This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/a03f3f-e120-4e97-a280-a058c4a55e2b/1/XrTneSBYqqy106mabxkh4w7evJo.roa
File: XrTneSBYqqy106mabxkh4w7evJo.roa (raw, json)
Hash identifier: m5E5vycsGrzxgE4v1Xbbf+YHA1i0THF2g2GCWtHz6u8=
Subject key identifier: 5E:B4:E7:79:20:58:AA:AC:B5:D3:A9:9A:6F:19:21:E3:0E:DE:BC:9A
Certificate issuer: /CN=5812db6bf70652bfb45bebfb25054a57f9799f74
Certificate serial: 019C0593FBA0D135B8481578FEA8CB678DE6
Authority key identifier: 58:12:DB:6B:F7:06:52:BF:B4:5B:EB:FB:25:05:4A:57:F9:79:9F:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WBLba_cGUr-0W-v7JQVKV_l5n3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/a03f3f-e120-4e97-a280-a058c4a55e2b/1/XrTneSBYqqy106mabxkh4w7evJo.roa
Signing time: Wed 28 Jan 2026 17:08:30 +0000
ROA not before: Wed 28 Jan 2026 17:08:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39307
IP address blocks: 185.210.160.0/24 maxlen: 24
185.222.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/a03f3f-e120-4e97-a280-a058c4a55e2b/1/WBLba_cGUr-0W-v7JQVKV_l5n3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/a03f3f-e120-4e97-a280-a058c4a55e2b/1/WBLba_cGUr-0W-v7JQVKV_l5n3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/WBLba_cGUr-0W-v7JQVKV_l5n3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:05:93:fb:a0:d1:35:b8:48:15:78:fe:a8:cb:67:8d:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5812db6bf70652bfb45bebfb25054a57f9799f74
Validity
Not Before: Jan 28 17:08:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5eb4e7792058aaacb5d3a99a6f1921e30edebc9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:12:2f:ce:f2:2b:ab:64:5a:f9:15:3e:83:47:
64:2c:a1:54:df:ba:6a:99:44:76:1d:b8:10:23:c1:
9d:78:67:95:38:2a:14:0b:0d:2a:59:f8:d0:3e:86:
1e:9b:ea:f9:6e:8d:32:e3:c8:a4:ba:2f:a2:8b:b8:
5b:89:aa:86:b9:06:84:96:c5:db:ef:eb:10:2e:01:
42:87:ba:a4:26:a5:7e:3a:b7:75:ce:1b:c4:a3:b4:
3a:ae:2b:65:0d:93:6a:05:4f:8f:d6:5d:d1:0c:4a:
57:e1:35:af:e2:5c:54:6c:35:0f:18:1e:8a:48:d7:
11:95:8f:93:fb:3f:a4:cf:6f:56:ce:15:03:83:d7:
e1:62:cc:a8:36:bb:df:44:fa:e0:19:ce:e3:9d:f2:
dc:9c:86:7f:b2:7f:d0:c8:cf:63:fc:12:7f:93:58:
9f:88:71:56:56:1d:e6:25:25:97:e0:ef:45:33:7f:
25:a5:6b:2c:9e:c3:fb:40:df:7a:11:7a:de:57:8a:
1d:69:30:4c:7e:ee:24:c9:46:58:35:0c:0f:51:53:
a0:bf:ff:25:4b:37:67:65:8d:75:56:5c:00:b2:c5:
97:40:15:fb:09:f0:d1:3d:88:c7:ce:85:8f:bc:64:
03:0f:e1:e3:3f:fc:5d:c3:86:31:ff:81:30:29:03:
6e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:B4:E7:79:20:58:AA:AC:B5:D3:A9:9A:6F:19:21:E3:0E:DE:BC:9A
X509v3 Authority Key Identifier:
keyid:58:12:DB:6B:F7:06:52:BF:B4:5B:EB:FB:25:05:4A:57:F9:79:9F:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WBLba_cGUr-0W-v7JQVKV_l5n3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/a03f3f-e120-4e97-a280-a058c4a55e2b/1/XrTneSBYqqy106mabxkh4w7evJo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/a03f3f-e120-4e97-a280-a058c4a55e2b/1/WBLba_cGUr-0W-v7JQVKV_l5n3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.210.160.0/24
185.222.23.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:17:ca:1f:cc:b1:68:49:8a:59:16:b8:c9:59:ea:8d:f1:22:
9d:da:b2:b2:41:57:9a:8b:5d:8b:82:1c:8a:67:1c:ed:49:ea:
15:e9:ec:08:9f:50:e5:0b:ed:93:d1:07:41:6d:ae:8a:c2:d3:
85:e6:d9:54:6f:16:b8:8a:ba:c1:aa:2c:d5:b2:6e:d4:bc:af:
38:98:43:9e:20:4f:fb:e7:d6:04:3b:e7:c6:58:11:2f:0b:9e:
02:1e:22:c9:e6:fe:21:1b:2b:0e:b9:b2:3a:19:d8:41:42:7b:
29:1f:6b:d1:8b:e8:da:15:4b:23:8a:79:e0:6e:ce:38:45:d4:
f0:93:69:8c:02:d2:f0:b2:ff:71:db:6b:dc:f4:56:8f:70:68:
33:09:c9:cf:8c:7d:4a:6d:72:86:d5:49:64:a7:54:9f:57:50:
5c:8b:01:01:14:93:83:a0:db:49:44:1f:e7:44:5f:85:eb:6e:
60:c2:26:09:38:f4:22:b3:71:4a:57:c0:33:b7:27:b7:7e:a8:
94:65:fb:4c:e2:72:52:40:26:79:b2:17:a7:ae:ef:bf:a9:7a:
01:e0:51:69:3b:ae:1d:ae:90:5a:dd:bf:1e:98:40:64:7a:b1:
8a:6e:d0:fe:3b:0c:7b:2e:ab:a3:9e:00:21:e5:d2:e5:b6:9f:
3f:9a:b1:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:50:51 2026 by rpki-client