This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/FWnshijOb2oWucJC3yydoFuicl8.roa
File: FWnshijOb2oWucJC3yydoFuicl8.roa (raw, json)
Hash identifier: 2lTRHLJOIG5W8kGboAw1P9Vclv6xoLbOBwTEH/U1Buo=
Subject key identifier: 15:69:EC:86:28:CE:6F:6A:16:B9:C2:42:DF:2C:9D:A0:5B:A2:72:5F
Certificate issuer: /CN=e4f158effc6b3882a2590c1e6906aca108e18ec2
Certificate serial: 019B7D5C0A1FF658B407A1D6F26B561E2EF3
Authority key identifier: E4:F1:58:EF:FC:6B:38:82:A2:59:0C:1E:69:06:AC:A1:08:E1:8E:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5PFY7_xrOIKiWQweaQasoQjhjsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/FWnshijOb2oWucJC3yydoFuicl8.roa
Signing time: Fri 02 Jan 2026 06:19:02 +0000
ROA not before: Fri 02 Jan 2026 06:19:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8405
IP address blocks: 193.188.154.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5PFY7_xrOIKiWQweaQasoQjhjsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Feb 2026 06:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:5c:0a:1f:f6:58:b4:07:a1:d6:f2:6b:56:1e:2e:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4f158effc6b3882a2590c1e6906aca108e18ec2
Validity
Not Before: Jan 2 06:19:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1569ec8628ce6f6a16b9c242df2c9da05ba2725f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3f:22:8b:11:5b:32:f4:55:92:57:2c:9e:6b:
fd:8a:ed:91:bb:37:07:5f:8b:7c:8e:52:5d:13:91:
82:54:d4:3a:eb:87:8e:b8:e7:1f:69:30:f9:36:50:
5b:9f:da:6d:18:cf:35:46:08:ed:f8:7f:26:84:fc:
39:f6:03:3e:01:80:c3:4b:a7:16:c6:91:d0:be:76:
2e:92:16:45:a4:a5:c3:db:80:c5:4c:2f:05:5e:25:
52:91:f0:16:79:49:af:a9:4b:07:82:b8:09:a9:5f:
f1:05:7e:09:d2:1f:54:0e:f2:c4:b0:01:0b:a8:4b:
e1:94:a6:e7:27:8e:bd:79:ed:4d:b4:9d:e8:fc:c5:
7e:00:ef:20:6e:79:39:d7:02:48:e1:84:e5:a3:ff:
56:93:7d:ad:5e:ad:21:3e:1d:a5:02:7c:45:16:c6:
b3:51:59:64:b2:d6:3f:e9:67:93:5d:53:aa:7f:a1:
4f:45:a8:4e:b4:36:5c:45:36:d1:b4:d6:89:cc:65:
97:00:b6:20:3d:cb:65:8c:dd:0d:90:b3:9a:49:b7:
81:14:ad:14:28:2b:1a:49:da:ed:57:81:be:c6:d0:
2e:fc:c0:02:0a:b5:18:0b:1a:08:cc:c5:80:59:cb:
26:94:45:f4:f0:b7:fe:20:de:a6:70:67:5c:9f:db:
ad:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:69:EC:86:28:CE:6F:6A:16:B9:C2:42:DF:2C:9D:A0:5B:A2:72:5F
X509v3 Authority Key Identifier:
keyid:E4:F1:58:EF:FC:6B:38:82:A2:59:0C:1E:69:06:AC:A1:08:E1:8E:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5PFY7_xrOIKiWQweaQasoQjhjsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/FWnshijOb2oWucJC3yydoFuicl8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.188.154.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:a4:d8:52:6d:05:af:56:86:d7:75:da:77:14:f8:df:22:af:
