This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/WyfVVVbupjvPxLzRmrpKaA7AkYw.roa
File: WyfVVVbupjvPxLzRmrpKaA7AkYw.roa (raw, json)
Hash identifier: 02QZajpOlAkNu8PwY46zt4fm5XsA4QV5bfhzU3rgZmo=
Subject key identifier: 5B:27:D5:55:56:EE:A6:3B:CF:C4:BC:D1:9A:BA:4A:68:0E:C0:91:8C
Certificate issuer: /CN=1319f052bc9e7284888074390c9d0bc127606692
Certificate serial: 019B7CEE620F19C0FFB7BCC925B232DE91C8
Authority key identifier: 13:19:F0:52:BC:9E:72:84:88:80:74:39:0C:9D:0B:C1:27:60:66:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/WyfVVVbupjvPxLzRmrpKaA7AkYw.roa
Signing time: Fri 02 Jan 2026 04:19:15 +0000
ROA not before: Fri 02 Jan 2026 04:19:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1897
IP address blocks: 88.157.0.0/16 maxlen: 16
88.157.64.0/18 maxlen: 18
88.157.128.0/17 maxlen: 17
193.126.0.0/16 maxlen: 16
194.79.64.0/19 maxlen: 19
195.23.0.0/16 maxlen: 16
212.0.160.0/19 maxlen: 19
213.205.64.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 10:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:ee:62:0f:19:c0:ff:b7:bc:c9:25:b2:32:de:91:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1319f052bc9e7284888074390c9d0bc127606692
Validity
Not Before: Jan 2 04:19:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5b27d55556eea63bcfc4bcd19aba4a680ec0918c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:47:86:64:c7:36:31:43:05:e3:c3:09:85:08:
44:4c:85:ae:28:3d:2e:86:97:26:a4:01:e7:f6:45:
ac:25:56:04:eb:83:1a:42:7e:d5:7c:d2:27:75:49:
ec:31:ff:66:8d:63:4e:c4:89:a4:89:c1:1a:53:0a:
49:ef:e7:4e:af:18:9c:f7:41:d5:9d:40:6e:13:1e:
39:13:e3:cd:d1:04:19:f1:0c:08:53:9e:28:43:3a:
b6:51:f8:33:6d:c9:39:39:b5:cc:15:3a:e8:f5:79:
08:a7:a9:16:31:a3:e9:b5:52:2a:1d:c9:a7:63:c8:
bb:9e:18:ae:57:65:0a:8b:f4:15:f6:eb:67:6b:06:
5d:5e:af:7c:c9:ef:68:eb:5b:28:0e:78:14:97:6f:
1b:8b:bd:c4:fa:3b:52:10:ed:cd:0d:82:d0:75:ea:
11:2f:96:37:85:e7:b2:e9:81:97:4f:45:5b:51:0d:
46:9e:b9:49:7d:fd:42:1c:c6:61:df:0d:e4:b2:4b:
dc:45:5f:3d:3f:9d:87:bd:86:56:25:1d:13:5f:92:
ed:62:c1:19:7a:c2:e9:4b:73:10:a6:5c:16:31:d7:
5c:4d:11:90:ca:5c:02:00:ab:98:29:31:aa:a5:00:
a5:a9:85:c2:d9:ca:41:b2:85:66:ca:ca:bf:72:8b:
8d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:27:D5:55:56:EE:A6:3B:CF:C4:BC:D1:9A:BA:4A:68:0E:C0:91:8C
X509v3 Authority Key Identifier:
keyid:13:19:F0:52:BC:9E:72:84:88:80:74:39:0C:9D:0B:C1:27:60:66:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/WyfVVVbupjvPxLzRmrpKaA7AkYw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.157.0.0/16
193.126.0.0/16
194.79.64.0/19
195.23.0.0/16
212.0.160.0/19
213.205.64.0/19
