This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/oo1W6F0elMF6_CiE6UvVXxLai4o.roa
File: oo1W6F0elMF6_CiE6UvVXxLai4o.roa (raw, json)
Hash identifier: t1F5I9ggDgCDZTVdA+hfkYMiN/rTAkrjwkTHtKs69BY=
Subject key identifier: A2:8D:56:E8:5D:1E:94:C1:7A:FC:28:84:E9:4B:D5:5F:12:DA:8B:8A
Certificate issuer: /CN=742b1b5c075c3d3bdfa3525d476b1b2867c2a2ca
Certificate serial: 019B7E380209CFB454F75BB7592325D0263F
Authority key identifier: 74:2B:1B:5C:07:5C:3D:3B:DF:A3:52:5D:47:6B:1B:28:67:C2:A2:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dCsbXAdcPTvfo1JdR2sbKGfCoso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/oo1W6F0elMF6_CiE6UvVXxLai4o.roa
Signing time: Fri 02 Jan 2026 10:19:18 +0000
ROA not before: Fri 02 Jan 2026 10:19:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60558
IP address blocks: 185.62.36.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.mft
rsync://rpki.ripe.net/repository/DEFAULT/dCsbXAdcPTvfo1JdR2sbKGfCoso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:38:02:09:cf:b4:54:f7:5b:b7:59:23:25:d0:26:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=742b1b5c075c3d3bdfa3525d476b1b2867c2a2ca
Validity
Not Before: Jan 2 10:19:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a28d56e85d1e94c17afc2884e94bd55f12da8b8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ad:f2:83:83:e9:c2:43:62:ad:12:03:5f:27:
6b:b0:a6:42:7c:58:c6:68:3a:ff:de:16:b9:0f:6c:
70:01:db:e2:f3:1e:6d:c7:95:95:57:5a:b5:d3:1c:
7a:60:18:5e:e6:23:83:b4:af:12:93:70:0c:56:f0:
30:90:71:f0:b9:0d:6e:70:a4:f3:10:d6:62:d1:43:
cb:ac:db:1f:4a:89:94:22:93:0f:82:f2:76:5c:4b:
fd:50:16:bc:ce:a7:80:f5:fb:0f:73:a6:bd:7f:83:
02:77:3f:5b:97:4d:7f:d4:8b:f4:1c:6e:db:c1:ae:
34:c2:9f:85:dd:c7:37:e0:ac:78:c4:06:d7:0b:4c:
8f:a7:61:1b:84:1c:6b:b6:bc:fa:6c:96:f5:11:c2:
4f:74:3c:ec:cf:84:18:0d:f0:23:a8:20:d7:ad:f3:
80:97:28:46:ca:27:da:32:63:83:1e:4b:67:c8:27:
75:0a:b3:16:9d:f3:68:85:b7:16:75:d6:ce:97:78:
32:6f:20:dd:f2:8a:54:ea:28:c2:88:1a:6c:30:35:
cd:7d:91:4d:73:f1:a1:cf:2f:88:1a:d1:ee:62:89:
2e:3b:06:c2:24:bd:9b:e2:01:9c:dd:36:d1:24:de:
31:b8:3e:7d:fd:5b:d5:df:ba:8e:87:75:cd:7e:2a:
db:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:8D:56:E8:5D:1E:94:C1:7A:FC:28:84:E9:4B:D5:5F:12:DA:8B:8A
X509v3 Authority Key Identifier:
keyid:74:2B:1B:5C:07:5C:3D:3B:DF:A3:52:5D:47:6B:1B:28:67:C2:A2:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCsbXAdcPTvfo1JdR2sbKGfCoso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/oo1W6F0elMF6_CiE6UvVXxLai4o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.62.36.0/22
