This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/67f42e-7062-4112-ad42-9349f10a2649/1/0XyD3kL48XCTZOFS2DWDU3SDs2o.roa
File: 0XyD3kL48XCTZOFS2DWDU3SDs2o.roa (raw, json)
Hash identifier: PYysftID9ZjCmfzgw+mzCgQIWnwkT+wlGesLRfGbnvo=
Subject key identifier: D1:7C:83:DE:42:F8:F1:70:93:64:E1:52:D8:35:83:53:74:83:B3:6A
Certificate issuer: /CN=728c2bfd6bb503a01d018602bda152d734ed56f0
Certificate serial: 019B7A5B911FFDD2697EB574D717253F8028
Authority key identifier: 72:8C:2B:FD:6B:B5:03:A0:1D:01:86:02:BD:A1:52:D7:34:ED:56:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cowr_Wu1A6AdAYYCvaFS1zTtVvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/67f42e-7062-4112-ad42-9349f10a2649/1/0XyD3kL48XCTZOFS2DWDU3SDs2o.roa
Signing time: Thu 01 Jan 2026 16:19:39 +0000
ROA not before: Thu 01 Jan 2026 16:19:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206521
IP address blocks: 5.182.189.0/24 maxlen: 24
185.183.200.0/24 maxlen: 24
185.183.201.0/24 maxlen: 24
185.183.202.0/24 maxlen: 24
185.183.203.0/24 maxlen: 24
2a0b:1b80::/32 maxlen: 32
2a0b:1b81::/32 maxlen: 32
2a0b:1b82::/32 maxlen: 32
2a0b:1b83::/32 maxlen: 32
2a0b:1b84::/32 maxlen: 32
2a0b:1b85::/32 maxlen: 32
2a0b:1b86::/32 maxlen: 32
2a0b:1b87::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/67f42e-7062-4112-ad42-9349f10a2649/1/cowr_Wu1A6AdAYYCvaFS1zTtVvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/67f42e-7062-4112-ad42-9349f10a2649/1/cowr_Wu1A6AdAYYCvaFS1zTtVvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/cowr_Wu1A6AdAYYCvaFS1zTtVvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:5b:91:1f:fd:d2:69:7e:b5:74:d7:17:25:3f:80:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=728c2bfd6bb503a01d018602bda152d734ed56f0
Validity
Not Before: Jan 1 16:19:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d17c83de42f8f1709364e152d83583537483b36a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b3:d8:7b:72:ee:ee:74:c8:8d:be:d4:b4:55:
b1:8b:a9:db:66:93:2a:1b:e1:13:11:3a:cc:7d:b9:
e7:92:53:2c:5e:5d:d1:46:6c:e6:1b:48:64:e6:32:
60:dc:e3:c4:bb:de:2b:15:51:f1:20:70:74:36:7b:
27:62:76:b6:14:52:e4:29:8f:06:1c:51:1a:38:0c:
c3:30:8f:d4:9f:db:6c:25:27:90:3f:ab:22:97:f8:
77:28:fc:5c:6f:69:e2:28:41:48:e4:93:76:e8:5c:
4f:82:56:4a:11:6d:65:02:46:de:eb:20:90:ab:8c:
f9:80:01:21:c4:26:cd:66:5b:91:0f:0e:0c:c8:78:
cc:ee:4e:4d:8e:a0:04:12:89:ff:28:c1:cf:7f:01:
5f:6d:f5:fe:20:c6:23:ce:a2:e0:a5:e9:52:9c:90:
0d:34:46:10:0f:04:3b:6d:69:08:41:e1:3e:22:16:
8c:96:1e:90:55:db:34:7f:04:ba:c1:70:ef:5d:09:
e3:0d:39:d1:83:eb:dc:22:8a:df:1e:f1:5d:9c:ab:
ac:03:bc:2c:9d:1f:13:e8:66:c9:8b:9d:f4:71:72:
37:07:aa:09:db:fd:d1:b5:e3:ab:2a:c9:43:5e:df:
c3:f6:db:65:84:b8:9b:85:7a:c0:66:61:3e:5c:d5:
cc:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:7C:83:DE:42:F8:F1:70:93:64:E1:52:D8:35:83:53:74:83:B3:6A
X509v3 Authority Key Identifier:
keyid:72:8C:2B:FD:6B:B5:03:A0:1D:01:86:02:BD:A1:52:D7:34:ED:56:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cowr_Wu1A6AdAYYCvaFS1zTtVvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/67f42e-7062-4112-ad42-9349f10a2649/1/0XyD3kL48XCTZOFS2DWDU3SDs2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/67f42e-7062-4112-ad42-9349f10a2649/1/cowr_Wu1A6AdAYYCvaFS1zTtVvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.189.0/24
185.183.200.0/22
IPv6:
2a0b:1b80::/29
Signature Algorithm: sha256WithRSAEncryption
da:67:eb:c6:d6:00:65:bf:ec:ef:f6:0b:f9:1d:1f:74:2d:a5:
c9:ae:b7:8c:06:79:d5:4d:a5:ef:aa:ad:ae:75:10:24:63:f0:
e6:e1:e9:0f:0f:21:a8:a0:61:01:6c:b4:30:9c:89:61:b2:fc:
74:9d:8a:0c:a1:e6:f8:23:ca:84:a8:a4:55:10:2c:c2:2e:9a:
6e:78:bc:2b:f3:33:e3:6e:00:bd:6d:7d:44:1d:6a:8d:52:72:
34:a6:7d:c2:fd:d6:6a:f2:f9:06:a2:d3:07:36:21:61:25:7b:
27:51:df:73:11:2f:09:1b:be:4e:9c:54:0a:ef:0d:79:2b:ad:
94:ca:7e:41:c2:d1:9f:2a:f1:41:72:8a:65:59:56:7a:9c:d2:
87:39:f8:f2:fc:2e:d1:1b:7d:7a:ff:4e:f9:bd:c0:fb:7b:ec:
15:ab:3c:40:b8:f5:90:82:ca:29:33:cd:76:76:ff:66:2d:da:
fe:4b:44:13:8f:3a:97:c0:d2:7f:66:a4:42:20:8b:c1:a2:5b:
1e:9c:6b:58:c8:5d:d0:37:95:12:14:ac:5f:5a:09:f7:c1:41:
ae:fc:1a:ab:22:e2:fe:ac:2e:07:fe:7b:a5:79:e2:7e:a5:85:
22:93:e9:02:9a:46:2c:88:a2:8a:0d:9c:09:eb:15:d8:57:82:
8d:f5:4b:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:15:08 2026 by rpki-client