This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/12df2d-94f1-4d10-94a4-1f8368801fdc/1/WuAHwEu_e_sftMlPkZv_UwtWX5Q.roa
File: WuAHwEu_e_sftMlPkZv_UwtWX5Q.roa (raw, json)
Hash identifier: mzprPhNPF3MzVig/0gIEkHNJI2y+MkDSYbRMreX4qBk=
Subject key identifier: 5A:E0:07:C0:4B:BF:7B:FB:1F:B4:C9:4F:91:9B:FF:53:0B:56:5F:94
Certificate issuer: /CN=3814b648dd5742025c3dda5eaa66491ffdb2e5d9
Certificate serial: 019B797E9232DB688F7AFFD3BFA81D7C044F
Authority key identifier: 38:14:B6:48:DD:57:42:02:5C:3D:DA:5E:AA:66:49:1F:FD:B2:E5:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OBS2SN1XQgJcPdpeqmZJH_2y5dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/12df2d-94f1-4d10-94a4-1f8368801fdc/1/WuAHwEu_e_sftMlPkZv_UwtWX5Q.roa
Signing time: Thu 01 Jan 2026 12:18:16 +0000
ROA not before: Thu 01 Jan 2026 12:18:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31140
IP address blocks: 193.22.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/12df2d-94f1-4d10-94a4-1f8368801fdc/1/OBS2SN1XQgJcPdpeqmZJH_2y5dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/12df2d-94f1-4d10-94a4-1f8368801fdc/1/OBS2SN1XQgJcPdpeqmZJH_2y5dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/OBS2SN1XQgJcPdpeqmZJH_2y5dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:7e:92:32:db:68:8f:7a:ff:d3:bf:a8:1d:7c:04:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3814b648dd5742025c3dda5eaa66491ffdb2e5d9
Validity
Not Before: Jan 1 12:18:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5ae007c04bbf7bfb1fb4c94f919bff530b565f94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e6:a0:20:c3:17:7f:14:75:51:3c:a6:bd:bc:
45:88:6d:56:03:ab:9e:53:26:72:49:73:c4:91:76:
61:e4:b3:56:33:d7:9e:ad:c2:c3:95:0e:b1:7e:9d:
03:66:e5:f6:a1:0f:1f:1a:92:68:2a:eb:f5:01:a8:
f5:05:8f:6f:fe:e4:7a:2e:04:97:b3:18:6b:9a:69:
db:79:56:89:4b:5b:58:ae:20:1b:9e:d4:f9:ff:1f:
15:1e:1e:29:f9:b5:f3:b5:28:d0:72:a4:a7:22:9b:
8a:bd:8d:1f:8c:80:b1:fe:c6:1b:da:0a:20:98:f8:
89:d4:39:83:6f:c9:f1:86:c6:d5:19:cd:86:de:98:
24:ba:a3:9e:96:6f:67:8b:f2:5a:42:08:fd:bf:18:
63:9f:5b:b8:a3:ff:f4:bb:f0:73:73:ff:eb:b4:c7:
f7:a2:c7:8f:82:a5:9a:8e:10:7d:2c:b5:9b:76:03:
71:7b:86:7f:63:6a:c4:8a:a5:a8:5a:83:0a:82:6e:
aa:0f:9c:e8:8b:7e:bc:60:21:4c:4c:f2:66:23:6c:
14:e2:35:6d:b6:3f:1a:a4:61:6b:ae:90:0e:17:04:
a6:b9:a6:fd:b1:08:fb:83:4d:27:ca:bb:4d:56:30:
15:85:a8:c0:04:56:90:ca:e9:fc:a9:ac:db:b8:e6:
1a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:E0:07:C0:4B:BF:7B:FB:1F:B4:C9:4F:91:9B:FF:53:0B:56:5F:94
X509v3 Authority Key Identifier:
