This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/143e9e-96e6-474e-ad2c-22e6df4584af/1/LWui8AzaPFASP_4ivNyGkEz1ysQ.roa
File: LWui8AzaPFASP_4ivNyGkEz1ysQ.roa (raw, json)
Hash identifier: lMC5CJ6/t2xSIhms0GWqMAwmNRtMrmrsLXuQBgs3rpY=
Subject key identifier: 2D:6B:A2:F0:0C:DA:3C:50:12:3F:FE:22:BC:DC:86:90:4C:F5:CA:C4
Certificate issuer: /CN=7f2a32ba4219680dcdd58f6101e5c7aec1540a73
Certificate serial: 019B7F83489886D6BB80021564AB4EDFFC2E
Authority key identifier: 7F:2A:32:BA:42:19:68:0D:CD:D5:8F:61:01:E5:C7:AE:C1:54:0A:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fyoyukIZaA3N1Y9hAeXHrsFUCnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/143e9e-96e6-474e-ad2c-22e6df4584af/1/LWui8AzaPFASP_4ivNyGkEz1ysQ.roa
Signing time: Fri 02 Jan 2026 16:21:08 +0000
ROA not before: Fri 02 Jan 2026 16:21:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39103
IP address blocks: 81.16.216.0/22 maxlen: 22
81.16.216.0/23 maxlen: 23
81.16.218.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/143e9e-96e6-474e-ad2c-22e6df4584af/1/fyoyukIZaA3N1Y9hAeXHrsFUCnM.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/143e9e-96e6-474e-ad2c-22e6df4584af/1/fyoyukIZaA3N1Y9hAeXHrsFUCnM.mft
rsync://rpki.ripe.net/repository/DEFAULT/fyoyukIZaA3N1Y9hAeXHrsFUCnM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:83:48:98:86:d6:bb:80:02:15:64:ab:4e:df:fc:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f2a32ba4219680dcdd58f6101e5c7aec1540a73
Validity
Not Before: Jan 2 16:21:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2d6ba2f00cda3c50123ffe22bcdc86904cf5cac4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6b:6d:52:f3:69:62:04:07:d9:32:18:d9:af:
1e:6a:93:48:8d:02:88:1e:64:37:aa:a1:3e:6b:6e:
e9:70:f0:a6:fe:87:4a:63:a2:2f:bc:30:f8:43:3a:
2f:12:33:34:00:10:36:d1:aa:00:48:93:2c:08:32:
20:2f:c9:bc:e6:d1:71:c8:4d:82:f7:b5:ac:ae:d6:
ac:30:a5:f8:55:93:bc:33:e9:9e:29:62:73:6d:ac:
e3:20:c3:0c:2f:59:36:e4:61:a2:00:53:52:a4:e1:
be:4e:61:81:16:c8:08:45:22:33:3f:85:81:91:a0:
bb:d6:28:5c:34:b8:11:f5:97:b6:1f:f1:f8:51:5c:
91:0f:cb:ee:eb:5d:56:df:39:5d:59:64:f7:e5:e3:
d5:46:00:e0:28:b3:56:81:28:bc:1e:8a:3c:76:0a:
60:65:10:9a:48:64:40:a5:c6:e3:fc:7d:1f:44:19:
78:ba:23:35:d0:c2:37:c6:8e:3d:61:3b:a8:25:ad:
53:dc:c2:7a:8d:78:cb:f1:6a:ae:92:9b:da:32:5a:
4b:c4:51:b1:bc:46:b0:4c:0d:ef:2f:98:da:13:a4:
54:b3:4c:d9:66:ea:e1:74:80:51:07:12:15:71:ca:
73:71:81:e5:c1:d0:54:f3:fc:c2:46:99:4a:43:98:
30:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:6B:A2:F0:0C:DA:3C:50:12:3F:FE:22:BC:DC:86:90:4C:F5:CA:C4
X509v3 Authority Key Identifier:
keyid:7F:2A:32:BA:42:19:68:0D:CD:D5:8F:61:01:E5:C7:AE:C1:54:0A:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fyoyukIZaA3N1Y9hAeXHrsFUCnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/143e9e-96e6-474e-ad2c-22e6df4584af/1/LWui8AzaPFASP_4ivNyGkEz1ysQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/143e9e-96e6-474e-ad2c-22e6df4584af/1/fyoyukIZaA3N1Y9hAeXHrsFUCnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.16.216.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:20:fa:82:e1:1e:51:79:04:f3:87:0f:50:75:c2:84:79:69:
f7:34:42:fa:9e:0c:8b:80:26:1d:91:b0:83:36:a3:3a:cc:17:
33:c7:e3:dd:91:3e:a8:de:3c:bc:46:0f:a3:fb:bd:f6:f9:d4:
f7:6f:4f:07:bb:f7:b4:6e:89:84:69:64:23:e3:8c:c6:b1:86:
29:2b:b3:2f:28:c8:44:40:e0:df:51:00:1b:94:34:23:15:98:
c3:64:da:fc:33:d8:ef:9a:d1:8a:66:c0:26:32:dd:65:2f:d7:
77:67:c1:ef:5e:d2:8c:ba:96:eb:3d:30:48:4a:31:e3:1d:f8:
b3:7b:ed:be:17:5a:72:fa:bd:3e:4b:c5:ad:35:4a:a7:39:4e:
0a:b8:c9:0d:43:f4:ce:76:0d:00:43:e5:38:b8:3e:bc:a4:7b:
7f:0f:b9:cb:32:57:44:3e:20:f9:de:8b:dd:0e:86:ca:42:28:
9c:e3:35:24:64:dc:cc:dc:24:26:d4:ad:47:c1:fd:44:00:e6:
f1:c3:13:a6:98:73:d8:8f:f7:1e:a1:a1:f0:fa:33:1f:cd:93:
a8:bc:3d:5f:26:56:6c:57:4b:b8:17:44:01:9c:0f:09:16:e7:
14:b3:94:3d:ce:8b:8c:45:29:ae:54:77:32:bd:7b:29:db:4e:
e8:48:a1:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:45:42 2026 by rpki-client