This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/wm5FHuXn0yj2Fzs7mssloklRCsc.roa
File: wm5FHuXn0yj2Fzs7mssloklRCsc.roa (raw, json)
Hash identifier: nSYa0rr7dwu5dctQzszV3Gq5wfYwUX466+D2hjWAmcE=
Subject key identifier: C2:6E:45:1E:E5:E7:D3:28:F6:17:3B:3B:9A:CB:25:A2:49:51:0A:C7
Certificate issuer: /CN=cd4065967dec092b5fc90152e4a95339ba1d2289
Certificate serial: 019C0A6F4655A5E91FE7425961D7D92A747F
Authority key identifier: CD:40:65:96:7D:EC:09:2B:5F:C9:01:52:E4:A9:53:39:BA:1D:22:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zUBlln3sCStfyQFS5KlTObodIok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/wm5FHuXn0yj2Fzs7mssloklRCsc.roa
Signing time: Thu 29 Jan 2026 15:46:30 +0000
ROA not before: Thu 29 Jan 2026 15:46:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29802
IP address blocks: 185.144.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.mft
rsync://rpki.ripe.net/repository/DEFAULT/zUBlln3sCStfyQFS5KlTObodIok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Jan 2026 06:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:0a:6f:46:55:a5:e9:1f:e7:42:59:61:d7:d9:2a:74:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd4065967dec092b5fc90152e4a95339ba1d2289
Validity
Not Before: Jan 29 15:46:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c26e451ee5e7d328f6173b3b9acb25a249510ac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b4:d3:ee:34:8e:ff:05:7f:00:ef:a1:3f:36:
13:61:c2:d6:6a:98:0f:61:5b:6e:94:05:5a:70:1e:
d1:fe:57:17:c9:5c:b3:9d:12:c0:1f:91:cf:98:70:
d5:36:84:c3:f5:ee:ba:4f:85:f0:60:a2:d9:68:32:
fe:81:96:7b:40:46:1b:3f:33:70:45:fa:ad:53:8f:
5d:a3:8b:88:11:08:53:eb:0a:48:88:0f:d3:2b:29:
c1:5c:d9:20:bb:cc:6f:ec:04:10:b7:51:60:de:07:
4e:d7:db:71:28:1a:dd:82:66:c9:99:cd:d8:e2:2a:
d3:8b:e0:fa:fa:e3:10:af:ed:8b:bd:bb:97:97:46:
e1:e7:97:73:79:31:21:c8:bd:aa:dc:74:ee:a6:61:
3c:17:66:69:77:6c:03:ea:25:43:a1:ee:de:2a:d4:
11:bb:40:35:37:59:0c:60:59:fe:0b:72:b8:b4:56:
d1:8d:69:47:24:3f:2a:9e:63:87:b2:7f:72:23:e3:
e2:f2:73:16:00:b0:1e:43:9e:d0:79:8b:e7:33:fb:
a9:38:d1:96:81:b2:41:aa:7c:ee:5f:a2:3d:6e:e5:
79:70:35:ad:a1:ba:31:0c:e2:13:97:e5:cc:24:f8:
a7:3b:8d:71:8e:de:d7:c9:59:c5:77:d9:4b:5e:4c:
a7:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:6E:45:1E:E5:E7:D3:28:F6:17:3B:3B:9A:CB:25:A2:49:51:0A:C7
X509v3 Authority Key Identifier:
keyid:CD:40:65:96:7D:EC:09:2B:5F:C9:01:52:E4:A9:53:39:BA:1D:22:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zUBlln3sCStfyQFS5KlTObodIok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/wm5FHuXn0yj2Fzs7mssloklRCsc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.144.12.0/24
