This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/92b381-e514-438c-b8f9-f8aed30d54c3/1/CAMjcl2HiSdI0pS1UvD5u_OKX10.roa
File: CAMjcl2HiSdI0pS1UvD5u_OKX10.roa (raw, json)
Hash identifier: 3ezIC14oieGL5XhJBO1eJbl4cT1odhjw1Ygh4ZROgXE=
Subject key identifier: 08:03:23:72:5D:87:89:27:48:D2:94:B5:52:F0:F9:BB:F3:8A:5F:5D
Certificate issuer: /CN=218da7ff576e78dc234eb74cbf073076c1f7ebc9
Certificate serial: 019B77C665B6AFE5C581EABC9EDB38BC41D7
Authority key identifier: 21:8D:A7:FF:57:6E:78:DC:23:4E:B7:4C:BF:07:30:76:C1:F7:EB:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IY2n_1dueNwjTrdMvwcwdsH368k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/92b381-e514-438c-b8f9-f8aed30d54c3/1/CAMjcl2HiSdI0pS1UvD5u_OKX10.roa
Signing time: Thu 01 Jan 2026 04:17:29 +0000
ROA not before: Thu 01 Jan 2026 04:17:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197608
IP address blocks: 193.150.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/92b381-e514-438c-b8f9-f8aed30d54c3/1/IY2n_1dueNwjTrdMvwcwdsH368k.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/92b381-e514-438c-b8f9-f8aed30d54c3/1/IY2n_1dueNwjTrdMvwcwdsH368k.mft
rsync://rpki.ripe.net/repository/DEFAULT/IY2n_1dueNwjTrdMvwcwdsH368k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c6:65:b6:af:e5:c5:81:ea:bc:9e:db:38:bc:41:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218da7ff576e78dc234eb74cbf073076c1f7ebc9
Validity
Not Before: Jan 1 04:17:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=080323725d87892748d294b552f0f9bbf38a5f5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c2:e9:2c:86:8b:aa:7f:a5:17:0f:14:4b:eb:
1a:20:2a:9e:98:14:27:dd:70:35:2a:d2:e3:06:f0:
5a:1e:69:05:ee:1d:9d:8e:0b:5c:71:49:27:89:36:
7b:fa:d0:97:cd:5e:02:dc:a0:87:8a:6a:6d:27:ee:
c4:63:c9:21:ae:c8:db:48:8a:b1:92:e4:18:72:81:
b3:39:a6:0d:1f:54:31:00:2d:7a:18:29:55:5c:14:
42:5a:45:27:67:b2:6e:fd:f4:92:1b:d4:00:3d:5b:
90:f2:7c:52:16:24:22:73:13:de:98:50:fe:6e:a2:
2c:8c:94:c0:a1:05:ec:ea:b4:74:5f:1c:e1:14:61:
b4:b7:03:00:d3:21:ca:b7:30:1e:b1:c6:31:bf:7a:
c1:68:63:85:5d:a5:6d:53:52:96:16:8d:e1:e4:20:
2d:2d:14:0f:4d:30:b7:e4:91:54:fe:90:e2:e7:67:
32:db:60:76:cd:25:46:75:01:bb:d2:c0:2d:6c:f0:
3d:22:4c:6c:3c:a4:0b:f2:a3:33:31:33:08:50:30:
9b:34:03:28:e8:c0:99:23:0e:72:5f:ad:80:04:d9:
50:4e:e9:e7:11:1c:2f:4a:90:09:03:ae:4f:69:2a:
71:a2:9b:40:90:3b:50:13:21:9b:95:1b:fb:25:31:
d0:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:03:23:72:5D:87:89:27:48:D2:94:B5:52:F0:F9:BB:F3:8A:5F:5D
X509v3 Authority Key Identifier:
keyid:21:8D:A7:FF:57:6E:78:DC:23:4E:B7:4C:BF:07:30:76:C1:F7:EB:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IY2n_1dueNwjTrdMvwcwdsH368k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/92b381-e514-438c-b8f9-f8aed30d54c3/1/CAMjcl2HiSdI0pS1UvD5u_OKX10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/92b381-e514-438c-b8f9-f8aed30d54c3/1/IY2n_1dueNwjTrdMvwcwdsH368k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.150.41.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:86:7d:8a:84:a3:91:d4:e6:b9:c4:fa:7e:dd:6c:c8:9c:40:
fe:3f:ba:c8:6d:43:d5:9c:2d:5f:a0:fb:96:ce:2f:5b:62:fb:
56:a8:ad:b8:f3:8b:73:6a:c8:c1:a0:43:d5:25:11:d7:17:cc:
e2:5a:d6:c9:7e:4a:db:51:46:33:aa:cb:22:13:07:67:fc:33:
31:5e:39:a1:7e:59:09:26:b8:13:3f:0a:7d:57:b1:0a:7b:e7:
5d:2a:cd:84:fe:74:22:83:a3:29:11:39:3c:5e:c6:ef:96:e5:
54:45:0f:ee:ec:41:1e:4f:92:54:30:d5:fd:28:cc:09:1d:81:
10:28:0b:5e:7c:70:29:6a:59:1b:4b:80:ce:43:b2:dc:9b:7f:
b0:44:5a:ab:ea:97:3f:5d:3c:86:28:f2:be:a1:a7:43:db:77:
16:8e:00:91:58:a0:46:ff:f3:57:46:cc:1b:b9:42:08:53:9a:
3c:6a:52:cb:6f:4f:8d:c9:d9:c9:da:0e:af:fd:36:8b:a2:43:
4b:46:41:38:eb:99:7f:68:0f:2d:d4:55:9e:d1:20:29:18:0d:
30:20:1b:37:8b:4b:48:f2:f8:69:25:c9:56:db:60:01:83:81:
0a:b2:85:a9:7d:41:c7:f1:0c:2f:3a:8b:dd:7e:67:7d:ef:87:
5b:57:ff:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:38:29 2026 by rpki-client