This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/COhxtBFve16URB_MEOFhKay9rTs.roa
File: COhxtBFve16URB_MEOFhKay9rTs.roa (raw, json)
Hash identifier: jOV3WCjtAk4tHvHdqA8saI4UUBzsbtvE9u3e+QDh71M=
Subject key identifier: 08:E8:71:B4:11:6F:7B:5E:94:44:1F:CC:10:E1:61:29:AC:BD:AD:3B
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 019B7AC8E7E09A2DE3DC6B9A90337B813FA6
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/COhxtBFve16URB_MEOFhKay9rTs.roa
Signing time: Thu 01 Jan 2026 18:19:05 +0000
ROA not before: Thu 01 Jan 2026 18:19:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49902
IP address blocks: 77.137.224.0/19 maxlen: 20
77.143.0.0/16 maxlen: 18
77.143.17.0/24 maxlen: 24
195.115.116.0/22 maxlen: 22
213.222.64.0/18 maxlen: 19
213.222.96.0/19 maxlen: 19
213.223.45.0/24 maxlen: 24
213.223.46.0/23 maxlen: 24
213.223.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 18:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:c8:e7:e0:9a:2d:e3:dc:6b:9a:90:33:7b:81:3f:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Jan 1 18:19:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=08e871b4116f7b5e94441fcc10e16129acbdad3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:80:3f:1d:9b:a9:37:ed:6b:30:b5:08:0f:31:
63:3f:18:69:fe:4a:52:e1:cb:75:b2:b6:da:f1:13:
4c:fc:cd:1b:2a:2c:32:fb:dd:43:5f:6c:3e:37:32:
30:c2:87:ac:9a:62:b7:ca:10:6d:a9:8e:49:20:ac:
25:74:61:4c:0d:5e:23:3d:2f:3f:86:4e:d4:92:3c:
85:63:c1:2d:de:ca:ca:e0:d1:00:22:d7:e9:4e:bf:
15:3b:04:58:c6:00:42:ba:cf:24:a5:cb:21:7d:8c:
d1:fa:b8:96:78:4b:85:62:ef:62:8a:c8:1e:a1:17:
e7:4b:cf:c4:d8:c3:e9:8b:62:ac:0f:7e:31:c5:4f:
5c:42:84:64:a2:09:e7:c9:61:97:60:d8:01:5c:5e:
db:fa:6b:2e:75:43:c8:95:30:f9:fd:e3:d0:8c:8c:
73:df:cd:3f:4d:8c:0d:1b:1f:95:8b:ee:7b:5f:92:
fb:8d:ce:87:6a:64:ab:89:e2:10:0f:a8:3d:06:d8:
3c:eb:2b:6f:6a:da:97:f4:05:0b:f5:74:9e:19:18:
18:ff:39:9a:6f:a5:a2:f8:46:b1:03:0a:ff:af:b9:
40:25:5e:4e:0d:fd:a4:e4:b9:02:b0:5e:9c:a0:88:
6b:8d:95:00:df:0b:9b:01:47:67:5c:43:0a:bb:98:
55:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:E8:71:B4:11:6F:7B:5E:94:44:1F:CC:10:E1:61:29:AC:BD:AD:3B
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/COhxtBFve16URB_MEOFhKay9rTs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.137.224.0/19
77.143.0.0/16
195.115.116.0/22
213.222.64.0/18
213.223.45.0-213.223.47.255
213.223.138.0/24
Signature Algorithm: sha256WithRSAEncryption
33:f9:c5:c0:e8:89:8e:09:c9:0e:f3:ee:f7:2b:81:cb:eb:7d:
83:8c:72:73:cb:e7:bb:44:98:f0:80:8c:af:4c:16:9d:58:a1:
83:66:72:07:ae:55:d9:97:5e:e2:31:74:8f:be:50:0d:9a:3e:
1b:78:6f:5c:57:71:fa:0d:91:26:26:b6:d1:dc:4f:b1:c6:c0:
1f:cc:7b:3e:47:f9:f1:f9:68:5d:d1:1a:49:64:07:54:32:38:
f4:ee:84:c2:77:1c:dc:13:51:f4:dd:d4:1e:22:fd:6d:39:0a:
1a:4c:14:27:a0:cc:c0:83:d9:53:d0:f3:34:8d:fd:0b:63:3a:
90:90:d2:67:9c:78:ea:78:7c:b1:76:51:c4:c9:81:62:89:37:
90:db:24:ad:bc:8e:7b:45:18:bb:1a:fc:8b:61:21:6c:9d:d0:
61:9a:6e:3e:7b:69:68:c3:f3:18:68:6a:8a:6d:d4:2d:32:67:
04:43:51:4b:07:65:55:9f:bf:dd:0e:97:12:e2:74:ce:28:4f:
da:de:cc:d5:cb:01:69:32:cf:ab:6f:a4:eb:0b:cc:41:89:6d:
1c:96:e3:16:29:87:42:63:c5:c8:43:7e:a2:6e:d4:72:d0:ef:
6d:e2:ca:05:a4:a9:ce:06:97:0f:eb:f8:dd:82:89:c4:b8:8b:
d6:e8:8e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:06:09 2026 by rpki-client