This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/72rogKEUs1fjFAjfM7Cy9UHe_kw.roa
File: 72rogKEUs1fjFAjfM7Cy9UHe_kw.roa (raw, json)
Hash identifier: Z8ZWpoeVc5I33UXwalFKXVV5S6etbriIYRPgHvGgfKI=
Subject key identifier: EF:6A:E8:80:A1:14:B3:57:E3:14:08:DF:33:B0:B2:F5:41:DE:FE:4C
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 019B77C76D4BA33BF22496687EC062B6F50B
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/72rogKEUs1fjFAjfM7Cy9UHe_kw.roa
Signing time: Thu 01 Jan 2026 04:18:36 +0000
ROA not before: Thu 01 Jan 2026 04:18:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7018
IP address blocks: 212.116.252.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Jan 2026 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c7:6d:4b:a3:3b:f2:24:96:68:7e:c0:62:b6:f5:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Jan 1 04:18:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ef6ae880a114b357e31408df33b0b2f541defe4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:da:ae:24:cb:79:85:81:67:e9:fb:67:80:c5:
fd:69:44:a0:05:e2:f5:5c:f8:83:28:bf:78:29:b5:
ee:cd:a8:e6:91:c9:6d:b9:4b:8a:3b:4a:78:29:60:
03:59:49:1b:47:db:37:2c:3f:34:df:b6:4e:4a:82:
8b:e8:f1:0a:a0:e8:b8:28:0d:9b:8b:ad:21:1d:c8:
57:45:59:da:4f:0f:77:06:30:47:b6:6f:b3:f8:b1:
42:d4:73:e5:7f:07:0f:45:90:fb:65:5d:23:95:e6:
b4:11:51:50:b7:ac:a8:1e:14:fa:c5:c1:9e:34:27:
64:e5:91:6c:80:13:96:f6:d2:d5:80:62:a3:93:da:
05:47:97:3e:c4:a1:b0:54:b2:ff:38:dc:72:ed:00:
96:d7:71:cb:fc:c9:58:bb:4a:10:1c:ca:11:71:81:
27:fa:ef:51:c9:d4:f1:1d:31:ba:af:df:4b:5f:66:
c5:6c:01:8b:f4:eb:90:bc:20:cd:36:5c:0c:1e:30:
ed:ae:42:c4:8f:c1:2e:06:ac:5b:bd:79:e4:aa:76:
36:63:82:4a:21:4b:59:8a:a6:53:a2:44:ee:1d:f9:
c8:a2:3c:83:64:72:08:c7:33:e3:9a:1c:1e:90:4e:
6a:55:ba:f4:e5:93:04:17:70:fa:c5:6b:79:4a:51:
07:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:6A:E8:80:A1:14:B3:57:E3:14:08:DF:33:B0:B2:F5:41:DE:FE:4C
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/72rogKEUs1fjFAjfM7Cy9UHe_kw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.116.252.0/22
Signature Algorithm: sha256WithRSAEncryption
a1:e2:b5:46:f4:25:e2:13:cd:f7:32:9a:24:9b:22:3f:0e:7f:
1c:a5:0d:4d:e0:96:07:ac:63:b5:9a:dd:d2:96:48:21:ca:18:
e2:eb:eb:55:83:c7:2d:c4:0b:4f:a4:70:65:b9:ac:d8:7f:ff:
f4:67:61:2e:b4:e2:80:3a:03:c2:2a:d1:ab:fe:fb:b2:7f:18:
8a:8c:be:eb:80:c7:65:f2:cb:1a:29:f8:0c:5d:27:f7:89:44:
99:5f:d9:90:48:e5:42:7e:4f:56:de:69:c1:52:ee:4b:30:d1:
df:71:57:17:63:80:bf:6d:d6:9e:51:a8:49:d6:c1:d7:27:df:
7c:f2:d5:39:13:8e:e4:55:ae:c5:78:7f:c9:a4:fb:a7:fa:6d:
55:d2:d9:1a:99:6b:d5:b9:de:a1:dd:37:9f:bb:24:de:f1:d8:
df:2a:61:1c:51:8a:23:be:5f:50:4a:c2:6a:92:4c:3b:1d:2b:
21:5b:6e:1e:42:bc:cf:7f:fd:8a:7e:0e:1a:9b:20:64:b4:80:
b3:46:f2:6c:99:5d:48:6a:87:6c:fa:24:3f:e5:a7:f2:9f:f7:
cb:a0:26:82:6f:3a:b4:ef:65:8e:3d:89:d5:08:2a:a1:a3:20:
ce:bb:a3:aa:07:77:ef:c2:d9:ea:b1:92:32:d3:fa:54:30:74:
e1:d2:29:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 11:04:32 2026 by rpki-client