This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/WKAjDlnLhMg5aAEyDR9elM8WIpg.roa
File: WKAjDlnLhMg5aAEyDR9elM8WIpg.roa (raw, json)
Hash identifier: Nem3a3IzKRDx7qbZpsnNnrHRgrItixJZiOJBrbzhJ4s=
Subject key identifier: 58:A0:23:0E:59:CB:84:C8:39:68:01:32:0D:1F:5E:94:CF:16:22:98
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 019B7DCB89F8BE00565E95E31C99074D310C
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/WKAjDlnLhMg5aAEyDR9elM8WIpg.roa
Signing time: Fri 02 Jan 2026 08:20:49 +0000
ROA not before: Fri 02 Jan 2026 08:20:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216366
IP address blocks: 78.142.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 18:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:cb:89:f8:be:00:56:5e:95:e3:1c:99:07:4d:31:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Jan 2 08:20:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=58a0230e59cb84c8396801320d1f5e94cf162298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:19:ec:34:14:eb:40:ae:89:bc:d9:61:21:9a:
aa:a7:68:e9:8a:82:ef:32:21:66:c5:5b:c8:c6:21:
a0:bd:95:19:dd:7f:d4:7b:e9:7b:05:10:44:5e:a4:
23:8a:74:8c:ae:ec:3a:72:30:5f:87:a9:67:b9:94:
2f:63:c2:0e:3a:83:9b:e2:c1:1f:ec:fa:84:c5:0b:
4f:f2:92:23:cc:7f:0a:6b:b5:3d:c3:cd:c9:12:74:
1d:49:5f:c2:11:4e:42:0d:e3:6a:59:11:d1:c1:4a:
61:14:4e:e4:3c:59:01:46:ef:9d:7d:63:a2:1b:ca:
d6:ea:ee:ef:8b:ec:2f:16:3d:35:81:cf:ec:a5:c0:
54:3b:84:52:6a:d9:44:40:c1:b3:07:f2:51:e7:1e:
2e:79:95:2f:20:7b:54:8b:a7:91:d5:88:db:83:a7:
c2:32:60:b1:ec:9d:75:3f:00:4b:37:5e:d8:ef:0c:
59:76:c8:3f:13:6b:57:d1:bf:10:0c:cc:d3:60:8c:
d7:58:b3:37:98:60:73:59:5d:88:9f:e1:7c:7f:97:
87:f8:e2:2b:f6:44:4c:59:59:b6:d7:83:d2:cc:8f:
87:6f:b0:2c:13:a8:89:23:51:ba:6d:cf:6f:c3:83:
62:5f:22:55:3f:67:89:d6:49:5c:61:b9:86:90:1a:
76:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:A0:23:0E:59:CB:84:C8:39:68:01:32:0D:1F:5E:94:CF:16:22:98
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/WKAjDlnLhMg5aAEyDR9elM8WIpg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.142.239.0/24
Signature Algorithm: sha256WithRSAEncryption
45:66:06:66:55:84:4f:97:e4:2f:93:c1:3e:21:07:ad:13:43:
9a:61:2f:87:8e:ab:76:4b:92:e9:87:11:fb:4b:54:09:ef:ad:
c3:09:39:07:0c:f0:d2:22:d8:e0:c6:6a:7b:9f:87:82:8e:3a:
99:e5:2a:c5:7b:59:d3:b5:27:28:81:8a:6f:6a:03:7d:0b:87:
5e:9d:c6:fa:3a:37:5b:2b:29:67:20:d9:52:b8:8a:a7:e7:de:
fe:b8:39:99:ec:44:f7:ea:d0:23:ab:8a:71:fa:80:45:f5:37:
66:d4:52:a2:38:f0:92:ce:cd:42:e4:4b:73:34:ef:a4:71:99:
7f:68:8b:9d:53:03:b8:6e:f4:58:2c:b5:a9:5b:9f:49:cc:73:
82:9b:6d:cc:63:24:93:ef:37:39:0e:72:e5:a1:6c:80:d8:77:
b6:be:ad:ac:38:d8:45:6b:b3:d2:37:65:1d:75:93:1c:79:eb:
33:68:5b:05:3f:e7:87:37:86:4f:ff:e8:7b:55:fc:84:ef:26:
00:16:92:36:0e:68:a3:31:03:ca:c6:0d:6a:c8:b5:87:11:fc:
87:be:12:9e:88:86:16:c4:ad:cc:ab:e3:b9:1b:f6:36:b5:10:
3a:cd:c6:89:c7:f0:60:b8:90:f7:96:0a:32:92:b1:8e:b6:2a:
5d:f5:80:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 02:44:59 2026 by rpki-client