This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/d75759-8dcb-4532-8bfe-5b688acdb676/1/W6Y3idz-0ZKwDYNSRKjUJfW8Ww0.roa
File: W6Y3idz-0ZKwDYNSRKjUJfW8Ww0.roa (raw, json)
Hash identifier: 1WR2Uw1GdUwynyPsOGJjutQPMS2E5J6S8kJ56yegvbc=
Subject key identifier: 5B:A6:37:89:DC:FE:D1:92:B0:0D:83:52:44:A8:D4:25:F5:BC:5B:0D
Certificate issuer: /CN=d4474c1c06cbfde94614d65c7d05f614a6e23998
Certificate serial: 019B7D5C9475C4337965AD65AB80AB92492E
Authority key identifier: D4:47:4C:1C:06:CB:FD:E9:46:14:D6:5C:7D:05:F6:14:A6:E2:39:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1EdMHAbL_elGFNZcfQX2FKbiOZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/d75759-8dcb-4532-8bfe-5b688acdb676/1/W6Y3idz-0ZKwDYNSRKjUJfW8Ww0.roa
Signing time: Fri 02 Jan 2026 06:19:37 +0000
ROA not before: Fri 02 Jan 2026 06:19:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201926
IP address blocks: 185.59.120.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/d75759-8dcb-4532-8bfe-5b688acdb676/1/1EdMHAbL_elGFNZcfQX2FKbiOZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/d75759-8dcb-4532-8bfe-5b688acdb676/1/1EdMHAbL_elGFNZcfQX2FKbiOZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1EdMHAbL_elGFNZcfQX2FKbiOZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:5c:94:75:c4:33:79:65:ad:65:ab:80:ab:92:49:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4474c1c06cbfde94614d65c7d05f614a6e23998
Validity
Not Before: Jan 2 06:19:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5ba63789dcfed192b00d835244a8d425f5bc5b0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bc:dc:36:22:42:9d:78:fe:d7:23:e8:38:8f:
90:9c:d9:97:fe:98:a3:52:45:7b:18:2d:c4:d7:ac:
b5:eb:81:c2:f3:fe:09:f4:9f:58:90:31:98:20:69:
ce:b9:ad:db:a3:a0:0f:dd:f3:c4:05:67:1d:87:52:
d2:4f:b8:ad:9b:4b:4a:43:1e:25:27:25:33:f6:88:
e0:ce:2b:d0:13:4a:d9:3b:59:f7:db:28:b1:75:ec:
a8:f9:61:44:78:b2:49:52:ba:f3:b2:75:e5:a9:31:
b0:02:e5:0e:33:e3:24:c3:45:e7:ca:51:6a:db:12:
e2:04:a9:6c:fb:0d:32:f8:db:11:4a:7f:56:0f:15:
6a:2d:ba:3f:d1:46:c2:87:64:5e:f7:31:55:94:76:
54:93:aa:5d:5b:1b:54:59:b4:c9:9e:82:8f:20:c3:
e8:86:7c:1c:c6:72:92:b2:03:e8:e2:52:0a:4a:2f:
f4:54:bc:86:79:ab:32:9d:17:26:48:84:31:38:6f:
f8:7b:a3:af:50:a3:99:00:e1:de:3b:2b:9d:cc:87:
31:2b:aa:6c:17:a5:0a:67:ec:67:7e:d9:4d:5a:0a:
ea:ad:38:6f:0a:19:45:a9:52:e2:28:c4:69:72:45:
65:83:0c:a7:07:bd:cc:e1:e4:42:b8:a3:64:05:1b:
41:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:A6:37:89:DC:FE:D1:92:B0:0D:83:52:44:A8:D4:25:F5:BC:5B:0D
X509v3 Authority Key Identifier:
keyid:D4:47:4C:1C:06:CB:FD:E9:46:14:D6:5C:7D:05:F6:14:A6:E2:39:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1EdMHAbL_elGFNZcfQX2FKbiOZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d75759-8dcb-4532-8bfe-5b688acdb676/1/W6Y3idz-0ZKwDYNSRKjUJfW8Ww0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d75759-8dcb-4532-8bfe-5b688acdb676/1/1EdMHAbL_elGFNZcfQX2FKbiOZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.59.120.0/22
Signature Algorithm: sha256WithRSAEncryption
63:d2:28:ca:48:7a:83:5a:bf:e0:16:ef:7d:d3:09:80:65:34:
db:48:32:f6:71:f1:76:e8:a9:e0:28:a7:b5:26:2d:59:c3:1e:
c0:3a:a9:0b:e3:7e:a3:74:92:89:ca:d0:37:bd:fb:61:dc:46:
54:c4:e7:11:fa:81:30:ac:13:eb:0c:d3:fc:50:92:09:f8:5f:
07:78:9e:db:42:9a:54:2f:26:b7:09:ef:3c:64:fa:62:8f:cc:
68:f6:93:02:cb:98:65:6e:5c:c9:cc:c2:c0:1b:3e:be:b2:82:
77:6b:0e:11:9f:0f:d7:24:79:b7:da:ef:bf:89:9a:60:f3:d6:
fe:fd:c7:ab:fe:ad:82:25:b0:fa:23:35:75:d6:72:b1:c4:fa:
7c:a3:73:4e:06:82:3d:d5:cf:c7:98:1f:0c:c2:84:d6:39:92:
ba:59:86:8d:05:d6:83:68:83:28:98:42:34:d1:57:a3:ff:a6:
60:d7:8b:26:1b:65:06:f1:6b:8f:8b:a3:d7:38:23:4b:05:cf:
6e:11:b5:a8:c4:47:72:b0:59:4b:99:62:b9:3d:f9:7c:cd:da:
fb:f5:36:50:de:fc:14:e7:90:e3:b6:b1:a7:63:8a:03:07:cc:
e9:60:c1:57:1e:60:83:fb:23:56:59:d1:28:31:6b:31:23:48:
3c:97:7e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 06:25:27 2026 by rpki-client