This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/XWNOS1F1apSFln8lh8Msd5YKTd4.roa
File: XWNOS1F1apSFln8lh8Msd5YKTd4.roa (raw, json)
Hash identifier: OvuPGjMv+zBsjGEY9dUfxrPrbBlbWPiCni7u0TxxErQ=
Subject key identifier: 5D:63:4E:4B:51:75:6A:94:85:96:7F:25:87:C3:2C:77:96:0A:4D:DE
Certificate issuer: /CN=eb7bbbfef59509e7263986f780589ab1e7998423
Certificate serial: 019B783452DB5B48A6A0CC5D6BD2C8C71116
Authority key identifier: EB:7B:BB:FE:F5:95:09:E7:26:39:86:F7:80:58:9A:B1:E7:99:84:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/63u7_vWVCecmOYb3gFiaseeZhCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/XWNOS1F1apSFln8lh8Msd5YKTd4.roa
Signing time: Thu 01 Jan 2026 06:17:33 +0000
ROA not before: Thu 01 Jan 2026 06:17:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212887
IP address blocks: 213.192.113.0/24 maxlen: 24
213.192.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/63u7_vWVCecmOYb3gFiaseeZhCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/63u7_vWVCecmOYb3gFiaseeZhCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/63u7_vWVCecmOYb3gFiaseeZhCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:34:52:db:5b:48:a6:a0:cc:5d:6b:d2:c8:c7:11:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb7bbbfef59509e7263986f780589ab1e7998423
Validity
Not Before: Jan 1 06:17:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5d634e4b51756a9485967f2587c32c77960a4dde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:a7:86:da:5f:0b:b6:a1:16:e8:a9:47:5b:4d:
86:67:d9:41:dc:e9:d5:f1:2e:41:ad:70:70:ec:36:
cf:95:56:40:a1:cb:07:01:e3:2d:db:2c:26:c2:9b:
8d:1c:ff:a3:52:41:67:18:4a:66:2f:09:70:77:57:
0a:6c:19:ac:7a:87:d8:72:28:77:2e:28:28:45:23:
03:f1:8b:be:73:ea:54:74:2a:44:1a:4d:97:42:b3:
f4:ec:47:ea:f9:d9:ed:9c:12:bc:82:ed:20:25:3d:
35:34:33:9b:19:57:76:1a:c9:ed:86:e2:d0:a6:56:
dd:02:87:40:e2:f3:50:33:ea:ff:a5:93:b9:70:41:
af:11:dd:83:48:72:64:67:46:b9:74:c0:43:57:fa:
33:b2:3d:3a:e1:01:98:b7:29:2c:ef:2b:69:6a:e5:
07:90:8a:26:08:09:34:68:cf:8a:8a:3d:41:1b:51:
cf:8b:08:5c:55:b6:26:ab:f4:c6:91:cb:4f:a0:3c:
bb:20:0e:85:d6:2e:1b:c4:4b:e6:48:a4:ed:4e:93:
40:47:92:1a:4d:34:b7:2c:e2:d2:74:b8:de:88:35:
fb:86:ce:b8:9a:d1:04:de:0e:a1:ce:bc:3c:e6:46:
91:29:9f:47:5a:e1:69:6d:5a:a7:b6:0e:5f:19:cb:
52:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:63:4E:4B:51:75:6A:94:85:96:7F:25:87:C3:2C:77:96:0A:4D:DE
X509v3 Authority Key Identifier:
keyid:EB:7B:BB:FE:F5:95:09:E7:26:39:86:F7:80:58:9A:B1:E7:99:84:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63u7_vWVCecmOYb3gFiaseeZhCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/XWNOS1F1apSFln8lh8Msd5YKTd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/63u7_vWVCecmOYb3gFiaseeZhCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.192.113.0-213.192.114.255
Signature Algorithm: sha256WithRSAEncryption
10:c0:a0:e0:b9:e5:b7:f0:95:2e:d0:0f:2f:cc:4e:a2:de:4e:
78:1b:0f:41:fc:c4:a8:b3:da:14:ff:fe:be:b1:f2:ff:3b:1b:
7d:27:4a:07:16:b5:26:cc:5c:f1:8b:f7:73:25:46:07:66:d3:
82:9c:57:9a:00:01:c7:d2:a8:0c:40:37:fc:69:24:6e:e7:3a:
4e:ec:74:04:2e:cc:07:f9:1f:93:86:14:52:84:25:5a:20:11:
0d:02:da:f6:2a:18:57:41:12:ba:e4:ef:ef:e9:21:51:72:e3:
e0:57:e4:11:5a:08:2e:a7:61:66:ed:b3:bd:20:a5:ad:99:47:
03:75:5a:36:2a:56:63:00:1c:27:b5:20:e0:c8:66:be:3e:a5:
3c:27:d4:9a:a3:cf:ae:87:76:1f:e3:e9:fa:34:6d:13:01:e8:
c8:2f:c1:63:ec:94:a5:6b:25:36:26:fb:64:dd:23:9e:f1:38:
a3:20:c1:ed:7b:aa:95:72:3c:59:6c:87:c6:1b:e5:51:47:6e:
47:9c:0f:b6:aa:ab:1e:5d:43:62:a8:ca:73:14:8e:f3:46:9d:
c9:e5:74:71:31:1c:f1:4e:cf:a6:88:83:ac:02:61:83:fc:8d:
89:68:a4:df:04:db:17:40:ae:62:6b:39:71:fc:31:4e:69:3d:
11:d0:ea:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:02:54 2026 by rpki-client