This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/WkGPkEWxN0_RrfuPNQgO0N4MQhs.roa
File: WkGPkEWxN0_RrfuPNQgO0N4MQhs.roa (raw, json)
Hash identifier: 5wVXqrPSrqKVdR+urmJOtFFrRQbB86e2gIJHUQXpeMs=
Subject key identifier: 5A:41:8F:90:45:B1:37:4F:D1:AD:FB:8F:35:08:0E:D0:DE:0C:42:1B
Certificate issuer: /CN=bc15921f5ba6bd147ff400117aa9738633f1587d
Certificate serial: 019B791056AA8491C17635A45347CDC3BABA
Authority key identifier: BC:15:92:1F:5B:A6:BD:14:7F:F4:00:11:7A:A9:73:86:33:F1:58:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vBWSH1umvRR_9AAReqlzhjPxWH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/WkGPkEWxN0_RrfuPNQgO0N4MQhs.roa
Signing time: Thu 01 Jan 2026 10:17:52 +0000
ROA not before: Thu 01 Jan 2026 10:17:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216169
IP address blocks: 178.173.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vBWSH1umvRR_9AAReqlzhjPxWH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Jan 2026 22:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:10:56:aa:84:91:c1:76:35:a4:53:47:cd:c3:ba:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc15921f5ba6bd147ff400117aa9738633f1587d
Validity
Not Before: Jan 1 10:17:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5a418f9045b1374fd1adfb8f35080ed0de0c421b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:18:99:3e:7b:45:23:31:15:3b:a4:df:c9:6c:
dc:87:69:93:83:e7:23:66:7c:19:5e:c9:15:6b:5f:
71:bb:95:c3:cf:3f:3f:9d:e4:d8:c0:8a:54:92:0e:
d2:1d:50:8f:d3:42:11:6b:fe:d0:44:04:69:75:b7:
d2:2f:ad:a5:4b:e6:84:f6:8e:18:dd:89:aa:33:70:
73:c8:44:8f:a7:93:b7:3e:63:e3:47:9f:67:95:28:
98:50:27:8b:0c:b8:f4:18:61:3e:0a:95:85:86:2d:
86:ed:cd:64:2a:f8:b0:c3:9d:01:1c:cd:f8:db:31:
af:e8:d3:5f:9c:73:08:22:32:be:7d:7c:6c:62:90:
eb:74:76:93:94:88:a1:8d:59:7b:14:27:5d:3d:3d:
c1:53:2c:ee:ef:6f:14:15:8e:fe:3c:fa:a8:67:af:
d5:33:c3:0d:b1:77:e8:18:02:14:05:03:5c:80:3a:
e4:ac:7e:21:56:13:5f:b7:94:d3:4b:27:b7:03:79:
4e:aa:41:ad:70:f3:80:2f:e7:7e:18:cd:5e:b7:ba:
d6:35:8a:3c:78:bf:ee:09:58:d8:72:81:75:89:fd:
af:9d:ca:89:bf:ae:0a:0f:5c:23:b5:b4:a3:5c:1b:
8d:b9:66:20:17:e2:ea:92:df:e1:8a:5d:20:61:0f:
1b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:41:8F:90:45:B1:37:4F:D1:AD:FB:8F:35:08:0E:D0:DE:0C:42:1B
X509v3 Authority Key Identifier:
keyid:BC:15:92:1F:5B:A6:BD:14:7F:F4:00:11:7A:A9:73:86:33:F1:58:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBWSH1umvRR_9AAReqlzhjPxWH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/WkGPkEWxN0_RrfuPNQgO0N4MQhs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.173.148.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:b6:5b:59:25:3c:ad:bd:19:90:26:85:51:13:98:45:8c:e7:
