This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/Wwk325SN1Dr-hmbxjFq8uNHcOyo.roa
File: Wwk325SN1Dr-hmbxjFq8uNHcOyo.roa (raw, json)
Hash identifier: 7U3vqi/fr/x9T5oXLoF5tZC73nYigGo0Lh9WQ9j33Bo=
Subject key identifier: 5B:09:37:DB:94:8D:D4:3A:FE:86:66:F1:8C:5A:BC:B8:D1:DC:3B:2A
Certificate issuer: /CN=f20bf46303ff54a505f533c554251923e41f5926
Certificate serial: 019B7DCB00134876B8613F69C799551FF7A2
Authority key identifier: F2:0B:F4:63:03:FF:54:A5:05:F5:33:C5:54:25:19:23:E4:1F:59:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8gv0YwP_VKUF9TPFVCUZI-QfWSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/Wwk325SN1Dr-hmbxjFq8uNHcOyo.roa
Signing time: Fri 02 Jan 2026 08:20:14 +0000
ROA not before: Fri 02 Jan 2026 08:20:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62343
IP address blocks: 94.139.36.0/23 maxlen: 24
2a13:ac40::/29 maxlen: 56
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8gv0YwP_VKUF9TPFVCUZI-QfWSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:cb:00:13:48:76:b8:61:3f:69:c7:99:55:1f:f7:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f20bf46303ff54a505f533c554251923e41f5926
Validity
Not Before: Jan 2 08:20:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5b0937db948dd43afe8666f18c5abcb8d1dc3b2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8e:64:f5:28:90:6a:e6:8c:60:0a:82:76:42:
e8:d7:e4:2b:64:53:86:b0:a5:51:eb:29:f4:8f:55:
8b:65:50:74:50:4d:d2:54:c0:bc:19:eb:0e:3f:1a:
6d:83:d6:23:1d:4b:dc:9d:08:17:95:c1:d5:59:f4:
40:b9:2a:cc:86:af:82:1f:3b:f2:42:03:87:fa:df:
37:e5:3d:56:26:6f:65:b0:94:e1:5f:86:c0:5e:e7:
60:97:6a:c9:3f:00:37:55:bd:9c:2b:d6:6c:3e:cf:
01:39:cf:33:bd:06:7c:17:70:fd:5f:17:1c:53:c0:
db:7c:d7:05:ff:dd:24:f8:2a:70:ec:a3:e6:db:42:
da:ca:b6:10:7e:35:f1:01:cf:8a:78:80:5d:7b:88:
a8:f4:d1:02:c3:bb:3c:c0:25:8a:9a:81:bf:bc:40:
fd:07:fe:5d:f2:4c:49:f8:02:b9:13:4c:44:51:f4:
6c:fd:8f:d5:ea:8e:a2:f2:38:cf:a2:dd:c0:a0:31:
0a:a2:2a:d5:f3:41:14:e2:27:4d:1f:da:a1:cb:32:
56:6a:87:96:f2:42:d8:d6:0e:be:28:68:16:a5:17:
c3:34:45:f3:36:a3:ea:18:c2:67:b3:de:34:05:70:
d4:6d:49:6d:8b:8c:77:8a:bf:f8:5b:0d:7e:6d:d2:
f5:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:09:37:DB:94:8D:D4:3A:FE:86:66:F1:8C:5A:BC:B8:D1:DC:3B:2A
X509v3 Authority Key Identifier:
keyid:F2:0B:F4:63:03:FF:54:A5:05:F5:33:C5:54:25:19:23:E4:1F:59:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8gv0YwP_VKUF9TPFVCUZI-QfWSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/Wwk325SN1Dr-hmbxjFq8uNHcOyo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.139.36.0/23
IPv6:
2a13:ac40::/29
Signature Algorithm: sha256WithRSAEncryption
70:0a:b7:66:7f:1c:7b:80:6b:a0:37:92:9b:d5:07:18:20:6e:
7c:2a:69:08:2b:4f:d7:35:48:1a:55:e9:16:8d:86:42:19:cf:
b2:89:a7:31:bd:79:94:e4:25:49:fd:44:a7:ff:9f:19:5e:76:
20:aa:20:4a:10:66:51:e7:2f:3b:c4:dc:bd:5e:0d:6c:8e:dc:
5b:d2:cb:5d:70:94:37:d8:87:25:3a:3e:f0:76:53:e6:3f:01:
3b:71:44:56:6a:31:f0:3c:d5:c4:1e:80:c9:4b:23:7b:b7:c2:
9c:09:15:f7:80:5a:a7:93:65:1a:8c:b0:a6:4d:94:50:58:48:
09:8c:b5:30:49:64:87:a6:61:02:d6:69:ae:e6:ce:64:20:e5:
c8:1c:d9:ae:a1:85:86:00:80:9f:0c:34:ac:53:e7:4e:18:b9:
27:6b:4e:ec:6e:ae:85:45:03:32:04:f0:e3:57:10:60:5a:6d:
76:82:d7:2f:c2:14:79:91:cd:73:62:cd:3b:e8:e4:ec:28:7a:
0f:12:f2:59:c7:03:b8:d8:53:16:13:44:0b:ac:25:b3:04:22:
32:32:5d:f4:dc:52:25:2f:75:07:09:3d:a8:d3:d4:46:3f:94:
56:b2:b5:e2:93:ec:42:b8:0d:08:05:9b:90:b9:78:04:d9:a4:
6a:b7:3d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:37:16 2026 by rpki-client