This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/W6MSMu0PWrKmQGBTGpo_U-BFG7Y.roa
File: W6MSMu0PWrKmQGBTGpo_U-BFG7Y.roa (raw, json)
Hash identifier: 94h/7+Oe/yFCuA9M0l2IxuWJF4e6SbCGvwaysJCvYSE=
Subject key identifier: 5B:A3:12:32:ED:0F:5A:B2:A6:40:60:53:1A:9A:3F:53:E0:45:1B:B6
Certificate issuer: /CN=d93a54f02f49f45ad5d73e5551d096181bce3f6e
Certificate serial: 019B7E37DDEDA2229D39ADD1C6243315E6EA
Authority key identifier: D9:3A:54:F0:2F:49:F4:5A:D5:D7:3E:55:51:D0:96:18:1B:CE:3F:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2TpU8C9J9FrV1z5VUdCWGBvOP24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/W6MSMu0PWrKmQGBTGpo_U-BFG7Y.roa
Signing time: Fri 02 Jan 2026 10:19:09 +0000
ROA not before: Fri 02 Jan 2026 10:19:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210006
IP address blocks: 178.20.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.mft
rsync://rpki.ripe.net/repository/DEFAULT/2TpU8C9J9FrV1z5VUdCWGBvOP24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Jan 2026 10:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:37:dd:ed:a2:22:9d:39:ad:d1:c6:24:33:15:e6:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93a54f02f49f45ad5d73e5551d096181bce3f6e
Validity
Not Before: Jan 2 10:19:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5ba31232ed0f5ab2a64060531a9a3f53e0451bb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3c:e3:be:78:c3:19:d1:14:94:15:e1:a3:18:
db:fe:75:86:8f:5c:0b:5c:c2:d9:a5:7f:46:43:fa:
a5:60:4c:52:e0:f6:5f:8c:3e:7c:b5:5f:51:1d:ed:
32:74:6e:80:48:ba:80:87:16:25:4a:db:11:d3:94:
c7:30:ba:f9:27:60:d0:23:3c:fe:15:c1:85:40:2c:
22:4a:91:b3:f0:44:e9:94:23:f8:fe:4e:81:35:60:
73:58:e8:77:0e:d2:80:4c:61:08:fd:0c:0e:29:58:
3d:2f:49:7b:26:a2:b8:d8:4d:2a:78:a8:69:68:ed:
4c:0f:dd:84:e6:b1:c1:c3:65:ce:3b:8b:0d:31:8a:
68:b6:c2:b9:d9:9a:67:cc:47:8a:92:85:27:f9:fd:
68:e8:f8:56:72:74:14:65:4f:75:38:0c:56:78:c2:
dc:71:6e:2e:87:f6:a6:ec:0a:97:d2:9a:0c:0e:5f:
8a:1e:38:9a:91:0d:85:4f:05:0e:c4:74:55:0e:bb:
32:55:b0:c0:fe:4a:85:5a:f4:91:de:62:ca:d5:c6:
4a:e3:42:5c:7c:10:06:4a:35:2b:3b:81:18:61:99:
89:7f:71:59:8e:0d:1e:d1:d8:89:be:0f:9f:6a:78:
27:88:91:cb:69:56:0c:4f:8f:c6:30:e6:01:42:09:
d8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:A3:12:32:ED:0F:5A:B2:A6:40:60:53:1A:9A:3F:53:E0:45:1B:B6
X509v3 Authority Key Identifier:
keyid:D9:3A:54:F0:2F:49:F4:5A:D5:D7:3E:55:51:D0:96:18:1B:CE:3F:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2TpU8C9J9FrV1z5VUdCWGBvOP24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/W6MSMu0PWrKmQGBTGpo_U-BFG7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.20.210.0/24
Signature Algorithm: sha256WithRSAEncryption
70:17:4b:97:0e:e1:d0:dd:0b:02:1b:12:02:da:a6:0d:33:e1:
62:de:25:51:64:6c:fc:bd:12:c6:09:1d:04:0f:b0:c6:7f:af:
58:a0:3b:7e:7c:40:83:23:e9:16:4a:7b:12:78:26:ba:4a:99:
46:78:af:bc:9b:10:fa:fb:ab:49:61:4c:80:29:8a:c7:6f:9c:
a2:55:b6:b9:fb:0a:06:2e:28:78:7f:e5:e1:65:b5:d1:b6:11:
a0:15:ab:53:6e:40:94:bb:47:95:5b:bd:7a:ca:81:3c:66:84:
b9:db:89:6a:71:c1:87:ff:a5:e3:20:f1:8d:e2:56:d2:1a:40:
8f:60:7c:ec:0b:6b:22:2c:7b:c8:c4:be:e7:00:16:2f:d1:9d:
61:61:35:aa:97:87:2d:e8:d3:98:a2:d7:23:0b:09:26:e4:54:
b7:52:ba:64:d4:1b:fd:4a:78:8a:a8:f8:d9:7a:03:e7:59:b1:
58:6a:37:f9:67:5a:67:04:4e:70:e7:a0:55:3a:5a:c5:19:03:
7b:fd:d8:e7:3d:a7:b8:28:ed:05:1b:f4:0d:b2:2d:21:16:82:
46:d7:27:63:10:2a:c9:2b:75:78:8e:20:5c:5b:ed:fd:71:c0:
4a:20:b1:0b:af:27:e4:a1:d4:09:4f:37:5b:7f:23:a6:ef:d4:
23:52:38:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 12:53:05 2026 by rpki-client