This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/TIOgpAqSIhmr-mQktU-A3q-sqLA.roa
File: TIOgpAqSIhmr-mQktU-A3q-sqLA.roa (raw, json)
Hash identifier: vNARJyxoQHxKxJeM7Zd8IM9yK7mOkRBIUmvPJn+XWk0=
Subject key identifier: 4C:83:A0:A4:0A:92:22:19:AB:FA:64:24:B5:4F:80:DE:AF:AC:A8:B0
Certificate issuer: /CN=c28973affaa9936d39146aa136fbcb051b9af99f
Certificate serial: 019ABA4CA1D533837264A9C350B6B90F231E
Authority key identifier: C2:89:73:AF:FA:A9:93:6D:39:14:6A:A1:36:FB:CB:05:1B:9A:F9:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/TIOgpAqSIhmr-mQktU-A3q-sqLA.roa
Signing time: Tue 25 Nov 2025 09:16:15 +0000
ROA not before: Tue 25 Nov 2025 09:16:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19695
IP address blocks: 82.119.192.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Nov 2025 09:16:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:ba:4c:a1:d5:33:83:72:64:a9:c3:50:b6:b9:0f:23:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c28973affaa9936d39146aa136fbcb051b9af99f
Validity
Not Before: Nov 25 09:16:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4c83a0a40a922219abfa6424b54f80deafaca8b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a0:18:72:46:20:42:79:c2:b2:6e:73:75:f0:
e7:e5:1d:33:ac:d1:5f:42:51:47:26:1f:0d:ad:c4:
70:f9:29:e2:d2:74:cb:46:1c:39:70:93:c0:c8:ea:
a6:47:d6:7c:4d:76:19:f9:f4:94:56:e7:af:e4:2b:
c2:c3:4e:5c:67:96:f3:50:6c:fe:a7:d9:e4:e0:28:
23:e9:a7:3f:92:97:b7:0c:1c:6b:d0:b8:24:4e:b5:
92:67:d1:5d:1d:29:5f:1b:79:57:98:96:89:e1:f3:
aa:66:10:7f:87:89:9e:bd:3b:ec:38:17:35:a6:ae:
5e:e4:f1:27:0f:ed:20:73:91:5f:1c:ea:73:e7:bf:
76:39:90:21:28:9e:4d:4f:30:f4:78:79:88:ac:a5:
8b:f3:69:8c:0f:67:31:d1:c6:6c:c7:9e:01:b2:0f:
0b:c8:06:10:f5:bb:80:43:ec:2f:24:b9:fd:9d:e5:
bb:6c:c3:02:9e:ab:04:f2:34:ca:a1:31:ec:cf:8f:
68:a3:4d:e2:88:e5:ff:ad:c6:63:a7:c8:6a:7d:7f:
02:98:ab:ea:62:36:25:e5:ee:c4:c5:28:6f:a7:c4:
33:f5:89:4d:6c:86:12:de:37:8a:3d:47:71:4d:ec:
25:85:84:01:ba:fe:79:22:65:0b:1c:6f:e0:df:b3:
f5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:83:A0:A4:0A:92:22:19:AB:FA:64:24:B5:4F:80:DE:AF:AC:A8:B0
X509v3 Authority Key Identifier:
keyid:C2:89:73:AF:FA:A9:93:6D:39:14:6A:A1:36:FB:CB:05:1B:9A:F9:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/TIOgpAqSIhmr-mQktU-A3q-sqLA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.119.192.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:0a:84:1f:4c:18:4b:07:45:c5:b3:aa:87:5a:67:0f:c6:40:
ad:30:4e:1a:22:f5:d8:17:bb:49:2d:16:d5:32:b7:11:e6:21:
bc:8c:c4:d9:d2:af:d7:4d:2e:37:ff:69:8e:c4:99:4b:56:bd:
71:53:28:39:5a:8d:2f:fd:e2:ab:60:67:61:8f:cc:bd:f2:91:
88:e8:bc:57:76:6b:b8:ff:63:3f:78:19:22:c7:df:62:f7:6c:
2f:b1:be:10:7c:48:df:0c:9a:ea:03:38:a8:43:0b:6c:f0:24:
34:89:aa:25:c0:80:52:5c:29:b7:88:1b:80:16:17:a2:3e:2c:
aa:d7:46:59:fe:e0:5a:26:29:dd:fc:a4:da:c9:df:19:a6:e7:
50:bb:34:2b:7f:7b:66:21:47:41:43:d9:53:07:d1:db:57:31:
5c:fd:e7:6b:7c:19:67:b8:dc:07:98:39:e5:e4:70:eb:62:95:
82:6d:28:9f:88:6c:94:ab:b7:9a:cb:b1:0b:a3:97:a8:5f:5a:
73:0d:91:2a:b4:1b:97:a3:18:cf:86:d7:62:68:51:fd:c2:f4:
73:35:c2:72:88:5e:37:3c:15:62:85:e7:8d:9a:26:2d:b3:08:
c4:a0:7b:19:62:ab:13:02:98:2e:5a:1f:60:97:d2:c8:5e:17:
0d:f7:a8:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 25 12:55:27 2025 by rpki-client