This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/oDVz2eTnCDw98Sh8AXFEKdiMCm8.roa
File: oDVz2eTnCDw98Sh8AXFEKdiMCm8.roa (raw, json)
Hash identifier: thUeFABDpIEkTpbKZW+FpdsviA9MqeC7/Ij0qsHenC8=
Subject key identifier: A0:35:73:D9:E4:E7:08:3C:3D:F1:28:7C:01:71:44:29:D8:8C:0A:6F
Certificate issuer: /CN=5b1c1e0624039bd1f1a946cb513c93386fab6b19
Certificate serial: 019B7C1361A54EC4779FCBA90593FEAEEA8B
Authority key identifier: 5B:1C:1E:06:24:03:9B:D1:F1:A9:46:CB:51:3C:93:38:6F:AB:6B:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WxweBiQDm9HxqUbLUTyTOG-raxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/oDVz2eTnCDw98Sh8AXFEKdiMCm8.roa
Signing time: Fri 02 Jan 2026 00:20:03 +0000
ROA not before: Fri 02 Jan 2026 00:20:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29374
IP address blocks: 195.149.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/WxweBiQDm9HxqUbLUTyTOG-raxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:13:61:a5:4e:c4:77:9f:cb:a9:05:93:fe:ae:ea:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b1c1e0624039bd1f1a946cb513c93386fab6b19
Validity
Not Before: Jan 2 00:20:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a03573d9e4e7083c3df1287c01714429d88c0a6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1b:71:54:4a:9f:62:b3:bc:e1:52:f4:2e:9e:
89:c1:d9:82:75:c0:48:7a:f8:8e:cd:74:5e:a9:63:
40:45:60:7c:28:a5:61:ad:67:0e:d6:cf:ea:e3:26:
38:06:b4:e7:08:55:af:23:08:be:34:77:f2:d5:28:
e9:11:6a:1e:74:e5:b4:da:9c:e1:0b:66:42:85:dd:
a4:17:fd:5b:e8:38:52:fa:60:47:5c:d2:f4:e1:70:
b8:4b:ae:de:b3:3b:0a:43:ed:9c:f9:c0:b3:ba:bc:
0b:16:a1:22:51:48:6b:7b:3f:09:f9:0d:35:6d:d0:
8e:ef:84:d9:cb:6e:f8:a9:86:fc:60:3f:17:e7:10:
63:ae:42:bc:10:b7:b1:05:b2:ab:8e:f8:33:ae:8c:
0f:a5:90:72:22:af:96:17:2f:a3:88:33:32:0e:57:
b9:9f:9a:42:7e:09:9e:89:12:20:d3:37:8d:d2:ba:
c6:3b:fa:a7:85:7d:1f:59:0a:96:41:f5:49:26:2d:
44:42:b3:b2:86:5f:df:5c:49:d2:e3:b7:3c:a3:22:
3e:31:20:3b:de:55:f5:87:b6:fe:6d:2e:e5:8f:b6:
fa:d4:e1:15:d4:6b:67:6a:f8:84:50:c8:27:87:56:
03:10:c2:98:df:dc:83:0a:17:bd:a0:d5:9f:96:cd:
30:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:35:73:D9:E4:E7:08:3C:3D:F1:28:7C:01:71:44:29:D8:8C:0A:6F
X509v3 Authority Key Identifier:
keyid:5B:1C:1E:06:24:03:9B:D1:F1:A9:46:CB:51:3C:93:38:6F:AB:6B:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WxweBiQDm9HxqUbLUTyTOG-raxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/oDVz2eTnCDw98Sh8AXFEKdiMCm8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.149.94.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:2c:3f:c8:86:eb:0c:a2:3e:09:73:43:aa:13:fe:ad:36:29:
4b:df:6f:a9:7e:82:2b:0a:bd:a7:e4:54:b8:01:c8:f9:81:bf:
f7:08:35:55:7a:6a:69:7b:88:be:71:86:4c:e4:c5:5e:69:65:
8e:f3:a0:9f:4f:63:0a:54:dd:65:f7:cb:3d:40:b3:1d:84:c5:
b0:93:42:60:59:33:c3:4a:f5:3e:bb:99:d5:84:a7:35:d0:5c:
e1:b9:ea:a5:f5:5b:84:60:de:56:96:44:b2:cf:e8:61:99:73:
05:75:8c:97:2f:42:ee:dd:5e:0b:9f:32:0b:86:18:fd:8d:cb:
fc:69:4b:ff:08:9b:7b:2c:a9:00:b8:09:18:5a:4c:ea:5e:02:
e3:67:07:ae:64:b2:81:42:86:a1:c7:a2:3b:9a:ee:aa:8b:d4:
eb:41:45:05:a5:b5:b1:e5:6c:9d:c3:87:8b:c7:7d:f3:cf:41:
a3:da:96:5a:c7:57:3e:54:7c:bf:82:ff:12:81:d9:08:14:4a:
27:25:66:11:af:a6:a5:4b:e8:68:b3:fd:49:5a:0c:67:86:0c:
be:8f:41:54:45:90:9b:c4:63:a5:83:4e:0c:b4:f4:6e:5b:88:
e6:59:72:59:5e:5b:f5:68:c0:50:69:d3:d2:4f:00:ff:58:f0:
d0:0e:78:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:44:35 2026 by rpki-client