This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/WubFyRS_17taVJxnFddopihhBZI.roa
File: WubFyRS_17taVJxnFddopihhBZI.roa (raw, json)
Hash identifier: ywpgcMnARg0OTMQrg6yR9zuEERaTYD9JA4K/bf+mxBA=
Subject key identifier: 5A:E6:C5:C9:14:BF:D7:BB:5A:54:9C:67:15:D7:68:A6:28:61:05:92
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 019B7E394722FE83372D15D99E957AF95E6E
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/WubFyRS_17taVJxnFddopihhBZI.roa
Signing time: Fri 02 Jan 2026 10:20:41 +0000
ROA not before: Fri 02 Jan 2026 10:20:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209297
IP address blocks: 2a0c:b641:690::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 18:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:39:47:22:fe:83:37:2d:15:d9:9e:95:7a:f9:5e:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 2 10:20:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5ae6c5c914bfd7bb5a549c6715d768a628610592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5f:33:ed:37:24:b0:7a:90:05:07:d6:79:48:
66:9b:f9:4f:c9:53:10:c3:fb:be:b6:a7:6c:9a:c7:
1b:00:82:d4:d9:88:0f:a4:a1:7e:31:ff:2b:a4:ed:
c2:a1:84:4f:1b:38:cc:f5:78:33:00:ad:8b:01:e8:
8e:78:8e:86:8f:bb:cf:26:e2:10:43:38:9b:fd:fd:
54:3e:06:72:4e:78:73:de:e6:19:df:3e:19:e5:bb:
15:79:73:21:19:b5:1b:42:6a:0a:c6:91:59:5c:ac:
df:d8:a2:cf:f7:0a:23:2c:bb:7a:71:42:f1:51:2a:
50:4f:4d:a0:4a:76:08:db:3d:f8:4a:2a:f1:bd:9f:
b5:2f:32:7b:7f:0f:d9:f0:91:f4:da:19:3f:e7:80:
f4:80:fe:99:58:a9:4b:6f:a2:95:6c:aa:01:4d:dc:
20:91:df:a7:c2:31:ae:84:4e:66:9f:73:18:ac:2a:
9c:c1:d2:1e:16:01:ee:f7:e0:f2:f6:27:ef:fd:58:
fe:aa:73:a9:9e:bd:98:15:49:7e:d8:a3:8c:50:96:
e9:c7:c1:37:c9:c9:0b:a8:58:6f:19:5f:92:85:a9:
7c:f5:8a:e4:0f:28:cd:20:aa:da:86:0c:62:ee:47:
e9:8b:cc:2c:20:f6:a4:91:c7:d5:5c:fa:08:bb:00:
d4:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:E6:C5:C9:14:BF:D7:BB:5A:54:9C:67:15:D7:68:A6:28:61:05:92
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/WubFyRS_17taVJxnFddopihhBZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:690::/44
Signature Algorithm: sha256WithRSAEncryption
5c:6c:08:87:5d:a4:5e:8d:02:3b:45:91:b3:cd:ad:34:33:be:
81:6f:45:1c:8d:c6:cb:c6:95:7d:bf:94:3a:b3:5a:54:43:d2:
90:3c:86:7a:f5:fd:4e:39:89:93:ee:a4:8e:da:e4:c0:d7:53:
35:fe:03:e1:04:04:c2:34:98:d6:99:e3:71:b3:d9:35:08:94:
30:86:e9:68:45:13:47:7c:d5:2b:bc:0e:5b:b3:47:7c:81:de:
09:35:34:e3:d1:9f:d7:48:5d:39:9d:ef:14:a4:e2:d0:80:45:
0c:0e:5f:a6:66:85:7d:3a:ad:cc:97:6b:ef:61:d4:6a:03:f2:
b4:1a:48:f0:31:30:48:66:bc:40:f4:d7:90:f3:3e:9c:e0:e5:
a1:b0:4b:b3:41:bd:18:f9:3b:d9:8f:1a:3b:a6:5b:30:d2:b7:
45:c1:4a:37:3b:28:70:41:67:02:49:a3:ae:fc:65:24:4d:da:
f7:db:14:e0:2c:65:dc:0f:7b:59:ba:b6:0b:4a:b5:d7:4b:93:
77:67:9e:fe:ad:4b:79:34:ef:9e:b0:0d:78:6c:f4:be:aa:b9:
5a:55:80:50:d0:c5:37:51:83:84:57:4f:e1:af:1c:c3:e1:e5:
71:3f:ce:b5:1a:4c:aa:64:fa:eb:f6:3c:2f:59:0d:82:58:d6:
a2:96:7b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 02:46:13 2026 by rpki-client