This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/oJkuvjTWuxDIoigEehvUPj6E430.roa
File: oJkuvjTWuxDIoigEehvUPj6E430.roa (raw, json)
Hash identifier: ASuSUfq381K4XV+/uRe8kz2n34PcXNfSAkwlo/Ts/rY=
Subject key identifier: A0:99:2E:BE:34:D6:BB:10:C8:A2:28:04:7A:1B:D4:3E:3E:84:E3:7D
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 019C10A675FD16B753FE6EC2251427FA1030
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/oJkuvjTWuxDIoigEehvUPj6E430.roa
Signing time: Fri 30 Jan 2026 20:44:30 +0000
ROA not before: Fri 30 Jan 2026 20:44:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29802
IP address blocks: 146.247.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Feb 2026 19:43:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:10:a6:75:fd:16:b7:53:fe:6e:c2:25:14:27:fa:10:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: Jan 30 20:44:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a0992ebe34d6bb10c8a228047a1bd43e3e84e37d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:40:fb:37:11:00:71:1e:37:b8:7a:c6:72:eb:
c9:16:95:70:1e:05:a5:92:fd:1d:f5:04:e1:a7:31:
9f:3e:43:cc:a7:67:7f:80:8a:51:72:be:53:f5:06:
18:10:ab:ba:f6:02:de:d8:34:56:52:56:fe:bd:79:
4d:43:99:4a:2b:7c:7c:e2:73:c5:42:97:5a:8f:3b:
9e:d2:60:f2:03:bc:21:b8:1c:00:5a:59:92:bb:ea:
4e:54:e8:94:42:53:b7:3b:64:29:48:31:73:64:a7:
db:64:0d:d7:5b:91:66:be:e2:c0:8c:6b:73:06:68:
0f:f1:16:f2:11:3f:ba:78:3f:6f:40:28:5f:24:11:
b3:7e:13:62:f7:46:29:d1:c9:5c:51:8e:bd:b5:91:
f4:41:1a:76:e1:3a:f2:de:aa:36:87:7e:0d:52:4f:
9e:e5:2a:9d:6d:c1:0b:5f:43:4f:75:b0:cd:41:ba:
b7:35:a8:50:91:7c:a2:62:41:f6:e3:2f:dd:d4:08:
de:71:02:f0:8a:dc:51:b9:46:10:30:23:bc:82:74:
d6:c3:74:4a:ba:53:87:5b:4a:5c:9d:0c:fc:a8:1f:
bf:a3:6a:f5:2b:86:51:c0:d3:94:90:41:ec:e5:f4:
01:f2:e3:e8:26:78:84:b9:ce:7b:75:ab:cd:b4:0e:
ff:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:99:2E:BE:34:D6:BB:10:C8:A2:28:04:7A:1B:D4:3E:3E:84:E3:7D
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/oJkuvjTWuxDIoigEehvUPj6E430.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.127.0/24
Signature Algorithm: sha256WithRSAEncryption
21:ac:22:03:c4:58:f8:fc:cf:39:10:e4:98:96:00:98:44:38:
ce:64:8b:00:60:0e:9c:2b:72:3f:e7:0e:89:d7:e1:91:56:85:
76:a2:ea:ec:af:4e:94:92:7c:43:a7:ba:a6:30:46:77:36:ca:
2e:0c:e8:a5:bf:3a:fb:76:f4:29:44:95:40:33:a2:b0:34:d9:
56:1d:ea:38:3c:4b:22:a8:13:64:40:2a:18:12:21:71:c6:c5:
fc:aa:13:46:3b:05:2b:54:07:5a:d4:05:cb:c5:e1:c4:f7:25:
48:46:7c:28:ff:bf:49:b1:7d:37:c4:8f:3a:64:41:72:3b:4d:
0b:44:a2:87:d8:f5:72:e1:92:5f:f6:69:32:06:85:22:e7:bf:
8c:1e:35:d8:d2:20:de:a9:a3:bd:79:f5:05:39:40:f7:0b:b4:
4f:36:2f:32:f8:ca:e5:08:df:39:a7:92:1d:d6:36:a1:cd:e2:
07:d7:ea:c4:f9:23:87:04:f0:d1:37:cb:cc:80:0d:9a:94:5a:
fa:fe:cc:41:1c:09:61:d4:e7:c7:b8:7d:e2:33:32:12:f7:0b:
fd:c2:da:54:dc:1f:04:12:68:ef:b4:36:89:f7:a2:a5:36:bd:
5a:bc:43:2a:88:9f:25:0b:9e:30:a9:84:0a:3d:7a:61:5b:fe:
ee:89:b6:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 4 03:48:05 2026 by rpki-client