This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/WrwILJOkKv94JvYqGUNiy47Tb9E.roa
File: WrwILJOkKv94JvYqGUNiy47Tb9E.roa (raw, json)
Hash identifier: Bjce6gPk82s+U9N9AWLeoylnd69kztnleXwX8PYNeuA=
Subject key identifier: 5A:BC:08:2C:93:A4:2A:FF:78:26:F6:2A:19:43:62:CB:8E:D3:6F:D1
Certificate issuer: /CN=43a5ca15bc23c325f1341e9889d858b8ed76d74e
Certificate serial: 019B78A28D5BCD78BACB5D814B09D9C83125
Authority key identifier: 43:A5:CA:15:BC:23:C3:25:F1:34:1E:98:89:D8:58:B8:ED:76:D7:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q6XKFbwjwyXxNB6YidhYuO12104.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/WrwILJOkKv94JvYqGUNiy47Tb9E.roa
Signing time: Thu 01 Jan 2026 08:17:57 +0000
ROA not before: Thu 01 Jan 2026 08:17:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201661
IP address blocks: 91.198.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q6XKFbwjwyXxNB6YidhYuO12104.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:a2:8d:5b:cd:78:ba:cb:5d:81:4b:09:d9:c8:31:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43a5ca15bc23c325f1341e9889d858b8ed76d74e
Validity
Not Before: Jan 1 08:17:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5abc082c93a42aff7826f62a194362cb8ed36fd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:96:83:19:ed:4a:dd:2c:f9:bf:64:83:10:82:
dd:c6:90:f4:cc:f0:78:58:33:83:f2:cb:f8:3a:06:
a5:03:29:1b:ba:d1:6f:70:64:59:b9:18:86:dc:a5:
37:c8:bf:20:a9:7b:8b:39:9a:c1:ae:2b:45:ad:06:
54:70:9d:c7:66:03:b7:0b:0c:18:ab:ed:b4:47:cb:
e2:0b:bc:8a:43:77:cd:2b:4b:cf:88:c7:f3:6c:2d:
af:36:54:b8:f7:27:67:94:63:0e:e0:ca:41:5c:2d:
b7:6c:d1:66:a8:e5:5f:71:05:cb:e9:cd:49:e7:78:
c1:3a:9d:b7:78:eb:b0:24:f0:bf:c1:be:7a:c9:60:
52:6e:6d:62:57:54:44:64:fa:d5:c7:82:ba:c1:2f:
61:b1:44:9b:ba:34:a3:c4:8a:92:d4:4b:fc:26:3a:
95:43:4f:ba:7d:0a:b5:b9:26:5d:87:c1:e4:17:af:
74:9f:2a:4b:2b:df:f4:06:c6:9b:c1:e4:99:d7:2f:
6a:6e:c4:43:08:b0:3f:3e:0d:b6:04:8c:0e:32:cd:
76:90:9b:10:5e:45:62:5c:22:1d:c9:7a:11:48:0b:
49:08:24:3e:4c:73:ef:b2:4f:53:8c:b6:fd:bc:75:
5b:90:a8:d6:5a:fa:fd:78:da:00:1f:0f:4a:87:2d:
61:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:BC:08:2C:93:A4:2A:FF:78:26:F6:2A:19:43:62:CB:8E:D3:6F:D1
X509v3 Authority Key Identifier:
keyid:43:A5:CA:15:BC:23:C3:25:F1:34:1E:98:89:D8:58:B8:ED:76:D7:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6XKFbwjwyXxNB6YidhYuO12104.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/WrwILJOkKv94JvYqGUNiy47Tb9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.94.0/24
Signature Algorithm: sha256WithRSAEncryption
48:0a:43:6d:3b:4b:d8:10:12:c6:17:3b:4d:1a:ea:7d:71:eb:
e9:38:5c:52:4b:16:88:16:06:d8:85:69:11:59:06:3d:b8:7a:
ab:cb:89:54:c0:a1:08:94:00:5d:52:7c:35:68:66:b6:ba:e0:
27:2e:87:c3:12:0e:33:14:3c:b0:74:ee:9b:fd:41:01:3a:f2:
a1:1f:e3:8e:86:b6:ed:71:95:70:a0:29:0a:c1:a1:99:fe:90:
5e:06:68:23:1a:d0:d0:e3:e2:04:9c:3c:6c:ed:8d:71:42:ed:
3d:62:c1:2e:bc:8f:60:f4:19:8f:82:e3:1f:97:50:11:ed:b6:
98:01:ee:3e:db:4c:26:cf:ce:79:68:78:fb:66:1d:8c:79:c4:
d4:1e:a4:95:c2:b4:54:1b:f8:3c:0b:4d:9a:63:fd:70:6f:16:
6a:68:5e:15:17:bb:2b:f6:33:d9:dd:1c:75:08:f4:c4:02:3a:
41:ad:2d:cc:11:7b:ec:3d:6d:9c:a2:d2:73:ba:1e:26:3f:04:
b3:51:c1:ea:08:47:ff:2a:b7:2e:f7:97:37:76:4a:45:4f:74:
ec:91:57:06:75:a5:76:32:7e:5e:6d:5b:09:8f:c3:1f:ac:15:
59:5e:8f:8e:12:70:38:58:d6:1b:fd:d4:6b:95:f8:e3:98:37:
9d:a3:ba:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:14:59 2026 by rpki-client