This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/WXEToeE8riiicRnr2cZhgj-FNlY.roa
File: WXEToeE8riiicRnr2cZhgj-FNlY.roa (raw, json)
Hash identifier: fbyqUAki2PAwg832LKFX1euAyegBLpNWMb3vargkiYA=
Subject key identifier: 59:71:13:A1:E1:3C:AE:28:A2:71:19:EB:D9:C6:61:82:3F:85:36:56
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 019B7DCB5EE2987ED28248CC62A38EA25A29
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/WXEToeE8riiicRnr2cZhgj-FNlY.roa
Signing time: Fri 02 Jan 2026 08:20:38 +0000
ROA not before: Fri 02 Jan 2026 08:20:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41718
IP address blocks: 195.216.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 20:29:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:cb:5e:e2:98:7e:d2:82:48:cc:62:a3:8e:a2:5a:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Jan 2 08:20:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=597113a1e13cae28a27119ebd9c661823f853656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f5:5e:52:53:e2:e3:e1:9d:19:cc:1c:68:98:
53:40:91:b2:fa:32:09:e7:67:8c:47:cd:c8:50:ad:
cd:d6:50:44:4c:82:f2:65:69:83:cc:e6:e4:e2:95:
3e:51:de:af:ed:c2:76:c5:f3:6c:74:5d:bd:a0:6d:
e0:54:a9:54:dc:66:c9:ff:a8:af:89:4c:67:bb:c8:
45:48:1d:8b:c5:4a:2a:ff:d6:ad:e6:ea:e0:5a:7d:
c6:75:57:cd:a3:45:7a:33:6c:3a:8f:0f:ad:12:29:
d1:5f:89:ca:7f:fe:55:84:4c:93:01:c9:ad:33:d7:
a4:f3:01:e1:c3:7d:99:b1:11:75:ca:b7:ba:40:69:
af:a7:ef:7a:e5:0f:4b:db:e3:50:33:7c:d4:ab:2d:
ad:60:b6:91:63:f6:14:b5:06:e6:ae:55:de:61:cf:
93:07:80:83:63:33:a5:cd:b7:44:eb:27:bc:ae:50:
56:43:58:de:2d:9b:df:fd:c1:2f:68:c7:cd:18:dd:
9d:9b:11:c8:cb:a5:b8:2a:07:44:c5:af:19:0e:b6:
d3:c1:a1:34:17:5a:ba:3c:02:23:38:e9:fb:65:80:
bf:a7:15:bf:0d:98:f7:5b:47:af:a1:c8:9d:f6:80:
ef:55:b8:b7:1b:95:bc:21:a4:41:13:7d:5d:a1:41:
b4:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:71:13:A1:E1:3C:AE:28:A2:71:19:EB:D9:C6:61:82:3F:85:36:56
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/WXEToeE8riiicRnr2cZhgj-FNlY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.216.153.0/24
Signature Algorithm: sha256WithRSAEncryption
37:09:92:74:b9:4e:16:c3:2a:da:93:e2:62:44:cb:cf:df:27:
e0:97:7c:41:7f:5a:03:e7:cf:64:27:a2:d1:ba:01:4a:10:bd:
c1:d8:72:31:b4:97:f1:34:49:35:e9:fc:24:33:5b:82:2f:ab:
e7:79:f8:b7:93:18:f2:d6:40:e2:9e:65:6d:5d:0b:23:05:2a:
b2:36:fe:95:c5:c6:f9:e9:4c:20:0f:5d:17:11:f2:90:6a:51:
6b:1e:21:95:cf:75:18:b8:80:53:33:d8:b1:fc:0e:93:d3:19:
fc:8d:0b:d0:af:17:0d:5f:fc:c0:8c:90:ca:f4:33:b5:ec:a3:
a9:71:99:da:87:b0:32:11:c8:9e:ac:12:0f:25:1b:db:df:a7:
b4:f5:5c:2c:07:06:ad:02:52:7d:44:22:f2:73:74:03:a9:4a:
7b:d6:6a:a2:4e:6b:f6:d0:00:c7:bd:bb:57:40:3b:51:93:71:
8b:f4:24:04:85:80:f5:e5:dc:9a:14:98:f7:cf:10:b2:9d:74:
61:a3:54:32:1d:2c:82:42:f6:39:6c:fc:b8:f4:ff:35:78:e8:
98:6a:2c:16:bb:c6:1f:28:5a:e5:9d:ed:e6:b1:0e:8b:30:0d:
73:e4:1e:e1:8a:fc:4d:09:99:aa:4b:9b:95:e4:fa:80:7c:b1:
bc:56:76:7e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt9y17imH7SgkjMYqOOolopMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4
ZmNjNGMwHhcNMjYwMTAyMDgyMDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OTcxMTNhMWUxM2NhZTI4YTI3MTE5ZWJkOWM2NjE4MjNmODUzNjU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfVeUlPi4+GdGcwcaJhTQJGy+jIJ
52eMR83IUK3N1lBETILyZWmDzObk4pU+Ud6v7cJ2xfNsdF29oG3gVKlU3GbJ/6iv
iUxnu8hFSB2LxUoq/9at5urgWn3GdVfNo0V6M2w6jw+tEinRX4nKf/5VhEyTAcmt
M9ek8wHhw32ZsRF1yre6QGmvp+965Q9L2+NQM3zUqy2tYLaRY/YUtQbmrlXeYc+T
B4CDYzOlzbdE6ye8rlBWQ1jeLZvf/cEvaMfNGN2dmxHIy6W4KgdExa8ZDrbTwaE0
F1q6PAIjOOn7ZYC/pxW/DZj3W0evocid9oDvVbi3G5W8IaRBE31doUG07wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFlxE6HhPK4oonEZ69nGYYI/hTZWMB8GA1UdIwQY
MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt
MjM5ZDJmZTM5OGIxLzEvV1hFVG9lRThyaWlpY1JucjJjWmhnai1GTmxZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx
LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw9iZMA0G
CSqGSIb3DQEBCwUAA4IBAQA3CZJ0uU4Wwyrak+JiRMvP3yfgl3xBf1oD589kJ6LR
ugFKEL3B2HIxtJfxNEk16fwkM1uCL6vnefi3kxjy1kDinmVtXQsjBSqyNv6Vxcb5
6UwgD10XEfKQalFrHiGVz3UYuIBTM9ix/A6T0xn8jQvQrxcNX/zAjJDK9DO17KOp
cZnah7AyEcierBIPJRvb36e09VwsBwatAlJ9RCLyc3QDqUp71mqiTmv20ADHvbtX
QDtRk3GL9CQEhYD15dyaFJj3zxCynXRho1QyHSyCQvY5bPy49P81eOiYaiwWu8Yf
KFrlne3msQ6LMA1z5B7hivxNCZmqS5uV5PqAfLG8VnZ+
-----END CERTIFICATE-----
Generated at Tue Jan 20 04:28:25 2026 by rpki-client