This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/664cab-ba9a-4c40-97f4-af98e49f11ae/1/Oe-SeoCCIXN5ycDnQlV6M_dI1XI.roa
File: Oe-SeoCCIXN5ycDnQlV6M_dI1XI.roa (raw, json)
Hash identifier: D3QDtFMR0sLy/F2jguYpH4IAE7IC8B7SWcgluJtwmKs=
Subject key identifier: 39:EF:92:7A:80:82:21:73:79:C9:C0:E7:42:55:7A:33:F7:48:D5:72
Certificate issuer: /CN=23d480b0795617e2e26e6e18264377e7a96c78f3
Certificate serial: 019B7C127DFB29421B82EEFE61E0E997CED5
Authority key identifier: 23:D4:80:B0:79:56:17:E2:E2:6E:6E:18:26:43:77:E7:A9:6C:78:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I9SAsHlWF-Libm4YJkN356lsePM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/664cab-ba9a-4c40-97f4-af98e49f11ae/1/Oe-SeoCCIXN5ycDnQlV6M_dI1XI.roa
Signing time: Fri 02 Jan 2026 00:19:05 +0000
ROA not before: Fri 02 Jan 2026 00:19:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215182
IP address blocks: 46.227.160.0/23 maxlen: 23
46.227.162.0/24 maxlen: 24
46.227.164.0/24 maxlen: 24
46.227.166.0/24 maxlen: 24
46.227.167.0/24 maxlen: 24
95.143.0.0/21 maxlen: 24
95.143.4.0/24 maxlen: 24
95.143.5.0/24 maxlen: 24
95.143.8.0/23 maxlen: 23
95.143.10.0/24 maxlen: 24
95.143.11.0/24 maxlen: 24
95.143.12.0/24 maxlen: 24
95.143.13.0/24 maxlen: 24
95.143.14.0/23 maxlen: 23
185.72.224.0/24 maxlen: 24
185.72.225.0/24 maxlen: 24
185.72.226.0/24 maxlen: 24
185.72.227.0/24 maxlen: 24
193.242.176.0/22 maxlen: 22
2a02:1328:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/664cab-ba9a-4c40-97f4-af98e49f11ae/1/I9SAsHlWF-Libm4YJkN356lsePM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/664cab-ba9a-4c40-97f4-af98e49f11ae/1/I9SAsHlWF-Libm4YJkN356lsePM.mft
rsync://rpki.ripe.net/repository/DEFAULT/I9SAsHlWF-Libm4YJkN356lsePM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:12:7d:fb:29:42:1b:82:ee:fe:61:e0:e9:97:ce:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23d480b0795617e2e26e6e18264377e7a96c78f3
Validity
Not Before: Jan 2 00:19:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=39ef927a8082217379c9c0e742557a33f748d572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:0b:ea:45:3e:7b:40:c8:22:83:09:13:83:ea:
68:40:28:7e:a3:1a:ce:b0:b6:96:26:83:4b:62:70:
35:46:00:9b:90:98:82:6b:ef:ef:ba:05:9f:aa:c3:
51:f1:94:62:29:5c:4c:10:b3:63:5d:99:43:a9:ae:
ed:5b:79:1a:d3:ec:00:64:3f:cf:46:59:8f:b4:b3:
49:73:b5:75:f0:0f:89:22:f6:2d:ec:f0:db:24:b4:
09:49:4a:54:63:75:4a:a0:c5:c7:2d:52:b8:ca:5f:
e7:1f:ce:73:0f:cd:84:cd:a0:7d:dc:69:9a:ca:60:
9b:f7:d8:3b:06:53:6d:77:49:c2:82:48:d3:1f:88:
73:d8:0e:6e:bd:87:a3:23:09:c6:06:a0:04:0f:46:
51:55:88:1d:64:3c:d3:3c:ce:86:06:32:8b:3e:95:
a6:b6:d6:ce:ca:ad:4c:41:a7:9c:ca:40:0a:9b:59:
32:1b:d2:d1:01:c2:ba:7d:d9:bf:32:45:22:25:f3:
b7:29:17:a0:ce:e1:79:c6:d2:a3:8c:dc:4c:4c:40:
19:77:77:55:21:3b:cd:5a:62:1c:49:30:29:10:19:
0d:96:19:8f:d9:0d:23:0d:b8:e8:df:c4:5f:f9:6c:
2e:3f:58:88:57:11:91:5b:f9:da:e8:fd:d9:16:3f:
83:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:EF:92:7A:80:82:21:73:79:C9:C0:E7:42:55:7A:33:F7:48:D5:72
X509v3 Authority Key Identifier:
keyid:23:D4:80:B0:79:56:17:E2:E2:6E:6E:18:26:43:77:E7:A9:6C:78:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9SAsHlWF-Libm4YJkN356lsePM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/664cab-ba9a-4c40-97f4-af98e49f11ae/1/Oe-SeoCCIXN5ycDnQlV6M_dI1XI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/664cab-ba9a-4c40-97f4-af98e49f11ae/1/I9SAsHlWF-Libm4YJkN356lsePM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.227.160.0-46.227.162.255
46.227.164.0/24
46.227.166.0/23
95.143.0.0/20
185.72.224.0/22
193.242.176.0/22
IPv6:
2a02:1328:2::/48
Signature Algorithm: sha256WithRSAEncryption
0e:b1:7a:45:c5:b1:d0:58:3b:1c:ee:8a:93:68:71:9e:af:fa:
a0:d6:c1:d4:8f:12:44:77:06:b8:51:91:83:c2:83:01:7b:ee:
78:ff:69:8c:d2:89:32:d2:3c:cb:71:86:84:17:b5:23:8e:dd:
af:f6:27:81:75:17:9a:8a:0a:bd:e7:dc:7a:cf:1e:80:fc:20:
36:9b:c3:78:9e:36:b1:8b:ee:f3:f1:32:19:ee:92:4b:d0:a9:
39:0b:64:4f:33:1a:2f:d2:c6:5b:92:63:c0:80:c4:54:8f:00:
ea:0d:ed:56:77:fd:49:ea:e1:19:50:dd:43:7a:d8:f0:83:8d:
a4:33:3e:5c:74:36:37:cf:ad:f9:b0:18:b5:b7:10:28:12:25:
cd:d1:d7:66:bc:cd:07:6e:a2:56:92:9d:ea:c1:4a:8c:4b:ec:
a8:59:8c:f7:92:e7:0a:28:fd:3e:69:f5:f8:62:fc:41:13:a9:
d2:2e:cf:ef:f7:f3:c5:aa:a5:f5:ce:27:86:bc:d8:0d:8a:68:
fe:7b:76:6d:02:5a:08:71:d5:9f:ab:dd:b3:b6:b8:f6:d8:d7:
f0:da:f3:4f:d4:8e:4c:d3:19:57:23:3e:8d:86:37:d5:ae:79:
03:58:3d:b7:6e:b9:78:9f:70:a5:00:42:4a:b6:5b:8d:70:cd:
3d:15:48:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 23:51:25 2026 by rpki-client