This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/0-WmLbEH77lOVqvVQ2YUnN7Nex4.roa
File: 0-WmLbEH77lOVqvVQ2YUnN7Nex4.roa (raw, json)
Hash identifier: K4clzCUFSq6IN3lmLQlxqL/RcAzKs5Apy7zTYqaaAwc=
Subject key identifier: D3:E5:A6:2D:B1:07:EF:B9:4E:56:AB:D5:43:66:14:9C:DE:CD:7B:1E
Certificate issuer: /CN=db83f54f45131d9207c215a098a2a6bcd6ff050b
Certificate serial: 019B77C6D38C00531C7E2E93DE3190BA7708
Authority key identifier: DB:83:F5:4F:45:13:1D:92:07:C2:15:A0:98:A2:A6:BC:D6:FF:05:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/24P1T0UTHZIHwhWgmKKmvNb_BQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/0-WmLbEH77lOVqvVQ2YUnN7Nex4.roa
Signing time: Thu 01 Jan 2026 04:17:57 +0000
ROA not before: Thu 01 Jan 2026 04:17:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6461
IP address blocks: 193.34.72.0/23 maxlen: 23
193.34.74.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/24P1T0UTHZIHwhWgmKKmvNb_BQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 18:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c6:d3:8c:00:53:1c:7e:2e:93:de:31:90:ba:77:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db83f54f45131d9207c215a098a2a6bcd6ff050b
Validity
Not Before: Jan 1 04:17:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d3e5a62db107efb94e56abd54366149cdecd7b1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:87:d2:5d:e3:de:26:99:c4:e3:81:00:67:51:
56:6c:7e:e4:c2:5d:2d:c9:88:d8:e0:f5:bf:d2:16:
1a:85:d5:ab:bc:60:d6:f6:aa:45:3b:7b:5b:c8:12:
d1:1b:d4:cb:f5:3e:c2:0a:15:5e:50:a8:84:12:cb:
5b:06:8e:56:4d:06:1b:1f:29:cf:b4:fb:6a:c7:57:
36:e4:3c:6f:26:9a:87:69:6e:90:0c:c1:7b:31:3e:
78:0c:aa:bd:fd:67:46:fa:fc:7f:21:16:ab:c5:e7:
8b:6f:59:42:ed:de:58:8c:01:a2:3d:b6:9a:08:d1:
bf:40:82:fc:c1:89:13:58:a4:f8:e8:ea:07:ce:ad:
fb:c6:8d:b4:ea:67:3e:2e:d7:22:e4:2a:5d:77:9b:
b8:3a:cc:8c:25:f6:eb:d4:73:12:1e:76:d9:93:df:
26:99:0f:90:b7:93:46:87:99:40:ab:86:e2:3f:e9:
3e:6e:9d:fa:18:70:94:ad:de:d7:0c:b2:89:2e:51:
d2:d8:ea:a8:a1:cc:0c:cf:86:3f:b0:81:19:a5:9b:
a5:11:e7:56:ac:3e:0a:ed:6b:63:d6:75:98:2a:ff:
37:37:d3:b7:76:04:ba:6f:1b:db:f5:47:cb:55:9b:
d5:80:fc:38:f7:89:e0:4f:95:db:a9:a5:f5:0b:dc:
c6:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:E5:A6:2D:B1:07:EF:B9:4E:56:AB:D5:43:66:14:9C:DE:CD:7B:1E
X509v3 Authority Key Identifier:
keyid:DB:83:F5:4F:45:13:1D:92:07:C2:15:A0:98:A2:A6:BC:D6:FF:05:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/24P1T0UTHZIHwhWgmKKmvNb_BQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/0-WmLbEH77lOVqvVQ2YUnN7Nex4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.34.72.0/22
Signature Algorithm: sha256WithRSAEncryption
58:dd:39:cc:63:85:da:b2:5a:18:ca:7f:25:7c:af:b8:8c:0e:
ad:c3:a6:97:b4:15:44:80:33:db:60:a5:92:88:69:03:c6:62:
5e:74:2a:db:b7:e1:75:7f:38:3b:af:e6:6e:7b:69:00:b8:06:
37:cd:14:1e:da:7d:6c:8f:55:bb:4e:c0:40:ea:f8:e3:e5:2a:
47:c1:45:40:36:b4:89:9c:87:f1:94:77:70:44:3a:48:a0:5b:
f6:2a:ea:17:a3:e3:d3:f6:00:1d:aa:cc:1f:01:f8:b6:5e:71:
5b:9f:54:d0:f8:d8:90:9a:62:35:28:bb:61:4d:6a:93:4c:10:
c3:10:9f:e2:5d:e1:50:da:23:ce:12:66:bb:60:31:8d:d8:12:
d4:a3:fc:7f:49:14:f1:60:db:60:8a:55:e4:25:d5:6d:69:99:
dd:8e:9d:c5:8f:b1:d7:84:15:3b:aa:ee:ab:76:f9:2d:af:01:
9b:90:c6:1a:14:30:fb:cf:c7:ea:b2:85:1a:b6:be:c1:8c:3b:
2e:5a:38:22:d1:e4:11:1a:1b:4e:fd:0f:6b:8a:7c:96:ef:f7:
d1:ec:18:1e:be:05:d2:27:c5:7e:4b:2d:85:fb:01:c4:6d:27:
58:15:2d:be:e8:17:30:a6:66:46:5f:eb:46:e9:ba:9b:3f:4a:
cc:92:83:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 01:20:54 2026 by rpki-client