This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/xWJAqfrPXr4KnkU7Qd4lSzlkp8o.roa
File: xWJAqfrPXr4KnkU7Qd4lSzlkp8o.roa (raw, json)
Hash identifier: ceeD+cwy4G4/W2RDlhQiQMMWpwCMIwxk/08X/W6eMjI=
Subject key identifier: C5:62:40:A9:FA:CF:5E:BE:0A:9E:45:3B:41:DE:25:4B:39:64:A7:CA
Certificate issuer: /CN=eff65b700020e30d73d3b1df78271e543e308f3a
Certificate serial: 019B7A5AF65BB4ACD7F2378DF7BC88F2BB92
Authority key identifier: EF:F6:5B:70:00:20:E3:0D:73:D3:B1:DF:78:27:1E:54:3E:30:8F:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7_ZbcAAg4w1z07HfeCceVD4wjzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/xWJAqfrPXr4KnkU7Qd4lSzlkp8o.roa
Signing time: Thu 01 Jan 2026 16:19:00 +0000
ROA not before: Thu 01 Jan 2026 16:19:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16111
IP address blocks: 193.238.140.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7_ZbcAAg4w1z07HfeCceVD4wjzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:5a:f6:5b:b4:ac:d7:f2:37:8d:f7:bc:88:f2:bb:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eff65b700020e30d73d3b1df78271e543e308f3a
Validity
Not Before: Jan 1 16:19:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c56240a9facf5ebe0a9e453b41de254b3964a7ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:13:64:16:85:54:fd:38:f4:ca:ec:93:fb:b7:
54:a0:13:90:15:21:0f:28:d2:fb:9c:a6:8c:9f:b7:
cf:ad:a7:17:3a:36:23:89:2f:3f:57:5a:a1:df:e1:
4b:6b:8f:e4:da:40:d8:eb:77:eb:45:2e:23:f7:43:
44:7d:61:a2:bd:9f:1d:4e:41:84:fa:b8:83:94:e5:
08:ee:f7:2c:d7:44:c9:c9:49:72:3c:48:1a:40:02:
64:5b:b3:1f:54:92:9d:d8:46:b9:f7:d3:2b:4f:5c:
22:24:38:5f:6e:ae:07:78:3a:6e:f6:7e:17:c1:4c:
15:e2:75:06:11:72:ff:d0:54:64:32:22:d6:b7:72:
a7:48:95:23:12:2e:43:cb:4d:83:b5:8e:37:3e:d0:
c0:a4:42:d9:8b:2d:b0:60:1e:c8:6b:7d:fb:5b:84:
fc:db:88:c2:6f:7d:ae:c5:b8:f1:4f:8f:c0:9c:fe:
23:f6:00:ce:5f:f4:44:99:28:f1:9c:e9:78:62:dc:
0f:42:77:8e:dd:d8:1b:f0:16:61:eb:1f:9c:48:5b:
34:ea:57:f2:be:66:c3:c5:df:8d:c0:6b:15:ff:13:
eb:e7:85:0e:09:d6:3e:5a:aa:29:4f:da:8d:6e:5d:
99:83:35:f3:4e:25:d3:ff:22:ba:ee:b5:ea:3b:5a:
57:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:62:40:A9:FA:CF:5E:BE:0A:9E:45:3B:41:DE:25:4B:39:64:A7:CA
X509v3 Authority Key Identifier:
keyid:EF:F6:5B:70:00:20:E3:0D:73:D3:B1:DF:78:27:1E:54:3E:30:8F:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7_ZbcAAg4w1z07HfeCceVD4wjzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/xWJAqfrPXr4KnkU7Qd4lSzlkp8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.238.140.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:6f:6f:98:3c:75:ba:a7:b6:d3:14:19:90:55:5b:bb:6f:ae:
ef:f3:e7:0e:05:0f:5e:85:e5:7e:51:1c:70:64:5e:b4:87:04:
a9:ad:b8:2b:48:24:7b:ac:57:d8:41:a0:34:eb:60:c4:2d:2e:
86:b0:dd:ef:b8:28:15:01:b5:8f:78:ad:6e:e2:12:02:13:b6:
8c:5f:ba:fd:e6:5b:1b:a0:ac:62:6a:20:61:57:57:d8:03:94:
c5:88:0b:60:fc:a3:a9:7e:b7:1f:1c:4e:94:f3:07:97:13:e3:
01:30:1b:60:9a:bb:cc:1c:92:a6:75:ff:8f:1e:a1:6d:15:1f:
5e:57:a1:28:8d:63:4f:2c:32:4e:4e:f8:e3:0e:0a:7d:4d:8b:
ce:95:ea:10:ca:c0:07:c2:6a:00:1a:94:2d:7b:5b:1f:64:c7:
45:e0:c1:bd:a6:b6:7d:fc:18:34:6d:94:1b:8c:c5:11:05:f5:
67:d7:76:70:a3:81:77:e9:1f:5e:41:e6:c0:5a:d5:35:40:28:
a1:69:9c:82:b2:6d:52:5d:b2:33:8f:5f:b7:10:0f:86:bb:31:
74:86:2d:10:5e:08:7d:70:a8:71:2b:37:78:16:47:91:ff:e1:
c8:71:ec:2e:dc:74:a0:ba:a2:42:fb:66:0e:52:04:85:9c:85:
d3:ef:e7:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 23:56:34 2026 by rpki-client