This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/wMiTPlMu4g1hj3TJ8q6_CsgMnNQ.roa
File: wMiTPlMu4g1hj3TJ8q6_CsgMnNQ.roa (raw, json)
Hash identifier: +vnxHkv9IVNBAo2p+O8n8zZLqGi1fGQbtfQSaGakEfQ=
Subject key identifier: C0:C8:93:3E:53:2E:E2:0D:61:8F:74:C9:F2:AE:BF:0A:C8:0C:9C:D4
Certificate issuer: /CN=05bfdbb6a4b1663369da407db97b021f73284a28
Certificate serial: 019BC61EB1F969316775A8E50F7D9816293E
Authority key identifier: 05:BF:DB:B6:A4:B1:66:33:69:DA:40:7D:B9:7B:02:1F:73:28:4A:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bb_btqSxZjNp2kB9uXsCH3MoSig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/wMiTPlMu4g1hj3TJ8q6_CsgMnNQ.roa
Signing time: Fri 16 Jan 2026 09:24:18 +0000
ROA not before: Fri 16 Jan 2026 09:24:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 27176
IP address blocks: 81.92.219.0/24 maxlen: 24
185.99.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/Bb_btqSxZjNp2kB9uXsCH3MoSig.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/Bb_btqSxZjNp2kB9uXsCH3MoSig.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bb_btqSxZjNp2kB9uXsCH3MoSig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Jan 2026 13:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:c6:1e:b1:f9:69:31:67:75:a8:e5:0f:7d:98:16:29:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05bfdbb6a4b1663369da407db97b021f73284a28
Validity
Not Before: Jan 16 09:24:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c0c8933e532ee20d618f74c9f2aebf0ac80c9cd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:35:43:e0:ba:80:62:08:08:43:5e:7e:47:94:
f7:94:b9:cd:01:cd:ac:cb:19:5e:d9:e6:e9:05:a8:
fe:3e:7e:48:c7:25:5f:96:1a:73:e9:16:9c:f8:f4:
01:84:20:bf:e6:39:17:82:bb:b9:03:79:1e:6c:95:
21:8e:13:a1:75:aa:bd:d8:e1:ca:60:1f:f1:f8:7f:
16:90:aa:16:4b:33:cb:c2:b6:e4:6e:a7:27:02:31:
d7:94:8a:20:a6:bd:29:b2:a4:50:08:92:9f:56:88:
9d:6d:53:ec:67:4f:25:b4:cc:ab:ba:d8:78:13:73:
1d:f1:3d:09:e1:e1:5c:1e:9e:36:89:56:ef:18:99:
40:1d:cd:b7:18:6d:63:b4:ce:62:c2:ed:45:94:6e:
ed:34:89:75:87:01:1b:9a:ce:00:6c:eb:81:91:80:
a4:73:51:c5:03:f8:f6:87:fb:ff:1c:f1:14:f3:a3:
e7:28:58:e1:0e:68:ab:d3:55:18:f7:df:06:c1:44:
a2:c1:b5:b4:b8:6e:e1:7f:b6:8b:23:39:75:a7:be:
43:bb:80:dd:96:a3:9f:51:12:eb:00:3f:db:1d:c2:
66:93:4a:3e:39:b7:55:2d:dc:4a:8b:00:59:22:99:
cf:74:da:5e:a0:70:75:b8:42:f0:36:f6:84:b8:cb:
40:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:C8:93:3E:53:2E:E2:0D:61:8F:74:C9:F2:AE:BF:0A:C8:0C:9C:D4
X509v3 Authority Key Identifier:
keyid:05:BF:DB:B6:A4:B1:66:33:69:DA:40:7D:B9:7B:02:1F:73:28:4A:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bb_btqSxZjNp2kB9uXsCH3MoSig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/wMiTPlMu4g1hj3TJ8q6_CsgMnNQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/460c00-3e95-4274-bc9c-060dacfebe0f/1/Bb_btqSxZjNp2kB9uXsCH3MoSig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.92.219.0/24
