This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/0i0PYX0obfO9VURW0I4RA1U23yA.roa
File: 0i0PYX0obfO9VURW0I4RA1U23yA.roa (raw, json)
Hash identifier: +RcEhC8AwdCvLX2rfo02Ca2oOyM5cBarb0CVTNYTosM=
Subject key identifier: D2:2D:0F:61:7D:28:6D:F3:BD:55:44:56:D0:8E:11:03:55:36:DF:20
Certificate issuer: /CN=d2075c84f529c87dd85fd4afea4e0934366af54a
Certificate serial: 019B7D5B528B7F28779FEF67A27EF6DD3DBD
Authority key identifier: D2:07:5C:84:F5:29:C8:7D:D8:5F:D4:AF:EA:4E:09:34:36:6A:F5:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/0i0PYX0obfO9VURW0I4RA1U23yA.roa
Signing time: Fri 02 Jan 2026 06:18:15 +0000
ROA not before: Fri 02 Jan 2026 06:18:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12971
IP address blocks: 195.110.192.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:5b:52:8b:7f:28:77:9f:ef:67:a2:7e:f6:dd:3d:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2075c84f529c87dd85fd4afea4e0934366af54a
Validity
Not Before: Jan 2 06:18:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d22d0f617d286df3bd554456d08e11035536df20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:59:e6:c8:9b:02:71:0f:de:34:73:90:95:fa:
8a:85:c3:0f:8c:82:84:b5:14:6a:d9:ca:e5:f7:f3:
8e:b8:dc:66:02:e6:c0:c1:a1:4a:6b:5a:4c:94:98:
2e:15:7b:1c:27:f1:e1:2c:3a:54:d3:63:2d:61:cb:
e8:3b:d9:3e:ca:eb:46:92:51:35:60:d0:d2:50:8e:
15:53:0f:a6:2d:b6:e4:23:07:b4:69:ff:87:e1:72:
be:03:80:92:14:e0:21:75:57:da:1d:b9:be:1e:4a:
88:59:90:b4:b0:58:5d:74:8c:3c:23:56:7f:7e:5f:
04:c5:59:27:17:66:e9:32:2d:a7:ec:7c:9d:15:49:
b3:c2:05:da:18:2f:e3:38:c1:ca:a6:e9:ed:f5:3a:
d9:e8:d8:37:81:02:8f:49:5c:ed:56:6b:8a:c3:50:
2b:2a:33:ae:a0:21:1f:2c:e4:2a:76:d4:ce:1a:4c:
38:5d:eb:2d:94:c7:a4:53:df:f2:07:9c:70:25:89:
7c:04:4a:b5:d8:cf:04:8a:05:90:35:fb:01:d1:3f:
7e:fe:6c:53:e2:6e:f6:98:93:35:05:ae:77:7a:ce:
c9:ed:fa:86:62:dd:6a:54:d3:f8:c9:fe:59:a6:25:
8d:63:cc:cd:ed:8f:95:6d:2e:c7:bc:b2:e7:65:35:
88:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:2D:0F:61:7D:28:6D:F3:BD:55:44:56:D0:8E:11:03:55:36:DF:20
X509v3 Authority Key Identifier:
keyid:D2:07:5C:84:F5:29:C8:7D:D8:5F:D4:AF:EA:4E:09:34:36:6A:F5:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/0i0PYX0obfO9VURW0I4RA1U23yA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.110.192.0/19
Signature Algorithm: sha256WithRSAEncryption
51:58:f8:c6:80:a2:2f:ed:ec:45:29:f7:b2:ad:27:e0:03:d5:
cd:f3:7a:d7:9e:96:8e:e8:0e:11:cf:85:4d:da:4f:03:8b:4b:
