This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/wEPe2-IU5si5E4dI5okDjRdm6aQ.roa
File: wEPe2-IU5si5E4dI5okDjRdm6aQ.roa (raw, json)
Hash identifier: loq4xgfhON1Tk8HEm4w/II1VC6Cp9wojKbfEE5I8A4A=
Subject key identifier: C0:43:DE:DB:E2:14:E6:C8:B9:13:87:48:E6:89:03:8D:17:66:E9:A4
Certificate issuer: /CN=e99405ee8f5d8e764e90bd66bdd1e89ac12809e8
Certificate serial: 019B7DCA6D7122C6E0CC258F694DEA966523
Authority key identifier: E9:94:05:EE:8F:5D:8E:76:4E:90:BD:66:BD:D1:E8:9A:C1:28:09:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ZQF7o9djnZOkL1mvdHomsEoCeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/wEPe2-IU5si5E4dI5okDjRdm6aQ.roa
Signing time: Fri 02 Jan 2026 08:19:36 +0000
ROA not before: Fri 02 Jan 2026 08:19:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31537
IP address blocks: 185.169.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.mft
rsync://rpki.ripe.net/repository/DEFAULT/6ZQF7o9djnZOkL1mvdHomsEoCeg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Feb 2026 06:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:ca:6d:71:22:c6:e0:cc:25:8f:69:4d:ea:96:65:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e99405ee8f5d8e764e90bd66bdd1e89ac12809e8
Validity
Not Before: Jan 2 08:19:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c043dedbe214e6c8b9138748e689038d1766e9a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2c:06:d6:d0:1c:e3:29:8f:10:f4:c4:d5:3c:
94:bd:86:90:f3:de:57:9e:76:e0:27:fb:f7:b8:4b:
16:8c:fd:0f:f9:d4:3b:36:c4:95:df:b7:ad:da:b6:
1c:7f:e2:53:a0:f4:dc:c2:7b:37:02:55:3b:f4:4f:
5f:12:a7:32:45:c9:4f:2b:95:05:99:f9:01:42:ad:
ce:9a:34:43:17:69:f6:7c:a2:54:50:c9:f2:96:d3:
aa:b1:25:a6:7b:69:58:ec:ef:2d:f2:99:c7:10:c4:
7d:ea:69:1a:e0:ed:e5:39:7a:3f:bb:59:86:a0:e1:
e4:15:d4:b9:52:ba:02:34:c0:6c:5a:55:b5:7c:7e:
8a:e2:28:bf:1f:58:e7:ef:f6:63:b3:e2:49:2c:70:
b7:b6:d0:65:5a:f1:b4:01:48:fd:3d:11:2a:86:70:
d3:f1:0c:f1:7d:d1:3f:42:ef:f7:1f:9c:c4:c2:a7:
ec:9a:dd:35:ba:db:1d:06:17:84:63:32:85:c4:1a:
94:cd:45:ac:bb:a7:48:fb:e4:b3:ab:89:75:60:21:
86:0f:88:58:0f:b5:76:df:4a:a1:8a:24:15:77:07:
bd:9f:e1:6c:c4:7f:89:a8:8e:5d:da:d8:bd:0e:63:
9e:63:2a:d0:07:46:d0:f0:48:a3:d5:33:f0:45:f2:
fb:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:43:DE:DB:E2:14:E6:C8:B9:13:87:48:E6:89:03:8D:17:66:E9:A4
X509v3 Authority Key Identifier:
keyid:E9:94:05:EE:8F:5D:8E:76:4E:90:BD:66:BD:D1:E8:9A:C1:28:09:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ZQF7o9djnZOkL1mvdHomsEoCeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/wEPe2-IU5si5E4dI5okDjRdm6aQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.169.76.0/24
Signature Algorithm: sha256WithRSAEncryption
66:e4:2a:b9:3c:58:90:32:fd:90:a4:c8:b2:b3:4d:62:c4:a2:
0b:e2:c3:59:e8:ea:ee:29:85:71:72:b1:23:34:5f:a1:44:6a:
c2:94:5d:8c:52:17:fe:0c:67:17:e3:34:d2:53:a9:e6:18:14:
c3:c6:81:e1:80:ae:d5:3d:c5:be:00:6d:62:5b:df:fe:96:d6:
00:4e:83:8a:83:18:8f:20:53:8d:50:c3:5f:d1:c3:f3:3a:fe:
47:1f:c2:b6:8e:c1:0d:0a:37:59:c2:17:31:28:ef:a5:5f:0e:
5d:b0:7a:23:7f:3c:1e:3e:3e:48:e1:5b:8f:c8:af:36:ed:d3:
1d:6a:72:fc:86:b4:b7:b9:14:34:9d:80:05:39:fd:a0:fc:b7:
e2:ec:cb:d0:31:be:7a:2e:c1:47:22:7b:26:80:71:ac:88:23:
55:15:11:3d:06:56:ae:c8:01:dd:23:9b:40:a8:8a:10:3f:ea:
4d:a7:1e:8a:ae:c2:6a:23:54:71:bc:67:a8:ec:e0:de:40:55:
b5:af:09:dd:a7:d9:ff:e8:51:73:32:a4:f5:77:18:b4:c9:b8:
ff:5c:52:24:06:ba:06:ba:f8:3a:1f:4d:77:cc:c7:e3:02:23:
a5:29:7d:e5:ed:0a:16:15:3f:4c:89:39:c6:ec:95:11:70:9a:
60:f1:db:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 4 12:17:00 2026 by rpki-client