This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/4cf5ad-a6ca-44ff-9d18-c5c64b13421d/1/y0EOGWIKk7WR342AYtoS4ft8s8g.roa
File: y0EOGWIKk7WR342AYtoS4ft8s8g.roa (raw, json)
Hash identifier: F6PTeIw5ik/EvHxhZTEzM2YWypGnV0TJXxvPjQa9SsU=
Subject key identifier: CB:41:0E:19:62:0A:93:B5:91:DF:8D:80:62:DA:12:E1:FB:7C:B3:C8
Certificate issuer: /CN=381203337b0cd06fcfc045588f097cbc24153a75
Certificate serial: 019B7758AEE61442DAAE543FE2307F4A014E
Authority key identifier: 38:12:03:33:7B:0C:D0:6F:CF:C0:45:58:8F:09:7C:BC:24:15:3A:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OBIDM3sM0G_PwEVYjwl8vCQVOnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/4cf5ad-a6ca-44ff-9d18-c5c64b13421d/1/y0EOGWIKk7WR342AYtoS4ft8s8g.roa
Signing time: Thu 01 Jan 2026 02:17:39 +0000
ROA not before: Thu 01 Jan 2026 02:17:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209846
IP address blocks: 192.16.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/4cf5ad-a6ca-44ff-9d18-c5c64b13421d/1/OBIDM3sM0G_PwEVYjwl8vCQVOnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/4cf5ad-a6ca-44ff-9d18-c5c64b13421d/1/OBIDM3sM0G_PwEVYjwl8vCQVOnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OBIDM3sM0G_PwEVYjwl8vCQVOnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:58:ae:e6:14:42:da:ae:54:3f:e2:30:7f:4a:01:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=381203337b0cd06fcfc045588f097cbc24153a75
Validity
Not Before: Jan 1 02:17:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cb410e19620a93b591df8d8062da12e1fb7cb3c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ba:fd:37:ee:5e:20:71:f0:db:75:4d:d2:72:
03:76:c6:5f:7a:a0:42:c6:06:d4:56:fe:2b:13:56:
06:d2:95:3f:96:5b:f4:07:e0:26:66:eb:53:ac:c7:
88:68:ff:31:66:a9:96:06:4a:d7:70:36:50:ea:96:
8b:42:9f:46:e4:f8:4a:e0:a4:e2:35:e7:8e:b0:4f:
aa:7f:c7:96:c6:3a:d2:3d:c9:12:5f:8f:65:d5:dc:
9a:2a:c8:cc:78:ad:9c:e7:26:80:b7:eb:a2:c6:89:
57:4e:d5:0e:99:0d:57:26:4f:95:2a:23:5f:58:b2:
b4:1d:e1:cd:1f:13:7f:57:f4:03:78:39:26:b1:ef:
56:77:bc:4e:a0:ca:f0:7f:39:3c:e3:2c:b4:18:a1:
63:c1:65:59:69:2a:63:a8:e6:f2:c2:34:e9:f0:ef:
1d:63:cb:e5:15:9c:bc:1f:ff:45:ab:99:a2:f2:e4:
63:b3:29:03:98:21:9d:96:db:5e:ad:91:ce:fc:fe:
31:0f:ad:dd:f1:75:43:61:f0:7b:4c:ec:54:c5:99:
42:e6:2d:c7:83:63:d2:9e:08:f1:b0:8e:24:89:f2:
cd:27:3a:40:ab:d0:d2:9b:f7:2a:4e:42:24:74:ce:
67:05:27:cb:12:e9:84:d1:4f:d0:bc:1c:a3:e1:1c:
99:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:41:0E:19:62:0A:93:B5:91:DF:8D:80:62:DA:12:E1:FB:7C:B3:C8
X509v3 Authority Key Identifier:
keyid:38:12:03:33:7B:0C:D0:6F:CF:C0:45:58:8F:09:7C:BC:24:15:3A:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBIDM3sM0G_PwEVYjwl8vCQVOnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4cf5ad-a6ca-44ff-9d18-c5c64b13421d/1/y0EOGWIKk7WR342AYtoS4ft8s8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4cf5ad-a6ca-44ff-9d18-c5c64b13421d/1/OBIDM3sM0G_PwEVYjwl8vCQVOnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.16.137.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:a1:36:8d:eb:29:91:bb:58:4c:d3:cf:fe:2d:be:5f:ef:0f:
54:3d:41:ac:45:18:07:5b:d2:1c:f8:c9:74:58:ec:43:c4:6d:
ff:a5:0a:96:ca:31:20:59:0d:ad:aa:46:3d:40:3f:38:11:6a:
e1:c3:78:81:b4:a3:cd:c4:60:aa:51:5c:1e:88:cf:26:d9:a5:
b2:0e:d8:2a:3f:e0:7e:4c:71:28:c2:55:d9:82:56:e7:40:f3:
3f:cf:38:ae:1a:d0:38:7d:31:23:bf:55:e8:be:51:5b:42:e2:
12:7a:94:4f:19:68:35:ff:78:2e:08:7f:98:8b:38:4f:34:4b:
98:bb:6f:4c:a9:b8:2d:8b:e5:24:ad:93:8f:dd:64:9b:e8:d2:
de:97:f5:a5:ed:8f:9a:e2:b7:93:b6:3f:c5:f6:6b:af:54:0d:
f2:3f:30:0a:c2:2b:9a:07:57:f6:78:0a:2b:5d:33:f7:38:02:
83:8a:56:fa:e8:da:4f:7e:81:e1:10:1b:3e:2a:83:31:de:e3:
1d:0a:6f:22:62:4d:4e:29:b7:e5:b4:6a:6d:d1:3c:89:8e:33:
e7:b4:e5:61:ff:76:88:9c:e2:74:00:a4:dd:67:fd:4c:42:f9:
c0:ea:63:a1:9b:04:86:74:53:a4:fa:32:69:35:e0:a2:83:86:
84:88:b5:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 23:46:48 2026 by rpki-client