This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/WL2FEa958Kjqled1nJg_T9tBeoM.roa
File: WL2FEa958Kjqled1nJg_T9tBeoM.roa (raw, json)
Hash identifier: JqTb5QBDeJhpoV0bTkZHjnWe5k2iGZ6/9FsmESELmIY=
Subject key identifier: 58:BD:85:11:AF:79:F0:A8:EA:95:E7:75:9C:98:3F:4F:DB:41:7A:83
Certificate issuer: /CN=aecd64c97837d7bfac06637dd952bdede0c25d85
Certificate serial: 019B77C712DA0F6ACDB07816C944671AAF70
Authority key identifier: AE:CD:64:C9:78:37:D7:BF:AC:06:63:7D:D9:52:BD:ED:E0:C2:5D:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rs1kyXg317-sBmN92VK97eDCXYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/WL2FEa958Kjqled1nJg_T9tBeoM.roa
Signing time: Thu 01 Jan 2026 04:18:13 +0000
ROA not before: Thu 01 Jan 2026 04:18:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41211
IP address blocks: 85.112.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rs1kyXg317-sBmN92VK97eDCXYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c7:12:da:0f:6a:cd:b0:78:16:c9:44:67:1a:af:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aecd64c97837d7bfac06637dd952bdede0c25d85
Validity
Not Before: Jan 1 04:18:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=58bd8511af79f0a8ea95e7759c983f4fdb417a83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:18:27:1b:9e:ca:9d:1f:b8:36:3d:02:5a:ff:
6d:b7:45:94:2d:e2:7a:e7:5a:94:5f:41:2b:db:71:
81:d7:4e:d1:bb:5e:a8:e7:8e:c7:ac:a0:67:ce:8d:
9e:31:33:ee:71:51:e3:2b:b8:19:d9:02:80:3c:61:
10:3e:fe:55:46:ad:44:b6:07:b7:b1:2e:5b:4a:64:
4f:32:36:ed:a2:d9:1e:ad:09:eb:fd:08:94:8c:0a:
b0:fe:b4:b9:77:5c:eb:68:49:23:31:81:0e:bd:81:
13:28:27:d2:93:ab:ba:6c:14:36:6b:e9:83:1a:21:
c9:a1:79:73:81:e0:02:3d:ee:ef:0d:21:62:09:e0:
56:2a:96:06:7c:87:4d:ca:f9:43:46:1f:11:57:aa:
7d:79:7c:ee:4f:6c:ad:f2:09:01:85:d8:d2:3a:33:
15:cd:a6:af:0a:3a:2c:7c:35:08:97:4c:d3:17:48:
84:bc:43:cd:f5:93:16:0e:a0:04:d1:f3:b7:f3:6a:
45:c3:8f:33:f7:4a:52:ae:c3:a5:88:17:a6:ac:43:
56:dd:98:9f:37:3e:2f:55:fd:22:dc:38:13:ec:3c:
f7:24:22:24:14:ed:6f:bd:e3:36:9e:6b:b9:c1:33:
1e:15:af:5e:dc:ee:c2:56:6b:9b:2c:4b:04:e1:df:
d1:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:BD:85:11:AF:79:F0:A8:EA:95:E7:75:9C:98:3F:4F:DB:41:7A:83
X509v3 Authority Key Identifier:
keyid:AE:CD:64:C9:78:37:D7:BF:AC:06:63:7D:D9:52:BD:ED:E0:C2:5D:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rs1kyXg317-sBmN92VK97eDCXYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/WL2FEa958Kjqled1nJg_T9tBeoM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.112.81.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:1c:d8:9d:16:e0:32:c9:08:b0:b7:9f:2b:1e:21:24:cb:db:
50:41:ab:91:6b:e4:5d:fd:1c:d0:16:a2:d9:f4:c7:ee:33:20:
c2:24:47:24:55:78:8f:7e:f2:cf:2b:ec:45:13:d7:d0:60:5d:
b5:3c:1e:a9:1b:e3:c7:15:5f:28:59:04:f8:01:67:bb:9e:fc:
44:f5:89:9a:36:70:12:b7:b4:62:b6:e8:46:35:5c:30:97:68:
6c:a1:d1:ef:6b:c5:30:79:3d:53:19:8a:1a:fe:b3:2b:af:8f:
d7:80:ed:96:a5:ee:a2:ae:57:e2:12:22:01:23:0c:c7:80:d2:
d8:3b:29:8d:13:f4:78:dd:20:ef:5f:86:72:91:f9:4f:c0:42:
08:cb:bf:e3:db:1c:e1:7c:47:12:f7:de:ce:b1:b6:71:4e:a3:
9b:ed:1b:27:ab:17:96:8f:86:96:2f:8f:3a:34:e6:57:f1:a8:
7b:3b:19:d8:56:62:eb:b6:bc:ae:2e:d6:84:47:7f:2e:36:ca:
cd:74:30:ec:e4:6a:85:e9:fb:f6:c9:95:20:75:cd:de:6b:eb:
23:b7:4a:72:c0:12:7f:ac:b4:52:e3:14:a2:b3:3d:5e:c6:16:
68:93:b0:89:5f:14:3c:4e:22:62:de:78:e1:e1:f1:c7:b2:b8:
dc:3d:bb:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:58:51 2026 by rpki-client