This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/82cc5d-d6a8-4667-b049-967c57d5a361/1/pwE_SfXTpr9tglpARupCJ6k_dPs.roa
File: pwE_SfXTpr9tglpARupCJ6k_dPs.roa (raw, json)
Hash identifier: MJdvGBgQiMUrOWyGd3oHbenSc8E/Lbv1F5XgS63yo/I=
Subject key identifier: A7:01:3F:49:F5:D3:A6:BF:6D:82:5A:40:46:EA:42:27:A9:3F:74:FB
Certificate issuer: /CN=0b62cf8cd90b69f936e82b57801cd779d72e3f3e
Certificate serial: 019B76EAC01F1232847BE7C29DAC85A30C6C
Authority key identifier: 0B:62:CF:8C:D9:0B:69:F9:36:E8:2B:57:80:1C:D7:79:D7:2E:3F:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C2LPjNkLafk26CtXgBzXedcuPz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/82cc5d-d6a8-4667-b049-967c57d5a361/1/pwE_SfXTpr9tglpARupCJ6k_dPs.roa
Signing time: Thu 01 Jan 2026 00:17:34 +0000
ROA not before: Thu 01 Jan 2026 00:17:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214966
IP address blocks: 194.53.216.0/21 maxlen: 21
194.53.222.0/24 maxlen: 24
194.53.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/82cc5d-d6a8-4667-b049-967c57d5a361/1/C2LPjNkLafk26CtXgBzXedcuPz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/82cc5d-d6a8-4667-b049-967c57d5a361/1/C2LPjNkLafk26CtXgBzXedcuPz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/C2LPjNkLafk26CtXgBzXedcuPz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:76:ea:c0:1f:12:32:84:7b:e7:c2:9d:ac:85:a3:0c:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b62cf8cd90b69f936e82b57801cd779d72e3f3e
Validity
Not Before: Jan 1 00:17:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a7013f49f5d3a6bf6d825a4046ea4227a93f74fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:24:73:85:1e:73:e2:52:bc:0c:b2:49:9b:87:
0f:8e:b7:48:fb:62:bc:a8:2a:aa:31:2f:ee:c8:59:
3c:29:56:c5:ab:cf:3d:8c:fb:1c:a3:f7:21:2e:0d:
96:56:92:20:7d:c6:31:e8:d6:b8:d4:06:4e:ad:c3:
ba:26:2e:e7:3e:ce:23:8f:03:03:06:3a:4a:5b:3f:
d9:ac:fe:6e:d7:a2:6c:43:cf:05:ac:bc:79:66:2b:
58:d2:1d:57:7f:99:e3:8e:84:bd:01:43:5a:53:e6:
ae:01:05:3f:99:80:a2:52:a9:6b:ae:d5:46:93:79:
44:53:e9:b6:7e:d2:dc:6d:ed:0f:5e:cf:6a:bd:48:
7d:1b:ef:f3:59:43:40:b7:17:5e:d6:3f:29:b1:f6:
76:5b:02:e5:e9:3f:35:95:2a:b9:2a:c1:a3:30:10:
f6:4b:57:66:88:34:02:df:11:bb:ab:42:96:aa:e4:
20:de:20:80:e2:e8:f5:ac:03:43:66:c9:d1:7e:98:
d7:86:05:40:f8:f3:f2:88:16:e0:a9:3a:2c:0a:d1:
82:aa:2c:2a:8d:53:fe:92:31:bb:29:a2:40:17:2b:
8b:5b:e6:4a:61:e6:36:19:73:67:5a:9e:31:b4:f4:
36:53:f5:2b:ea:32:bf:31:35:48:93:71:37:7a:dc:
fb:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:01:3F:49:F5:D3:A6:BF:6D:82:5A:40:46:EA:42:27:A9:3F:74:FB
X509v3 Authority Key Identifier:
keyid:0B:62:CF:8C:D9:0B:69:F9:36:E8:2B:57:80:1C:D7:79:D7:2E:3F:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C2LPjNkLafk26CtXgBzXedcuPz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/82cc5d-d6a8-4667-b049-967c57d5a361/1/pwE_SfXTpr9tglpARupCJ6k_dPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/82cc5d-d6a8-4667-b049-967c57d5a361/1/C2LPjNkLafk26CtXgBzXedcuPz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.53.216.0/21
Signature Algorithm: sha256WithRSAEncryption
e4:d0:b2:64:67:1f:29:3c:be:ad:8c:32:d8:16:40:0a:a0:9a:
f4:d7:40:e2:e2:c6:f0:04:9b:ba:91:49:70:db:f4:a5:ce:fa:
eb:82:8c:d4:ce:9a:83:35:37:4c:50:7b:48:c1:3a:93:a8:33:
da:6e:ba:b2:5e:8c:6d:c7:01:e5:23:c9:a1:e2:6e:32:4d:58:
f9:72:1b:57:a4:d2:10:41:41:58:b5:80:d5:d9:91:68:b9:20:
7e:27:ab:58:15:18:4f:8f:4b:8a:ff:51:13:76:7f:03:ef:68:
6d:4e:ce:44:d0:50:c0:96:ee:b9:e5:4c:43:b9:8b:70:db:0f:
a3:ec:0b:29:fa:73:fd:34:2d:3f:b0:84:01:94:0f:21:99:e1:
c4:d3:cd:a7:a6:a2:e9:68:0c:76:3c:5d:66:36:88:03:a6:06:
a8:b7:87:a4:9a:ed:5c:16:8f:69:96:b3:c3:e0:7a:62:f7:a9:
9e:42:e4:1a:81:f6:5a:38:6d:88:bc:b9:06:77:95:ce:50:1e:
db:43:37:9f:94:44:ab:b1:d2:ca:dc:ef:5a:65:e0:f6:c0:cd:
49:a6:c8:72:d7:88:68:1a:50:88:b7:f4:3e:9c:34:17:3c:24:
32:30:a8:fd:7e:f2:45:de:33:9a:93:5e:0a:fd:8a:97:2f:48:
b7:8e:f7:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:40:14 2026 by rpki-client