This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/obrcupVsssO_agB28qMpvHAxeW4.roa
File: obrcupVsssO_agB28qMpvHAxeW4.roa (raw, json)
Hash identifier: GS+FF6yB/em6e/eXYvpbII2ejEv9rt1t/93lekFQ52Y=
Subject key identifier: A1:BA:DC:BA:95:6C:B2:C3:BF:6A:00:76:F2:A3:29:BC:70:31:79:6E
Certificate issuer: /CN=5d6c15ca903d7d25453eaeb5f724a04e3aa65908
Certificate serial: 019B791109C1329F9BD9663C267FE3FEFC97
Authority key identifier: 5D:6C:15:CA:90:3D:7D:25:45:3E:AE:B5:F7:24:A0:4E:3A:A6:59:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XWwVypA9fSVFPq619ySgTjqmWQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/obrcupVsssO_agB28qMpvHAxeW4.roa
Signing time: Thu 01 Jan 2026 10:18:38 +0000
ROA not before: Thu 01 Jan 2026 10:18:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12735
IP address blocks: 79.134.230.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/XWwVypA9fSVFPq619ySgTjqmWQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/XWwVypA9fSVFPq619ySgTjqmWQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/XWwVypA9fSVFPq619ySgTjqmWQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 04:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:11:09:c1:32:9f:9b:d9:66:3c:26:7f:e3:fe:fc:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d6c15ca903d7d25453eaeb5f724a04e3aa65908
Validity
Not Before: Jan 1 10:18:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a1badcba956cb2c3bf6a0076f2a329bc7031796e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:72:64:77:f9:73:50:17:de:06:ef:6c:35:b0:
25:d1:05:e0:11:7e:1d:98:fb:57:8d:85:34:a0:38:
15:18:72:e9:ed:be:fb:93:0d:85:73:87:24:89:fc:
92:c9:71:14:4e:d7:39:e9:0f:66:0f:f0:0d:5b:86:
ea:de:01:41:f3:2a:ed:75:72:d6:8e:74:d6:26:b7:
79:83:ca:7c:61:2a:49:41:cc:bd:be:a8:9b:c7:b9:
75:ff:53:27:7a:51:8c:33:ae:09:fa:6d:a4:b4:14:
c5:75:38:f0:6d:58:89:f0:c5:c4:9a:26:37:b0:be:
97:88:05:73:cb:37:c7:11:02:f1:70:11:0e:9e:c7:
c2:2b:ae:99:88:87:1b:83:bf:9c:3f:50:ba:64:a1:
5d:7a:98:28:d3:85:61:f4:c1:bd:19:bf:c7:b7:bf:
e8:3d:10:ef:49:f6:b4:0a:48:6a:9d:bf:f2:99:90:
bb:61:76:22:15:b4:e6:9b:e8:0f:29:9f:b0:8e:9d:
3e:dc:fe:7e:03:63:cf:e4:9b:29:74:63:c4:02:37:
85:75:8e:d6:f3:a3:40:a2:98:85:53:27:79:8d:39:
62:a7:d4:e3:67:5a:98:5b:ec:e8:41:22:33:35:3a:
4c:b0:d5:22:c8:70:eb:ac:d6:9c:ae:58:9d:0c:34:
b5:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:BA:DC:BA:95:6C:B2:C3:BF:6A:00:76:F2:A3:29:BC:70:31:79:6E
X509v3 Authority Key Identifier:
keyid:5D:6C:15:CA:90:3D:7D:25:45:3E:AE:B5:F7:24:A0:4E:3A:A6:59:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWwVypA9fSVFPq619ySgTjqmWQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/obrcupVsssO_agB28qMpvHAxeW4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/XWwVypA9fSVFPq619ySgTjqmWQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.134.230.0/23
Signature Algorithm: sha256WithRSAEncryption
45:70:b9:e4:d4:b2:c3:29:23:e1:ec:70:5f:95:9b:8c:38:21:
5e:63:49:67:0a:fa:73:8c:31:c4:a0:35:70:65:81:e4:ce:7c:
90:fa:d0:12:02:fc:e0:c6:fb:19:f8:ee:d2:10:98:76:a7:a2:
f6:18:b6:78:a1:ab:64:3f:3f:25:63:8c:d0:9d:43:41:16:fe:
8b:36:10:69:4e:d8:68:87:cc:46:c1:06:ae:96:b3:92:ea:4e:
99:e3:01:7f:7c:31:e1:91:b6:6a:3c:83:0a:b3:00:48:ec:fc:
4b:12:59:ba:76:cb:82:09:6f:8a:88:e5:44:3d:85:ae:9b:4f:
1d:94:0e:d6:1e:23:d8:ef:85:4b:35:ac:e1:98:db:1c:65:e4:
c6:db:57:d4:b8:a2:c1:6e:f5:c2:4e:19:00:d1:b3:cf:74:98:
2c:ae:8a:92:ac:a2:79:5d:f9:26:e9:ff:9e:a6:95:4a:95:b8:
cb:9d:b0:60:7d:34:49:17:db:ea:93:ce:d0:2e:d9:91:45:06:
c0:2e:64:cd:56:66:ee:89:2e:a2:40:35:35:d7:a3:d7:73:45:
be:4a:ef:a7:b0:58:61:df:09:0d:e2:7b:28:56:fd:ee:74:07:
c9:e5:83:1a:d6:33:30:f9:b4:3d:06:4e:04:48:c1:1e:7d:23:
f0:47:a0:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 12:56:42 2026 by rpki-client