This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/w-By4YicrBafnG_nw52slsPB7Mo.roa
File: w-By4YicrBafnG_nw52slsPB7Mo.roa (raw, json)
Hash identifier: EbrbjE7k8b3TDf5vDoluKgnOO0qKqQeCgXWBufBzO7A=
Subject key identifier: C3:E0:72:E1:88:9C:AC:16:9F:9C:6F:E7:C3:9D:AC:96:C3:C1:EC:CA
Certificate issuer: /CN=d251392cd7e6e40a45c1b8a4479880eef960f330
Certificate serial: 019B77C6E03830EB300BE376B67B2ABF6F3D
Authority key identifier: D2:51:39:2C:D7:E6:E4:0A:45:C1:B8:A4:47:98:80:EE:F9:60:F3:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0lE5LNfm5ApFwbikR5iA7vlg8zA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/w-By4YicrBafnG_nw52slsPB7Mo.roa
Signing time: Thu 01 Jan 2026 04:18:00 +0000
ROA not before: Thu 01 Jan 2026 04:18:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39389
IP address blocks: 45.131.88.0/23 maxlen: 23
45.131.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0lE5LNfm5ApFwbikR5iA7vlg8zA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c6:e0:38:30:eb:30:0b:e3:76:b6:7b:2a:bf:6f:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d251392cd7e6e40a45c1b8a4479880eef960f330
Validity
Not Before: Jan 1 04:18:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c3e072e1889cac169f9c6fe7c39dac96c3c1ecca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:0c:73:25:88:bf:dc:e2:18:db:f1:cd:ad:c3:
02:cd:51:78:12:51:5d:98:d6:8d:b7:a6:81:b3:69:
94:7e:34:0d:ff:8b:8f:31:cf:d7:c4:d4:07:6f:95:
61:fe:61:be:2c:9c:a8:9f:84:83:cc:0d:9c:05:4e:
9c:23:3d:a2:09:17:d2:f2:bd:8c:7e:e7:ed:fc:40:
2f:52:f8:a2:d2:de:a4:98:28:09:77:b8:cb:bf:3b:
d2:33:6f:ee:12:b8:38:a1:76:d6:c4:d4:3a:1e:42:
ac:df:51:6b:91:5e:1c:f4:19:d8:3c:a1:41:5a:c2:
20:57:70:20:7c:a4:a1:b5:c9:03:26:75:38:13:ce:
3b:85:fd:2e:5a:b7:1f:cd:d4:46:7a:13:bc:9c:c2:
9a:cb:91:69:4c:52:47:12:3d:1b:f4:34:ab:8f:ca:
69:4c:7f:76:00:ef:95:c7:87:82:74:cc:3c:7d:04:
2d:e4:50:40:58:7f:8f:00:b8:18:da:30:f4:a9:68:
14:88:88:1d:dc:45:dc:c9:5f:cf:11:a3:40:47:e7:
3f:26:ff:03:5d:f7:42:00:10:f7:f9:d3:97:e6:90:
41:85:b1:d9:42:7a:a0:cd:1d:54:f3:36:46:4f:23:
ff:7e:e5:5a:48:ce:e5:22:a3:a1:32:f1:2f:3b:8d:
c2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:E0:72:E1:88:9C:AC:16:9F:9C:6F:E7:C3:9D:AC:96:C3:C1:EC:CA
X509v3 Authority Key Identifier:
keyid:D2:51:39:2C:D7:E6:E4:0A:45:C1:B8:A4:47:98:80:EE:F9:60:F3:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0lE5LNfm5ApFwbikR5iA7vlg8zA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/w-By4YicrBafnG_nw52slsPB7Mo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.88.0-45.131.90.255
Signature Algorithm: sha256WithRSAEncryption
4f:c5:00:a4:c9:78:b5:94:66:d4:9e:88:33:c5:e7:5d:e2:9a:
08:6a:c1:b4:db:c8:bc:9b:7e:3d:8a:bf:a5:93:65:c6:22:d0:
17:86:3e:81:58:ae:1d:53:d5:fd:14:70:cf:ee:bd:70:27:59:
9f:03:7b:ec:b6:ba:08:43:40:bd:d1:39:8f:ec:99:5b:67:f3:
86:a3:a0:99:c1:c8:b4:bf:5e:f2:e5:f3:ff:94:e3:9f:23:67:
4d:46:2d:5d:77:22:96:e7:e3:21:21:d9:63:3d:87:1d:eb:fb:
53:9e:b5:ef:dc:79:af:72:ab:1e:bc:b8:e5:9f:98:2e:e0:69:
22:00:79:a5:fe:31:2b:dc:f6:ac:0c:ef:60:27:c6:37:d5:55:
93:37:70:e6:97:d7:8a:a1:2c:f7:b2:dd:81:99:da:bf:e5:77:
bc:37:59:d0:11:cb:b3:75:34:1d:a5:7a:4e:0c:22:9a:ef:a2:
d8:65:f2:b5:b8:58:e2:8e:d2:fe:02:03:e0:31:da:ea:88:90:
62:3b:39:ef:e1:8d:77:4b:54:fa:81:de:b1:8b:b7:63:18:f9:
fb:f2:e5:bc:d1:52:50:ae:e6:06:c1:4e:41:54:25:b5:90:71:
cd:1d:24:61:26:b1:4b:d3:f6:73:73:b8:a0:b5:39:75:2a:81:
c5:4d:3d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:01:05 2026 by rpki-client