This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/WrB_6nEScPqneHKwQCA6QB4d4QA.roa
File: WrB_6nEScPqneHKwQCA6QB4d4QA.roa (raw, json)
Hash identifier: 85wjB4Jt2bkwpAvi6/jsQd4XiX94VRI5UhSDcmPSSb0=
Subject key identifier: 5A:B0:7F:EA:71:12:70:FA:A7:78:72:B0:40:20:3A:40:1E:1D:E1:00
Certificate issuer: /CN=c11c58337cd4d74cd9219d8778dee5b29f08a461
Certificate serial: 019B7D5C6987EDEB056DDDD3C60EB7BC4AFB
Authority key identifier: C1:1C:58:33:7C:D4:D7:4C:D9:21:9D:87:78:DE:E5:B2:9F:08:A4:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wRxYM3zU10zZIZ2HeN7lsp8IpGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/WrB_6nEScPqneHKwQCA6QB4d4QA.roa
Signing time: Fri 02 Jan 2026 06:19:26 +0000
ROA not before: Fri 02 Jan 2026 06:19:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50821
IP address blocks: 46.39.96.0/19 maxlen: 19
79.142.240.0/20 maxlen: 20
89.255.224.0/20 maxlen: 20
109.238.128.0/20 maxlen: 20
145.14.96.0/19 maxlen: 19
145.40.16.0/20 maxlen: 20
147.28.64.0/19 maxlen: 19
178.16.208.0/20 maxlen: 20
178.251.128.0/21 maxlen: 21
185.81.108.0/22 maxlen: 22
212.100.96.0/19 maxlen: 19
217.69.144.0/20 maxlen: 20
2001:1ba8::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wRxYM3zU10zZIZ2HeN7lsp8IpGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:5c:69:87:ed:eb:05:6d:dd:d3:c6:0e:b7:bc:4a:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c11c58337cd4d74cd9219d8778dee5b29f08a461
Validity
Not Before: Jan 2 06:19:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5ab07fea711270faa77872b040203a401e1de100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:db:83:f1:50:b6:2f:04:87:67:55:80:71:22:
8c:82:ab:1a:74:20:9c:61:13:10:28:2a:ae:82:6b:
a2:f2:21:14:23:21:85:14:94:e8:98:09:cf:f6:b0:
44:83:4d:b3:1b:10:6e:5c:bf:0f:1a:04:0c:67:64:
de:ad:df:17:0e:82:38:6a:ae:e6:38:aa:6b:6d:ba:
e9:36:b2:ff:ae:59:66:ee:da:3a:d5:71:71:1c:3f:
c1:3c:d9:2c:c5:8d:cf:e8:70:96:d7:81:b5:12:af:
3d:94:a8:d3:b1:06:55:37:bc:9c:de:f6:dc:33:cd:
e5:62:47:34:6c:06:d4:95:fb:ab:e0:c7:7f:1c:6d:
a9:07:b7:a4:ea:cb:fd:0d:a5:4c:7d:8d:a4:88:59:
d0:f6:e8:70:6c:11:ae:bc:5b:39:d1:fd:6d:4c:71:
03:b0:3a:f4:91:ca:66:fc:ff:f6:7c:e9:c7:2f:fb:
a3:96:fc:fa:27:c3:21:99:bb:da:c6:c4:5f:ea:b4:
b4:cf:71:8a:24:3d:9f:4a:ee:39:04:b7:7c:13:09:
83:bf:9d:ea:0b:cf:5d:d9:de:ed:e0:b5:70:5a:db:
e5:cb:3e:f4:b1:3b:a6:ae:fd:dd:7e:c5:fd:12:4c:
b1:a6:9f:97:75:85:67:03:2f:af:5f:ad:a7:11:f5:
b1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:B0:7F:EA:71:12:70:FA:A7:78:72:B0:40:20:3A:40:1E:1D:E1:00
X509v3 Authority Key Identifier:
keyid:C1:1C:58:33:7C:D4:D7:4C:D9:21:9D:87:78:DE:E5:B2:9F:08:A4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wRxYM3zU10zZIZ2HeN7lsp8IpGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/WrB_6nEScPqneHKwQCA6QB4d4QA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.39.96.0/19
79.142.240.0/20
89.255.224.0/20
109.238.128.0/20
145.14.96.0/19
145.40.16.0/20
147.28.64.0/19
178.16.208.0/20
178.251.128.0/21
185.81.108.0/22
212.100.96.0/19
217.69.144.0/20
IPv6:
2001:1ba8::/29
Signature Algorithm: sha256WithRSAEncryption
c2:d6:4f:4c:89:38:9f:c1:c1:5b:49:ed:f5:2c:c5:09:74:2b:
d0:e0:51:e6:0f:00:cf:df:b4:7e:bf:64:f4:80:79:89:77:05:
18:84:b2:0c:72:04:fe:6a:7a:1a:d1:10:c1:99:4b:66:eb:bc:
91:cf:b1:7d:43:1f:8e:e7:40:2d:df:ba:51:d9:f4:bc:a1:e1:
d7:05:5e:1d:ca:55:aa:14:fa:ef:a3:7f:29:32:77:d2:2f:95:
1c:5f:ee:96:91:7a:55:de:0e:56:64:7f:2c:ec:be:24:7c:77:
7c:26:c4:33:35:f3:ea:8d:94:f7:7f:a0:cb:f1:52:be:46:4c:
14:37:83:11:c5:15:92:6f:41:72:66:7b:16:9c:49:5f:1c:a5:
27:6b:e8:01:9f:d5:2d:ba:b7:f3:58:34:12:f3:d3:e7:82:e3:
ea:41:2f:81:bd:47:71:6a:b0:05:3a:4f:d3:38:a7:b1:d2:0f:
cd:15:9c:83:6a:f7:bc:5c:c1:ed:bb:5b:50:29:95:3d:73:99:
77:78:d0:56:fa:7c:e8:c3:11:31:d9:31:77:ea:ef:bd:c4:d8:
5f:a7:d2:cf:68:af:b6:8f:d9:94:6b:43:0c:cb:7a:e3:d1:eb:
31:b4:5d:51:30:7b:30:ba:49:fc:8d:4a:11:6e:22:3d:f0:48:
e4:f4:16:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:44:02 2026 by rpki-client