This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/d7beed-df98-4ec8-87b6-4072557c47fa/1/WPJYGGNKSo2_VzT6YDs17mCdxT0.roa
File: WPJYGGNKSo2_VzT6YDs17mCdxT0.roa (raw, json)
Hash identifier: t5I7bwusgjgVCBgWsBNne8we8EByIbOOjE3czuEG77s=
Subject key identifier: 58:F2:58:18:63:4A:4A:8D:BF:57:34:FA:60:3B:35:EE:60:9D:C5:3D
Certificate issuer: /CN=4ecd75a5109e2c106e1193d57ee2b999fec27fe0
Certificate serial: 019B7B36E606F83A26D06B8916EFE8803E36
Authority key identifier: 4E:CD:75:A5:10:9E:2C:10:6E:11:93:D5:7E:E2:B9:99:FE:C2:7F:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ts11pRCeLBBuEZPVfuK5mf7Cf-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/d7beed-df98-4ec8-87b6-4072557c47fa/1/WPJYGGNKSo2_VzT6YDs17mCdxT0.roa
Signing time: Thu 01 Jan 2026 20:19:13 +0000
ROA not before: Thu 01 Jan 2026 20:19:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49191
IP address blocks: 45.129.164.0/24 maxlen: 24
185.190.249.0/24 maxlen: 24
2a07:ddc0::/48 maxlen: 48
2a07:ddc0:1::/48 maxlen: 48
2a07:ddc0:2::/48 maxlen: 48
2a07:ddc0:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/d7beed-df98-4ec8-87b6-4072557c47fa/1/Ts11pRCeLBBuEZPVfuK5mf7Cf-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/d7beed-df98-4ec8-87b6-4072557c47fa/1/Ts11pRCeLBBuEZPVfuK5mf7Cf-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ts11pRCeLBBuEZPVfuK5mf7Cf-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 20:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:36:e6:06:f8:3a:26:d0:6b:89:16:ef:e8:80:3e:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ecd75a5109e2c106e1193d57ee2b999fec27fe0
Validity
Not Before: Jan 1 20:19:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=58f25818634a4a8dbf5734fa603b35ee609dc53d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a5:14:42:d8:4f:33:6f:80:7b:02:19:9f:33:
80:c3:3d:23:5a:56:88:78:d0:63:51:de:8f:a7:7d:
b0:ab:b8:9d:2e:7e:db:c6:f1:a5:d2:15:20:81:3d:
b3:c5:bb:c8:df:98:c4:7c:24:44:b1:7a:66:a1:53:
ee:a1:90:0f:d1:de:59:0d:e4:5a:fe:f5:d2:41:52:
7d:2f:d7:2b:ec:a3:36:ae:c1:6f:3f:0e:83:8a:44:
cf:b8:2a:f9:0f:60:30:c9:32:18:57:90:aa:46:d7:
f6:82:8b:05:2d:42:43:9e:a6:1f:67:ed:8d:0d:35:
19:dc:1f:44:f9:4d:2d:e9:eb:83:99:5d:0b:4d:27:
c6:ad:4e:1d:d9:7b:b5:6e:50:29:a5:b9:bc:87:0c:
cd:fe:df:ac:9c:39:71:40:48:b1:ba:5e:bd:5d:d4:
19:72:b4:16:7e:07:fb:93:8c:ee:af:b3:13:64:6b:
29:ea:b1:9e:f3:bb:cd:33:16:f0:79:14:40:df:c6:
e5:b9:35:37:34:99:b0:74:77:90:fd:cb:d7:ab:e2:
7f:92:0a:59:6b:6a:7d:9d:85:d1:49:35:6a:3b:28:
a0:85:af:b0:0b:e7:85:27:b6:5e:9a:c8:5c:15:fb:
05:f2:92:c4:bc:b4:29:96:8a:d9:a0:2a:82:e6:ba:
d5:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:F2:58:18:63:4A:4A:8D:BF:57:34:FA:60:3B:35:EE:60:9D:C5:3D
X509v3 Authority Key Identifier:
