This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/MDOYojRzK_b13iyI5P24Yv-1OfI.roa
File: MDOYojRzK_b13iyI5P24Yv-1OfI.roa (raw, json)
Hash identifier: 9C3SntnocakqcNtFoy8WdbT469VxGnuBBybMiDuCskI=
Subject key identifier: 30:33:98:A2:34:73:2B:F6:F5:DE:2C:88:E4:FD:B8:62:FF:B5:39:F2
Certificate issuer: /CN=9585c19915455835457413ef222a7d375b29901d
Certificate serial: 019B77C674862D740FA485014113770BD3AA
Authority key identifier: 95:85:C1:99:15:45:58:35:45:74:13:EF:22:2A:7D:37:5B:29:90:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lYXBmRVFWDVFdBPvIip9N1spkB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/MDOYojRzK_b13iyI5P24Yv-1OfI.roa
Signing time: Thu 01 Jan 2026 04:17:33 +0000
ROA not before: Thu 01 Jan 2026 04:17:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396982
IP address blocks: 185.82.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lYXBmRVFWDVFdBPvIip9N1spkB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Jan 2026 21:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c6:74:86:2d:74:0f:a4:85:01:41:13:77:0b:d3:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9585c19915455835457413ef222a7d375b29901d
Validity
Not Before: Jan 1 04:17:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=303398a234732bf6f5de2c88e4fdb862ffb539f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d4:a4:41:55:6e:c2:e2:ba:5c:13:05:eb:e1:
c3:01:ea:14:62:ca:2f:e5:ff:09:21:3b:59:0d:79:
be:ba:03:57:42:4a:82:b8:3a:e1:47:20:2c:48:49:
ef:df:9f:96:31:ae:a3:2b:45:32:ee:81:c1:7b:d9:
0a:85:87:14:99:83:bf:1d:09:19:6d:5b:ee:48:4d:
dd:72:cf:84:fc:fd:26:29:f3:bf:a3:3a:99:57:4d:
a5:aa:ba:d7:33:93:15:88:09:39:a6:0d:71:93:59:
93:df:25:a8:e6:5e:3e:fc:db:50:a8:76:9d:16:cc:
39:3d:95:87:13:2a:03:e5:bd:7d:7a:2f:89:0a:e7:
e3:8c:0d:64:73:8e:99:36:1a:81:c9:15:1d:73:58:
d6:6a:dc:42:0e:a0:24:fc:a5:c0:2d:47:f1:ce:ad:
76:74:74:de:03:5e:04:2a:89:b8:6a:88:ef:44:86:
51:31:b7:3c:8f:78:ee:1c:f8:00:2c:0a:c2:8e:fd:
8e:be:05:1d:73:64:e1:aa:7e:a8:ff:6f:e6:f1:99:
18:4d:db:20:30:42:cf:f6:4d:11:a0:f6:41:9d:bb:
12:3a:4e:aa:44:be:44:cc:4e:71:71:c2:c4:4c:56:
1e:f8:d1:dd:1e:49:46:e8:d4:7b:4b:22:67:fe:a0:
00:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:33:98:A2:34:73:2B:F6:F5:DE:2C:88:E4:FD:B8:62:FF:B5:39:F2
X509v3 Authority Key Identifier:
keyid:95:85:C1:99:15:45:58:35:45:74:13:EF:22:2A:7D:37:5B:29:90:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYXBmRVFWDVFdBPvIip9N1spkB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/MDOYojRzK_b13iyI5P24Yv-1OfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.82.48.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:00:61:fb:48:d6:2e:c4:ad:0f:66:e3:81:52:05:ff:69:26:
b2:39:29:55:b9:87:37:cc:69:48:5e:29:e3:d6:8e:c0:d2:5f:
d2:3b:e7:69:7d:55:74:8b:97:46:11:34:83:29:85:bd:94:80:
d9:4e:6b:7c:a9:f1:f3:b3:8b:09:24:90:ac:13:27:de:6f:15:
ef:5c:df:37:0e:09:c0:a8:6d:1d:a9:34:10:ef:4f:28:9e:8d:
0f:46:c2:fa:b4:a4:63:1c:8e:1f:80:d3:43:6f:d4:85:d2:00:
99:4e:5f:39:22:4c:9e:ec:5c:ae:b7:2e:11:90:55:de:e6:ee:
15:e7:8b:a3:3d:06:b3:ef:f7:1b:d5:8f:17:12:84:97:66:b6:
c4:09:4d:f4:80:81:de:be:7a:7f:64:74:fd:4c:20:40:d4:b2:
4a:74:7d:4b:bb:d8:c2:a7:24:22:d0:17:56:c3:2e:7a:91:4e:
9f:0f:40:c3:25:06:59:2d:5c:2c:e4:7b:01:c2:7a:67:93:e2:
97:9b:70:a0:ef:6b:22:25:2a:c3:85:11:28:60:f0:af:92:3e:
52:97:bb:33:3d:ed:17:91:3b:0d:d3:7a:5b:de:5d:db:c6:c0:
26:bb:05:20:e1:2b:44:ad:4d:81:f5:24:f8:10:2c:d9:d7:42:
c1:b6:34:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 06:25:48 2026 by rpki-client