This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/227b53-473d-46af-8201-98e879ea3726/1/5WohgI8tokdWePAAZwHEQvswWYU.roa
File: 5WohgI8tokdWePAAZwHEQvswWYU.roa (raw, json)
Hash identifier: eFTYXxWMtPfD9bURTpn9aVW+rjoqm6VU8HSnGT9lP2I=
Subject key identifier: E5:6A:21:80:8F:2D:A2:47:56:78:F0:00:67:01:C4:42:FB:30:59:85
Certificate issuer: /CN=8db2b44f23dcca9c0604bed690f28a6ad9017999
Certificate serial: 019A779EF5B1EE2F1F0706E5D8E81FC25DDC
Authority key identifier: 8D:B2:B4:4F:23:DC:CA:9C:06:04:BE:D6:90:F2:8A:6A:D9:01:79:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jbK0TyPcypwGBL7WkPKKatkBeZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/227b53-473d-46af-8201-98e879ea3726/1/5WohgI8tokdWePAAZwHEQvswWYU.roa
Signing time: Wed 12 Nov 2025 10:31:37 +0000
ROA not before: Wed 12 Nov 2025 10:31:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8473
IP address blocks: 2001:678:1140::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/227b53-473d-46af-8201-98e879ea3726/1/jbK0TyPcypwGBL7WkPKKatkBeZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/227b53-473d-46af-8201-98e879ea3726/1/jbK0TyPcypwGBL7WkPKKatkBeZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jbK0TyPcypwGBL7WkPKKatkBeZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:77:9e:f5:b1:ee:2f:1f:07:06:e5:d8:e8:1f:c2:5d:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8db2b44f23dcca9c0604bed690f28a6ad9017999
Validity
Not Before: Nov 12 10:31:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e56a21808f2da2475678f0006701c442fb305985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:94:e8:92:46:2c:02:c1:15:68:95:fc:d3:42:
6a:a8:4a:60:11:6a:0c:84:bc:d2:16:44:95:5e:c1:
4d:61:07:3b:3b:10:4f:e1:c2:04:c5:b8:0a:ab:14:
6c:21:44:cb:74:f7:c5:37:3c:b2:b2:e5:40:52:d7:
db:d3:0f:3e:2c:4f:af:b7:16:dd:e9:4f:20:1d:bd:
e0:a0:ab:fd:9e:86:91:0d:a4:86:45:aa:46:59:7b:
39:5f:b6:97:ec:15:f5:46:99:f6:06:e0:16:c5:08:
17:fb:61:ff:e9:54:ec:cb:d8:a0:16:64:ca:8a:2d:
c5:1a:b8:eb:46:cc:e0:af:11:0e:00:78:70:fb:5c:
72:e0:b7:f2:3b:39:40:f2:d4:cd:a4:07:4b:f2:82:
b2:07:16:3c:88:86:14:e1:6c:4f:e5:84:23:ea:9a:
c0:ad:05:1b:7e:ea:83:3b:28:45:a4:68:e0:39:dd:
a9:73:cb:6a:ac:50:8c:98:83:f3:7a:52:ec:aa:c2:
09:7a:4f:33:09:c6:3a:2e:80:f6:2f:eb:29:9c:35:
89:0f:36:a5:c3:3b:56:01:16:d6:0f:e8:a9:8c:a9:
f7:d7:7a:29:b1:40:5f:8f:08:c3:76:a4:78:60:83:
7f:8e:91:63:39:a1:96:f1:b7:ce:64:c4:44:29:0d:
a9:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:6A:21:80:8F:2D:A2:47:56:78:F0:00:67:01:C4:42:FB:30:59:85
X509v3 Authority Key Identifier:
keyid:8D:B2:B4:4F:23:DC:CA:9C:06:04:BE:D6:90:F2:8A:6A:D9:01:79:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jbK0TyPcypwGBL7WkPKKatkBeZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/227b53-473d-46af-8201-98e879ea3726/1/5WohgI8tokdWePAAZwHEQvswWYU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/227b53-473d-46af-8201-98e879ea3726/1/jbK0TyPcypwGBL7WkPKKatkBeZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:1140::/48
Signature Algorithm: sha256WithRSAEncryption
02:54:ba:b4:6e:d7:bf:f7:ee:61:14:8b:a4:3b:73:bd:f2:e8:
12:3d:f5:50:e9:78:10:ea:c1:b7:66:79:2f:60:04:f7:53:5d:
3e:b6:3e:79:e2:db:6f:b6:5e:e1:bb:41:6c:f5:f6:50:5a:be:
3b:18:4f:d8:2d:94:83:4b:03:14:7a:aa:08:9b:e4:db:1e:5a:
18:2f:d9:b6:47:89:45:a9:e8:14:08:53:56:24:21:16:f1:21:
8d:89:83:3a:21:c8:40:82:87:c0:0b:83:75:f4:ed:8e:ff:12:
ac:30:6e:60:ec:42:7e:c2:1d:c6:0b:8c:63:5c:0e:00:e1:74:
d0:bc:dc:05:73:c3:1b:9f:0d:f8:5a:f2:e4:bb:11:ce:50:7d:
ea:12:68:38:3c:ef:4d:c8:ae:77:32:0e:02:6a:8f:0f:68:ca:
d6:5c:4e:e6:72:2d:56:e3:96:ec:67:f1:1f:0a:5a:80:a9:22:
cb:79:47:14:2f:85:fa:28:81:eb:bf:54:89:90:cc:e0:18:7d:
ba:f1:cf:e4:e3:3c:52:3b:5e:7c:47:3f:1e:9a:9f:fb:2e:93:
f0:18:b4:8f:ec:bf:26:4e:8a:50:0c:4e:6b:60:bb:7a:82:51:
54:d4:d7:bd:5f:1d:dc:65:2a:2f:1c:64:b1:9c:df:39:d1:69:
85:10:d9:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:59:42 2025 by rpki-client