This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/WScdMd0aWt_OtbcvgTIGER8O-qU.roa
File: WScdMd0aWt_OtbcvgTIGER8O-qU.roa (raw, json)
Hash identifier: 8o7qzj0f2oKlSlfetwvAe5E/ZOiSOP7vaR/Yzo4OTdo=
Subject key identifier: 59:27:1D:31:DD:1A:5A:DF:CE:B5:B7:2F:81:32:06:11:1F:0E:FA:A5
Certificate issuer: /CN=0e298900355fdf4254c20831f2d7ee3bec429bdb
Certificate serial: 019B797DFBD973FDCA965FFF608482C3F576
Authority key identifier: 0E:29:89:00:35:5F:DF:42:54:C2:08:31:F2:D7:EE:3B:EC:42:9B:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DimJADVf30JUwggx8tfuO-xCm9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/WScdMd0aWt_OtbcvgTIGER8O-qU.roa
Signing time: Thu 01 Jan 2026 12:17:38 +0000
ROA not before: Thu 01 Jan 2026 12:17:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205193
IP address blocks: 185.167.24.0/22 maxlen: 22
185.202.144.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DimJADVf30JUwggx8tfuO-xCm9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 03:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:7d:fb:d9:73:fd:ca:96:5f:ff:60:84:82:c3:f5:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e298900355fdf4254c20831f2d7ee3bec429bdb
Validity
Not Before: Jan 1 12:17:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=59271d31dd1a5adfceb5b72f813206111f0efaa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:89:5d:13:1d:27:94:42:8f:28:dd:65:7d:63:
28:5e:17:18:8f:9a:54:a8:c2:25:ef:67:35:53:d4:
9f:b4:db:53:23:20:c4:7e:eb:98:64:cd:12:f1:37:
6f:53:76:e3:f0:93:a3:64:86:e0:51:1d:ac:37:45:
c8:c3:e4:cd:44:7e:75:50:81:70:cb:1a:21:78:1c:
7a:65:4d:17:e4:2c:2c:00:c0:e2:1b:f0:58:04:3c:
27:7b:77:bf:b2:e9:bd:ba:da:ad:20:8b:be:dc:c5:
46:7d:cb:e6:02:28:20:bf:53:86:59:a9:a8:7b:f8:
c3:b5:81:a1:68:5f:61:40:fc:bd:5d:12:a5:37:35:
21:98:f5:32:63:9f:a9:5a:21:11:9c:2c:85:67:c3:
7a:91:09:e5:db:03:15:b2:19:1e:45:01:30:8b:d5:
42:08:cd:cd:20:19:23:ab:50:a2:29:ba:88:08:59:
ca:ca:43:d7:ca:0b:7c:fb:87:d5:ed:f5:80:84:5f:
07:dc:f6:57:a9:b8:70:97:b0:ab:3b:5d:6f:c4:6d:
71:c8:db:0d:32:1f:89:71:62:46:5d:a1:25:f4:d7:
87:f5:a4:ba:90:d5:cf:2d:23:27:d0:dc:38:11:e2:
45:e5:09:41:de:84:85:1e:ef:9d:80:8c:bc:98:7a:
65:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:27:1D:31:DD:1A:5A:DF:CE:B5:B7:2F:81:32:06:11:1F:0E:FA:A5
X509v3 Authority Key Identifier:
keyid:0E:29:89:00:35:5F:DF:42:54:C2:08:31:F2:D7:EE:3B:EC:42:9B:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DimJADVf30JUwggx8tfuO-xCm9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/WScdMd0aWt_OtbcvgTIGER8O-qU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.167.24.0/22
185.202.144.0/22
Signature Algorithm: sha256WithRSAEncryption
66:7e:e5:6f:03:c9:1e:9b:7a:4e:a0:04:14:ca:f5:d5:cc:fa:
07:d0:85:22:59:04:24:cf:70:af:b7:0c:5d:29:2d:50:e8:32:
09:39:a8:05:97:af:d0:82:3d:24:e3:96:88:06:26:c4:e2:d4:
f1:b1:fb:d8:31:23:67:0a:02:36:03:3d:1f:64:db:dd:b0:11:
c7:9a:af:f6:be:9a:28:7a:77:ca:45:79:34:16:e0:ba:e9:cd:
4e:9a:90:1e:13:75:73:83:0b:ca:12:f8:62:d9:1c:99:e9:aa:
af:cb:dd:91:8b:9c:2b:68:6b:f7:ab:2b:94:58:c9:b6:b5:8a:
86:36:ca:49:63:32:62:be:bc:e9:12:d7:26:dd:23:58:c0:71:
c4:cf:2d:db:33:bf:bd:18:84:68:d5:36:29:ee:52:88:10:5d:
11:d9:89:12:06:be:aa:77:06:63:04:4d:42:58:ea:07:85:0c:
85:5e:94:62:e3:b7:ab:f4:27:6b:2a:5a:81:d5:53:89:0e:9d:
b0:4c:5b:71:e0:c6:42:46:bc:97:27:6d:14:64:a5:a6:a6:9d:
42:cf:ef:44:8d:2d:99:c4:bb:2d:46:e6:96:84:bf:fc:38:fb:
f4:ea:10:90:d1:ad:7c:8c:2b:85:1b:89:15:9d:bd:0b:dd:55:
19:67:79:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:58:06 2026 by rpki-client