This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/wshhYohjqXbtPI9N4_VP7v1zc_4.roa
File: wshhYohjqXbtPI9N4_VP7v1zc_4.roa (raw, json)
Hash identifier: K9LIAOWThDljnJHgTvgI98ZZwaUx513/nLgNGKabvmI=
Subject key identifier: C2:C8:61:62:88:63:A9:76:ED:3C:8F:4D:E3:F5:4F:EE:FD:73:73:FE
Certificate issuer: /CN=bfaea358aeeeb7d0b9e0f93d23f67d29a7ec62c8
Certificate serial: 019B78A2CB27D81FF096284F45A888B0A762
Authority key identifier: BF:AE:A3:58:AE:EE:B7:D0:B9:E0:F9:3D:23:F6:7D:29:A7:EC:62:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v66jWK7ut9C54Pk9I_Z9KafsYsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/wshhYohjqXbtPI9N4_VP7v1zc_4.roa
Signing time: Thu 01 Jan 2026 08:18:13 +0000
ROA not before: Thu 01 Jan 2026 08:18:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31077
IP address blocks: 91.192.184.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v66jWK7ut9C54Pk9I_Z9KafsYsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Feb 2026 03:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:a2:cb:27:d8:1f:f0:96:28:4f:45:a8:88:b0:a7:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfaea358aeeeb7d0b9e0f93d23f67d29a7ec62c8
Validity
Not Before: Jan 1 08:18:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c2c861628863a976ed3c8f4de3f54feefd7373fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0c:8d:86:0c:8a:00:1d:3d:08:8c:5f:f3:8d:
bc:ec:ca:4f:cf:1e:ee:95:0d:1a:e5:09:bd:1f:ce:
05:97:e7:61:e2:d3:2c:32:9b:24:13:61:2f:f6:44:
8f:29:59:d8:38:17:68:0c:fd:fa:06:22:2d:61:20:
9e:1d:eb:58:8f:51:a6:e9:22:ba:44:74:d0:77:9d:
4e:3a:a5:bb:54:ab:c6:64:e6:40:a5:da:9f:fd:5f:
65:1b:bd:be:32:67:79:98:62:48:5f:46:1d:32:b2:
bb:e6:ed:0b:4e:98:8e:dc:d0:76:a9:02:db:20:db:
45:7b:b1:6a:91:94:c3:9d:bd:71:29:1d:6d:25:5f:
89:21:c9:7d:63:24:70:cc:b1:23:7f:93:4b:ab:5a:
df:2f:f3:7a:28:cc:ea:5e:98:3c:a1:63:28:d0:d1:
f1:1c:18:d7:67:a9:1d:1c:5c:2b:85:3c:16:27:e6:
ce:1b:b8:a3:6e:89:c7:ca:86:f5:06:56:85:00:9e:
05:c3:a7:9e:66:ad:70:67:dc:a0:ca:5d:e4:66:c6:
4a:e7:9d:47:f3:68:a6:bf:0b:0c:a5:98:23:70:13:
2e:40:d4:4b:3f:44:f1:1e:c6:8e:ed:6d:4e:d4:60:
84:d8:28:80:93:3f:4d:f1:8c:e1:da:98:8a:2e:c1:
42:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:C8:61:62:88:63:A9:76:ED:3C:8F:4D:E3:F5:4F:EE:FD:73:73:FE
X509v3 Authority Key Identifier:
keyid:BF:AE:A3:58:AE:EE:B7:D0:B9:E0:F9:3D:23:F6:7D:29:A7:EC:62:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v66jWK7ut9C54Pk9I_Z9KafsYsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/wshhYohjqXbtPI9N4_VP7v1zc_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.192.184.0/22
Signature Algorithm: sha256WithRSAEncryption
50:bf:85:04:5e:47:7c:d3:9e:66:e7:3a:9e:53:d7:1a:6b:48:
c7:03:6f:d5:09:e0:9c:0f:28:e8:b5:f5:37:7e:e8:90:80:5c:
e7:8d:8f:e2:41:ba:05:b7:a4:4e:8a:8d:d8:8a:e5:43:5c:10:
2e:67:7a:08:25:93:e6:40:dd:91:c1:74:4b:72:1c:78:1b:fb:
ea:a0:f8:c3:b2:35:90:b2:e4:45:a5:98:4b:d3:b5:9d:3f:af:
80:4f:43:65:19:66:35:3b:49:ac:01:38:e6:74:88:49:02:81:
93:ff:85:63:78:75:3f:9c:6c:0c:70:83:fe:83:81:43:a2:fe:
07:46:02:36:d1:e5:0f:4a:20:34:e4:7e:d3:25:a6:c6:76:56:
1f:57:91:60:16:fd:93:37:a8:72:8a:27:e7:3f:40:81:df:e8:
e1:e5:02:c4:7f:17:ac:81:cd:c8:57:80:f5:72:f3:ce:64:de:
0e:5f:92:bc:2e:b2:58:17:ea:da:73:28:c9:97:46:3d:d3:30:
c0:cc:f6:df:01:72:6a:bf:9f:7b:30:40:94:bc:ee:a7:02:00:
23:01:e1:e5:fd:25:12:a9:df:1a:1d:b8:61:81:4c:1a:16:5b:
96:81:42:6e:d1:c1:58:cf:05:6e:de:5b:82:93:ea:0c:6a:a3:
62:ae:a9:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 8 08:10:19 2026 by rpki-client