Signature Algorithm: sha256WithRSAEncryption
30:f7:0a:da:f1:c0:eb:45:24:6a:01:53:c2:18:5f:5a:6f:1a:
3c:37:00:8b:17:bc:5c:45:2c:0a:fd:2c:e4:81:c2:8f:4b:91:
35:07:65:48:e4:72:9b:4f:69:83:e7:1d:54:55:a6:09:f0:18:
29:ef:20:73:52:06:5b:23:a7:12:4c:c7:9b:a8:1c:1c:88:49:
57:83:60:2c:e7:7b:e6:f3:97:6a:c0:57:47:e8:29:ef:ff:40:
ee:b5:5a:33:00:c6:d0:e8:0c:86:0d:bc:00:e1:5f:42:7b:74:
ce:79:78:0b:6d:d6:0d:1b:ad:6a:2c:07:a6:3c:41:78:6a:81:
33:58:92:11:f7:10:96:59:13:b3:c8:5f:ee:b0:c4:e2:ab:e0:
e7:0d:43:de:79:0c:9d:df:c0:18:d9:7e:be:94:31:21:9d:8a:
f6:8b:e2:af:2d:31:5e:a2:98:22:1d:c6:10:eb:85:df:3a:1f:
3a:bd:8d:2a:42:b2:c4:39:eb:ee:6e:cc:d5:4b:96:3b:f3:54:
fc:ad:bf:5a:a7:cd:30:27:b7:52:cb:30:9c:81:1d:32:24:20:
5f:8d:50:ad:0a:a4:91:54:ca:77:7a:7c:49:10:ee:fa:0d:88:
3d:ee:8d:3f:27:b7:65:5a:96:9b:f5:87:df:ab:e1:6a:99:a5:
49:92:39:45
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZwKb0ZVpekf50JZYdfZKnR/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkNDA2NTk2N2RlYzA5MmI1ZmM5MDE1MmU0YTk1MzM5YmEx
ZDIyODkwHhcNMjYwMTI5MTU0NjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMjZlNDUxZWU1ZTdkMzI4ZjYxNzNiM2I5YWNiMjVhMjQ5NTEwYWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7TT7jSO/wV/AO+hPzYTYcLWapgP
YVtulAVacB7R/lcXyVyznRLAH5HPmHDVNoTD9e66T4XwYKLZaDL+gZZ7QEYbPzNw
RfqtU49do4uIEQhT6wpIiA/TKynBXNkgu8xv7AQQt1Fg3gdO19txKBrdgmbJmc3Y
4irTi+D6+uMQr+2LvbuXl0bh55dzeTEhyL2q3HTupmE8F2Zpd2wD6iVDoe7eKtQR
u0A1N1kMYFn+C3K4tFbRjWlHJD8qnmOHsn9yI+Pi8nMWALAeQ57QeYvnM/upONGW
gbJBqnzuX6I9buV5cDWtoboxDOITl+XMJPinO41xjt7XyVnFd9lLXkynpwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMJuRR7l59Mo9hc7O5rLJaJJUQrHMB8GA1UdIwQY
MBaAFM1AZZZ97AkrX8kBUuSpUzm6HSKJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelVCbGxuM3NDU3RmeVFGUzVLbFRPYm9kSW9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS85NDRmMmEtZjY3My00MmJmLTllM2Qt
ZWRjZWY3NDUxZWY0LzEvd201Rkh1WG4weWoyRnpzN21zc2xva2xSQ3NjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS85NDRmMmEtZjY3My00MmJmLTllM2QtZWRjZWY3NDUxZWY0
LzEvelVCbGxuM3NDU3RmeVFGUzVLbFRPYm9kSW9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZAMMA0G
CSqGSIb3DQEBCwUAA4IBAQAw9wra8cDrRSRqAVPCGF9abxo8NwCLF7xcRSwK/Szk
gcKPS5E1B2VI5HKbT2mD5x1UVaYJ8Bgp7yBzUgZbI6cSTMebqBwciElXg2As53vm
85dqwFdH6Cnv/0DutVozAMbQ6AyGDbwA4V9Ce3TOeXgLbdYNG61qLAemPEF4aoEz
WJIR9xCWWROzyF/usMTiq+DnDUPeeQyd38AY2X6+lDEhnYr2i+KvLTFeopgiHcYQ
64XfOh86vY0qQrLEOevubszVS5Y781T8rb9ap80wJ7dSyzCcgR0yJCBfjVCtCqSR
VMp3enxJEO76DYg97o0/J7dlWpab9Yffq+FqmaVJkjlF
-----END CERTIFICATE-----
Generated at Fri Jan 30 12:18:32 2026 by rpki-client