This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f6ac34-6bc3-417b-814d-e8d19296395c/1/we5jn01Cx98OQV43_9pqKOC3HXA.roa
File: we5jn01Cx98OQV43_9pqKOC3HXA.roa (raw, json)
Hash identifier: s+Xsw2hTwbHWmllV0HmHTjp9ztGy7bm5p6ULJLREmd4=
Subject key identifier: C1:EE:63:9F:4D:42:C7:DF:0E:41:5E:37:FF:DA:6A:28:E0:B7:1D:70
Certificate issuer: /CN=04d29211f92e560f0b7834bb2932ac63cabfa14a
Certificate serial: 019B7A5B95A81419E5B2024248C6E361E6E2
Authority key identifier: 04:D2:92:11:F9:2E:56:0F:0B:78:34:BB:29:32:AC:63:CA:BF:A1:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BNKSEfkuVg8LeDS7KTKsY8q_oUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f6ac34-6bc3-417b-814d-e8d19296395c/1/we5jn01Cx98OQV43_9pqKOC3HXA.roa
Signing time: Thu 01 Jan 2026 16:19:40 +0000
ROA not before: Thu 01 Jan 2026 16:19:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41590
IP address blocks: 195.34.88.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f6ac34-6bc3-417b-814d-e8d19296395c/1/BNKSEfkuVg8LeDS7KTKsY8q_oUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/f6ac34-6bc3-417b-814d-e8d19296395c/1/BNKSEfkuVg8LeDS7KTKsY8q_oUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BNKSEfkuVg8LeDS7KTKsY8q_oUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:5b:95:a8:14:19:e5:b2:02:42:48:c6:e3:61:e6:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04d29211f92e560f0b7834bb2932ac63cabfa14a
Validity
Not Before: Jan 1 16:19:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c1ee639f4d42c7df0e415e37ffda6a28e0b71d70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:cb:4c:b5:1c:f0:0f:78:66:8a:93:27:40:25:
58:38:f4:72:2f:e7:17:4c:82:a0:07:d6:b2:cb:3a:
f5:ad:1a:fe:57:2e:24:d5:5e:cb:cd:04:f5:d6:97:
36:22:9b:ce:0f:07:ab:bb:cf:93:9e:dc:03:3f:1c:
c3:eb:0a:31:85:a4:fc:32:5d:78:65:2b:80:85:4b:
3b:5b:8d:da:68:2b:5c:ba:84:24:44:0b:a6:1d:7f:
08:de:4f:8a:4d:b3:51:d4:3a:bf:7e:4c:8b:2a:f1:
50:66:dc:cd:fc:bd:80:da:29:3e:7f:e2:d2:cd:f0:
4e:7d:39:ab:01:d0:35:52:80:75:6a:72:24:aa:a4:
b1:cb:8e:63:0d:ab:d1:bb:8e:67:a2:2f:f5:b8:ea:
d4:a8:52:d6:b8:6d:d6:1e:85:7e:ca:9e:a8:3d:74:
af:d4:f3:2e:a4:94:5a:e8:4a:d1:5c:16:02:42:60:
c8:ba:8a:a9:14:69:4b:ea:c1:79:fc:63:95:e9:59:
e9:70:d6:b4:77:7d:f9:97:4b:f0:7e:5e:53:65:b2:
75:32:2e:f7:9f:8d:f4:ab:d0:9e:df:97:2b:7c:a7:
0a:08:58:55:96:6e:f5:80:6a:e6:dd:b3:44:78:c8:
05:13:fb:bf:c8:45:4f:cf:b1:e5:fe:e4:82:6f:7c:
d5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:EE:63:9F:4D:42:C7:DF:0E:41:5E:37:FF:DA:6A:28:E0:B7:1D:70
X509v3 Authority Key Identifier:
keyid:04:D2:92:11:F9:2E:56:0F:0B:78:34:BB:29:32:AC:63:CA:BF:A1:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BNKSEfkuVg8LeDS7KTKsY8q_oUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f6ac34-6bc3-417b-814d-e8d19296395c/1/we5jn01Cx98OQV43_9pqKOC3HXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f6ac34-6bc3-417b-814d-e8d19296395c/1/BNKSEfkuVg8LeDS7KTKsY8q_oUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.34.88.0/23
