This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/Wefe-Vsh3fjzcgKVTVhAFGuYchU.roa
File: Wefe-Vsh3fjzcgKVTVhAFGuYchU.roa (raw, json)
Hash identifier: M9Lt06LirXwSIHTFG+g3pDdIOkrEZI/2sQpeQPzmi6w=
Subject key identifier: 59:E7:DE:F9:5B:21:DD:F8:F3:72:02:95:4D:58:40:14:6B:98:72:15
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 019B042FA505D5DC5E1E15C06FD580E4AD28
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/Wefe-Vsh3fjzcgKVTVhAFGuYchU.roa
Signing time: Tue 09 Dec 2025 17:36:29 +0000
ROA not before: Tue 09 Dec 2025 17:36:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61048
IP address blocks: 213.178.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Dec 2025 02:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:04:2f:a5:05:d5:dc:5e:1e:15:c0:6f:d5:80:e4:ad:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: Dec 9 17:36:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=59e7def95b21ddf8f37202954d5840146b987215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:95:67:14:d6:75:5c:8c:8d:55:f5:32:f3:00:
3b:70:91:37:68:1f:77:29:90:3d:e6:aa:cc:09:64:
50:e1:fa:59:2f:b2:3c:4a:7f:51:c0:4a:5e:43:99:
5a:bb:71:b8:93:eb:0d:dc:03:16:b4:c7:a7:56:13:
94:42:89:05:73:46:14:0f:91:8d:0c:6c:26:23:6f:
9c:3f:99:c8:e4:6d:f6:e3:d6:75:87:08:d0:2d:f1:
ec:c8:3b:06:60:b7:ec:b9:3d:37:dc:d7:db:07:33:
ae:36:bd:dc:f4:6b:a8:95:5e:1f:9e:10:6c:e2:04:
52:cc:61:f7:23:7e:e2:e7:15:1e:1f:f9:6a:d2:68:
9a:ef:d0:e0:f3:ab:f3:bf:01:93:00:47:3a:17:2c:
78:57:e3:9b:ba:e4:36:fa:8c:94:cf:94:52:f8:f0:
a5:40:db:7b:ec:2c:7e:3f:82:89:a2:2c:c2:84:37:
80:8a:93:6e:ad:c2:ba:34:f3:30:ee:39:1d:18:e1:
05:f0:33:6f:a1:53:a7:5f:6b:27:7c:47:0b:83:bc:
8f:b7:ac:6c:e3:52:3d:f0:ca:0a:52:c4:74:c1:3f:
db:78:48:45:e6:46:c7:0e:28:64:b1:5c:7b:c7:a4:
35:d9:52:e4:4e:37:d0:ad:a0:dc:e4:c4:f6:bb:19:
d2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:E7:DE:F9:5B:21:DD:F8:F3:72:02:95:4D:58:40:14:6B:98:72:15
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/Wefe-Vsh3fjzcgKVTVhAFGuYchU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.178.152.0/24
Signature Algorithm: sha256WithRSAEncryption
39:14:f1:17:7a:f9:9a:c9:a1:d2:db:8f:51:32:5c:94:5f:1a:
19:18:67:48:8e:a4:89:e1:10:94:44:72:ef:8e:fe:e3:f3:2a:
85:89:cb:89:bf:e8:3b:5a:50:fe:c6:08:ce:ac:aa:5f:8b:ed:
4f:ad:50:1e:17:ad:7b:35:f4:3b:d5:d2:45:d3:71:0a:0f:e8:
ee:22:67:69:a5:f5:78:31:79:ed:d7:04:33:6c:03:6a:cd:89:
59:8a:bd:b8:45:76:a9:91:35:28:40:f5:54:75:b0:69:83:fb:
7a:5a:30:87:88:3f:51:84:a8:41:62:d2:b8:67:7f:58:05:75:
c1:86:46:7f:ee:41:11:e2:7c:39:d4:31:ca:a1:a9:30:14:e0:
fe:16:03:b1:77:12:3d:dd:63:a0:ea:7e:8b:92:6c:8b:68:fd:
79:28:a0:a8:a6:9e:41:25:dc:60:b5:72:f5:65:60:56:ae:0f:
8e:af:78:10:84:9b:bd:e2:c1:96:a7:bb:70:e0:18:d3:49:bb:
3c:11:98:47:65:bf:e1:87:d9:da:cc:32:30:97:b9:13:da:7b:
8d:3e:fe:f2:df:95:7c:96:ec:cb:74:22:42:87:58:64:65:6a:
2a:a6:ab:ff:85:a0:29:5d:1e:4e:b0:fa:e8:1d:13:d2:bd:c8:
32:da:97:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 11 09:28:12 2025 by rpki-client