This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/w3Lux0gfeLL5j0FE93SK7EkO-xA.roa
File: w3Lux0gfeLL5j0FE93SK7EkO-xA.roa (raw, json)
Hash identifier: /yS1rew79qv077Dug+2vMb4pmqIyVizWzCEA9rbz10o=
Subject key identifier: C3:72:EE:C7:48:1F:78:B2:F9:8F:41:44:F7:74:8A:EC:49:0E:FB:10
Certificate issuer: /CN=db8d08edc4393a8671296f8eacbbecf94d76562a
Certificate serial: 019B78A33BA7876F32EC2085786453D77D0F
Authority key identifier: DB:8D:08:ED:C4:39:3A:86:71:29:6F:8E:AC:BB:EC:F9:4D:76:56:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/240I7cQ5OoZxKW-OrLvs-U12Vio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/w3Lux0gfeLL5j0FE93SK7EkO-xA.roa
Signing time: Thu 01 Jan 2026 08:18:42 +0000
ROA not before: Thu 01 Jan 2026 08:18:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212338
IP address blocks: 185.213.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.mft
rsync://rpki.ripe.net/repository/DEFAULT/240I7cQ5OoZxKW-OrLvs-U12Vio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:a3:3b:a7:87:6f:32:ec:20:85:78:64:53:d7:7d:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db8d08edc4393a8671296f8eacbbecf94d76562a
Validity
Not Before: Jan 1 08:18:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c372eec7481f78b2f98f4144f7748aec490efb10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:58:fb:68:44:70:a4:96:58:f8:cf:15:9c:fa:
d3:83:a7:4a:72:92:85:4f:2e:98:d7:46:e5:bc:76:
59:f7:36:b8:70:11:7c:36:32:fc:0c:d6:f9:c7:7c:
91:ae:b4:7a:cc:40:6d:7f:7a:fe:68:59:b8:be:79:
0a:a8:cb:a1:98:b9:5b:ef:18:6a:d5:fa:91:73:35:
39:16:a6:6f:23:9c:61:dd:cf:8d:f5:c4:61:4d:9b:
9c:b8:a4:c5:61:e1:63:92:90:39:21:eb:60:58:15:
71:5c:ae:a4:ae:27:08:04:d8:b9:bb:6d:f8:70:92:
39:4e:e0:64:18:6f:e2:71:21:4f:af:47:74:aa:a9:
43:27:a5:8f:21:1e:a6:11:3e:70:ba:a6:0a:a5:19:
c3:ab:3a:e7:da:29:ed:d6:c4:06:3c:3f:57:14:ff:
54:40:f6:f0:0d:0d:8b:a4:a7:05:4d:94:0b:a5:24:
d0:16:d6:29:6a:2e:6d:df:7c:7c:1e:d3:26:55:59:
cb:a7:44:39:90:7e:86:0f:13:3c:5f:af:8a:45:15:
9e:bd:63:89:52:5b:a8:b7:f9:ac:20:0f:4f:97:11:
42:4c:72:5c:d9:00:2c:49:ae:1b:35:0a:cc:e7:e8:
38:1f:38:b3:1c:dc:3d:8d:75:48:62:25:72:f1:3d:
47:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:72:EE:C7:48:1F:78:B2:F9:8F:41:44:F7:74:8A:EC:49:0E:FB:10
X509v3 Authority Key Identifier:
keyid:DB:8D:08:ED:C4:39:3A:86:71:29:6F:8E:AC:BB:EC:F9:4D:76:56:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/240I7cQ5OoZxKW-OrLvs-U12Vio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/w3Lux0gfeLL5j0FE93SK7EkO-xA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.47.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:d2:ff:36:cb:ad:c9:d8:29:b1:31:84:c7:5b:04:05:e3:fc:
f6:42:d5:91:5d:ee:6d:4f:29:ac:61:f1:d7:97:d6:6e:7f:bc:
65:a9:87:4d:2c:f0:ce:57:50:c0:e0:b5:b0:57:6b:00:b1:2e:
56:4a:a5:58:9c:19:36:a8:ff:7d:ce:a0:40:db:2d:53:c1:b5:
3d:ba:e8:06:eb:42:66:12:ea:17:7d:08:b4:e5:12:5d:4e:97:
76:2d:6a:8e:db:73:96:8b:09:15:27:ce:a6:72:2d:85:db:ec:
fe:3b:02:c9:a2:96:94:f9:ba:5b:33:50:c7:76:02:8c:11:8a:
9f:0e:14:77:f9:44:07:81:67:f7:17:23:c6:5b:35:76:d1:03:
4f:e4:ae:ed:73:00:b5:32:ee:11:fd:71:61:c0:84:4c:ff:14:
a2:f8:69:2e:9b:77:97:7f:ee:90:29:ff:be:8b:9b:51:ad:47:
bf:8f:99:98:fe:d6:6c:c3:76:f4:8d:65:7b:78:94:9e:2e:cd:
64:4b:29:32:99:28:b9:f1:54:a8:5c:82:42:e3:ac:db:b1:37:
72:26:03:19:ef:7f:46:2a:99:a8:5b:80:4c:bb:a0:51:6a:a9:
4b:3a:9d:12:87:27:03:d0:f3:8e:d0:28:74:55:3b:6c:29:4c:
93:d5:ff:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:09:27 2026 by rpki-client