keyid:38:14:B6:48:DD:57:42:02:5C:3D:DA:5E:AA:66:49:1F:FD:B2:E5:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBS2SN1XQgJcPdpeqmZJH_2y5dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/12df2d-94f1-4d10-94a4-1f8368801fdc/1/WuAHwEu_e_sftMlPkZv_UwtWX5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/12df2d-94f1-4d10-94a4-1f8368801fdc/1/OBS2SN1XQgJcPdpeqmZJH_2y5dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.22.248.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:0d:0d:0d:6b:04:e3:7f:c3:66:06:81:61:eb:34:ab:8b:fb:
71:c4:d1:37:a2:db:02:c0:7d:f2:36:61:bc:ff:98:dc:3f:58:
ad:5a:2b:a7:16:08:6a:65:46:bc:c4:84:40:6d:53:3f:27:3a:
72:b7:fd:22:c1:93:da:af:64:e8:dc:82:3a:d3:dd:1d:52:e2:
b5:f0:80:76:2e:fd:a7:d0:7a:d3:c5:a4:78:45:58:e5:98:3f:
a9:cf:44:3d:15:f7:ea:af:3c:94:a7:8d:61:90:cb:13:0d:2d:
82:c7:2a:34:3c:81:20:74:4b:b1:59:13:15:f7:23:88:17:0d:
c3:20:e2:a5:9d:0c:5f:04:e9:75:f1:4c:41:c3:59:ba:4d:f3:
d3:63:84:d4:8c:b6:90:e0:ee:36:c3:80:44:02:fb:0b:0e:79:
32:1d:a5:c8:9d:b3:fb:fc:f6:fc:2b:60:a2:15:60:a5:2c:60:
b6:04:26:8a:5d:81:1c:7a:78:09:d4:c1:34:6b:dc:17:62:d8:
ed:a4:99:17:e9:5b:5b:b5:9a:56:b2:2e:b5:c9:74:cf:86:71:
b5:38:2f:0e:ed:6c:71:5a:17:5b:b3:4a:ab:c0:5b:55:81:8d:
0d:24:8c:90:bd:69:2a:7b:cb:38:62:8e:a1:eb:21:66:23:1f:
c6:92:6a:30
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt5fpIy22iPev/Tv6gdfARPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4MTRiNjQ4ZGQ1NzQyMDI1YzNkZGE1ZWFhNjY0OTFmZmRi
MmU1ZDkwHhcNMjYwMTAxMTIxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YWUwMDdjMDRiYmY3YmZiMWZiNGM5NGY5MTliZmY1MzBiNTY1Zjk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuagIMMXfxR1UTymvbxFiG1WA6ue
UyZySXPEkXZh5LNWM9eercLDlQ6xfp0DZuX2oQ8fGpJoKuv1Aaj1BY9v/uR6LgSX
sxhrmmnbeVaJS1tYriAbntT5/x8VHh4p+bXztSjQcqSnIpuKvY0fjICx/sYb2gog
mPiJ1DmDb8nxhsbVGc2G3pgkuqOelm9ni/JaQgj9vxhjn1u4o//0u/Bzc//rtMf3
osePgqWajhB9LLWbdgNxe4Z/Y2rEiqWoWoMKgm6qD5zoi368YCFMTPJmI2wU4jVt
tj8apGFrrpAOFwSmuab9sQj7g00nyrtNVjAVhajABFaQyun8qazbuOYaQwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFrgB8BLv3v7H7TJT5Gb/1MLVl+UMB8GA1UdIwQY
MBaAFDgUtkjdV0ICXD3aXqpmSR/9suXZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0JTMlNOMVhRZ0pjUGRwZXFtWkpIXzJ5NWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy8xMmRmMmQtOTRmMS00ZDEwLTk0YTQt
MWY4MzY4ODAxZmRjLzEvV3VBSHdFdV9lX3NmdE1sUGtadl9Vd3RXWDVRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy8xMmRmMmQtOTRmMS00ZDEwLTk0YTQtMWY4MzY4ODAxZmRj
LzEvT0JTMlNOMVhRZ0pjUGRwZXFtWkpIXzJ5NWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRb4MA0G
CSqGSIb3DQEBCwUAA4IBAQB6DQ0NawTjf8NmBoFh6zSri/txxNE3otsCwH3yNmG8
/5jcP1itWiunFghqZUa8xIRAbVM/Jzpyt/0iwZPar2To3II6090dUuK18IB2Lv2n
0HrTxaR4RVjlmD+pz0Q9FffqrzyUp41hkMsTDS2Cxyo0PIEgdEuxWRMV9yOIFw3D
IOKlnQxfBOl18UxBw1m6TfPTY4TUjLaQ4O42w4BEAvsLDnkyHaXInbP7/Pb8K2Ci
FWClLGC2BCaKXYEcengJ1ME0a9wXYtjtpJkX6VtbtZpWsi61yXTPhnG1OC8O7Wxx
Whdbs0qrwFtVgY0NJIyQvWkqe8s4Yo6h6yFmIx/Gkmow
-----END CERTIFICATE-----
Generated at Tue Feb 10 00:13:22 2026 by rpki-client