This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/wywpQzax_4ZtKoz9uAZxDjtcPmw.roa
File: wywpQzax_4ZtKoz9uAZxDjtcPmw.roa (raw, json)
Hash identifier: Q0w8drpmsGxodbGwxBVJJ2K2KkXwUZiHuoYb5PWlT/8=
Subject key identifier: C3:2C:29:43:36:B1:FF:86:6D:2A:8C:FD:B8:06:71:0E:3B:5C:3E:6C
Certificate issuer: /CN=c9d6b59a93e324083fbca4237e47e9f5ebf371ab
Certificate serial: 019B78A34636B47C7FBEBD274FD6A5FA5B66
Authority key identifier: C9:D6:B5:9A:93:E3:24:08:3F:BC:A4:23:7E:47:E9:F5:EB:F3:71:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yda1mpPjJAg_vKQjfkfp9evzcas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/wywpQzax_4ZtKoz9uAZxDjtcPmw.roa
Signing time: Thu 01 Jan 2026 08:18:44 +0000
ROA not before: Thu 01 Jan 2026 08:18:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43260
IP address blocks: 185.193.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.mft
rsync://rpki.ripe.net/repository/DEFAULT/yda1mpPjJAg_vKQjfkfp9evzcas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 08:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:a3:46:36:b4:7c:7f:be:bd:27:4f:d6:a5:fa:5b:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d6b59a93e324083fbca4237e47e9f5ebf371ab
Validity
Not Before: Jan 1 08:18:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c32c294336b1ff866d2a8cfdb806710e3b5c3e6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6f:1a:0c:ed:eb:ad:0f:96:32:33:b5:0c:bb:
bc:24:a1:3d:25:a1:07:12:62:60:7f:5f:e6:9b:24:
78:6d:9b:a6:79:c8:e2:9b:18:62:59:36:81:eb:84:
68:ea:e4:11:cb:d2:be:aa:bf:9f:60:30:9f:f3:d7:
2d:d4:23:cc:36:ac:d4:7a:dc:2c:a7:36:48:ff:93:
11:a3:f7:e5:d2:d8:ff:8a:d2:c5:c1:44:7c:38:9a:
52:3b:7e:39:e9:7c:b9:dc:3b:80:29:13:5e:82:76:
20:78:de:bd:1f:e3:f0:17:b1:af:30:ab:85:c9:98:
74:13:52:89:c6:ae:5b:0b:18:70:b3:23:2f:86:b8:
94:82:cc:f6:6c:a6:36:51:63:a0:ee:58:42:77:d3:
c1:ec:1d:64:1b:18:db:fa:60:67:4f:83:31:dd:84:
9f:3c:cb:b3:85:63:ee:e5:84:90:74:11:ab:6d:df:
7b:78:db:b3:5f:4b:24:13:7c:5d:4d:4b:a0:02:68:
ce:5e:cd:65:7e:e4:55:1c:fd:6c:92:b1:83:cc:6b:
92:24:4b:6e:2f:1e:af:44:69:66:ec:63:84:d1:fa:
de:07:3a:dd:4e:fe:69:f0:bf:44:2c:04:8e:6d:f6:
a6:4b:96:e6:32:f2:66:f0:0a:60:52:35:db:bc:dd:
c1:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:2C:29:43:36:B1:FF:86:6D:2A:8C:FD:B8:06:71:0E:3B:5C:3E:6C
X509v3 Authority Key Identifier:
keyid:C9:D6:B5:9A:93:E3:24:08:3F:BC:A4:23:7E:47:E9:F5:EB:F3:71:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yda1mpPjJAg_vKQjfkfp9evzcas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/wywpQzax_4ZtKoz9uAZxDjtcPmw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.193.165.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:86:1c:44:a9:19:9b:30:d4:83:ff:2e:55:e5:8f:a2:21:2a:
c5:61:3d:53:a0:b3:ea:ac:06:a9:ea:90:c7:08:05:4e:b1:93:
f3:7e:62:63:b4:bd:f4:06:71:8b:06:15:5b:15:a7:5f:3a:eb:
32:f3:31:d2:09:54:54:63:c0:3c:7c:b7:0b:1e:2a:65:7f:05:
88:8b:90:fd:b7:14:2f:16:99:90:25:f5:da:c5:c8:88:82:b2:
31:5f:62:3d:0d:6d:d1:ab:00:9b:ba:d7:48:6b:ea:1f:69:89:
83:36:d8:15:67:57:6d:e7:e2:e8:29:bd:b8:e1:0c:13:ec:9c:
65:07:43:f8:4e:4b:13:38:69:83:e6:81:a0:2b:35:ef:d9:71:
62:98:0c:cb:fb:93:75:03:00:c1:22:90:6f:ef:4c:10:04:26:
8c:bf:7b:d7:31:15:12:ae:09:af:39:76:7a:38:55:2d:42:af:
8e:18:83:7a:9b:c0:a9:47:e5:22:0f:81:40:7a:d3:0c:cb:1e:
4e:a7:0a:20:c9:d4:bc:03:8f:bf:f7:68:c4:81:33:40:f9:c8:
a4:4a:26:e3:be:d3:a7:e8:2a:84:3a:d0:4b:ba:4d:c5:4d:92:
f9:11:27:52:fc:9f:d0:36:09:36:2e:ce:d1:1a:19:c6:44:25:
b0:78:aa:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 16:54:44 2026 by rpki-client