This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/wGOi-hc1qunRv3mfhlCNuwgWq88.roa
File: wGOi-hc1qunRv3mfhlCNuwgWq88.roa (raw, json)
Hash identifier: VEFeNu27Mw/MaO7I2TqKbQuNe8tJIgFySJ8plRBHBzM=
Subject key identifier: C0:63:A2:FA:17:35:AA:E9:D1:BF:79:9F:86:50:8D:BB:08:16:AB:CF
Certificate issuer: /CN=ab8c6c58b607ff23ae7175a61682c75480f1e214
Certificate serial: 019B7C805F5762CDFEC2B4C076E522A316C8
Authority key identifier: AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/wGOi-hc1qunRv3mfhlCNuwgWq88.roa
Signing time: Fri 02 Jan 2026 02:19:06 +0000
ROA not before: Fri 02 Jan 2026 02:19:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50515
IP address blocks: 92.55.144.0/24 maxlen: 24
92.55.147.0/24 maxlen: 24
188.247.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 20:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:80:5f:57:62:cd:fe:c2:b4:c0:76:e5:22:a3:16:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab8c6c58b607ff23ae7175a61682c75480f1e214
Validity
Not Before: Jan 2 02:19:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c063a2fa1735aae9d1bf799f86508dbb0816abcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7e:1a:0d:10:87:59:46:34:d3:38:d8:08:48:
65:d3:c0:12:e6:a7:bd:36:68:76:e6:ad:96:fe:f4:
a5:d7:27:0b:20:bf:b9:5b:12:38:23:fc:20:23:22:
4d:51:2e:2f:81:05:95:5a:a7:65:ea:e3:9f:41:9f:
0f:77:61:09:c5:22:f5:6d:80:0d:10:69:a2:c6:50:
0c:f8:3a:c9:fb:54:d1:2e:40:57:61:c3:2a:cb:f5:
98:bb:21:28:10:6a:12:e3:f6:05:67:b7:55:3e:2a:
12:72:d0:6c:dc:30:8e:11:14:60:56:f9:40:9c:b4:
13:38:7a:b4:f1:f1:13:dd:73:7e:ab:65:f4:74:f0:
04:74:d6:e2:6a:a5:8c:83:92:ab:80:97:8e:9d:94:
da:37:f1:57:e8:35:d4:20:08:fa:af:6c:32:2d:e9:
fa:f6:fa:ae:d1:34:e9:ab:46:8e:72:0f:6f:59:5d:
ef:03:4f:6e:6e:3a:73:f1:74:52:32:4e:86:8e:48:
db:36:43:8f:91:a8:35:02:e4:df:bb:92:6e:26:4e:
39:49:f4:1d:0c:0f:02:16:69:5f:9f:95:fd:5a:54:
ca:2b:f4:dd:08:be:dc:e9:ff:20:2c:0d:99:f5:54:
c9:7f:28:f3:8f:d1:4c:3e:02:9c:a7:ca:e1:54:88:
48:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:63:A2:FA:17:35:AA:E9:D1:BF:79:9F:86:50:8D:BB:08:16:AB:CF
X509v3 Authority Key Identifier:
keyid:AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/wGOi-hc1qunRv3mfhlCNuwgWq88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.55.144.0/24
92.55.147.0/24
188.247.130.0/24
Signature Algorithm: sha256WithRSAEncryption
67:44:33:1a:5a:0c:e4:76:e3:56:3b:f9:0f:83:85:c3:fb:8c:
41:47:71:f1:4f:8c:37:27:e5:4e:ff:ed:06:72:02:81:06:80:
