This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/wt29L0kw6F2mUURKehVNYRWY7ww.roa
File: wt29L0kw6F2mUURKehVNYRWY7ww.roa (raw, json)
Hash identifier: uytmnZgbcHOqU6GDB/PFJ6/sYh8eKtXoeEIef5E9CfM=
Subject key identifier: C2:DD:BD:2F:49:30:E8:5D:A6:51:44:4A:7A:15:4D:61:15:98:EF:0C
Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Certificate serial: 019B7EA6EE6BB99568DACA0786814F36695F
Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/wt29L0kw6F2mUURKehVNYRWY7ww.roa
Signing time: Fri 02 Jan 2026 12:20:27 +0000
ROA not before: Fri 02 Jan 2026 12:20:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57207
IP address blocks: 95.140.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Jan 2026 23:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:a6:ee:6b:b9:95:68:da:ca:07:86:81:4f:36:69:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Validity
Not Before: Jan 2 12:20:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c2ddbd2f4930e85da651444a7a154d611598ef0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:1a:4b:be:7a:d5:0d:4d:03:3e:00:cc:9f:3b:
5d:90:03:90:6f:8e:b4:ad:ae:4a:47:22:7c:c7:c7:
74:83:98:3c:14:51:02:f3:5f:f2:11:b6:24:cd:ab:
94:05:40:86:19:0c:e5:fb:b6:b2:10:e6:67:75:9b:
bf:b3:a2:6b:19:4e:b1:25:7f:1e:fc:7e:90:be:be:
35:e8:28:e1:78:5c:fb:4b:f5:38:f3:f3:d9:d3:82:
6e:51:32:dc:e3:cb:3b:34:28:d9:74:b7:7c:17:da:
05:b9:f4:53:02:9e:a5:ec:03:1b:6c:f7:6a:be:60:
cd:8e:43:60:62:fc:fd:47:6f:b8:4f:d8:8d:ba:bb:
fb:0e:35:59:31:ce:01:69:36:6d:f1:f7:14:ed:02:
39:df:e6:94:fa:b7:87:3b:ed:95:f9:ff:51:01:d1:
57:14:76:61:fe:a4:e3:7d:0f:f3:89:fa:47:a2:24:
ae:11:70:47:a1:ef:5f:68:8e:ab:e1:8a:db:09:fb:
21:8f:9b:aa:84:ce:59:0e:17:3a:ab:18:49:a7:ac:
38:d6:51:56:fc:e1:8f:32:01:62:15:e9:ee:de:74:
a6:2a:0a:22:95:e6:13:9a:fc:fd:c0:d7:16:bd:9e:
58:8c:c0:d6:ac:62:b9:d8:42:19:3a:34:6c:db:2b:
0d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:DD:BD:2F:49:30:E8:5D:A6:51:44:4A:7A:15:4D:61:15:98:EF:0C
X509v3 Authority Key Identifier:
keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/wt29L0kw6F2mUURKehVNYRWY7ww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.140.122.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:4d:3e:15:ec:eb:e7:88:1b:57:6d:30:d2:01:86:f1:8b:b8:
e3:8d:54:9f:77:e8:f9:f0:3f:35:b4:76:c0:30:a4:31:42:30:
d8:0f:fa:89:f7:a3:a7:2c:d6:3a:f8:e1:64:d6:2f:2e:eb:c1:
27:a3:3d:42:53:d5:42:d2:48:ef:fd:3d:b6:d1:e3:d9:1b:b7:
d8:78:fa:0e:68:de:7e:c3:6d:1b:43:0f:b4:03:76:01:98:f0:
88:4b:dd:9e:e5:f0:f6:84:7f:38:fb:53:69:73:fa:86:af:6e:
50:9d:d7:7f:ad:8e:31:62:37:6e:9e:b9:9f:ff:54:29:c8:d4:
ed:8f:23:04:51:20:83:44:f6:f4:1b:e8:22:0a:e8:1d:dd:14:
35:a3:74:d4:67:29:ab:5d:18:62:e6:cf:45:2e:12:8f:e3:a8:
89:a1:f3:61:70:25:e5:2b:5a:24:3c:7e:25:a2:59:4c:64:48:
6d:a8:6c:ee:92:30:77:d2:67:5c:c3:0e:41:60:c5:68:5a:2e:
74:f7:04:79:1c:ca:54:6c:50:6a:b6:14:e7:ca:df:6f:d1:f3:
7b:60:b1:ad:50:44:fc:5a:16:d4:cf:07:2c:41:6b:31:6d:09:
7c:e4:42:c7:57:88:24:0d:42:e9:33:73:a0:c2:0f:0b:a8:b1:
e7:bf:4e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:52:07 2026 by rpki-client