This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/BOauGCLEvLQWgbOKiyTVkP8_jns.roa
File: BOauGCLEvLQWgbOKiyTVkP8_jns.roa (raw, json)
Hash identifier: JhbBqzAUDmnrmMP/tcrQJc20Jx5cSO/FdWtbJ48HHSA=
Subject key identifier: 04:E6:AE:18:22:C4:BC:B4:16:81:B3:8A:8B:24:D5:90:FF:3F:8E:7B
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 019B77C747FE0A9C4BC3AEB70CDA9703513B
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/BOauGCLEvLQWgbOKiyTVkP8_jns.roa
Signing time: Thu 01 Jan 2026 04:18:27 +0000
ROA not before: Thu 01 Jan 2026 04:18:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201204
IP address blocks: 194.85.102.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.mft
rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c7:47:fe:0a:9c:4b:c3:ae:b7:0c:da:97:03:51:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Jan 1 04:18:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=04e6ae1822c4bcb41681b38a8b24d590ff3f8e7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:90:ee:a5:2c:03:0d:98:0d:16:a2:e7:49:15:
aa:3b:b8:a2:55:40:a3:18:3a:12:ec:f6:71:10:79:
c1:d9:f1:7b:93:66:35:a6:ad:3a:23:e7:20:a3:e6:
e4:0f:a1:8c:1c:29:61:6b:eb:57:2d:46:f5:95:28:
0d:47:b6:80:82:c4:4e:fd:b4:13:5c:8a:c8:09:fe:
fb:50:d5:2d:45:9a:9e:34:10:b0:a3:8e:57:a2:92:
ee:bb:26:d0:32:19:df:f5:f8:0e:fa:ee:88:cd:ce:
b3:b4:b3:a5:a0:69:92:ab:f3:12:44:f5:50:3f:c3:
d5:88:d2:4b:d7:26:2e:f1:a0:63:37:49:75:18:15:
7b:19:85:8e:6f:a7:76:40:8b:ba:df:6a:11:6b:de:
79:77:f8:c7:fd:c6:fe:ec:63:8f:fd:b7:0f:a3:93:
46:f0:bc:01:ae:15:f0:9a:0a:11:5e:74:bd:5c:3d:
15:e3:04:e5:83:27:52:d1:fc:1a:d9:13:53:c4:ae:
0b:17:27:cf:c1:22:78:a8:1f:7c:1e:7e:d4:1e:04:
cf:3e:41:f5:05:1d:94:e5:7f:e7:94:67:0d:44:e5:
f0:9b:72:bc:1a:9f:6a:87:23:84:96:0c:21:a5:87:
7c:dd:5c:39:42:64:b4:37:3c:40:e4:67:27:83:24:
62:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:E6:AE:18:22:C4:BC:B4:16:81:B3:8A:8B:24:D5:90:FF:3F:8E:7B
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/BOauGCLEvLQWgbOKiyTVkP8_jns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.85.102.0/24
Signature Algorithm: sha256WithRSAEncryption
47:c5:1a:48:0a:87:c8:1b:12:1b:6a:2d:91:ed:8d:c1:ab:b2:
1f:12:97:09:06:6f:49:0e:fd:51:36:9d:14:d1:c1:43:00:ff:
8d:b6:6d:57:9c:b0:b9:1c:3b:54:45:fb:c2:c6:8c:bb:e9:94:
23:a5:8c:32:12:1b:1f:eb:42:f6:60:c4:9e:84:79:df:7c:1f:
fe:10:42:34:04:47:5c:1c:8f:bf:55:39:8d:6a:98:05:96:4f:
c8:4b:2f:7f:d1:9b:a4:e3:e6:21:54:31:85:6e:0d:6b:91:12:
3a:ec:fb:e4:5f:30:25:8e:ad:9a:7f:d0:9c:83:4e:04:f2:84:
d7:8f:7e:d6:e9:57:ce:5e:eb:c6:8b:1c:19:1c:e7:7f:58:b3:
e3:fc:ef:5e:fb:31:27:ca:4d:1a:8b:20:f2:b8:e1:3f:eb:d0:
44:c6:68:29:35:80:b6:aa:f2:2f:d1:2e:8c:f9:ee:2e:98:d1:
14:af:0a:c0:b9:80:12:f7:56:0c:33:49:12:f0:d0:74:59:e0:
ea:fb:69:9a:c0:db:5c:c5:39:32:50:2b:fa:8e:82:f6:6f:37:
a8:b7:9a:9b:b8:d8:7a:35:07:c0:f4:85:a1:06:9d:e2:43:c5:
62:83:27:53:e6:b6:27:f5:3d:0a:27:a7:60:5c:58:c1:3b:57:
4b:be:38:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:16:02 2026 by rpki-client