d6:67:c5:ff:cf:3c:d0:36:68:e1:01:09:3d:9a:f2:b0:ac:11:
2e:28:b6:15:03:0b:b6:78:5c:b5:79:05:7f:b2:18:7e:c2:62:
f5:19:45:e6:c2:da:24:b1:11:cd:5e:a7:42:61:b2:a4:2b:d9:
74:21:81:7c:28:d4:9b:e2:d7:f6:92:ac:72:18:7e:62:03:4a:
e0:02:ee:6a:b2:c6:bd:48:a7:79:5d:b6:65:f0:d0:5e:27:e3:
56:7a:cb:1d:4a:d1:86:ca:e0:37:5a:4d:fd:95:2c:74:1a:36:
a2:ad:01:81:39:12:18:4d:51:ab:07:7d:73:46:0b:3f:05:5e:
e1:9c:84:be:16:74:c1:d3:c4:6c:9f:82:1f:2f:c0:32:f4:0c:
e9:af:7d:9c:1e:38:64:f2:60:df:e5:c1:b7:62:2a:50:c6:a2:
15:7a:08:c5:86:7d:14:de:c8:20:b4:55:79:bb:61:0b:67:8b:
13:3b:fd:7d:cc:f0:61:15:c6:6e:4d:85:21:91:25:22:79:04:
88:92:40:92:bf:37:4a:a2:bd:03:68:66:69:3b:5e:e1:dd:d6:
7d:9b:63:df:b6:14:2b:77:22:6f:fb:71:f5:ea:1d:56:4c:4c:
df:1c:08:3f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt9XAof9li0B6HW8mtWHi7zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0ZjE1OGVmZmM2YjM4ODJhMjU5MGMxZTY5MDZhY2ExMDhl
MThlYzIwHhcNMjYwMTAyMDYxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNTY5ZWM4NjI4Y2U2ZjZhMTZiOWMyNDJkZjJjOWRhMDViYTI3MjVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtT8iixFbMvRVklcsnmv9iu2RuzcH
X4t8jlJdE5GCVNQ664eOuOcfaTD5NlBbn9ptGM81Rgjt+H8mhPw59gM+AYDDS6cW
xpHQvnYukhZFpKXD24DFTC8FXiVSkfAWeUmvqUsHgrgJqV/xBX4J0h9UDvLEsAEL
qEvhlKbnJ469ee1NtJ3o/MV+AO8gbnk51wJI4YTlo/9Wk32tXq0hPh2lAnxFFsaz
UVlkstY/6WeTXVOqf6FPRahOtDZcRTbRtNaJzGWXALYgPctljN0NkLOaSbeBFK0U
KCsaSdrtV4G+xtAu/MACCrUYCxoIzMWAWcsmlEX08Lf+IN6mcGdcn9utRwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBVp7IYozm9qFrnCQt8snaBbonJfMB8GA1UdIwQY
MBaAFOTxWO/8aziColkMHmkGrKEI4Y7CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVBGWTdfeHJPSUtpV1F3ZWFRYXNvUWpoanNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi84M2MwMGUtZjQxNC00ODlkLTk0NzAt
YzY5MzI0OTY1MWQ1LzEvRlduc2hpak9iMm9XdWNKQzN5eWRvRnVpY2w4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi84M2MwMGUtZjQxNC00ODlkLTk0NzAtYzY5MzI0OTY1MWQ1
LzEvNVBGWTdfeHJPSUtpV1F3ZWFRYXNvUWpoanNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwbyaMA0G
CSqGSIb3DQEBCwUAA4IBAQCgpNhSbQWvVobXddp3FPjfIq/WZ8X/zzzQNmjhAQk9
mvKwrBEuKLYVAwu2eFy1eQV/shh+wmL1GUXmwtoksRHNXqdCYbKkK9l0IYF8KNSb
4tf2kqxyGH5iA0rgAu5qssa9SKd5XbZl8NBeJ+NWessdStGGyuA3Wk39lSx0Gjai
rQGBORIYTVGrB31zRgs/BV7hnIS+FnTB08Rsn4IfL8Ay9Azpr32cHjhk8mDf5cG3
YipQxqIVegjFhn0U3sggtFV5u2ELZ4sTO/19zPBhFcZuTYUhkSUieQSIkkCSvzdK
or0DaGZpO17h3dZ9m2PfthQrdyJv+3H16h1WTEzfHAg/
-----END CERTIFICATE-----
Generated at Sat Feb 7 16:13:42 2026 by rpki-client