This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/oWpY7lVUZc4xkdONXBsk7LY9VzQ.roa
File: oWpY7lVUZc4xkdONXBsk7LY9VzQ.roa (raw, json)
Hash identifier: uJkG/PD9fhtu8O1FWieSoNSOr5gkaN8jlwYl8rtNjFA=
Subject key identifier: A1:6A:58:EE:55:54:65:CE:31:91:D3:8D:5C:1B:24:EC:B6:3D:57:34
Certificate issuer: /CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48
Certificate serial: 019B7C80D481D44818910EBBC4E5EC271CA7
Authority key identifier: 2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/oWpY7lVUZc4xkdONXBsk7LY9VzQ.roa
Signing time: Fri 02 Jan 2026 02:19:36 +0000
ROA not before: Fri 02 Jan 2026 02:19:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44547
IP address blocks: 185.118.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 17:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:80:d4:81:d4:48:18:91:0e:bb:c4:e5:ec:27:1c:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48
Validity
Not Before: Jan 2 02:19:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a16a58ee555465ce3191d38d5c1b24ecb63d5734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1c:f0:ce:e2:ef:6a:c8:38:65:23:99:9e:e7:
60:11:2e:fc:63:a1:eb:9f:ce:70:32:23:80:29:5e:
c5:6a:92:7a:60:6c:ad:07:66:0b:48:22:92:27:d8:
ff:43:15:e3:5a:af:fb:8d:95:03:d2:4c:0e:21:59:
56:15:a8:b9:e6:04:c2:df:6e:9c:15:9f:5b:3b:e5:
23:12:bf:2f:02:70:69:14:a3:45:2d:32:98:2b:6e:
60:7b:8d:cd:7c:f8:c1:8f:f4:be:64:f1:20:05:6c:
31:22:87:1f:57:15:de:cd:1f:30:b4:0a:da:8d:6e:
64:a1:28:ff:35:60:53:f4:61:5a:d7:a9:77:ea:5d:
f5:e0:0f:88:b4:ab:db:fb:ef:aa:7a:e3:96:63:1b:
8a:8c:c2:aa:92:39:e6:e4:8a:84:80:68:55:6f:8c:
48:5e:b2:b2:10:23:5c:c0:e9:b6:99:18:f4:9f:04:
a6:ba:7a:c1:5f:65:95:9b:b8:89:58:bc:9a:48:b7:
72:de:c7:e9:ad:0d:d6:69:16:29:dc:c4:9c:c0:ec:
3a:82:94:56:02:4c:0e:49:0f:cb:e3:de:53:5f:f0:
32:28:86:df:8a:53:e7:fb:a0:88:93:7f:81:f5:6b:
5b:ed:c3:04:14:8e:ee:98:84:65:97:9b:d9:a0:78:
ea:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:6A:58:EE:55:54:65:CE:31:91:D3:8D:5C:1B:24:EC:B6:3D:57:34
X509v3 Authority Key Identifier:
keyid:2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/oWpY7lVUZc4xkdONXBsk7LY9VzQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.118.141.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:fa:d3:fa:aa:57:e1:6b:38:a2:35:98:05:87:14:a0:e1:5c:
70:54:47:4b:8c:36:1f:cb:8a:66:d0:a5:29:55:e8:47:f9:78:
ed:32:61:12:6f:d3:dc:a5:09:38:57:f4:65:e7:60:29:73:e9:
35:b4:21:6e:0f:6e:69:78:e3:89:38:2c:2e:e4:94:f0:c6:73:
90:30:a3:fa:51:07:b7:90:f7:c7:c1:4f:76:96:c4:4e:ca:ad:
8e:b2:be:e9:2b:3c:dd:93:92:34:be:85:0b:d9:c7:d9:3e:b2:
c0:ca:6c:50:d7:f5:fe:b7:0d:84:46:51:1a:48:60:09:05:0b:
67:6d:6a:1b:c5:b0:77:40:85:7d:0f:98:66:05:ba:e7:25:db:
0a:1d:5d:09:e2:72:5b:87:81:0c:14:f4:17:33:cd:2d:b6:35:
79:b2:89:d1:6c:e6:35:76:5c:ef:e4:b0:f4:45:41:31:d8:b2:
04:80:ed:1c:7c:fc:20:bf:b5:55:8c:86:c4:15:e4:7d:ed:f9:
6d:88:b4:6e:84:31:e5:70:59:05:cf:e3:6e:4e:e1:3a:50:36:
83:3d:e3:0b:71:91:5c:35:a0:ad:01:1e:b4:6f:19:fb:f4:5b:
a8:f6:09:58:8a:92:a1:d9:50:ff:a2:cb:d0:ad:d9:be:3e:50:
36:3b:32:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 01:22:20 2026 by rpki-client