This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/WjWSsydSjg5h9gSFG57XDgPfVSI.roa
File: WjWSsydSjg5h9gSFG57XDgPfVSI.roa (raw, json)
Hash identifier: sxfaGIVdebE6CRpm1UiDoNqajjkdwJeAWwVExFvqB/o=
Subject key identifier: 5A:35:92:B3:27:52:8E:0E:61:F6:04:85:1B:9E:D7:0E:03:DF:55:22
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019B7E3924733403BBBF3C2CC11CB5C11319
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/WjWSsydSjg5h9gSFG57XDgPfVSI.roa
Signing time: Fri 02 Jan 2026 10:20:32 +0000
ROA not before: Fri 02 Jan 2026 10:20:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 55470
IP address blocks: 163.5.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 13:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:39:24:73:34:03:bb:bf:3c:2c:c1:1c:b5:c1:13:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 2 10:20:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5a3592b327528e0e61f604851b9ed70e03df5522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1b:94:ee:f4:71:77:b6:21:76:43:e6:ac:ba:
6f:46:ae:a2:b1:c6:df:9b:3f:fc:1f:d8:5e:fe:28:
f5:79:bc:e9:00:03:9c:8f:70:f3:41:57:e2:40:77:
56:7c:c4:25:54:70:13:0c:13:04:19:47:6b:7b:17:
d7:53:cf:51:43:cd:36:e2:5e:6b:48:f8:8f:29:32:
fd:4f:a9:16:6b:2e:19:22:c3:2d:1f:a3:1d:e8:cb:
5f:6f:53:57:c5:bc:2c:d2:76:98:d4:bf:4f:78:4f:
90:7c:94:07:af:06:c9:b9:b6:d2:25:f2:af:6b:b8:
6d:2a:16:c4:1b:25:b4:99:6a:6b:b0:33:40:10:ce:
f4:7e:9c:8d:5e:43:86:fb:37:4b:4a:88:dd:02:0f:
78:0c:b9:9f:25:58:ab:73:8b:2d:f5:b1:1a:b5:d5:
3f:e3:77:07:ac:09:c8:e1:ec:25:b9:e6:6f:96:f0:
6d:c3:18:b2:77:88:9c:2f:72:a4:33:3d:a0:8a:07:
7d:2a:32:73:7a:9d:8c:e9:be:b8:c9:53:f1:24:19:
0b:61:c3:09:19:66:a5:a6:3b:71:39:57:9c:5d:50:
13:9f:7b:3e:10:4a:a0:27:d4:26:d0:db:69:d3:5c:
05:ca:23:fb:fc:ca:68:8c:01:78:20:05:38:8c:21:
9f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:35:92:B3:27:52:8E:0E:61:F6:04:85:1B:9E:D7:0E:03:DF:55:22
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/WjWSsydSjg5h9gSFG57XDgPfVSI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.191.0/24
Signature Algorithm: sha256WithRSAEncryption
77:b9:9e:cf:27:3f:e8:fb:31:5c:23:e1:cb:3f:09:fe:57:65:
f3:50:03:d5:8d:a1:17:a7:16:44:16:ea:27:f3:58:27:46:a9:
4e:2b:f4:b6:c7:54:cb:64:55:f3:35:cf:43:6c:a3:36:8f:ee:
e2:d8:f4:15:02:dd:8b:b7:97:de:3d:75:3f:f1:cb:5b:73:a7:
a9:2d:9e:88:2f:43:af:fe:ce:ef:d6:b2:d6:72:b5:0f:a4:ed:
b3:d3:e6:fa:e7:57:93:ea:67:6a:bb:af:0d:57:0c:2b:b4:13:
4b:99:81:ef:e1:b6:d9:c0:94:d8:26:3b:54:22:61:aa:e5:1a:
14:27:be:db:f0:00:d6:f6:d0:0e:bb:fb:8b:7f:24:ec:41:34:
e2:89:64:b5:70:7d:4a:9b:da:7a:fa:ec:06:42:dc:06:3e:fa:
65:ab:d1:ee:43:2e:12:37:3d:47:ed:1f:ff:58:eb:4c:f3:79:
27:b9:1f:e9:0a:26:70:d6:ef:ea:10:07:37:18:aa:b1:8f:4d:
e2:f8:c8:3a:3c:e5:e9:a3:7c:a7:58:47:b9:5f:dd:97:a4:f1:
7d:fe:5e:04:f2:59:74:6b:b1:f8:1e:d3:ed:e7:cc:1c:d1:7d:
8f:5f:04:2a:07:a6:fa:af:ed:fa:ce:c3:19:51:a9:6e:51:d5:
f1:68:1d:eb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt+OSRzNAO7vzwswRy1wRMZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjYwMTAyMTAyMDMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YTM1OTJiMzI3NTI4ZTBlNjFmNjA0ODUxYjllZDcwZTAzZGY1NTIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhuU7vRxd7YhdkPmrLpvRq6iscbf
mz/8H9he/ij1ebzpAAOcj3DzQVfiQHdWfMQlVHATDBMEGUdrexfXU89RQ8024l5r
SPiPKTL9T6kWay4ZIsMtH6Md6Mtfb1NXxbws0naY1L9PeE+QfJQHrwbJubbSJfKv
a7htKhbEGyW0mWprsDNAEM70fpyNXkOG+zdLSojdAg94DLmfJVirc4st9bEatdU/
43cHrAnI4ewlueZvlvBtwxiyd4icL3KkMz2gigd9KjJzep2M6b64yVPxJBkLYcMJ
GWalpjtxOVecXVATn3s+EEqgJ9Qm0Ntp01wFyiP7/MpojAF4IAU4jCGfDQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFo1krMnUo4OYfYEhRue1w4D31UiMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvV2pXU3N5ZFNqZzVoOWdTRkc1N1hEZ1BmVlNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAowW/MA0G
CSqGSIb3DQEBCwUAA4IBAQB3uZ7PJz/o+zFcI+HLPwn+V2XzUAPVjaEXpxZEFuon
81gnRqlOK/S2x1TLZFXzNc9DbKM2j+7i2PQVAt2Lt5fePXU/8ctbc6epLZ6IL0Ov
/s7v1rLWcrUPpO2z0+b651eT6mdqu68NVwwrtBNLmYHv4bbZwJTYJjtUImGq5RoU
J77b8ADW9tAOu/uLfyTsQTTiiWS1cH1Km9p6+uwGQtwGPvplq9HuQy4SNz1H7R//
WOtM83knuR/pCiZw1u/qEAc3GKqxj03i+Mg6POXpo3ynWEe5X92XpPF9/l4E8ll0
a7H4HtPt58wc0X2PXwQqB6b6r+36zsMZUaluUdXxaB3r
-----END CERTIFICATE-----
Generated at Mon Jan 19 19:57:56 2026 by rpki-client