This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/O69azZLJgNqAunz5z_lWfvgC56o.roa
File: O69azZLJgNqAunz5z_lWfvgC56o.roa (raw, json)
Hash identifier: y+mBalpZhDFTPhkJAkGyUyBVLw40n3SmTyy9Fbh3dKI=
Subject key identifier: 3B:AF:5A:CD:92:C9:80:DA:80:BA:7C:F9:CF:F9:56:7E:F8:02:E7:AA
Certificate issuer: /CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3
Certificate serial: 019B7C1137D05B232D6929E127408D19B45A
Authority key identifier: B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/O69azZLJgNqAunz5z_lWfvgC56o.roa
Signing time: Fri 02 Jan 2026 00:17:41 +0000
ROA not before: Fri 02 Jan 2026 00:17:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62315
IP address blocks: 193.32.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:11:37:d0:5b:23:2d:69:29:e1:27:40:8d:19:b4:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3
Validity
Not Before: Jan 2 00:17:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3baf5acd92c980da80ba7cf9cff9567ef802e7aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a3:91:28:a9:90:46:5d:c6:d8:58:ad:17:e3:
38:9d:0d:b8:35:47:78:93:fa:79:15:3d:5f:25:54:
d3:c1:27:c3:ce:1e:5a:3d:9e:01:d6:e6:6e:43:41:
0d:56:a7:3b:c6:48:8e:0e:32:88:70:02:49:a0:37:
8c:f5:3c:d3:a3:9d:cf:53:c2:01:0c:8f:44:6d:3e:
13:f2:d6:af:4e:7b:35:30:53:54:50:3e:7a:01:d7:
6d:10:07:22:e9:e6:24:8f:cf:a5:c1:c0:62:29:39:
aa:63:66:97:fa:d1:5b:f2:4a:6f:50:6a:9b:82:03:
1b:11:d4:64:32:6a:ce:8f:47:f0:52:77:d8:d0:59:
e8:e0:26:9d:6c:ad:cd:86:8f:2c:aa:d5:ef:09:d7:
b8:48:a1:06:b7:c7:ce:eb:75:2b:f0:4b:88:cf:e9:
48:17:30:af:e8:0d:71:5c:b2:c9:4e:7d:68:ae:50:
e1:e8:39:6b:3b:61:c1:cd:da:8a:bc:6a:fe:1e:e9:
92:3a:9c:8e:59:93:ef:9f:8a:41:0c:11:49:85:64:
58:a0:a2:c0:01:2e:4f:f7:cd:c0:0d:29:cd:7d:74:
69:fb:2e:a7:ef:39:ec:e5:12:3e:99:aa:47:25:4b:
56:05:f3:37:5f:92:9d:af:1b:2c:be:01:6b:f6:6e:
21:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:AF:5A:CD:92:C9:80:DA:80:BA:7C:F9:CF:F9:56:7E:F8:02:E7:AA
X509v3 Authority Key Identifier:
keyid:B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/O69azZLJgNqAunz5z_lWfvgC56o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.32.10.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:27:af:99:e4:67:e1:fb:bc:be:ab:63:32:fa:69:33:e1:02:
c1:e4:9e:f0:88:d6:47:81:d0:0c:95:14:ad:83:79:4f:07:fa:
8f:44:38:4c:40:5d:98:6c:02:9d:5c:b9:86:a2:5c:0a:9f:cc:
93:89:fd:19:50:8c:5c:62:22:43:80:82:e9:cd:12:f4:50:ac:
9f:7f:d5:34:d5:5f:a6:61:d9:53:7f:19:9e:ed:26:4d:fe:d9:
ed:c3:ed:45:a7:c0:83:2e:e9:0f:b2:9d:3b:ca:db:83:fd:c2:
76:de:aa:0a:97:44:02:d9:0d:53:06:65:60:75:15:4e:82:9f:
ae:32:36:f8:db:cf:e6:03:23:52:b4:23:aa:6c:ac:d8:70:c3:
ce:37:2d:59:ae:82:da:eb:12:02:29:91:0b:63:23:31:9a:fe:
2e:ab:ce:fd:3f:1b:73:cd:b8:6d:9f:46:05:3c:a7:28:e8:79:
04:a9:83:3a:07:80:4a:30:6b:43:01:26:7d:10:79:74:28:2a:
ce:c9:16:bd:16:4a:b8:1a:ef:72:dd:7d:05:14:52:66:42:91:
a7:46:a9:33:e9:80:ce:bc:4b:81:32:84:c9:1e:04:1f:4c:ea:
1b:88:c1:27:c2:08:cf:78:ce:cb:22:fa:d1:63:d6:41:3a:f1:
3e:09:51:53
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt8ETfQWyMtaSnhJ0CNGbRaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwYzIwYWUxZGFjY2EzMTgxNWIyNzQ3MDI5MjdjMWE1YTlk
YmM3YjMwHhcNMjYwMTAyMDAxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYmFmNWFjZDkyYzk4MGRhODBiYTdjZjljZmY5NTY3ZWY4MDJlN2FhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqORKKmQRl3G2FitF+M4nQ24NUd4
k/p5FT1fJVTTwSfDzh5aPZ4B1uZuQ0ENVqc7xkiODjKIcAJJoDeM9TzTo53PU8IB
DI9EbT4T8tavTns1MFNUUD56AddtEAci6eYkj8+lwcBiKTmqY2aX+tFb8kpvUGqb
ggMbEdRkMmrOj0fwUnfY0Fno4CadbK3Nho8sqtXvCde4SKEGt8fO63Ur8EuIz+lI
FzCv6A1xXLLJTn1orlDh6DlrO2HBzdqKvGr+HumSOpyOWZPvn4pBDBFJhWRYoKLA
AS5P983ADSnNfXRp+y6n7zns5RI+mapHJUtWBfM3X5KdrxssvgFr9m4h/wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDuvWs2SyYDagLp8+c/5Vn74AueqMB8GA1UdIwQY
MBaAFLDCCuHazKMYFbJ0cCknwaWp28ezMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc01JSzRkck1veGdWc25Sd0tTZkJwYW5ieDdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84ODg4NjktN2E2NS00MTViLWI2OGYt
NTQ4NDQwMmNlYjdhLzEvTzY5YXpaTEpnTnFBdW56NXpfbFdmdmdDNTZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS84ODg4NjktN2E2NS00MTViLWI2OGYtNTQ4NDQwMmNlYjdh
LzEvc01JSzRkck1veGdWc25Sd0tTZkJwYW5ieDdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSAKMA0G
CSqGSIb3DQEBCwUAA4IBAQAdJ6+Z5Gfh+7y+q2My+mkz4QLB5J7wiNZHgdAMlRSt
g3lPB/qPRDhMQF2YbAKdXLmGolwKn8yTif0ZUIxcYiJDgILpzRL0UKyff9U01V+m
YdlTfxme7SZN/tntw+1Fp8CDLukPsp07ytuD/cJ23qoKl0QC2Q1TBmVgdRVOgp+u
Mjb428/mAyNStCOqbKzYcMPONy1ZroLa6xICKZELYyMxmv4uq879Pxtzzbhtn0YF
PKco6HkEqYM6B4BKMGtDASZ9EHl0KCrOyRa9Fkq4Gu9y3X0FFFJmQpGnRqkz6YDO
vEuBMoTJHgQfTOobiMEnwgjPeM7LIvrRY9ZBOvE+CVFT
-----END CERTIFICATE-----
Generated at Mon Feb 9 19:55:14 2026 by rpki-client