This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/wGWva6DlhR1xhUCt4j4w0NB931w.roa
File: wGWva6DlhR1xhUCt4j4w0NB931w.roa (raw, json)
Hash identifier: GSuxwm3owrdlcnA22w3R59fDYZXJvPJoNhLNbwJTGD8=
Subject key identifier: C0:65:AF:6B:A0:E5:85:1D:71:85:40:AD:E2:3E:30:D0:D0:7D:DF:5C
Certificate issuer: /CN=ea2d102b6112b0d9a8b8eebac4b97c819f97c606
Certificate serial: 019BC53626A4E3E5E3688E964BD48D3E7D4F
Authority key identifier: EA:2D:10:2B:61:12:B0:D9:A8:B8:EE:BA:C4:B9:7C:81:9F:97:C6:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/wGWva6DlhR1xhUCt4j4w0NB931w.roa
Signing time: Fri 16 Jan 2026 05:10:18 +0000
ROA not before: Fri 16 Jan 2026 05:10:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 131151
IP address blocks: 193.42.42.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:c5:36:26:a4:e3:e5:e3:68:8e:96:4b:d4:8d:3e:7d:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea2d102b6112b0d9a8b8eebac4b97c819f97c606
Validity
Not Before: Jan 16 05:10:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c065af6ba0e5851d718540ade23e30d0d07ddf5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:40:62:0f:46:10:18:72:47:ef:5c:a7:28:29:
58:f6:43:63:92:3a:bd:23:af:ce:3e:04:42:ae:5a:
8b:72:33:68:fc:17:53:14:c0:ad:b4:f4:2a:e4:b2:
f1:a8:97:06:8f:b9:0c:f0:85:74:85:81:e5:bd:fd:
ed:9b:0e:07:6d:2b:88:00:a7:35:b6:8e:f8:76:0d:
1c:9e:b3:8f:34:6e:19:d0:82:88:a8:66:eb:6c:df:
86:a5:76:ce:60:4d:20:b4:4c:76:c3:34:8b:6a:e6:
9b:c7:b3:76:64:28:06:d3:74:c1:14:3a:ca:43:3e:
09:d0:e0:9f:c2:48:e8:35:67:42:3a:d0:76:48:15:
f8:ff:68:2d:90:a0:e0:4d:3d:bf:49:37:72:89:48:
e0:8e:eb:d0:bf:3e:2b:aa:35:2f:f1:b5:64:b5:bb:
0c:4a:fa:b0:a1:b2:d4:de:f0:48:ab:72:89:d6:d7:
18:86:ed:92:41:d8:8b:70:d6:0e:65:bf:83:c9:d7:
a0:c6:a9:d6:91:b4:1b:ec:e2:eb:e5:da:ad:7d:bb:
0d:49:4c:1d:9f:8a:ae:68:ea:c6:9b:a9:ab:a4:3d:
af:be:7a:06:34:ab:a4:24:d7:d4:9a:5a:d2:c3:c9:
bd:7b:2c:2a:44:99:e2:47:6d:06:cb:fd:78:f1:55:
75:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:65:AF:6B:A0:E5:85:1D:71:85:40:AD:E2:3E:30:D0:D0:7D:DF:5C
X509v3 Authority Key Identifier:
keyid:EA:2D:10:2B:61:12:B0:D9:A8:B8:EE:BA:C4:B9:7C:81:9F:97:C6:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/wGWva6DlhR1xhUCt4j4w0NB931w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.42.42.0/23
Signature Algorithm: sha256WithRSAEncryption
67:2e:7b:68:21:51:e8:27:85:c2:39:54:a7:d4:12:f6:22:00:
db:93:69:87:5b:e5:05:37:97:3b:fb:a6:21:ed:17:34:2c:cb:
17:2f:c3:68:52:84:81:73:f9:f3:7c:2a:f8:9f:bd:7d:66:73:
e6:12:b7:29:f2:ea:21:96:d2:16:b5:7d:14:2b:3c:fd:d0:91:
5b:7b:97:c9:91:ad:53:05:e2:10:8f:d1:6f:34:d3:f9:e1:e0:
6e:bd:f7:d8:d3:66:62:e8:22:61:7e:77:cf:45:5f:dc:79:d0:
f7:52:0f:09:c4:23:c6:7c:21:31:a3:33:44:7f:ec:57:2f:01:
c2:2a:2f:20:e2:e6:12:14:f7:f7:2d:27:52:41:11:ca:c3:fd:
e7:03:fd:60:a8:2b:d0:c2:83:60:c9:6d:c9:59:55:57:e9:f8:
22:39:a9:7f:b2:f5:d9:9d:62:6d:67:15:bc:d5:53:ab:8a:a4:
a7:09:b0:85:fb:f7:a7:80:5e:30:b4:fe:86:11:05:37:b6:26:
5d:c8:ca:0b:41:27:03:dc:26:12:b5:2a:e7:09:90:79:c4:87:
63:c1:66:5b:89:17:1e:ff:d8:5a:22:70:cc:33:38:53:d2:e3:
ce:4e:5c:21:39:68:3f:09:c7:5c:8c:41:70:ca:48:39:2d:e2:
12:9b:29:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:50:15 2026 by rpki-client