This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/55be75-0e0a-413e-89cc-378a3e7bc083/1/ooscOEIlizWjX7MF_vUlLouGttM.roa
File: ooscOEIlizWjX7MF_vUlLouGttM.roa (raw, json)
Hash identifier: MbEpb6Fu+D3CAov79RuTyeWmbIxOn8Qmu/kJUULRZ/E=
Subject key identifier: A2:8B:1C:38:42:25:8B:35:A3:5F:B3:05:FE:F5:25:2E:8B:86:B6:D3
Certificate issuer: /CN=e8fdfa71400ce370b75f73778048574e4627431b
Certificate serial: 019B7E37C811F41739A60FB2E29C1AF73CCC
Authority key identifier: E8:FD:FA:71:40:0C:E3:70:B7:5F:73:77:80:48:57:4E:46:27:43:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6P36cUAM43C3X3N3gEhXTkYnQxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/55be75-0e0a-413e-89cc-378a3e7bc083/1/ooscOEIlizWjX7MF_vUlLouGttM.roa
Signing time: Fri 02 Jan 2026 10:19:03 +0000
ROA not before: Fri 02 Jan 2026 10:19:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43885
IP address blocks: 185.112.79.0/24 maxlen: 24
185.247.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/55be75-0e0a-413e-89cc-378a3e7bc083/1/6P36cUAM43C3X3N3gEhXTkYnQxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/55be75-0e0a-413e-89cc-378a3e7bc083/1/6P36cUAM43C3X3N3gEhXTkYnQxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/6P36cUAM43C3X3N3gEhXTkYnQxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:37:c8:11:f4:17:39:a6:0f:b2:e2:9c:1a:f7:3c:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8fdfa71400ce370b75f73778048574e4627431b
Validity
Not Before: Jan 2 10:19:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a28b1c3842258b35a35fb305fef5252e8b86b6d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b7:d7:6a:7c:f1:4a:19:da:a7:47:9c:3b:19:
d3:4d:89:90:53:2c:40:20:de:b2:b3:2f:1e:5c:d3:
90:b2:85:9a:82:13:bc:35:c7:77:05:60:28:3a:bd:
8a:89:3b:1a:f5:d5:1d:4c:bf:d5:c2:17:de:6c:4d:
ba:7b:b3:95:84:fa:77:6b:b4:0e:72:e1:4f:34:9b:
39:4e:96:ba:d1:f4:01:8d:52:64:18:b6:20:6e:2b:
f2:9d:45:9d:4e:55:6e:71:c0:97:6a:1c:51:4b:df:
0e:b4:9b:0a:52:54:13:c7:ef:3c:d9:9f:d6:4c:6b:
31:ad:c2:1f:96:50:43:99:8c:dc:32:41:b4:66:8f:
9e:96:4f:ad:2b:2a:4c:a2:f0:3f:2c:57:73:4f:6f:
d7:c4:5e:66:d6:d2:f0:cd:b8:cc:8a:cd:ee:9f:fd:
dd:d9:34:67:e9:78:97:a5:ba:63:42:ae:fa:72:dd:
68:66:8a:d8:ef:34:8f:16:8f:7f:1e:8b:85:73:c9:
99:04:f6:0c:c0:cb:80:76:69:d1:98:65:7b:a0:e8:
88:4f:f2:93:9c:38:a2:67:23:de:26:4c:14:27:4b:
14:bd:b3:ed:cc:28:79:1b:2e:1d:e6:6a:46:5e:bc:
f4:59:b3:17:90:dd:5c:2a:63:5e:3f:5b:42:30:7e:
4c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:8B:1C:38:42:25:8B:35:A3:5F:B3:05:FE:F5:25:2E:8B:86:B6:D3
X509v3 Authority Key Identifier:
keyid:E8:FD:FA:71:40:0C:E3:70:B7:5F:73:77:80:48:57:4E:46:27:43:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6P36cUAM43C3X3N3gEhXTkYnQxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/55be75-0e0a-413e-89cc-378a3e7bc083/1/ooscOEIlizWjX7MF_vUlLouGttM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/55be75-0e0a-413e-89cc-378a3e7bc083/1/6P36cUAM43C3X3N3gEhXTkYnQxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.112.79.0/24
185.247.124.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:94:ee:26:58:b3:cc:5a:85:30:9d:33:78:54:04:a7:6c:e6:
fb:7d:93:82:32:32:fc:83:1a:87:55:20:9b:78:50:b7:fc:fd:
17:c1:53:49:33:fb:17:8b:84:2c:f4:e3:cd:ee:20:d5:a8:7d:
c5:64:4f:95:96:d9:7e:7a:56:8e:77:53:8b:1e:8e:b1:63:76:
a2:86:38:59:b2:56:e4:48:83:fe:c9:74:6a:46:ac:11:b6:85:
c8:9d:41:3a:39:22:ba:54:cd:1a:c2:4a:e5:0a:04:de:ee:68:
02:b3:8f:b0:14:e3:bc:3a:03:57:d6:dc:f0:6d:09:a8:f3:5f:
fa:ca:3b:35:9a:14:43:02:63:d1:16:92:04:9d:5e:ae:aa:68:
55:55:5e:6a:3a:b5:6a:18:e8:b4:9a:b4:9e:fd:27:33:41:82:
24:9d:a1:48:e0:b3:49:04:f1:94:88:62:29:e9:33:f7:14:aa:
ac:12:14:4d:d3:c7:a9:fe:61:a7:ef:65:c0:c1:f2:e3:48:2b:
bc:c4:a0:ab:c3:70:0b:0d:36:7c:a8:09:32:0e:61:4b:1b:aa:
f6:2c:58:d3:35:a5:a5:15:18:6e:3d:b4:2f:b0:b0:d5:b9:c5:
3b:19:04:51:0f:73:0d:c9:0b:dd:70:a2:2c:c2:11:c2:db:a1:
1c:b7:f2:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:13:02 2026 by rpki-client