Signature Algorithm: sha256WithRSAEncryption
62:ef:90:60:ec:5a:9f:8d:a2:67:1e:7e:67:6e:7b:b7:ff:09:
20:89:b4:33:09:40:83:6c:58:b1:04:70:99:ad:24:5b:84:21:
ad:09:b7:7a:7c:2a:e4:3b:82:8a:55:20:b0:d9:a4:e0:a4:43:
4d:83:8a:57:9f:c8:ba:fd:db:19:0e:7b:87:ba:ce:be:df:c5:
de:7e:40:ac:2f:96:47:65:bf:41:27:e9:03:89:89:80:ad:40:
6f:a3:4f:53:84:d5:1b:9d:2e:ef:8c:95:46:0e:a0:dd:7d:e1:
ee:a0:1a:d4:65:bb:a7:7d:19:a2:83:7f:0d:6c:9b:95:f0:6c:
01:4c:d7:74:4f:2a:ec:cd:33:32:e7:00:4b:42:61:68:9a:d6:
2c:cb:32:18:ae:7c:54:40:f1:80:df:3e:3a:6b:58:e4:ea:6e:
d8:50:41:69:45:39:1c:a0:aa:aa:c7:43:35:15:d9:60:9f:dc:
0c:fe:a8:42:89:a7:94:47:12:0a:a9:dc:0a:c3:7b:7e:68:db:
7e:a5:c8:e8:e4:cf:76:64:7b:14:80:b4:a9:a6:bb:60:3c:ba:
29:ec:b3:50:34:91:fa:cd:73:26:6a:12:8d:4a:8f:57:e4:84:
fa:98:4f:28:c8:0c:68:61:f7:92:5f:87:7f:99:71:b9:2d:2f:
7b:1a:72:05
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAZt87mIPGcD/t7zJJbIy3pHIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzMTlmMDUyYmM5ZTcyODQ4ODgwNzQzOTBjOWQwYmMxMjc2
MDY2OTIwHhcNMjYwMTAyMDQxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YjI3ZDU1NTU2ZWVhNjNiY2ZjNGJjZDE5YWJhNGE2ODBlYzA5MThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0eGZMc2MUMF48MJhQhETIWuKD0u
hpcmpAHn9kWsJVYE64MaQn7VfNIndUnsMf9mjWNOxImkicEaUwpJ7+dOrxic90HV
nUBuEx45E+PN0QQZ8QwIU54oQzq2Ufgzbck5ObXMFTro9XkIp6kWMaPptVIqHcmn
Y8i7nhiuV2UKi/QV9utnawZdXq98ye9o61soDngUl28bi73E+jtSEO3NDYLQdeoR
L5Y3heey6YGXT0VbUQ1GnrlJff1CHMZh3w3kskvcRV89P52HvYZWJR0TX5LtYsEZ
esLpS3MQplwWMddcTRGQylwCAKuYKTGqpQClqYXC2cpBsoVmysq/couNVwIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFFsn1VVW7qY7z8S80Zq6SmgOwJGMMB8GA1UdIwQY
MBaAFBMZ8FK8nnKEiIB0OQydC8EnYGaSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXhud1VyeWVjb1NJZ0hRNURKMEx3U2RnWnBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9kNWJiY2UtNDIyMC00ZWM0LThhZjUt
MmMxYTc3MzBiZDI1LzEvV3lmVlZWYnVwanZQeEx6Um1ycEthQTdBa1l3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9kNWJiY2UtNDIyMC00ZWM0LThhZjUtMmMxYTc3MzBiZDI1
LzEvRXhud1VyeWVjb1NJZ0hRNURKMEx3U2RnWnBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAnBAIAATAhAwMAWJ0DAwDB
fgMEBcJPQAMDAMMXAwQF1ACgAwQF1c1AMA0GCSqGSIb3DQEBCwUAA4IBAQBi75Bg
7FqfjaJnHn5nbnu3/wkgibQzCUCDbFixBHCZrSRbhCGtCbd6fCrkO4KKVSCw2aTg
pENNg4pXn8i6/dsZDnuHus6+38XefkCsL5ZHZb9BJ+kDiYmArUBvo09ThNUbnS7v
jJVGDqDdfeHuoBrUZbunfRmig38NbJuV8GwBTNd0TyrszTMy5wBLQmFomtYsyzIY
rnxUQPGA3z46a1jk6m7YUEFpRTkcoKqqx0M1Fdlgn9wM/qhCiaeURxIKqdwKw3t+
aNt+pcjo5M92ZHsUgLSpprtgPLop7LNQNJH6zXMmahKNSo9X5IT6mE8oyAxoYfeS
X4d/mXG5LS97GnIF
-----END CERTIFICATE-----
Generated at Sun Jan 25 19:43:07 2026 by rpki-client