keyid:4E:CD:75:A5:10:9E:2C:10:6E:11:93:D5:7E:E2:B9:99:FE:C2:7F:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ts11pRCeLBBuEZPVfuK5mf7Cf-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/d7beed-df98-4ec8-87b6-4072557c47fa/1/WPJYGGNKSo2_VzT6YDs17mCdxT0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/d7beed-df98-4ec8-87b6-4072557c47fa/1/Ts11pRCeLBBuEZPVfuK5mf7Cf-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.164.0/24
185.190.249.0/24
IPv6:
2a07:ddc0::/46
Signature Algorithm: sha256WithRSAEncryption
4f:c2:18:70:5f:b8:6d:92:94:0e:5b:09:d7:c0:f1:00:6e:fb:
fb:06:6c:1f:fb:d3:ff:28:41:31:a4:78:37:a3:06:40:bf:2b:
76:a2:2e:f0:5c:fa:32:37:b7:f4:b2:a7:de:40:c0:4f:61:88:
2c:d5:b2:6e:cc:b5:79:4a:70:a8:f3:4d:89:bd:29:8b:f2:10:
a8:f3:98:69:e5:b3:a1:5f:93:ee:21:46:78:0c:fa:41:5c:ac:
33:d1:04:8d:bf:9b:d0:ee:20:3f:fa:4e:3d:3e:af:94:8e:03:
ae:a7:f8:db:11:78:5f:6e:05:2b:7a:9b:33:b6:eb:2e:a5:c3:
79:f5:0c:77:ca:51:c5:75:06:07:e8:e4:92:99:bb:2f:70:aa:
1e:27:71:f6:73:e6:58:b0:cb:c7:ef:1e:58:b7:1e:f4:2d:34:
db:79:d3:14:26:00:8a:af:24:d2:6c:1f:c9:00:32:09:57:ed:
1e:5d:12:9b:83:c3:2c:48:03:7a:e8:cd:57:f9:f9:44:a2:03:
58:9c:b9:f7:c3:41:26:e4:95:56:7e:42:f3:72:28:26:a0:c4:
4f:9b:e9:5f:ba:f9:f9:f1:4b:4d:a2:02:bd:f9:eb:21:46:e2:
41:dd:2e:2a:15:48:1a:10:a2:18:13:27:ee:9a:39:74:cd:21:
57:67:5a:ab
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAZt7NuYG+Dom0GuJFu/ogD42MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlY2Q3NWE1MTA5ZTJjMTA2ZTExOTNkNTdlZTJiOTk5ZmVj
MjdmZTAwHhcNMjYwMTAxMjAxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OGYyNTgxODYzNGE0YThkYmY1NzM0ZmE2MDNiMzVlZTYwOWRjNTNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qUUQthPM2+AewIZnzOAwz0jWlaI
eNBjUd6Pp32wq7idLn7bxvGl0hUggT2zxbvI35jEfCREsXpmoVPuoZAP0d5ZDeRa
/vXSQVJ9L9cr7KM2rsFvPw6DikTPuCr5D2AwyTIYV5CqRtf2gosFLUJDnqYfZ+2N
DTUZ3B9E+U0t6euDmV0LTSfGrU4d2Xu1blAppbm8hwzN/t+snDlxQEixul69XdQZ
crQWfgf7k4zur7MTZGsp6rGe87vNMxbweRRA38bluTU3NJmwdHeQ/cvXq+J/kgpZ
a2p9nYXRSTVqOyigha+wC+eFJ7ZemshcFfsF8pLEvLQplorZoCqC5rrVOQIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFFjyWBhjSkqNv1c0+mA7Ne5gncU9MB8GA1UdIwQY
MBaAFE7NdaUQniwQbhGT1X7iuZn+wn/gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHMxMXBSQ2VMQkJ1RVpQVmZ1SzVtZjdDZi1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9kN2JlZWQtZGY5OC00ZWM4LTg3YjYt
NDA3MjU1N2M0N2ZhLzEvV1BKWUdHTktTbzJfVnpUNllEczE3bUNkeFQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy9kN2JlZWQtZGY5OC00ZWM4LTg3YjYtNDA3MjU1N2M0N2Zh
LzEvVHMxMXBSQ2VMQkJ1RVpQVmZ1SzVtZjdDZi1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQALYGkAwQA
ub75MA8EAgACMAkDBwIqB93AAAAwDQYJKoZIhvcNAQELBQADggEBAE/CGHBfuG2S
lA5bCdfA8QBu+/sGbB/70/8oQTGkeDejBkC/K3aiLvBc+jI3t/Syp95AwE9hiCzV
sm7MtXlKcKjzTYm9KYvyEKjzmGnls6Ffk+4hRngM+kFcrDPRBI2/m9DuID/6Tj0+
r5SOA66n+NsReF9uBSt6mzO26y6lw3n1DHfKUcV1Bgfo5JKZuy9wqh4ncfZz5liw
y8fvHli3HvQtNNt50xQmAIqvJNJsH8kAMglX7R5dEpuDwyxIA3rozVf5+USiA1ic
uffDQSbklVZ+QvNyKCagxE+b6V+6+fnxS02iAr356yFG4kHdLioVSBoQohgTJ+6a
OXTNIVdnWqs=
-----END CERTIFICATE-----
Generated at Tue Feb 10 06:24:37 2026 by rpki-client