This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/mN6LPum92-oppYTfVnse9pFdGGY.roa
File: mN6LPum92-oppYTfVnse9pFdGGY.roa (raw, json)
Hash identifier: Az1RSnzhomoH0PRWVFUSJEmI0WtwP1548LAxILCV7N4=
Subject key identifier: 98:DE:8B:3E:E9:BD:DB:EA:29:A5:84:DF:56:7B:1E:F6:91:5D:18:66
Certificate issuer: /CN=df144ce8e8e4415e5c86a0b280499a385c14eff2
Certificate serial: 019B7C7F74997DC9C206827DAC8871147C00
Authority key identifier: DF:14:4C:E8:E8:E4:41:5E:5C:86:A0:B2:80:49:9A:38:5C:14:EF:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3xRM6OjkQV5chqCygEmaOFwU7_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/mN6LPum92-oppYTfVnse9pFdGGY.roa
Signing time: Fri 02 Jan 2026 02:18:06 +0000
ROA not before: Fri 02 Jan 2026 02:18:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56958
IP address blocks: 93.95.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/3xRM6OjkQV5chqCygEmaOFwU7_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:7f:74:99:7d:c9:c2:06:82:7d:ac:88:71:14:7c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df144ce8e8e4415e5c86a0b280499a385c14eff2
Validity
Not Before: Jan 2 02:18:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=98de8b3ee9bddbea29a584df567b1ef6915d1866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4b:5e:bb:1f:ad:2b:f8:d1:87:ed:bf:56:af:
5a:7f:58:4e:c2:b0:df:44:e2:e2:ac:c5:91:42:a6:
84:5c:99:2a:e1:1d:c2:6f:ee:12:8d:4e:8e:77:ef:
eb:0a:74:79:40:00:90:c5:e4:aa:60:dc:ab:41:94:
36:49:13:97:a9:01:b0:f0:d3:7a:81:ff:84:e2:d9:
e5:53:db:e7:72:6c:b5:0c:76:6a:41:9f:ed:d7:ed:
15:18:4d:32:52:47:b2:5e:70:23:5b:52:56:d3:78:
03:71:af:23:d0:51:ee:8f:84:2f:a1:91:85:97:4a:
b7:a2:f3:89:f6:15:3a:c6:fb:96:23:13:19:f4:96:
b1:e0:c1:4f:66:e4:66:1b:ce:a1:d8:69:00:3c:4d:
3d:af:ec:2a:3a:a6:b8:7b:62:92:5b:cb:3a:3d:a7:
be:7c:f5:d6:e7:1a:4f:3e:ed:7f:e1:ca:f5:30:81:
f4:05:d6:ea:8c:67:db:d3:a0:64:dd:ae:05:1d:fd:
25:4c:8b:20:32:a2:79:d3:25:f8:59:ab:19:45:5d:
59:8b:da:c5:5d:ac:fe:9f:5b:da:66:2b:ab:4a:f9:
48:25:b0:0d:0f:57:bb:5b:88:71:4c:89:69:1d:36:
8e:44:16:9b:0d:fc:3d:46:23:50:c1:1a:ef:1f:a7:
df:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:DE:8B:3E:E9:BD:DB:EA:29:A5:84:DF:56:7B:1E:F6:91:5D:18:66
X509v3 Authority Key Identifier:
keyid:DF:14:4C:E8:E8:E4:41:5E:5C:86:A0:B2:80:49:9A:38:5C:14:EF:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xRM6OjkQV5chqCygEmaOFwU7_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/mN6LPum92-oppYTfVnse9pFdGGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.208.0/24
Signature Algorithm: sha256WithRSAEncryption
79:b2:75:30:b6:6f:a2:58:42:00:22:5c:46:d2:80:5c:e2:2d:
2e:6f:85:86:36:3c:d6:32:58:ba:8d:95:b7:24:b1:6e:b1:ba:
c9:fd:b9:5e:2d:7c:ca:74:d0:23:26:64:44:a7:9e:63:52:92:
14:e8:77:04:7e:19:3e:87:ed:90:b7:23:8e:33:1f:b5:26:c7:
bb:27:91:bc:77:ee:04:5c:a9:bc:a3:b8:dd:5a:9b:e0:d1:28:
d2:cb:f9:66:a6:ea:da:0a:62:4c:3f:7c:b7:43:06:1d:81:1f:
4e:19:e7:47:6b:79:3a:d3:a4:b1:f4:bb:5f:cc:ef:90:75:87:
da:ad:cf:ed:5a:6d:49:e2:77:3d:1f:2a:55:89:31:77:26:c4:
29:59:43:50:c1:9c:72:6f:05:48:08:4e:80:d3:f8:6d:ef:96:
1f:ef:b0:f2:c4:a2:7a:7f:3a:e0:89:7a:fe:8d:b8:99:66:40:
e8:d7:e7:a4:d2:c0:19:40:da:52:f4:43:df:7f:cf:32:bc:58:
02:70:e2:3f:3f:45:45:31:a9:5b:ee:7c:81:3e:45:f2:78:b5:
96:11:7a:78:4c:78:98:d5:30:ef:c5:73:d4:bf:43:17:f3:ef:
46:1e:b1:9f:1f:30:a4:3f:e8:cf:32:4f:c4:99:3a:48:83:9f:
38:1a:c1:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:46:55 2026 by rpki-client