This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/wC2w3-1Ro5EWjGBRrDuyblFUfkw.roa
File: wC2w3-1Ro5EWjGBRrDuyblFUfkw.roa (raw, json)
Hash identifier: DtOCWrW/1nLce+oLk7kSY37T9S5ZLMhN/Uio3q7OELI=
Subject key identifier: C0:2D:B0:DF:ED:51:A3:91:16:8C:60:51:AC:3B:B2:6E:51:54:7E:4C
Certificate issuer: /CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
Certificate serial: 019B7A5B5BC3C28D8140E4AB988291EC6A9D
Authority key identifier: 5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/wC2w3-1Ro5EWjGBRrDuyblFUfkw.roa
Signing time: Thu 01 Jan 2026 16:19:26 +0000
ROA not before: Thu 01 Jan 2026 16:19:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48595
IP address blocks: 176.124.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:5b:5b:c3:c2:8d:81:40:e4:ab:98:82:91:ec:6a:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
Validity
Not Before: Jan 1 16:19:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c02db0dfed51a391168c6051ac3bb26e51547e4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a8:ca:31:0f:ca:5f:99:ed:e6:13:7d:da:21:
f9:48:a0:50:da:a8:09:ef:2c:49:55:ca:13:84:72:
cb:60:8f:e4:c3:4c:5f:b4:f0:1f:58:c4:85:b3:b8:
99:ab:ab:41:a5:af:c4:b0:7e:7e:13:88:8e:93:70:
6a:44:9f:e6:7e:34:aa:38:1d:69:76:80:fe:db:58:
36:02:5c:0b:cf:b0:24:08:2f:f7:06:b2:f7:3f:62:
93:4e:d7:37:cf:b5:61:da:a4:8d:01:f6:19:68:05:
34:b4:ac:76:a9:a7:76:ab:1b:6e:c0:64:3f:77:fc:
0a:a0:97:25:d2:69:53:01:58:15:e8:35:fe:02:4e:
9e:7a:44:b3:8d:39:03:fe:87:6e:02:79:5f:b8:d8:
f2:43:07:b8:a4:02:09:c4:7f:7d:af:fc:b5:2f:0c:
a6:f6:8b:58:ab:48:37:c0:f8:f5:17:74:d3:ef:14:
df:70:d0:c6:70:4e:45:72:69:fa:32:54:f3:cc:27:
47:e8:37:a3:ac:2c:63:85:6a:39:1d:ce:d9:04:ea:
eb:a1:a5:d9:94:de:59:48:1a:6d:5d:a2:a2:59:31:
e7:b6:8b:49:f7:3e:72:a0:50:e0:f8:1b:7b:e2:d7:
1f:52:e6:82:78:dc:98:f0:83:b3:81:5e:65:af:93:
6f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:2D:B0:DF:ED:51:A3:91:16:8C:60:51:AC:3B:B2:6E:51:54:7E:4C
X509v3 Authority Key Identifier:
keyid:5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/wC2w3-1Ro5EWjGBRrDuyblFUfkw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.124.30.0/24
Signature Algorithm: sha256WithRSAEncryption
69:f7:4c:a1:e5:ef:a2:ec:0c:56:6a:62:9c:06:5a:b3:1d:b2:
88:81:8b:01:60:b0:d1:5a:98:1d:eb:e4:dd:5b:25:88:3c:51:
24:26:12:f3:31:ed:99:02:15:d5:90:16:a7:40:c9:6d:f0:ea:
e6:f7:0d:fa:a0:69:5e:31:f1:5d:50:74:a7:e8:e5:f9:b8:56:
db:1e:19:31:af:3b:e4:89:4d:36:c9:5c:b8:51:90:04:24:2e:
cc:a9:40:54:fc:cf:b1:7d:be:65:1c:a7:4c:9e:10:ee:44:9e:
89:9f:6b:7f:9c:6b:07:5f:80:b8:86:f2:ce:00:6a:c3:1a:b0:
69:7a:2a:cc:0e:be:e6:aa:af:8a:5c:66:f1:3f:7f:83:25:37:
9b:18:92:90:8c:03:fa:39:70:24:64:e2:86:c6:7d:d8:ac:b3:
ac:4f:cf:d9:fe:de:b6:66:8b:53:ef:fd:e2:51:4a:1b:f8:35:
eb:12:c5:dc:b4:ed:c1:c5:cf:31:3d:5a:a8:4b:db:cc:9b:4b:
63:fd:2e:21:7e:a0:e9:b7:d3:2a:b3:6a:02:89:5f:00:88:03:
83:16:d3:09:96:b0:27:50:9d:c6:2f:e6:45:f4:73:94:f2:fb:
12:d5:4d:23:e9:44:87:37:ee:50:61:78:40:c3:53:ca:24:5c:
b6:f8:c3:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:56:14 2026 by rpki-client