This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/oHaqxqTMWybml5c6wSCcPWrN2MI.roa
File: oHaqxqTMWybml5c6wSCcPWrN2MI.roa (raw, json)
Hash identifier: ASmpLH273yXVFzp2LFZCIwFoN6v91nXnKPxcq712jXY=
Subject key identifier: A0:76:AA:C6:A4:CC:5B:26:E6:97:97:3A:C1:20:9C:3D:6A:CD:D8:C2
Certificate issuer: /CN=0e1f1f452ee6698e99dfcb4e3f5aeeb3bc250385
Certificate serial: 019B7F1407B121E12A24B1147DE18F2062E3
Authority key identifier: 0E:1F:1F:45:2E:E6:69:8E:99:DF:CB:4E:3F:5A:EE:B3:BC:25:03:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dh8fRS7maY6Z38tOP1rus7wlA4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/oHaqxqTMWybml5c6wSCcPWrN2MI.roa
Signing time: Fri 02 Jan 2026 14:19:37 +0000
ROA not before: Fri 02 Jan 2026 14:19:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21441
IP address blocks: 193.109.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/Dh8fRS7maY6Z38tOP1rus7wlA4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/Dh8fRS7maY6Z38tOP1rus7wlA4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dh8fRS7maY6Z38tOP1rus7wlA4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 20:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:14:07:b1:21:e1:2a:24:b1:14:7d:e1:8f:20:62:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e1f1f452ee6698e99dfcb4e3f5aeeb3bc250385
Validity
Not Before: Jan 2 14:19:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a076aac6a4cc5b26e697973ac1209c3d6acdd8c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4b:02:e7:1a:9a:39:e2:fb:32:8d:73:3c:82:
c9:b1:c1:0f:40:05:ca:70:69:4b:ee:d4:61:d1:76:
2f:f9:32:ee:b5:62:27:a3:cc:8a:c4:ce:2f:45:05:
93:dc:2b:9c:41:bb:ab:d6:9c:d3:1a:17:c6:88:d4:
72:09:16:0e:27:31:ba:49:c8:9c:94:b9:af:d2:ac:
28:4b:89:b5:1a:d1:ae:4b:01:4c:3c:8f:e4:8c:93:
3e:08:46:8f:83:af:0f:06:ea:a3:d7:f3:78:eb:70:
09:98:a1:73:04:af:63:f1:2b:45:18:69:ae:0f:51:
f5:57:63:60:5a:0d:73:8b:8d:04:a3:42:a1:bd:dd:
89:e9:31:fc:35:70:38:f1:b4:26:f1:9e:b3:00:bc:
8c:2c:d6:d6:34:ee:53:81:82:ff:ee:e5:15:22:a2:
2f:bc:2f:fc:16:fc:02:b9:53:e2:fa:4a:a3:8b:9a:
93:ba:7c:47:3e:8a:f0:1f:37:7b:5e:15:61:4b:79:
0a:56:a0:d9:01:5e:05:87:85:7b:45:d9:9d:82:f6:
4a:8b:69:73:15:e3:11:fe:57:97:1f:20:94:52:31:
6f:41:5c:6f:40:17:38:4f:eb:9b:75:45:20:cf:42:
79:7d:3c:7c:e6:d8:9b:da:16:01:7b:07:c0:7a:7e:
c2:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:76:AA:C6:A4:CC:5B:26:E6:97:97:3A:C1:20:9C:3D:6A:CD:D8:C2
X509v3 Authority Key Identifier:
keyid:0E:1F:1F:45:2E:E6:69:8E:99:DF:CB:4E:3F:5A:EE:B3:BC:25:03:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dh8fRS7maY6Z38tOP1rus7wlA4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/oHaqxqTMWybml5c6wSCcPWrN2MI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/Dh8fRS7maY6Z38tOP1rus7wlA4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.227.0/24
Signature Algorithm: sha256WithRSAEncryption
d9:a9:f8:26:6b:62:4e:de:3f:35:6d:66:ee:a6:b7:47:d2:ac:
63:dd:5a:18:a1:b2:78:35:ae:22:4f:da:5f:50:9b:e7:df:3f:
fe:c9:9a:9d:16:a4:05:c5:f1:39:37:05:e2:79:8c:92:f5:01:
3f:e0:09:45:2d:4a:89:c7:eb:80:05:54:5b:5f:30:3f:e7:43:
8b:12:0e:9e:db:c7:e2:f0:d4:0a:d9:6a:e3:6b:b2:1b:1c:ee:
b6:e3:e8:82:e6:e0:5e:46:bd:b8:ce:2a:f7:3f:44:68:ff:2c:
01:7e:d4:eb:21:59:b2:12:90:8d:b5:73:47:14:87:27:cb:02:
84:6e:52:80:1b:1e:0e:32:cb:fa:69:a0:df:b3:61:80:b1:63:
11:c6:c5:ef:2b:1e:13:8f:6a:96:a7:fa:72:77:1c:f7:a3:8f:
7c:b9:3f:78:0f:cc:84:07:f0:5f:51:87:c6:11:f4:c3:6a:34:
74:60:e8:f5:a2:fd:6f:b0:24:65:3e:2f:d5:26:82:99:d6:cd:
e6:78:6d:d3:23:4b:b5:81:74:be:ac:7b:6c:e3:17:1e:c6:2d:
1c:a0:90:53:e1:73:15:5a:cd:4d:f5:74:5d:a9:61:63:67:f3:
8c:8e:06:ab:1b:44:49:f2:d6:72:6f:7d:d6:1e:b8:5c:44:51:
88:6e:9a:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:14:55 2026 by rpki-client