9c:f7:02:35:e4:ff:77:c4:fc:f5:82:81:14:90:e9:9f:91:09:
32:9b:c3:34:fa:2c:3a:05:99:7d:2c:4c:97:17:74:54:78:e9:
fe:a5:d9:ca:ec:62:4a:43:b1:34:44:0d:ae:3f:e4:58:e1:60:
09:a3:91:3e:08:f1:c3:63:c4:07:6f:4d:e2:2c:ed:bc:2f:c1:
0c:cc:27:3b:06:b8:1f:81:c9:4d:65:31:cd:4a:66:34:a4:dd:
6e:d4:0e:93:67:40:c7:4e:a9:b1:15:aa:64:f7:ae:3a:ac:b0:
a1:a4:a2:2b:65:43:cd:06:cf:d0:32:9e:a0:f6:8d:89:90:f7:
13:cd:22:60:20:5f:cc:a4:13:42:47:00:53:ea:1d:f2:e1:02:
1c:9f:b3:4d:79:e2:a6:a8:8f:0f:d5:35:77:15:13:31:ee:2a:
67:dc:7e:c8:32:8f:b3:c9:58:52:b2:1e:67:4a:65:94:fa:a2:
fd:6a:a9:76:5c:a1:40:72:3f:50:9d:e3:7e:18:49:79:a7:01:
7d:f6:b2:c7:1f:d6:8e:b1:d9:8c:1d:d0:76:75:15:06:dd:98:
bf:8b:ec:16
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZt8gF9XYs3+wrTAduUioxbIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiOGM2YzU4YjYwN2ZmMjNhZTcxNzVhNjE2ODJjNzU0ODBm
MWUyMTQwHhcNMjYwMTAyMDIxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMDYzYTJmYTE3MzVhYWU5ZDFiZjc5OWY4NjUwOGRiYjA4MTZhYmNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp34aDRCHWUY00zjYCEhl08AS5qe9
Nmh25q2W/vSl1ycLIL+5WxI4I/wgIyJNUS4vgQWVWqdl6uOfQZ8Pd2EJxSL1bYAN
EGmixlAM+DrJ+1TRLkBXYcMqy/WYuyEoEGoS4/YFZ7dVPioSctBs3DCOERRgVvlA
nLQTOHq08fET3XN+q2X0dPAEdNbiaqWMg5KrgJeOnZTaN/FX6DXUIAj6r2wyLen6
9vqu0TTpq0aOcg9vWV3vA09ubjpz8XRSMk6GjkjbNkOPkag1AuTfu5JuJk45SfQd
DA8CFmlfn5X9WlTKK/TdCL7c6f8gLA2Z9VTJfyjzj9FMPgKcp8rhVIhI3wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFMBjovoXNarp0b95n4ZQjbsIFqvPMB8GA1UdIwQY
MBaAFKuMbFi2B/8jrnF1phaCx1SA8eIUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTR4c1dMWUhfeU91Y1hXbUZvTEhWSUR4NGhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9lZmI4ZWUtYzVjNC00NDY3LWEwY2Mt
ODhhM2M0MWZhZWUyLzEvd0dPaS1oYzFxdW5SdjNtZmhsQ051d2dXcTg4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9lZmI4ZWUtYzVjNC00NDY3LWEwY2MtODhhM2M0MWZhZWUy
LzEvcTR4c1dMWUhfeU91Y1hXbUZvTEhWSUR4NGhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAXDeQAwQA
XDeTAwQAvPeCMA0GCSqGSIb3DQEBCwUAA4IBAQBnRDMaWgzkduNWO/kPg4XD+4xB
R3HxT4w3J+VO/+0GcgKBBoCc9wI15P93xPz1goEUkOmfkQkym8M0+iw6BZl9LEyX
F3RUeOn+pdnK7GJKQ7E0RA2uP+RY4WAJo5E+CPHDY8QHb03iLO28L8EMzCc7Brgf
gclNZTHNSmY0pN1u1A6TZ0DHTqmxFapk9646rLChpKIrZUPNBs/QMp6g9o2JkPcT
zSJgIF/MpBNCRwBT6h3y4QIcn7NNeeKmqI8P1TV3FRMx7ipn3H7IMo+zyVhSsh5n
SmWU+qL9aql2XKFAcj9QneN+GEl5pwF99rLHH9aOsdmMHdB2dRUG3Zi/i+wW
-----END CERTIFICATE-----
Generated at Mon Jan 26 03:07:10 2026 by rpki-client