This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/o-lwE03BQjuSCoHPvrungn8RW5E.roa
File: o-lwE03BQjuSCoHPvrungn8RW5E.roa (raw, json)
Hash identifier: 6jhTwsjRV3a0rHOssSDB/4JB3N1eJdRGn/9ePaST8TM=
Subject key identifier: A3:E9:70:13:4D:C1:42:3B:92:0A:81:CF:BE:BB:A7:82:7F:11:5B:91
Certificate issuer: /CN=8353accb94e10cf8c2c29679067ee39099f404d3
Certificate serial: 019B7BA3C20F6A04CC91DF79B724A3D646FC
Authority key identifier: 83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/o-lwE03BQjuSCoHPvrungn8RW5E.roa
Signing time: Thu 01 Jan 2026 22:18:08 +0000
ROA not before: Thu 01 Jan 2026 22:18:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43754
IP address blocks: 93.126.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:a3:c2:0f:6a:04:cc:91:df:79:b7:24:a3:d6:46:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8353accb94e10cf8c2c29679067ee39099f404d3
Validity
Not Before: Jan 1 22:18:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a3e970134dc1423b920a81cfbebba7827f115b91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:f4:aa:6c:64:34:b2:b0:2d:5a:79:f2:6a:06:
bc:ce:c0:f3:2f:1b:27:8d:bd:4f:67:5d:3f:b3:f2:
4f:9c:b9:d2:42:1a:47:78:c3:ef:44:86:60:99:4a:
36:23:d5:fc:2c:b2:88:b5:a5:07:38:aa:a4:75:fa:
80:09:0d:40:33:a3:de:af:26:01:fd:70:d5:51:ed:
62:52:42:0b:66:4d:d4:2c:33:d7:a9:66:82:2d:53:
34:80:02:69:44:c2:15:40:29:de:a7:85:e0:cc:d2:
83:9e:26:5d:19:66:81:3c:21:83:af:1d:51:71:10:
2a:33:27:19:8a:ac:58:00:16:4d:05:09:0f:72:80:
dc:df:9a:89:d5:8b:94:28:09:f2:a6:4c:1d:58:e1:
39:b9:81:d5:f9:c6:5c:a3:8d:11:66:38:b5:db:29:
6c:5a:e8:a5:11:32:f4:3d:66:25:ae:96:a8:b6:90:
f0:bd:6a:fb:dc:ab:8c:8a:54:bc:fd:87:23:69:36:
ec:2e:13:33:a9:bf:1d:7b:bf:0f:3e:8d:5d:03:4e:
46:0a:0c:ac:94:b9:bd:f6:ea:f0:41:42:c8:b9:5f:
84:52:c2:92:95:62:07:79:dd:6d:6e:b3:f6:45:22:
88:b8:1e:5e:5c:f9:48:c7:d9:0c:e9:01:d6:ab:e6:
6a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:E9:70:13:4D:C1:42:3B:92:0A:81:CF:BE:BB:A7:82:7F:11:5B:91
X509v3 Authority Key Identifier:
keyid:83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/o-lwE03BQjuSCoHPvrungn8RW5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.126.50.0/24
Signature Algorithm: sha256WithRSAEncryption
47:47:0d:55:f5:ad:84:2d:ad:d7:a5:f5:f9:b2:a3:14:0f:4e:
a8:8b:ae:f5:45:3e:b8:99:ba:5a:75:83:b2:d8:ab:01:fd:83:
44:80:c3:b2:56:70:3c:8b:87:67:e8:83:a8:82:ab:41:80:bd:
89:df:8e:8f:7e:6f:a9:2f:b2:c7:61:34:4f:19:19:a0:c8:b4:
a9:81:15:b2:91:e4:fa:f6:cc:eb:1f:18:14:9b:22:3c:30:26:
ff:b8:b9:2a:f0:de:84:ab:33:cf:f0:6c:c0:37:49:ff:31:9b:
dd:26:7a:75:2f:57:fc:b0:4f:92:1c:c1:cc:9d:42:19:2d:f5:
25:56:b7:5b:71:d2:63:81:8a:e8:67:db:81:d4:1d:a7:63:88:
88:81:ab:19:84:da:6a:34:58:0b:d5:31:51:0a:fe:f0:eb:91:
22:2f:c9:d3:7c:63:4e:be:16:21:83:26:58:c3:15:27:47:6c:
bb:bb:0d:40:85:be:01:69:07:2e:b2:c2:51:bf:0c:ce:25:c5:
91:60:d8:71:91:d2:84:d7:3f:6f:7d:32:08:db:fb:77:51:fe:
a8:2d:46:6f:2a:5f:b6:22:b4:91:81:4f:67:80:e6:e4:66:9c:
09:5d:87:44:af:38:89:4f:fe:16:5b:85:34:f5:52:7e:bc:33:
a1:5a:9e:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:24:04 2026 by rpki-client