:5b:8f:37:f8:7d:2b:12:6f:55:ef:8f:b2:d4:25:1c:7b:
c8:b3:ba:a8:2b:b2:bb:34:11:da:f7:1c:35:e3:bf:04:c0:52:
43:fd:01:cf:18:92:18:af:bf:33:75:00:be:fa:fa:5d:3e:b5:
73:17:0a:dc:5a:17:be:f1:0a:19:03:a4:79:6c:6d:aa:e7:61:
d8:e4:73:5e:38:e0:00:34:89:a5:6a:63:70:53:12:da:b8:0c:
c7:e9:ef:a6:b3:05:5a:25:39:1f:7d:11:81:a1:06:28:e4:a3:
5c:f3:de:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:19:34 2026 by rpki-client