This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/weCSLgcy81oriQwLxEbz5cBeJzg.roa
File: weCSLgcy81oriQwLxEbz5cBeJzg.roa (raw, json)
Hash identifier: TJPfh6TbLdnCL07UGvGbszVyYvuSMqDOujw1k7u6TFw=
Subject key identifier: C1:E0:92:2E:07:32:F3:5A:2B:89:0C:0B:C4:46:F3:E5:C0:5E:27:38
Certificate issuer: /CN=4f36103344fcd3b5759f2db3f3c7071376f9e233
Certificate serial: 019B7DCAEDC2F8BDFDA99F6689E3B086B996
Authority key identifier: 4F:36:10:33:44:FC:D3:B5:75:9F:2D:B3:F3:C7:07:13:76:F9:E2:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/weCSLgcy81oriQwLxEbz5cBeJzg.roa
Signing time: Fri 02 Jan 2026 08:20:09 +0000
ROA not before: Fri 02 Jan 2026 08:20:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57389
IP address blocks: 82.150.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Feb 2026 15:35:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:ca:ed:c2:f8:bd:fd:a9:9f:66:89:e3:b0:86:b9:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f36103344fcd3b5759f2db3f3c7071376f9e233
Validity
Not Before: Jan 2 08:20:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c1e0922e0732f35a2b890c0bc446f3e5c05e2738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fc:45:cf:95:a9:13:f5:de:56:d8:3d:be:75:
d5:81:9b:4f:01:c2:1f:6a:45:d1:2f:e5:76:bc:98:
a4:bd:09:f6:27:72:37:98:1f:94:28:a6:3f:c7:2b:
e8:ea:ee:07:24:84:21:df:83:1e:cd:2f:68:d8:a8:
a3:a5:68:fa:ac:47:7e:3e:d1:d9:75:76:14:91:3f:
d4:4c:55:22:94:3a:39:2d:a2:5d:b2:17:6b:fa:d8:
7c:16:ef:21:f0:5a:c6:8a:d6:cc:65:69:18:5a:91:
49:d5:cb:b9:57:b2:e0:48:dd:f4:9c:91:42:39:6b:
d8:89:64:29:ac:7f:16:43:ca:d8:4e:59:54:2a:94:
68:d2:7b:8d:75:03:29:86:72:9b:b9:44:4b:43:e1:
f7:2a:2b:83:e4:69:75:51:32:9a:38:40:e8:5a:83:
b0:5f:9c:5c:22:6b:92:97:3d:87:7a:ad:59:a3:94:
52:ae:82:71:ca:45:a2:e4:87:97:e8:21:24:74:79:
6d:f1:57:59:bb:da:5a:cd:9e:78:ee:6f:1c:82:ef:
5c:9a:89:77:47:55:5f:95:1b:b8:32:d6:cd:bf:d5:
f9:65:a9:33:e1:9d:d6:66:34:dc:5d:17:92:2a:60:
1a:4e:11:3e:d5:60:ec:53:c4:35:04:dc:91:ef:b1:
1f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:E0:92:2E:07:32:F3:5A:2B:89:0C:0B:C4:46:F3:E5:C0:5E:27:38
X509v3 Authority Key Identifier:
keyid:4F:36:10:33:44:FC:D3:B5:75:9F:2D:B3:F3:C7:07:13:76:F9:E2:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/weCSLgcy81oriQwLxEbz5cBeJzg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.150.62.0/24
Signature Algorithm: sha256WithRSAEncryption
03:b8:1f:1a:a9:e5:fc:57:27:1e:85:58:8e:71:85:f6:ea:53:
08:19:12:f1:1f:87:6b:4a:ed:81:25:df:69:9b:74:b5:5f:94:
d2:3a:20:3a:f4:33:d2:90:7e:b9:60:26:9c:4e:98:07:63:79:
0a:14:47:e4:53:d1:21:2a:06:2c:2e:ed:be:83:42:51:84:52:
73:a2:78:d4:ea:87:f9:aa:d3:18:63:94:38:94:ff:8e:28:bc:
3c:1e:9a:d3:eb:35:ab:19:78:86:9f:4d:0e:ab:cd:7d:bb:1d:
c9:1c:6b:32:97:a7:b3:2b:61:45:cc:d2:6b:10:a6:dc:12:33:
04:60:08:39:6f:53:4c:6d:e9:5d:3d:4b:80:9a:52:bf:66:cf:
2b:12:2e:16:c5:59:e7:f2:ce:f2:d3:bc:61:c8:67:ae:7a:f1:
eb:67:be:19:68:f6:25:71:08:a2:1e:12:67:64:b6:f2:f2:82:
20:2f:6a:63:33:b0:8a:6d:5d:b0:41:e2:98:9e:db:55:3c:92:
a2:b2:c6:53:1f:78:d4:09:93:86:04:a5:13:86:7f:f6:01:b2:
93:b7:9f:04:98:93:60:89:14:24:5e:36:c2:1a:ee:00:10:9a:
a7:aa:56:7d:48:cb:1a:40:74:e1:c5:04:6c:2b:97:58:dc:47:
b1:0f:1f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 3 00:01:29 2026 by rpki-client