This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/deWeFe-V8g-k0HCqRDLP6TgKyho.roa
File: deWeFe-V8g-k0HCqRDLP6TgKyho.roa (raw, json)
Hash identifier: GLkH+BPCZeX8d6ZhTifUuwPPv+51Okkc5dDblqVKsQE=
Subject key identifier: 75:E5:9E:15:EF:95:F2:0F:A4:D0:70:AA:44:32:CF:E9:38:0A:CA:1A
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019C1BFD996847BBE45C2C83DD8211527506
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/deWeFe-V8g-k0HCqRDLP6TgKyho.roa
Signing time: Mon 02 Feb 2026 01:35:30 +0000
ROA not before: Mon 02 Feb 2026 01:35:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 17497
IP address blocks: 144.31.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Feb 2026 00:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:1b:fd:99:68:47:bb:e4:5c:2c:83:dd:82:11:52:75:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Feb 2 01:35:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=75e59e15ef95f20fa4d070aa4432cfe9380aca1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:20:de:5b:2c:92:7c:7f:c7:e3:3f:b6:93:bd:
6a:ca:1b:25:40:77:c0:96:70:d5:b1:fb:42:dc:b4:
52:90:1d:51:ee:76:c8:96:1d:3a:1e:25:56:b4:5c:
6b:c6:28:34:88:8b:1a:3b:7b:c6:22:ed:15:aa:c1:
40:44:18:87:ed:3f:e6:f8:1d:9e:9e:99:c6:df:1b:
cf:56:10:6b:b3:25:c3:60:c8:0a:8a:16:ed:64:86:
17:42:83:09:8a:5f:17:00:53:dd:aa:6b:90:62:c5:
46:2c:af:b2:64:71:34:1e:3b:f1:2b:66:77:0c:d0:
0d:37:bf:46:30:20:7b:3f:d6:a9:eb:ab:30:57:57:
64:f0:ff:66:23:19:1b:a5:41:11:c3:a1:b6:37:99:
df:56:02:e1:4d:f4:6f:02:d8:a9:bf:d6:0f:3c:24:
61:c3:3d:87:15:2c:95:53:d2:b7:c4:3a:49:22:d5:
78:6d:b4:c9:6b:ec:06:ce:6f:9a:00:1f:49:01:53:
57:77:74:8f:db:94:ab:5f:c5:2b:e9:79:6e:95:87:
03:32:d6:13:14:02:0d:a1:19:d8:d3:a9:15:69:df:
9a:c7:11:42:c2:89:bf:0a:65:69:26:8b:06:c6:eb:
66:f4:a1:c4:22:d8:6d:d5:84:aa:f4:a3:f9:2d:de:
ac:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:E5:9E:15:EF:95:F2:0F:A4:D0:70:AA:44:32:CF:E9:38:0A:CA:1A
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/deWeFe-V8g-k0HCqRDLP6TgKyho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.31.36.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:c9:6d:6e:d2:37:b5:50:a8:cf:ab:52:ab:dc:5a:76:1b:bc:
52:56:68:34:6e:c0:fc:83:5a:6f:e7:cf:70:70:8b:aa:07:dc:
fa:d4:80:30:5a:2b:fe:70:b0:a4:64:5c:95:5c:32:96:c1:df:
9c:73:1c:44:67:dd:06:34:b7:e1:92:06:08:19:5d:b1:86:ea:
4e:fd:15:de:e2:dc:d0:87:c4:74:fb:a2:e7:f5:e8:8c:70:49:
23:e2:fe:d8:1d:70:0f:a4:89:36:08:23:a4:2d:54:f5:1f:f6:
aa:c4:1d:e1:b2:58:e8:34:08:07:31:c0:1c:b5:2c:9f:7e:7f:
fc:c1:24:de:85:ac:ea:f0:29:e2:f3:44:3c:d1:64:f0:9f:6e:
17:e8:d0:59:d9:d1:f6:e6:90:00:f4:0d:17:48:2f:47:91:66:
4f:18:58:56:28:ed:30:cf:5f:4a:e8:ed:a5:40:02:f7:6c:61:
f8:cf:3a:b5:f8:3c:08:b1:1b:37:89:e3:06:ba:b9:ac:42:98:
85:e1:ec:fd:37:f5:69:44:74:57:c8:86:ab:70:a6:aa:74:29:
5d:73:f7:4c:45:e0:73:94:94:18:b1:89:ae:76:b1:05:3c:c3:
b9:85:6e:46:4c:7a:24:c6:37:dc:b6:ee:52:15:36:58:f9:21:
d4:62:0c:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 4 10:06:00 2026 by rpki-client