This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/W9oYiG16BjwBpikfar94Cn8Lwd8.roa
File: W9oYiG16BjwBpikfar94Cn8Lwd8.roa (raw, json)
Hash identifier: +0Tzw/fUoymyseu2Se78HnFZFyiTaDd8Au2Ffp3tJYA=
Subject key identifier: 5B:DA:18:88:6D:7A:06:3C:01:A6:29:1F:6A:BF:78:0A:7F:0B:C1:DF
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 019B7E382F0D3EC42AB903C26C5792C18EFA
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/W9oYiG16BjwBpikfar94Cn8Lwd8.roa
Signing time: Fri 02 Jan 2026 10:19:29 +0000
ROA not before: Fri 02 Jan 2026 10:19:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201776
IP address blocks: 46.161.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Jan 2026 03:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:38:2f:0d:3e:c4:2a:b9:03:c2:6c:57:92:c1:8e:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 2 10:19:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5bda18886d7a063c01a6291f6abf780a7f0bc1df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0d:bf:bd:23:e3:a5:71:46:75:84:80:eb:c3:
59:c1:40:a5:c6:0b:9a:48:72:75:d2:e2:35:bd:09:
8d:79:e1:10:31:58:0b:76:2a:f3:cb:2c:93:e9:65:
f3:77:e3:db:b8:cf:dc:08:90:7a:36:9e:4b:4b:ce:
a3:92:53:a2:8d:1b:3a:4f:12:6a:7c:da:ae:7e:14:
81:e5:3e:0d:13:99:52:83:a8:c3:84:73:79:1f:03:
cf:77:89:5c:90:78:7f:bc:d6:70:75:4c:7f:c1:be:
75:e2:ec:c8:cf:84:5d:fd:1a:7b:0d:da:ed:bd:6c:
25:29:43:ab:e7:60:3a:f0:08:15:05:2c:22:4c:00:
7c:f7:de:bf:f3:6a:dc:d7:af:39:90:63:8c:9c:76:
4e:75:46:c2:c0:3c:65:83:02:cd:8b:04:fb:5d:8f:
3c:75:af:91:5a:6a:09:81:e4:cf:fc:a2:d8:6a:bf:
0a:d4:4e:a4:79:e2:a7:9a:73:77:9f:ba:b4:a7:2b:
40:ce:77:39:2b:99:bd:8e:0c:2a:91:31:a9:0b:05:
8b:1e:fb:e5:d0:36:ce:2f:51:06:21:b3:32:3c:8f:
dc:9f:f6:b8:af:91:17:bd:25:f7:49:a5:39:fc:6b:
76:8a:92:87:a0:a5:4f:bd:b1:a2:56:97:c8:85:87:
65:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:DA:18:88:6D:7A:06:3C:01:A6:29:1F:6A:BF:78:0A:7F:0B:C1:DF
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/W9oYiG16BjwBpikfar94Cn8Lwd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.161.9.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:86:65:57:85:92:52:98:94:8c:1d:35:c2:88:21:cc:0c:8b:
28:10:f4:94:4b:ff:d3:d2:57:29:2d:15:9a:70:87:6b:0f:00:
ea:77:66:5b:8c:d3:f6:bf:72:a2:e0:42:fe:d6:15:d1:03:29:
df:17:2f:ef:8d:c2:bd:44:6b:94:9e:e1:56:d4:fa:96:73:ea:
88:0e:27:67:7b:48:31:98:bc:b7:20:12:48:18:37:92:07:23:
16:16:2e:29:95:e2:fe:58:a7:92:f8:95:b5:9a:3d:5f:a2:34:
3b:01:f1:a0:5d:7e:37:74:58:49:93:18:39:f3:87:38:f3:e1:
95:35:52:6f:d5:d1:f5:13:6f:cf:fa:bc:5e:61:52:e7:0f:4a:
53:c6:62:95:a8:89:4f:35:25:20:d6:7f:76:bb:10:1d:48:dd:
e8:15:f5:47:e5:09:9c:52:e3:f8:8a:af:09:b3:23:16:75:0d:
8e:4d:67:45:c4:27:08:a4:ef:04:c3:00:ee:28:1d:5f:05:09:
82:cd:2c:e7:f3:b6:eb:3d:06:8d:c1:67:06:42:9e:51:42:d2:
1c:b5:35:1d:d5:f5:8a:d0:8c:4a:14:ec:22:59:e0:9d:37:9d:
d2:49:60:09:b0:88:f6:c2:e6:f2:3d:9a:28:4f:95:6d:21:27:
94:5d:bb:fa
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt+OC8NPsQquQPCbFeSwY76MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhYWE4YTBhNWZkZmQ2OThlMTA0YmUzNmEyYWVlYzgxM2Fl
Y2EwNzEwHhcNMjYwMTAyMTAxOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YmRhMTg4ODZkN2EwNjNjMDFhNjI5MWY2YWJmNzgwYTdmMGJjMWRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApA2/vSPjpXFGdYSA68NZwUClxgua
SHJ10uI1vQmNeeEQMVgLdirzyyyT6WXzd+PbuM/cCJB6Np5LS86jklOijRs6TxJq
fNqufhSB5T4NE5lSg6jDhHN5HwPPd4lckHh/vNZwdUx/wb514uzIz4Rd/Rp7Ddrt
vWwlKUOr52A68AgVBSwiTAB8996/82rc1685kGOMnHZOdUbCwDxlgwLNiwT7XY88
da+RWmoJgeTP/KLYar8K1E6keeKnmnN3n7q0pytAznc5K5m9jgwqkTGpCwWLHvvl
0DbOL1EGIbMyPI/cn/a4r5EXvSX3SaU5/Gt2ipKHoKVPvbGiVpfIhYdljQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFvaGIhtegY8AaYpH2q/eAp/C8HfMB8GA1UdIwQY
MBaAFOqqigpf39aY4QS+NqKu7IE67KBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQt
ODlkMDkyNDBjNDNiLzEvVzlvWWlHMTZCandCcGlrZmFyOTRDbjhMd2Q4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQtODlkMDkyNDBjNDNi
LzEvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALqEJMA0G
CSqGSIb3DQEBCwUAA4IBAQBfhmVXhZJSmJSMHTXCiCHMDIsoEPSUS//T0lcpLRWa
cIdrDwDqd2ZbjNP2v3Ki4EL+1hXRAynfFy/vjcK9RGuUnuFW1PqWc+qIDidne0gx
mLy3IBJIGDeSByMWFi4pleL+WKeS+JW1mj1fojQ7AfGgXX43dFhJkxg584c48+GV
NVJv1dH1E2/P+rxeYVLnD0pTxmKVqIlPNSUg1n92uxAdSN3oFfVH5QmcUuP4iq8J
syMWdQ2OTWdFxCcIpO8EwwDuKB1fBQmCzSzn87brPQaNwWcGQp5RQtIctTUd1fWK
0IxKFOwiWeCdN53SSWAJsIj2wubyPZooT5VtISeUXbv6
-----END CERTIFICATE-----
Generated at Tue Jan 20 09:24:27 2026 by rpki-client