This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Wm06d2ahMJW-LIu1evo5YX7PBvo.roa
File: Wm06d2ahMJW-LIu1evo5YX7PBvo.roa (raw, json)
Hash identifier: NtroP0BINsTt7xbArXecpABgq6Na22H6hFGqiU+hKp8=
Subject key identifier: 5A:6D:3A:77:66:A1:30:95:BE:2C:8B:B5:7A:FA:39:61:7E:CF:06:FA
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019B78A2DC44FFB6BE5A1BF23E160A352F80
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Wm06d2ahMJW-LIu1evo5YX7PBvo.roa
Signing time: Thu 01 Jan 2026 08:18:17 +0000
ROA not before: Thu 01 Jan 2026 08:18:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 11878
IP address blocks: 87.121.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Jan 2026 02:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:a2:dc:44:ff:b6:be:5a:1b:f2:3e:16:0a:35:2f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 1 08:18:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5a6d3a7766a13095be2c8bb57afa39617ecf06fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:55:f4:80:09:b7:2d:3f:a9:f0:a4:20:b4:57:
7d:ca:62:78:99:35:62:f5:b7:0a:ec:e3:eb:81:5a:
93:bb:8d:02:a8:95:a9:e2:4f:94:aa:90:68:fc:cb:
4f:76:d5:03:16:5f:8e:0f:b8:11:ca:cc:51:56:ef:
ed:0e:f3:8c:fe:9e:88:c9:3b:da:fd:04:45:97:4c:
10:03:73:80:11:ef:2b:7d:3d:cb:26:65:b2:41:18:
1e:ec:45:ca:b4:24:6d:bd:3b:38:be:58:28:2a:6c:
c6:e0:3c:87:92:66:cc:4f:7f:cc:f3:ad:48:5d:71:
86:ac:46:65:cd:b8:aa:b3:25:4e:49:60:85:65:6a:
c2:2a:76:7f:80:ba:72:65:09:24:4b:eb:b0:14:dc:
95:14:6a:cb:22:82:9d:ea:3f:60:01:e9:e5:57:02:
a7:5d:f1:65:51:dc:dd:f0:32:65:85:91:05:f1:d0:
42:48:63:48:e7:af:84:77:44:56:73:1d:9a:b5:c4:
1c:dd:2a:5a:95:51:0c:d6:09:10:82:9b:c5:a7:c4:
d2:06:d0:e9:f1:75:19:8d:fa:83:c1:df:d9:a2:8d:
cd:8d:90:14:1c:16:a4:de:63:6c:0a:a2:bf:5f:9c:
7f:5f:d6:34:67:b8:fe:4a:5f:11:33:1b:9c:de:9f:
e9:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:6D:3A:77:66:A1:30:95:BE:2C:8B:B5:7A:FA:39:61:7E:CF:06:FA
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Wm06d2ahMJW-LIu1evo5YX7PBvo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.146.0/24
Signature Algorithm: sha256WithRSAEncryption
99:e4:eb:ae:65:cb:a3:e8:f3:41:16:cf:1e:f7:4d:bc:e1:35:
b8:b5:e6:e5:dd:30:7c:96:15:7f:37:bf:e4:4c:82:1d:08:3e:
0e:35:b9:69:43:bc:88:43:b2:00:51:e6:fb:3d:db:b0:b8:fe:
84:47:b4:4a:06:ed:f3:76:b6:af:00:70:d2:06:8b:a7:53:04:
f9:5a:bc:80:a7:6b:3d:e9:28:d8:d8:a4:75:40:63:04:ba:db:
6d:98:52:c0:ab:c6:87:53:3a:c8:f0:fb:95:82:24:5f:b1:52:
03:ec:c7:63:f6:1b:d6:cc:13:1d:70:e1:8f:2f:b6:4d:06:85:
57:da:11:6b:71:fd:76:53:c0:63:39:1c:d4:9a:d9:43:4d:c7:
93:42:a6:ad:97:6f:2a:fb:52:03:d6:70:b6:76:4b:e3:57:9e:
07:ef:12:a0:b8:d0:52:91:33:e9:3e:32:e0:bc:ed:f2:c1:02:
1f:de:e2:b0:a8:a1:bf:94:0e:c8:39:c0:61:e1:13:64:9b:04:
2e:16:05:65:8b:f4:62:13:19:57:30:81:02:c2:a3:5b:ae:f6:
c7:ed:a5:b0:12:1f:92:e3:be:c8:29:27:ef:9a:e2:29:20:16:
46:f5:5e:bf:dc:de:80:33:9b:2b:92:61:d4:d0:19:6f:ec:44:
de:e9:04:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 12:04:28 2026 by rpki-client