83:f8:0e:8f:97:da:36:3c:c6:c3:18:5a:50:f8:55:ab:bd:e1:
3a:aa:5b:3b:e8:35:5f:92:e4:af:9c:71:ad:79:59:9d:b4:4a:
d7:f6:97:d7:9a:ff:2b:a2:a7:19:72:d6:7d:0c:5a:eb:df:64:
bf:47:ef:41:b0:3f:e9:c9:bc:35:e5:67:a1:50:0a:00:e3:77:
3f:41:49:ce:03:88:e9:de:60:4c:17:01:8c:65:ed:5b:d1:1b:
f2:28:e5:cb:48:b7:f6:25:7b:84:62:3b:28:d5:4e:ef:13:92:
ad:fe:63:e1:df:c9:f2:3f:53:d3:e2:81:e7:e2:78:a0:29:c8:
aa:63:ac:4b:92:d8:7f:5e:27:3b:c2:3d:f9:dd:1f:e7:9e:0f:
b7:43:23:62:ad:be:18:b6:51:0c:0a:11:31:92:70:fa:88:78:
57:18:d4:be:f8:2d:58:2f:be:7f:0b:23:fe:0a:21:2c:ea:40:
86:bb:d9:a3:b8:e6:88:75:e3:91:61:ff:cd:4c:fa:3e:9e:b1:
bc:06:f2:39:36:88:c2:46:a8:8b:04:37:18:5f:22:ab:dc:b5:
9b:59:c1:97:23:dd:af:b9:82:a5:50:67:11:f4:78:23:20:06:
31:4c:a2:f9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt5EFaqhJHBdjWkU0fNw7q6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjMTU5MjFmNWJhNmJkMTQ3ZmY0MDAxMTdhYTk3Mzg2MzNm
MTU4N2QwHhcNMjYwMTAxMTAxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YTQxOGY5MDQ1YjEzNzRmZDFhZGZiOGYzNTA4MGVkMGRlMGM0MjFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxiZPntFIzEVO6TfyWzch2mTg+cj
ZnwZXskVa19xu5XDzz8/neTYwIpUkg7SHVCP00IRa/7QRARpdbfSL62lS+aE9o4Y
3YmqM3BzyESPp5O3PmPjR59nlSiYUCeLDLj0GGE+CpWFhi2G7c1kKviww50BHM34
2zGv6NNfnHMIIjK+fXxsYpDrdHaTlIihjVl7FCddPT3BUyzu728UFY7+PPqoZ6/V
M8MNsXfoGAIUBQNcgDrkrH4hVhNft5TTSye3A3lOqkGtcPOAL+d+GM1et7rWNYo8
eL/uCVjYcoF1if2vncqJv64KD1wjtbSjXBuNuWYgF+Lqkt/hil0gYQ8bSwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFpBj5BFsTdP0a37jzUIDtDeDEIbMB8GA1UdIwQY
MBaAFLwVkh9bpr0Uf/QAEXqpc4Yz8Vh9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkJXU0gxdW12UlJfOUFBUmVxbHpoalB4V0gwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC84ZTc5YWItYmE4My00NGNiLWFlYzAt
MDk5MGNlNzQ4MWU3LzEvV2tHUGtFV3hOMF9ScmZ1UE5RZ08wTjRNUWhzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC84ZTc5YWItYmE4My00NGNiLWFlYzAtMDk5MGNlNzQ4MWU3
LzEvdkJXU0gxdW12UlJfOUFBUmVxbHpoalB4V0gwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsq2UMA0G
CSqGSIb3DQEBCwUAA4IBAQBetltZJTytvRmQJoVRE5hFjOeD+A6Pl9o2PMbDGFpQ
+FWrveE6qls76DVfkuSvnHGteVmdtErX9pfXmv8roqcZctZ9DFrr32S/R+9BsD/p
ybw15WehUAoA43c/QUnOA4jp3mBMFwGMZe1b0RvyKOXLSLf2JXuEYjso1U7vE5Kt
/mPh38nyP1PT4oHn4nigKciqY6xLkth/Xic7wj353R/nng+3QyNirb4YtlEMChEx
knD6iHhXGNS++C1YL75/CyP+CiEs6kCGu9mjuOaIdeORYf/NTPo+nrG8BvI5NojC
RqiLBDcYXyKr3LWbWcGXI92vuYKlUGcR9HgjIAYxTKL5
-----END CERTIFICATE-----
Generated at Wed Jan 21 07:21:51 2026 by rpki-client