Signature Algorithm: sha256WithRSAEncryption
08:b4:1a:b0:e4:5b:12:6e:2b:6c:d7:cd:91:c8:3d:9d:61:6d:
f1:08:5b:25:35:3b:8e:62:94:70:95:33:8a:97:d7:1e:a6:f5:
4b:e9:9f:de:e1:a7:f8:0a:5e:3e:0b:00:4a:36:af:ef:0e:d2:
b5:23:e7:84:18:3a:cc:b0:fd:5d:cc:78:a8:5f:46:89:c6:73:
4d:19:d9:55:1d:fb:02:e5:b7:63:11:db:2f:8c:eb:27:c5:e5:
89:dc:f8:17:c3:51:9c:e5:f4:6b:4f:c8:80:64:79:d3:aa:4f:
c3:c6:69:53:f1:dd:9b:77:68:fd:5f:33:6c:51:12:09:68:77:
a6:20:5b:5c:6b:07:7c:1d:c9:8c:f6:19:75:b3:2d:b5:39:6f:
87:4c:78:9f:2f:05:77:f6:7f:63:40:c6:ec:fc:37:0e:1b:a7:
2e:5c:00:2d:5b:11:f4:5c:6a:a1:eb:56:65:df:03:60:75:6c:
31:6a:1d:b6:55:25:a4:75:bb:33:98:d0:83:e0:a2:f2:06:52:
48:32:94:d2:b9:08:70:ce:6b:87:03:f5:68:4d:7a:f3:e2:49:
fe:e8:c7:ec:99:f4:ff:0c:e8:53:9e:c1:e0:e1:19:e9:26:95:
5b:97:3d:a0:43:ea:6a:7a:df:b3:a4:0c:79:42:4e:29:7d:56:
d8:47:7f:54
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt+OAIJz7RU91u3WSMl0CY/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0MmIxYjVjMDc1YzNkM2JkZmEzNTI1ZDQ3NmIxYjI4Njdj
MmEyY2EwHhcNMjYwMTAyMTAxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMjhkNTZlODVkMWU5NGMxN2FmYzI4ODRlOTRiZDU1ZjEyZGE4YjhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo63yg4PpwkNirRIDXydrsKZCfFjG
aDr/3ha5D2xwAdvi8x5tx5WVV1q10xx6YBhe5iODtK8Sk3AMVvAwkHHwuQ1ucKTz
ENZi0UPLrNsfSomUIpMPgvJ2XEv9UBa8zqeA9fsPc6a9f4MCdz9bl01/1Iv0HG7b
wa40wp+F3cc34Kx4xAbXC0yPp2EbhBxrtrz6bJb1EcJPdDzsz4QYDfAjqCDXrfOA
lyhGyifaMmODHktnyCd1CrMWnfNohbcWddbOl3gybyDd8opU6ijCiBpsMDXNfZFN
c/Ghzy+IGtHuYokuOwbCJL2b4gGc3TbRJN4xuD59/VvV37qOh3XNfirb7wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKKNVuhdHpTBevwohOlL1V8S2ouKMB8GA1UdIwQY
MBaAFHQrG1wHXD0736NSXUdrGyhnwqLKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZENzYlhBZGNQVHZmbzFKZFIyc2JLR2ZDb3NvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8yMDJhNzktNWJmZS00YTQ4LWE3Zjkt
NDE0MTk2YWM2NDZlLzEvb28xVzZGMGVsTUY2X0NpRTZVdlZYeExhaTRvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS8yMDJhNzktNWJmZS00YTQ4LWE3ZjktNDE0MTk2YWM2NDZl
LzEvZENzYlhBZGNQVHZmbzFKZFIyc2JLR2ZDb3NvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuT4kMA0G
CSqGSIb3DQEBCwUAA4IBAQAItBqw5FsSbits182RyD2dYW3xCFslNTuOYpRwlTOK
l9cepvVL6Z/e4af4Cl4+CwBKNq/vDtK1I+eEGDrMsP1dzHioX0aJxnNNGdlVHfsC
5bdjEdsvjOsnxeWJ3PgXw1Gc5fRrT8iAZHnTqk/DxmlT8d2bd2j9XzNsURIJaHem
IFtcawd8HcmM9hl1sy21OW+HTHifLwV39n9jQMbs/DcOG6cuXAAtWxH0XGqh61Zl
3wNgdWwxah22VSWkdbszmNCD4KLyBlJIMpTSuQhwzmuHA/VoTXrz4kn+6MfsmfT/
DOhTnsHg4RnpJpVblz2gQ+pqet+zpAx5Qk4pfVbYR39U
-----END CERTIFICATE-----
Generated at Sun Jan 25 20:01:10 2026 by rpki-client