31:f2:69:40:00:51:9d:59:3b:19:02:75:8f:db:0c:31:12:3b:
62:f8:bd:05:b3:38:7a:77:42:ad:49:8d:ac:a8:5d:ac:0b:c5:
c7:52:81:a6:df:e9:23:00:2e:e7:fd:63:71:b4:49:28:74:5d:
0c:df:7d:2d:f4:f1:48:8f:77:f9:9f:62:fb:c2:63:1d:a9:93:
ac:4b:67:54:78:46:f7:70:c7:40:ed:33:e7:da:63:76:df:9c:
ef:11:5e:4f:ac:84:bd:ee:1e:05:fd:cd:42:e3:a2:53:96:e8:
9d:1f:d5:d0:55:c0:8c:2f:f1:37:75:f5:fc:b4:29:16:52:f1:
13:2a:32:37:78:b6:7d:c3:be:84:70:ab:ce:c6:2b:6c:1e:46:
a6:f1:5b:34:61:46:6d:86:88:45:45:f3:37:bd:44:89:a9:25:
95:de:0a:72:89:da:ec:c6:27:bc:b9:6a:e6:69:9c:26:b4:20:
fa:8e:5c:49:68:fc:1a:cc:28:4f:fa:d5:64:54:4f:b5:09:c5:
c9:ce:9d:3c:fb:89:fc:68:90:98:38:9f:23:72:44:d1:5e:2c:
ed:69:ab:f6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt9W1KLfyh3n+9non723T29MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyMDc1Yzg0ZjUyOWM4N2RkODVmZDRhZmVhNGUwOTM0MzY2
YWY1NGEwHhcNMjYwMTAyMDYxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMjJkMGY2MTdkMjg2ZGYzYmQ1NTQ0NTZkMDhlMTEwMzU1MzZkZjIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1nmyJsCcQ/eNHOQlfqKhcMPjIKE
tRRq2crl9/OOuNxmAubAwaFKa1pMlJguFXscJ/HhLDpU02MtYcvoO9k+yutGklE1
YNDSUI4VUw+mLbbkIwe0af+H4XK+A4CSFOAhdVfaHbm+HkqIWZC0sFhddIw8I1Z/
fl8ExVknF2bpMi2n7HydFUmzwgXaGC/jOMHKpunt9TrZ6Ng3gQKPSVztVmuKw1Ar
KjOuoCEfLOQqdtTOGkw4XestlMekU9/yB5xwJYl8BEq12M8EigWQNfsB0T9+/mxT
4m72mJM1Ba53es7J7fqGYt1qVNP4yf5ZpiWNY8zN7Y+VbS7HvLLnZTWIhQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNItD2F9KG3zvVVEVtCOEQNVNt8gMB8GA1UdIwQY
MBaAFNIHXIT1Kch92F/Ur+pOCTQ2avVKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGdkY2hQVXB5SDNZWDlTdjZrNEpORFpxOVVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9lZWZhNzItOGY0Yy00ODZjLWIwMTkt
YjRlYWEwNTYxZmM3LzEvMGkwUFlYMG9iZk85VlVSVzBJNFJBMVUyM3lBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS9lZWZhNzItOGY0Yy00ODZjLWIwMTktYjRlYWEwNTYxZmM3
LzEvMGdkY2hQVXB5SDNZWDlTdjZrNEpORFpxOVVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFw27AMA0G
CSqGSIb3DQEBCwUAA4IBAQBRWPjGgKIv7exFKfeyrSfgA9XN83rXnpaO6A4Rz4VN
2k8Di0sx8mlAAFGdWTsZAnWP2wwxEjti+L0Fszh6d0KtSY2sqF2sC8XHUoGm3+kj
AC7n/WNxtEkodF0M330t9PFIj3f5n2L7wmMdqZOsS2dUeEb3cMdA7TPn2mN235zv
EV5PrIS97h4F/c1C46JTluidH9XQVcCML/E3dfX8tCkWUvETKjI3eLZ9w76EcKvO
xitsHkam8Vs0YUZthohFRfM3vUSJqSWV3gpyidrsxie8uWrmaZwmtCD6jlxJaPwa
zChP+tVkVE+1CcXJzp08+4n8aJCYOJ8jckTRXiztaav2
-----END CERTIFICATE-----
Generated at Mon Feb 9 23:44:49 2026 by rpki-client