Signature Algorithm: sha256WithRSAEncryption
e3:c7:6c:93:bf:4b:33:73:7a:de:26:e2:bc:45:db:30:ae:70:
fd:b3:89:11:ae:ef:83:c9:98:86:fb:99:8b:c2:22:12:3a:24:
24:8f:5a:b6:4b:65:f7:05:f9:9e:1e:74:a7:76:13:43:96:dc:
c1:32:bb:1f:7d:6d:93:11:45:58:59:65:dc:4d:19:85:f4:48:
cf:89:f7:bd:6a:e0:b0:28:30:05:97:68:bd:19:26:76:74:f0:
50:83:12:7e:71:5d:0c:33:5a:82:f5:21:c2:70:08:5f:d0:cb:
4a:3c:84:e7:8a:2f:28:97:c2:76:85:a7:9f:61:11:4a:d5:50:
0b:7e:68:48:1e:b7:ea:3a:fc:8c:42:9b:fe:a2:af:3a:e0:79:
5a:37:12:5c:91:d5:15:7c:38:de:7b:ea:71:e1:2a:a8:dc:d6:
67:af:cf:c9:b9:02:d9:05:2d:a1:4b:c3:55:9a:b4:b6:5a:df:
6e:82:a4:09:40:15:43:3c:b5:85:89:35:df:e0:cf:3c:92:24:
7f:4a:2d:5b:7a:24:00:c5:82:30:e5:2d:7f:b6:74:89:3c:ec:
61:f4:4e:95:2b:e5:d1:6e:ee:33:96:51:dd:34:81:ad:0d:4d:
60:22:3d:d3:07:00:e9:28:14:42:d8:14:b2:4a:1e:d2:e8:b1:
49:e6:e4:4a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt6W5WoFBnlsgJCSMbjYebiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0ZDI5MjExZjkyZTU2MGYwYjc4MzRiYjI5MzJhYzYzY2Fi
ZmExNGEwHhcNMjYwMTAxMTYxOTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMWVlNjM5ZjRkNDJjN2RmMGU0MTVlMzdmZmRhNmEyOGUwYjcxZDcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8tMtRzwD3hmipMnQCVYOPRyL+cX
TIKgB9ayyzr1rRr+Vy4k1V7LzQT11pc2IpvODweru8+TntwDPxzD6woxhaT8Ml14
ZSuAhUs7W43aaCtcuoQkRAumHX8I3k+KTbNR1Dq/fkyLKvFQZtzN/L2A2ik+f+LS
zfBOfTmrAdA1UoB1anIkqqSxy45jDavRu45noi/1uOrUqFLWuG3WHoV+yp6oPXSv
1PMupJRa6ErRXBYCQmDIuoqpFGlL6sF5/GOV6VnpcNa0d335l0vwfl5TZbJ1Mi73
n430q9Ce35crfKcKCFhVlm71gGrm3bNEeMgFE/u/yEVPz7Hl/uSCb3zVSwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMHuY59NQsffDkFeN//aaijgtx1wMB8GA1UdIwQY
MBaAFATSkhH5LlYPC3g0uykyrGPKv6FKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQk5LU0Vma3VWZzhMZURTN0tUS3NZOHFfb1VvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9mNmFjMzQtNmJjMy00MTdiLTgxNGQt
ZThkMTkyOTYzOTVjLzEvd2U1am4wMUN4OThPUVY0M185cHFLT0MzSFhBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni9mNmFjMzQtNmJjMy00MTdiLTgxNGQtZThkMTkyOTYzOTVj
LzEvQk5LU0Vma3VWZzhMZURTN0tUS3NZOHFfb1VvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwyJYMA0G
CSqGSIb3DQEBCwUAA4IBAQDjx2yTv0szc3reJuK8RdswrnD9s4kRru+DyZiG+5mL
wiISOiQkj1q2S2X3BfmeHnSndhNDltzBMrsffW2TEUVYWWXcTRmF9EjPife9auCw
KDAFl2i9GSZ2dPBQgxJ+cV0MM1qC9SHCcAhf0MtKPITnii8ol8J2haefYRFK1VAL
fmhIHrfqOvyMQpv+oq864HlaNxJckdUVfDjee+px4Sqo3NZnr8/JuQLZBS2hS8NV
mrS2Wt9ugqQJQBVDPLWFiTXf4M88kiR/Si1beiQAxYIw5S1/tnSJPOxh9E6VK+XR
bu4zllHdNIGtDU1gIj3TBwDpKBRC2BSySh7S6LFJ5uRK
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:36:19 2026 by rpki-client