This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/a75da3-d81e-4bbf-8cc6-49868d7ce9a1/1/WosD3hO75NeEA5i1pYu4jjBvKZk.roa
File: WosD3hO75NeEA5i1pYu4jjBvKZk.roa (raw, json)
Hash identifier: OY0wCbzw4br81Lxlh7tGimlRcQLzd5IIOnNVOlypPYY=
Subject key identifier: 5A:8B:03:DE:13:BB:E4:D7:84:03:98:B5:A5:8B:B8:8E:30:6F:29:99
Certificate issuer: /CN=53438ecb75e1d5eb3e80fdbac1a6b0faf83f73e1
Certificate serial: 019C1F30656F3B2F453444E0A2E8443A7149
Authority key identifier: 53:43:8E:CB:75:E1:D5:EB:3E:80:FD:BA:C1:A6:B0:FA:F8:3F:73:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U0OOy3Xh1es-gP26waaw-vg_c-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/a75da3-d81e-4bbf-8cc6-49868d7ce9a1/1/WosD3hO75NeEA5i1pYu4jjBvKZk.roa
Signing time: Mon 02 Feb 2026 16:29:51 +0000
ROA not before: Mon 02 Feb 2026 16:29:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213069
IP address blocks: 91.231.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/a75da3-d81e-4bbf-8cc6-49868d7ce9a1/1/U0OOy3Xh1es-gP26waaw-vg_c-E.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/a75da3-d81e-4bbf-8cc6-49868d7ce9a1/1/U0OOy3Xh1es-gP26waaw-vg_c-E.mft
rsync://rpki.ripe.net/repository/DEFAULT/U0OOy3Xh1es-gP26waaw-vg_c-E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 10:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:1f:30:65:6f:3b:2f:45:34:44:e0:a2:e8:44:3a:71:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53438ecb75e1d5eb3e80fdbac1a6b0faf83f73e1
Validity
Not Before: Feb 2 16:29:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5a8b03de13bbe4d7840398b5a58bb88e306f2999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:1e:ea:e9:41:a0:56:2a:29:7c:37:ab:b8:a5:
8d:e5:ac:2e:86:7a:9c:8f:47:a0:33:16:4b:1b:56:
34:09:0b:8a:d5:4d:a4:c7:a4:a3:95:48:2d:76:84:
14:4f:6a:45:d8:a5:3c:2b:8a:70:85:31:99:45:f5:
ff:92:2c:3a:bf:1b:06:46:46:cb:da:90:e9:10:0c:
b4:c6:aa:e8:f9:cb:2f:56:d6:44:1f:93:97:97:1c:
98:49:65:78:48:3e:c7:d7:31:4b:76:8a:cb:f6:07:
0b:f7:13:f6:9f:30:63:11:37:01:7c:f1:d3:97:12:
71:fc:83:41:4c:5a:b2:82:b4:98:22:a9:8e:6e:30:
3e:26:67:84:ec:dd:d8:ac:c2:1c:48:92:1b:ec:65:
23:bf:15:67:6f:b1:46:ea:ae:bf:f6:01:f5:2d:6a:
39:71:87:70:bd:0d:12:83:ee:85:b4:b8:09:5a:70:
2b:c7:ef:2e:6f:ca:5c:94:16:36:85:8a:6b:27:52:
89:60:9c:18:38:88:5b:8b:44:3b:c9:f2:82:a1:4d:
0c:dc:4c:96:01:42:ca:0e:b4:33:0f:16:16:38:19:
cd:30:95:1e:a7:05:b1:15:ce:61:7e:a9:a1:65:66:
34:db:17:99:84:84:9b:49:e1:58:a3:f3:54:e9:a5:
6c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:8B:03:DE:13:BB:E4:D7:84:03:98:B5:A5:8B:B8:8E:30:6F:29:99
X509v3 Authority Key Identifier:
keyid:53:43:8E:CB:75:E1:D5:EB:3E:80:FD:BA:C1:A6:B0:FA:F8:3F:73:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0OOy3Xh1es-gP26waaw-vg_c-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a75da3-d81e-4bbf-8cc6-49868d7ce9a1/1/WosD3hO75NeEA5i1pYu4jjBvKZk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a75da3-d81e-4bbf-8cc6-49868d7ce9a1/1/U0OOy3Xh1es-gP26waaw-vg_c-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.144.0/24
Signature Algorithm: sha256WithRSAEncryption
78:9d:56:7c:59:26:05:5e:4b:dd:8b:14:a1:67:af:5f:31:f7:
81:90:d3:fc:ed:2a:8d:b7:57:9c:b3:7d:19:4a:2b:7d:1a:4e:
53:c4:b9:28:51:b2:04:df:ce:73:aa:46:ef:52:8c:6a:a1:28:
d5:60:19:d2:a8:7e:bf:36:f0:fa:63:5c:05:51:2f:47:b0:52:
82:06:cd:ec:3e:c9:21:75:70:b6:51:99:67:e2:0c:7f:72:70:
10:15:83:ab:a2:f6:90:37:7b:51:aa:8b:29:19:9e:73:c5:4d:
d5:1e:7b:93:0b:65:5d:63:40:a3:3a:61:4d:0b:4f:f7:e0:e7:
dc:45:dc:ab:60:98:72:cf:76:c2:28:16:49:22:64:c1:64:8a:
7a:47:54:b6:a9:3f:96:81:59:10:b3:28:1f:7c:32:e5:87:04:
f6:15:ef:89:c4:ed:36:bc:7e:7b:78:e8:92:cd:7b:ca:16:60:
71:d6:75:de:d0:d9:81:b8:f6:77:77:e3:4f:7d:e6:08:18:c1:
1c:4c:95:30:e4:7c:37:93:ba:1a:d6:4c:fb:db:84:b3:2e:e2:
de:08:68:d1:35:2b:3c:b9:e6:46:71:65:f2:1d:54:92:82:60:
77:e0:da:c7:11:12:2d:a8:54:86:36:32:39:6a:9c:35:1e:5a:
af:cc:f7:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:39:55 2026 by rpki-client