This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/wn5elTtGmUxo3vgmfjZchTK_VTo.roa
File: wn5elTtGmUxo3vgmfjZchTK_VTo.roa (raw, json)
Hash identifier: fkotHNjPjFd/IcwShz9KIRbGoJkmT3yrX5z9oh73hjU=
Subject key identifier: C2:7E:5E:95:3B:46:99:4C:68:DE:F8:26:7E:36:5C:85:32:BF:55:3A
Certificate issuer: /CN=f1d2ba8a2a96a07b5b64caf873290e2078d964a6
Certificate serial: 019B7BA510F8DEF60F1547CA3DAEC0CBE5F0
Authority key identifier: F1:D2:BA:8A:2A:96:A0:7B:5B:64:CA:F8:73:29:0E:20:78:D9:64:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dK6iiqWoHtbZMr4cykOIHjZZKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/wn5elTtGmUxo3vgmfjZchTK_VTo.roa
Signing time: Thu 01 Jan 2026 22:19:33 +0000
ROA not before: Thu 01 Jan 2026 22:19:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50629
IP address blocks: 193.105.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dK6iiqWoHtbZMr4cykOIHjZZKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 07:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:a5:10:f8:de:f6:0f:15:47:ca:3d:ae:c0:cb:e5:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d2ba8a2a96a07b5b64caf873290e2078d964a6
Validity
Not Before: Jan 1 22:19:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c27e5e953b46994c68def8267e365c8532bf553a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:df:04:a3:0c:32:71:0a:9d:97:73:aa:d8:6d:
70:61:b6:a1:00:42:50:29:c0:66:f1:1a:35:38:82:
2d:79:53:78:f0:c3:c2:e8:2c:08:46:a9:8c:dc:a0:
84:7a:1f:f7:0b:31:f0:77:f4:04:af:4e:eb:62:ae:
6e:a0:b3:b0:ce:e7:bd:03:6c:1e:83:a7:4b:8a:e4:
d3:b4:98:3a:91:af:82:ff:30:c3:3e:a6:29:6f:00:
07:fd:ae:93:0f:65:fa:ef:23:55:da:1e:d2:88:d7:
8f:ff:83:bb:2f:7c:54:ae:75:97:e9:2a:12:73:a8:
c6:0e:f0:5d:2a:52:30:28:4a:76:93:06:f9:42:3b:
9f:7e:e4:29:8e:1a:17:97:ee:3f:96:fc:ba:12:42:
c3:10:ad:39:83:6e:e9:cd:35:bb:2b:fc:73:8e:7c:
8f:08:51:f5:d8:99:41:6e:1e:99:3e:0b:76:99:d1:
94:11:59:0e:aa:87:2b:44:fd:d9:e0:7e:e9:c6:9c:
c1:ad:f7:92:9a:68:06:a0:b9:f0:ca:85:85:86:5a:
5d:2b:04:b7:de:0b:b2:76:6a:4d:a1:48:25:a6:0c:
17:b4:9c:0a:8a:88:c6:26:41:73:f0:6f:d0:fd:42:
f3:9e:60:cb:05:f8:bc:70:a8:35:8c:55:35:b4:ab:
d3:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:7E:5E:95:3B:46:99:4C:68:DE:F8:26:7E:36:5C:85:32:BF:55:3A
X509v3 Authority Key Identifier:
keyid:F1:D2:BA:8A:2A:96:A0:7B:5B:64:CA:F8:73:29:0E:20:78:D9:64:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dK6iiqWoHtbZMr4cykOIHjZZKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/wn5elTtGmUxo3vgmfjZchTK_VTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.14.0/24
Signature Algorithm: sha256WithRSAEncryption
67:e0:01:06:7d:78:fe:d1:4e:26:a4:7f:8d:e5:89:ea:2c:20:
36:98:c3:65:a8:34:6a:f6:d4:70:03:b1:91:3e:d3:57:09:86:
c6:94:76:d4:23:ff:a1:06:80:5b:a5:24:8d:f2:ea:4b:b5:71:
08:1d:ba:01:02:70:e9:6c:ba:13:ff:e9:70:07:18:5a:85:bc:
1b:d1:c3:4b:98:90:c0:cc:4e:4b:34:e6:46:05:b2:7c:b0:85:
02:26:4a:1e:44:15:e4:e3:0d:36:6a:4b:34:55:7f:94:a5:3b:
d1:91:f7:65:1d:38:ed:48:e7:de:41:e0:95:80:4b:a6:ca:81:
89:33:40:a7:ba:9f:d2:55:48:29:6d:36:ce:95:03:d6:4a:61:
a1:5e:06:47:b5:3b:88:2e:0a:ec:e4:f1:d6:4c:37:63:8e:1d:
38:4b:db:08:f9:75:40:dd:1f:3a:5f:83:c6:94:19:8c:a8:2b:
40:0c:a4:06:76:35:8e:59:52:8e:cc:68:81:38:c1:c6:19:3e:
d0:e7:bc:f2:51:f3:6c:44:15:ca:cd:30:56:fe:03:d5:40:e0:
f8:a4:39:79:40:29:2b:6c:5e:04:b5:57:50:b7:3c:25:b5:6f:
28:d1:2d:20:80:b2:8d:85:37:4a:bb:ea:03:7f:1a:eb:02:b2:
9a:65:58:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 15:58:43 2026 by rpki-client