This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/127f29-c1d6-4ce1-9a74-62c7694b57ee/1/wlqAOJ8h8eRiXMkjxv6Jaoq6YkU.roa
File: wlqAOJ8h8eRiXMkjxv6Jaoq6YkU.roa (raw, json)
Hash identifier: 0xU2M591t0tt0HcAOUX7ifjkri7E09ptWBOocOdK4g4=
Subject key identifier: C2:5A:80:38:9F:21:F1:E4:62:5C:C9:23:C6:FE:89:6A:8A:BA:62:45
Certificate issuer: /CN=cb55410395aab499140c3a65ce1f740ef070d3e6
Certificate serial: 019B7C12EB9575283BA01BDEA2F007DE0CF3
Authority key identifier: CB:55:41:03:95:AA:B4:99:14:0C:3A:65:CE:1F:74:0E:F0:70:D3:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y1VBA5WqtJkUDDplzh90DvBw0-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/127f29-c1d6-4ce1-9a74-62c7694b57ee/1/wlqAOJ8h8eRiXMkjxv6Jaoq6YkU.roa
Signing time: Fri 02 Jan 2026 00:19:33 +0000
ROA not before: Fri 02 Jan 2026 00:19:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213127
IP address blocks: 158.94.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/127f29-c1d6-4ce1-9a74-62c7694b57ee/1/y1VBA5WqtJkUDDplzh90DvBw0-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/127f29-c1d6-4ce1-9a74-62c7694b57ee/1/y1VBA5WqtJkUDDplzh90DvBw0-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/y1VBA5WqtJkUDDplzh90DvBw0-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:12:eb:95:75:28:3b:a0:1b:de:a2:f0:07:de:0c:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb55410395aab499140c3a65ce1f740ef070d3e6
Validity
Not Before: Jan 2 00:19:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c25a80389f21f1e4625cc923c6fe896a8aba6245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:2a:63:08:de:17:23:97:98:d7:30:6d:94:d6:
87:5e:d3:5c:fa:ae:14:e5:02:9d:cc:cd:cd:5e:d8:
6d:3a:7d:0e:cb:ab:66:ba:8d:bc:a5:61:48:64:3c:
99:0a:63:68:1f:bf:74:37:5e:59:95:7e:9c:48:43:
5d:2f:3f:3a:7d:7a:69:1e:ff:a4:d3:be:95:39:d2:
76:2b:c2:49:ac:e4:64:b2:ca:4a:79:8b:9d:f8:9f:
a9:41:ac:06:5a:30:4d:a9:be:b5:6b:87:30:54:27:
a0:d9:9e:85:33:68:6e:03:d8:c4:96:bf:e3:1c:bc:
cd:12:3c:81:a4:70:8a:44:ec:fc:1a:05:0a:78:2c:
44:8e:d9:48:82:c9:b9:62:cf:72:f2:69:41:22:52:
7b:67:b8:b8:01:33:0b:c2:22:06:8c:97:6c:c5:c8:
6b:3b:fd:ab:73:7d:43:59:e7:02:a8:cf:cd:81:61:
d0:cf:9f:07:f3:cb:a4:bd:60:2e:07:60:6a:5f:c1:
d2:a5:2d:96:eb:8f:37:f3:73:32:30:55:3f:e1:d5:
00:89:1f:21:ae:65:59:cb:47:4d:a0:fd:33:47:26:
56:f2:b0:cb:dd:cc:ad:84:48:41:03:e8:be:86:9b:
5c:90:3a:84:a5:8d:6e:14:df:59:2d:cc:3e:27:95:
f0:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:5A:80:38:9F:21:F1:E4:62:5C:C9:23:C6:FE:89:6A:8A:BA:62:45
X509v3 Authority Key Identifier:
keyid:CB:55:41:03:95:AA:B4:99:14:0C:3A:65:CE:1F:74:0E:F0:70:D3:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y1VBA5WqtJkUDDplzh90DvBw0-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/127f29-c1d6-4ce1-9a74-62c7694b57ee/1/wlqAOJ8h8eRiXMkjxv6Jaoq6YkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/127f29-c1d6-4ce1-9a74-62c7694b57ee/1/y1VBA5WqtJkUDDplzh90DvBw0-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.94.223.0/24
Signature Algorithm: sha256WithRSAEncryption
48:ee:85:1f:80:bd:cf:24:2d:ee:ca:b2:d5:7e:da:2a:25:8f:
3f:aa:2c:6c:6c:0b:74:61:5c:86:64:4b:1f:30:7f:ed:95:0d:
78:e0:bc:90:27:69:dd:b7:b2:ef:22:62:f4:dc:62:f6:fa:ae:
80:47:68:b3:42:5c:7a:9f:69:67:10:15:d4:f9:06:05:5e:0b:
d4:2d:ff:61:de:9e:1c:78:eb:9d:1b:e1:9d:f5:35:0f:c8:e2:
ae:7d:88:bc:85:9a:4f:42:77:92:cf:dc:4e:56:31:2f:b3:c9:
78:58:5c:6b:b2:c3:69:1d:3e:d0:53:9a:16:f8:34:8d:0e:f7:
9e:b7:da:ee:25:89:80:8f:8c:e6:83:1f:3b:78:d5:82:cb:23:
16:ed:9a:85:d8:2a:ba:86:c2:ac:d8:0f:c5:6d:14:8e:e9:a5:
3c:9c:e5:00:16:2a:d1:bd:aa:96:32:f1:1c:a6:60:b0:80:14:
62:de:4d:4a:eb:20:5e:71:55:eb:b9:bf:27:04:e4:73:92:0b:
9c:00:9d:0a:87:90:49:ed:fe:6c:70:17:94:a4:1d:86:51:f7:
24:a9:5b:db:7a:a2:7f:6f:30:04:f6:9b:3c:7e:6c:e4:4c:6b:
1a:d6:58:60:cb:8a:40:eb:d3:44:79:91:48:fd:a5:a0:8b:51:
7c:99:9c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:55:13 2026 by rpki-client