This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/2f830f-af4d-4d33-a300-b98df544bc20/1/WWUJ0b2mKsJU4aWCDcCYWe3B3Q8.roa
File: WWUJ0b2mKsJU4aWCDcCYWe3B3Q8.roa (raw, json)
Hash identifier: OR5UXYV6xuApBIfkbkR4RJywXInN6wryK+o2woE8n2A=
Subject key identifier: 59:65:09:D1:BD:A6:2A:C2:54:E1:A5:82:0D:C0:98:59:ED:C1:DD:0F
Certificate issuer: /CN=261b941dbe59651fafbba9724a12775e07edb635
Certificate serial: 019B79ECDA053BD147E552437066591434AC
Authority key identifier: 26:1B:94:1D:BE:59:65:1F:AF:BB:A9:72:4A:12:77:5E:07:ED:B6:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JhuUHb5ZZR-vu6lyShJ3XgfttjU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/2f830f-af4d-4d33-a300-b98df544bc20/1/WWUJ0b2mKsJU4aWCDcCYWe3B3Q8.roa
Signing time: Thu 01 Jan 2026 14:18:44 +0000
ROA not before: Thu 01 Jan 2026 14:18:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3215
IP address blocks: 185.172.152.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/2f830f-af4d-4d33-a300-b98df544bc20/1/JhuUHb5ZZR-vu6lyShJ3XgfttjU.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/2f830f-af4d-4d33-a300-b98df544bc20/1/JhuUHb5ZZR-vu6lyShJ3XgfttjU.mft
rsync://rpki.ripe.net/repository/DEFAULT/JhuUHb5ZZR-vu6lyShJ3XgfttjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 05:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:ec:da:05:3b:d1:47:e5:52:43:70:66:59:14:34:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=261b941dbe59651fafbba9724a12775e07edb635
Validity
Not Before: Jan 1 14:18:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=596509d1bda62ac254e1a5820dc09859edc1dd0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:28:54:53:96:5d:51:b2:62:57:72:d1:a7:8b:
27:e7:51:43:e5:55:7d:7c:dd:28:8f:a7:d4:c7:0b:
38:51:36:4e:94:fd:ca:f2:06:7f:e3:a8:3a:d0:a9:
84:99:2f:1f:f9:8f:20:79:ad:a1:10:12:20:4f:27:
f1:12:84:56:46:45:dd:ed:bf:b9:e1:12:fe:d7:5b:
2b:ee:2b:bf:23:e6:db:84:22:cc:6c:92:74:39:cc:
04:8c:da:92:1e:ce:92:bc:f9:85:2b:8b:83:60:14:
d3:ae:c7:74:28:38:6c:e6:b2:61:d5:17:f0:23:78:
74:5b:b9:bd:07:25:5d:a7:75:1d:f7:68:e3:16:97:
d9:3b:c9:e2:ad:67:94:d9:2d:36:7b:a8:db:69:e7:
0f:74:f8:cd:73:fa:a0:17:70:c9:8d:33:c5:c9:31:
87:30:34:25:bc:07:14:3b:16:b3:ad:31:37:3a:aa:
c7:fc:11:e0:20:8a:d3:9b:f2:1f:e5:64:cd:71:a4:
5f:5d:0e:cc:1d:d6:09:b7:78:d8:3f:0f:4f:68:f3:
70:71:65:1c:24:3f:b6:1b:27:fd:43:ad:7e:13:80:
bd:57:8e:16:46:64:a9:0b:aa:9b:d2:76:d7:04:1d:
08:99:12:77:59:e6:99:c1:27:00:ce:49:83:de:6e:
a1:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:65:09:D1:BD:A6:2A:C2:54:E1:A5:82:0D:C0:98:59:ED:C1:DD:0F
X509v3 Authority Key Identifier:
keyid:26:1B:94:1D:BE:59:65:1F:AF:BB:A9:72:4A:12:77:5E:07:ED:B6:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JhuUHb5ZZR-vu6lyShJ3XgfttjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/2f830f-af4d-4d33-a300-b98df544bc20/1/WWUJ0b2mKsJU4aWCDcCYWe3B3Q8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/2f830f-af4d-4d33-a300-b98df544bc20/1/JhuUHb5ZZR-vu6lyShJ3XgfttjU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.172.152.0/22
Signature Algorithm: sha256WithRSAEncryption
b0:a0:2b:f3:c2:07:fc:c4:b7:23:f0:ba:1e:a0:d7:cc:c8:dd:
1d:7e:6b:86:52:2b:f0:92:d5:29:1f:32:d8:46:59:df:4c:09:
f0:33:ee:4a:ee:04:63:e1:af:c0:de:6b:6c:b3:b8:a9:fd:10:
43:b2:73:a3:39:c8:e6:cd:fe:4f:ce:4a:90:df:42:63:93:df:
ae:b8:3a:00:5d:c5:e9:e3:55:c4:62:a5:bd:a5:23:7e:84:ba:
4a:7b:56:8c:21:57:5d:a0:67:43:71:5c:c3:da:bc:50:ed:fa:
58:92:69:ec:0b:33:7e:c1:f6:ba:35:08:31:8a:06:b6:8d:f0:
7d:06:0c:6b:48:33:c4:52:3c:9a:7a:76:35:ea:95:45:07:01:
90:5a:e8:70:37:27:c1:9f:6e:0b:ae:4d:12:7b:71:c7:df:c0:
94:4c:ec:00:c6:05:2b:66:1a:da:f4:dd:b7:50:87:0f:10:85:
0e:15:60:54:bf:60:68:75:05:ec:d0:74:eb:f3:39:ff:27:c9:
35:d0:10:5d:7e:52:8f:90:fe:b8:00:a4:03:ec:57:99:e3:a0:
a5:e4:de:91:7d:32:69:ad:61:ba:6f:6a:81:f7:55:60:06:51:
86:6b:53:f7:be:be:9a:f0:8a:49:04:81:00:bb:56:de:df:74:
13:4b:93:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:31:14 2026 by rpki-client