This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/W7FbilSuYHWNN-ml5etpQ3TBAtI.roa
File: W7FbilSuYHWNN-ml5etpQ3TBAtI.roa (raw, json)
Hash identifier: WmDER5h2oXSRdACLjmYbMAF/UHAQWzDo8NO17QUGFIo=
Subject key identifier: 5B:B1:5B:8A:54:AE:60:75:8D:37:E9:A5:E5:EB:69:43:74:C1:02:D2
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 019B7C12FEB8031B28A0E123BA4E3F2CD6DB
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/W7FbilSuYHWNN-ml5etpQ3TBAtI.roa
Signing time: Fri 02 Jan 2026 00:19:38 +0000
ROA not before: Fri 02 Jan 2026 00:19:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202360
IP address blocks: 194.6.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 15:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:12:fe:b8:03:1b:28:a0:e1:23:ba:4e:3f:2c:d6:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 2 00:19:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5bb15b8a54ae60758d37e9a5e5eb694374c102d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b3:b4:a6:22:55:2d:fb:fe:12:fb:d6:61:5d:
33:ea:f7:3e:4b:31:4c:65:9b:56:e1:bc:e8:39:74:
8b:70:c7:74:41:d1:5a:6f:b0:27:2f:ef:be:54:ee:
15:18:0f:2a:1c:19:28:57:c0:05:3b:91:87:cf:f2:
4e:5f:dd:a4:85:f8:ed:f4:f0:00:e3:be:64:49:8d:
9d:74:1a:56:34:51:cf:b4:3e:9c:31:f2:f4:ac:83:
9e:03:c9:12:d8:a5:e4:0b:71:8e:c8:d6:f5:9b:bc:
04:5b:ad:df:58:60:dd:f5:bc:05:82:3a:2c:77:3d:
c2:6b:f8:1c:ba:8a:12:a9:34:5e:df:aa:c2:bb:64:
58:7b:df:9d:83:c3:8d:c2:01:a6:67:81:68:d9:9d:
ed:58:e3:08:31:21:71:85:74:30:9c:91:90:50:28:
69:11:7f:9e:76:ea:10:e9:5d:6e:59:fb:98:28:87:
ac:45:ec:22:d5:27:e8:ef:6c:ab:f3:f4:9f:13:a0:
6d:4f:f2:6f:8e:68:d7:ec:74:0f:de:0d:61:31:96:
3b:c8:f3:01:f4:f2:59:cb:c4:94:b1:e5:cd:0a:61:
8b:13:35:74:10:f3:f3:77:e4:7e:d2:2d:1f:b8:d2:
03:7d:2f:c5:5f:aa:c0:22:f9:f7:5e:ed:0e:e7:b6:
28:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:B1:5B:8A:54:AE:60:75:8D:37:E9:A5:E5:EB:69:43:74:C1:02:D2
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/W7FbilSuYHWNN-ml5etpQ3TBAtI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.6.186.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:ef:04:84:10:8d:3f:e4:61:cb:2a:4a:08:01:d9:67:00:a8:
fd:88:5b:e1:c9:2a:d9:d5:da:41:d7:35:56:88:f3:ae:18:33:
99:aa:47:f9:54:81:fa:3f:7f:08:2d:83:ff:a3:2d:e4:bd:84:
b9:94:89:13:1d:c0:0c:3b:d6:2c:04:05:c6:fd:e9:76:ba:09:
7b:a5:21:0d:79:4c:53:25:ee:ad:78:b3:55:b6:35:6e:47:da:
3f:7b:57:ef:d2:56:33:d4:fa:1b:2d:6b:00:0d:91:e2:5a:95:
d0:05:bd:8a:e7:2c:36:ea:53:b0:ba:22:0e:ee:76:70:8f:64:
20:c3:8a:b1:d8:c3:c9:0f:3d:16:af:96:f2:3f:32:15:60:46:
18:7b:4a:7a:d6:51:89:05:f7:49:3a:7e:8b:56:6b:79:6f:04:
ce:d8:16:87:ee:2d:25:98:53:a7:09:cd:d7:d4:27:99:00:4f:
74:ef:8c:9d:8a:e3:27:df:66:78:42:38:79:a4:79:1b:66:22:
aa:d6:a1:a2:97:5c:00:57:ad:02:57:d4:65:5f:80:8c:9f:79:
6d:41:b7:8e:df:6b:b4:ff:94:37:a5:b7:cb:e7:32:e1:70:d3:
82:00:d1:e0:69:8a:e9:1d:1d:f0:c4:2a:50:5e:a9:82:de:23:
aa:d2:5e:ac
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt8Ev64AxsooOEjuk4/LNbbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2NjNmM2RiMTUyZTA1NWFjMTQ1YmRiYjQyOWUwMTg2NTQy
MDRjOGQwHhcNMjYwMTAyMDAxOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YmIxNWI4YTU0YWU2MDc1OGQzN2U5YTVlNWViNjk0Mzc0YzEwMmQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrO0piJVLfv+EvvWYV0z6vc+SzFM
ZZtW4bzoOXSLcMd0QdFab7AnL+++VO4VGA8qHBkoV8AFO5GHz/JOX92khfjt9PAA
475kSY2ddBpWNFHPtD6cMfL0rIOeA8kS2KXkC3GOyNb1m7wEW63fWGDd9bwFgjos
dz3Ca/gcuooSqTRe36rCu2RYe9+dg8ONwgGmZ4Fo2Z3tWOMIMSFxhXQwnJGQUChp
EX+eduoQ6V1uWfuYKIesRewi1Sfo72yr8/SfE6BtT/JvjmjX7HQP3g1hMZY7yPMB
9PJZy8SUseXNCmGLEzV0EPPzd+R+0i0fuNIDfS/FX6rAIvn3Xu0O57YokQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFuxW4pUrmB1jTfppeXraUN0wQLSMB8GA1UdIwQY
MBaAFCZj89sVLgVawUW9u0KeAYZUIEyNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUt
YmQxOTI2NzZjOWJiLzEvVzdGYmlsU3VZSFdOTi1tbDVldHBRM1RCQXRJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUtYmQxOTI2NzZjOWJi
LzEvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwga6MA0G
CSqGSIb3DQEBCwUAA4IBAQB67wSEEI0/5GHLKkoIAdlnAKj9iFvhySrZ1dpB1zVW
iPOuGDOZqkf5VIH6P38ILYP/oy3kvYS5lIkTHcAMO9YsBAXG/el2ugl7pSENeUxT
Je6teLNVtjVuR9o/e1fv0lYz1PobLWsADZHiWpXQBb2K5yw26lOwuiIO7nZwj2Qg
w4qx2MPJDz0Wr5byPzIVYEYYe0p61lGJBfdJOn6LVmt5bwTO2BaH7i0lmFOnCc3X
1CeZAE9074ydiuMn32Z4Qjh5pHkbZiKq1qGil1wAV60CV9RlX4CMn3ltQbeO32u0
/5Q3pbfL5zLhcNOCANHgaYrpHR3wxCpQXqmC3iOq0l6s
-----END CERTIFICATE-----
Generated at Mon Jan 26 17:44:25 2026 by rpki-client