185.99.255.0/24
Signature Algorithm: sha256WithRSAEncryption
72:13:8d:7c:5d:47:75:c3:1d:4c:e3:5e:0d:15:15:2f:41:76:
43:16:14:9c:67:bb:8d:4e:c3:39:79:c8:aa:0b:1e:b1:ed:85:
68:2f:c1:14:30:21:1a:b9:0e:57:dc:3e:0b:87:57:e4:00:54:
f5:87:0d:69:45:52:d5:d1:64:d3:60:3d:cf:ab:03:1d:dc:57:
37:be:e6:d7:11:41:4c:6a:60:0d:5d:be:23:8b:c5:65:bf:fb:
6c:c5:64:df:0a:e2:cc:35:a9:99:b4:67:26:cb:c0:33:5c:65:
aa:72:0d:15:b5:71:66:38:ad:2e:91:63:b4:5b:65:b8:53:ef:
03:48:00:18:12:7b:08:f1:d5:f6:6c:40:1d:d5:ac:f8:53:5d:
6d:2a:24:fe:9a:9a:91:e1:f5:1a:f7:f1:79:26:58:37:5a:29:
da:25:ce:b3:6c:d2:04:4a:6d:f2:90:54:17:d5:03:4d:8b:c1:
cf:f2:d6:1e:79:4c:a8:53:a4:fc:4a:53:9b:0e:40:12:35:f5:
97:a2:6a:01:9f:c6:60:cc:87:93:eb:73:56:45:90:9c:9c:e7:
38:27:ad:b9:c6:c8:89:d1:7c:25:b1:c1:8c:b9:69:22:ab:9b:
41:6a:89:ff:38:d3:8f:45:ae:c4:f1:af:ca:68:46:6e:4a:1a:
2d:6f:42:5f
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZvGHrH5aTFndajlD32YFik+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1YmZkYmI2YTRiMTY2MzM2OWRhNDA3ZGI5N2IwMjFmNzMy
ODRhMjgwHhcNMjYwMTE2MDkyNDE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMGM4OTMzZTUzMmVlMjBkNjE4Zjc0YzlmMmFlYmYwYWM4MGM5Y2Q0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjVD4LqAYggIQ15+R5T3lLnNAc2s
yxle2ebpBaj+Pn5IxyVflhpz6Rac+PQBhCC/5jkXgru5A3kebJUhjhOhdaq92OHK
YB/x+H8WkKoWSzPLwrbkbqcnAjHXlIogpr0psqRQCJKfVoidbVPsZ08ltMyruth4
E3Md8T0J4eFcHp42iVbvGJlAHc23GG1jtM5iwu1FlG7tNIl1hwEbms4AbOuBkYCk
c1HFA/j2h/v/HPEU86PnKFjhDmir01UY998GwUSiwbW0uG7hf7aLIzl1p75Du4Dd
lqOfURLrAD/bHcJmk0o+ObdVLdxKiwBZIpnPdNpeoHB1uELwNvaEuMtAIQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMDIkz5TLuINYY90yfKuvwrIDJzUMB8GA1UdIwQY
MBaAFAW/27aksWYzadpAfbl7Ah9zKEooMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmJfYnRxU3haak5wMmtCOXVYc0NIM01vU2lnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi80NjBjMDAtM2U5NS00Mjc0LWJjOWMt
MDYwZGFjZmViZTBmLzEvd01pVFBsTXU0ZzFoajNUSjhxNl9Dc2dNbk5RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi80NjBjMDAtM2U5NS00Mjc0LWJjOWMtMDYwZGFjZmViZTBm
LzEvQmJfYnRxU3haak5wMmtCOXVYc0NIM01vU2lnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUVzbAwQA
uWP/MA0GCSqGSIb3DQEBCwUAA4IBAQByE418XUd1wx1M414NFRUvQXZDFhScZ7uN
TsM5eciqCx6x7YVoL8EUMCEauQ5X3D4Lh1fkAFT1hw1pRVLV0WTTYD3PqwMd3Fc3
vubXEUFMamANXb4ji8Vlv/tsxWTfCuLMNamZtGcmy8AzXGWqcg0VtXFmOK0ukWO0
W2W4U+8DSAAYEnsI8dX2bEAd1az4U11tKiT+mpqR4fUa9/F5Jlg3WinaJc6zbNIE
Sm3ykFQX1QNNi8HP8tYeeUyoU6T8SlObDkASNfWXomoBn8ZgzIeT63NWRZCcnOc4
J625xsiJ0XwlscGMuWkiq5tBaon/ONOPRa7E8a/KaEZuShotb0Jf
-----END CERTIFICATE-----
Generated at Sat Jan 24 17:55:56 2026 by rpki-client