This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/wX2DATSM-PZGG043XYepDGv416w.roa
File: wX2DATSM-PZGG043XYepDGv416w.roa (raw, json)
Hash identifier: 9D0Q1ZjSW7FlImCGaenDGcYFgDPTw3N94jOLYndMLcg=
Subject key identifier: C1:7D:83:01:34:8C:F8:F6:46:1B:4E:37:5D:87:A9:0C:6B:F8:D7:AC
Certificate issuer: /CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Certificate serial: 019B7E371D60DD495EB8415E966BAE78A9A6
Authority key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/wX2DATSM-PZGG043XYepDGv416w.roa
Signing time: Fri 02 Jan 2026 10:18:19 +0000
ROA not before: Fri 02 Jan 2026 10:18:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61052
IP address blocks: 79.133.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:37:1d:60:dd:49:5e:b8:41:5e:96:6b:ae:78:a9:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Validity
Not Before: Jan 2 10:18:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c17d8301348cf8f6461b4e375d87a90c6bf8d7ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e8:ff:23:5b:b0:aa:d0:f3:b9:b7:29:a0:02:
a2:8b:1c:d4:82:bd:aa:ee:e1:a5:9a:29:57:e2:79:
00:01:f2:c3:82:49:8c:21:d1:7f:42:3f:d5:c3:2c:
01:34:cc:ed:0c:2e:0a:22:0a:13:fc:5f:92:4d:40:
b4:49:cc:b6:3d:c3:04:5d:2e:14:fb:ad:58:75:48:
be:fc:ce:58:74:64:aa:8f:9b:91:3b:e4:c9:4c:42:
c2:d8:0d:93:9f:72:b8:81:4b:20:a0:cb:3b:25:d0:
e1:33:e0:db:8f:d7:44:eb:92:c1:29:1d:5a:4c:fe:
d7:05:50:78:0a:20:c9:3a:de:ef:86:b8:2e:9a:27:
16:06:6c:f7:3b:38:95:59:ed:1b:95:c2:3c:78:5c:
e7:b3:28:0b:d7:a5:db:7b:bd:07:60:5e:af:31:24:
14:8c:df:66:1f:01:00:e0:90:b8:41:6a:46:bf:37:
0d:24:70:a2:22:f1:b0:e6:46:55:8e:15:61:06:9e:
cc:8a:8a:db:61:fc:9a:a5:45:2e:da:67:b0:04:9e:
d5:23:1e:30:a8:18:5a:be:77:4e:99:df:90:63:52:
b7:e7:fd:47:a6:fd:33:53:5a:53:e5:ba:cb:bb:54:
0d:2b:80:9d:8d:65:f6:63:fb:18:bf:b0:81:a4:d4:
5b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:7D:83:01:34:8C:F8:F6:46:1B:4E:37:5D:87:A9:0C:6B:F8:D7:AC
X509v3 Authority Key Identifier:
keyid:83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/wX2DATSM-PZGG043XYepDGv416w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.133.104.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:7e:b7:df:d1:9b:cf:90:20:cd:e6:a8:fb:4d:46:28:0c:4c:
d3:15:b6:57:76:93:59:b0:73:63:df:2d:04:79:c1:79:01:13:
e9:a2:2a:23:62:ce:a9:e1:c1:65:67:f2:05:ce:e7:6b:da:36:
75:65:50:f5:6d:15:39:cf:e7:63:a6:fe:aa:48:41:d7:64:e5:
2f:57:18:7c:ff:ff:18:f8:a6:4f:7a:74:a8:af:5e:10:44:08:
f5:d7:2f:50:a1:f1:eb:7a:48:26:98:20:4c:69:cb:0d:66:28:
e3:8e:0e:28:ca:79:7b:d6:7e:af:27:fb:06:7a:e8:4d:80:6e:
d6:66:3d:c5:5b:99:25:9a:1c:8a:23:6d:2c:55:26:80:e3:f5:
04:fb:23:60:65:25:eb:96:89:94:9d:69:46:77:0d:c8:07:27:
a4:36:08:1f:86:89:3a:40:22:cb:f7:5d:77:d8:1a:7b:93:76:
ae:d7:a5:29:f4:95:f9:c9:a0:f6:b5:6e:41:1b:3a:e0:b0:5a:
a3:b1:04:79:3f:55:c6:c3:b1:64:60:03:4a:ef:13:8c:b8:98:
81:86:27:26:4a:1c:52:2e:7e:e4:b8:fc:3f:59:cb:80:a1:8f:
ec:58:e0:69:91:d7:af:19:35:61:fd:88:19:1a:0f:1b:88:ec:
09:cd:08:4f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt+Nx1g3UleuEFelmuueKmmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzMzhlZjQxYjJjMDEwNWE5MWNjYmI5Yzg5MzM3ZmFlYjEy
OWZmODQwHhcNMjYwMTAyMTAxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMTdkODMwMTM0OGNmOGY2NDYxYjRlMzc1ZDg3YTkwYzZiZjhkN2FjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwej/I1uwqtDzubcpoAKiixzUgr2q
7uGlmilX4nkAAfLDgkmMIdF/Qj/VwywBNMztDC4KIgoT/F+STUC0Scy2PcMEXS4U
+61YdUi+/M5YdGSqj5uRO+TJTELC2A2Tn3K4gUsgoMs7JdDhM+Dbj9dE65LBKR1a
TP7XBVB4CiDJOt7vhrgumicWBmz3OziVWe0blcI8eFznsygL16Xbe70HYF6vMSQU
jN9mHwEA4JC4QWpGvzcNJHCiIvGw5kZVjhVhBp7MiorbYfyapUUu2mewBJ7VIx4w
qBhavndOmd+QY1K35/1Hpv0zU1pT5brLu1QNK4CdjWX2Y/sYv7CBpNRbKQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMF9gwE0jPj2RhtON12HqQxr+NesMB8GA1UdIwQY
MBaAFIM470GywBBakcy7nIkzf66xKf+EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3pqdlFiTEFFRnFSekx1Y2lUTl9yckVwXzRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS80MGQ5OTYtYTJjZC00MWYxLWE3Mzgt
MjhmYzc3OTY3NzYzLzEvd1gyREFUU00tUFpHRzA0M1hZZXBER3Y0MTZ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS80MGQ5OTYtYTJjZC00MWYxLWE3MzgtMjhmYzc3OTY3NzYz
LzEvZ3pqdlFiTEFFRnFSekx1Y2lUTl9yckVwXzRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAT4VoMA0G
CSqGSIb3DQEBCwUAA4IBAQBbfrff0ZvPkCDN5qj7TUYoDEzTFbZXdpNZsHNj3y0E
ecF5ARPpoiojYs6p4cFlZ/IFzudr2jZ1ZVD1bRU5z+djpv6qSEHXZOUvVxh8//8Y
+KZPenSor14QRAj11y9QofHrekgmmCBMacsNZijjjg4oynl71n6vJ/sGeuhNgG7W
Zj3FW5klmhyKI20sVSaA4/UE+yNgZSXrlomUnWlGdw3IByekNggfhok6QCLL9113
2Bp7k3au16Up9JX5yaD2tW5BGzrgsFqjsQR5P1XGw7FkYANK7xOMuJiBhicmShxS
Ln7kuPw/WcuAoY/sWOBpkdevGTVh/YgZGg8biOwJzQhP
-----END CERTIFICATE-----
Generated at Mon Jan 26 01:02:09 2026 by rpki-client