This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/WKDKLv-tt62b9C91OCyzPhQ_OcQ.roa
File: WKDKLv-tt62b9C91OCyzPhQ_OcQ.roa (raw, json)
Hash identifier: R8pPn24trqZL7l8MMCrinetEIJyyN4dGs9r8jTjJKfw=
Subject key identifier: 58:A0:CA:2E:FF:AD:B7:AD:9B:F4:2F:75:38:2C:B3:3E:14:3F:39:C4
Certificate issuer: /CN=67920420f722f7d7f3c4b25a80e17d7290171180
Certificate serial: 019B78A2E363CC32D57AAD385DD193F8576F
Authority key identifier: 67:92:04:20:F7:22:F7:D7:F3:C4:B2:5A:80:E1:7D:72:90:17:11:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5IEIPci99fzxLJagOF9cpAXEYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/WKDKLv-tt62b9C91OCyzPhQ_OcQ.roa
Signing time: Thu 01 Jan 2026 08:18:19 +0000
ROA not before: Thu 01 Jan 2026 08:18:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8280
IP address blocks: 185.82.37.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z5IEIPci99fzxLJagOF9cpAXEYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:a2:e3:63:cc:32:d5:7a:ad:38:5d:d1:93:f8:57:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67920420f722f7d7f3c4b25a80e17d7290171180
Validity
Not Before: Jan 1 08:18:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=58a0ca2effadb7ad9bf42f75382cb33e143f39c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:50:2d:af:f7:38:4b:90:36:b5:e3:50:30:89:
6b:45:bc:51:89:e5:b7:e8:03:cb:fd:86:58:7e:ee:
ca:74:42:51:08:1c:f0:37:70:d1:e3:c4:82:b5:e1:
65:24:1f:5e:2e:e3:c7:28:76:85:83:8a:0c:bc:2d:
6c:64:ae:30:43:2f:65:4b:7b:c5:e0:d1:b0:09:8e:
d7:94:79:71:0e:06:ce:1f:08:1a:5a:77:41:9b:4e:
1e:d3:20:cf:9a:6e:51:ec:6b:a7:32:2b:ea:7f:1a:
4a:91:0f:77:09:9a:69:54:f5:fc:fd:bf:25:36:1f:
46:65:0b:0b:ef:32:ca:41:e7:4c:bc:6d:e9:dc:e4:
ec:e6:f2:60:dc:8a:e1:2d:b2:07:8b:60:34:f1:e0:
ff:45:dd:11:6f:62:f4:86:39:2a:65:ce:52:cd:ba:
28:f2:be:38:73:ed:d5:a6:04:ba:e6:92:72:15:d2:
9f:c0:d7:d6:73:44:ae:aa:5f:ca:84:ae:e0:f9:bc:
96:d5:6c:64:a9:68:66:58:91:7e:e8:f7:e3:13:d4:
d4:1b:51:8f:49:1e:c1:1f:7e:55:30:a4:c6:a4:ab:
20:fb:e0:63:85:49:84:e4:5b:a9:6b:5c:e2:cf:fb:
0d:64:98:cf:b4:de:f0:37:c7:64:73:56:ff:7d:e5:
bb:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:A0:CA:2E:FF:AD:B7:AD:9B:F4:2F:75:38:2C:B3:3E:14:3F:39:C4
X509v3 Authority Key Identifier:
keyid:67:92:04:20:F7:22:F7:D7:F3:C4:B2:5A:80:E1:7D:72:90:17:11:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5IEIPci99fzxLJagOF9cpAXEYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/WKDKLv-tt62b9C91OCyzPhQ_OcQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.82.37.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:59:30:93:87:47:c1:20:22:30:9d:bc:9b:60:79:10:c2:7b:
8b:df:e1:12:2d:0b:d1:74:e6:a5:33:b3:70:34:06:c3:f3:80:
81:25:18:41:48:d4:8b:85:13:b7:98:b9:78:47:ba:63:be:80:
de:ba:36:5c:de:de:ae:47:b4:e6:70:cd:07:95:04:1f:6b:d6:
cf:8c:76:98:0e:c1:fc:4c:95:97:85:72:88:4c:67:35:42:68:
c5:1c:6b:a4:fe:e4:e3:56:d5:73:86:2e:ce:29:97:4d:b3:e2:
39:e5:41:40:7a:2b:1f:19:2d:36:54:4b:68:c6:bc:b9:67:a3:
e0:8f:01:df:22:63:70:86:24:59:58:2a:dd:09:e8:7e:c3:5e:
5a:79:10:5d:cd:cf:18:9e:ed:63:dc:c1:52:bd:a7:d9:de:28:
3c:f2:0d:40:ad:02:d2:ec:06:ac:53:0b:f5:5c:45:6d:ff:10:
aa:f9:bd:e6:c6:0f:fa:fc:39:10:31:eb:7b:f0:f1:e8:59:df:
d1:e3:22:ad:52:41:e4:29:61:5e:c6:82:3d:ba:e2:53:8e:38:
cc:d3:86:52:d8:e5:f5:42:f4:e4:b6:7f:de:3f:04:09:5c:4c:
6d:78:e9:37:14:45:8e:30:af:51:a9:7b:90:fb:20:87:8d:ee:
39:6a:fa:5e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt4ouNjzDLVeq04XdGT+FdvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3OTIwNDIwZjcyMmY3ZDdmM2M0YjI1YTgwZTE3ZDcyOTAx
NzExODAwHhcNMjYwMTAxMDgxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OGEwY2EyZWZmYWRiN2FkOWJmNDJmNzUzODJjYjMzZTE0M2YzOWM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFAtr/c4S5A2teNQMIlrRbxRieW3
6APL/YZYfu7KdEJRCBzwN3DR48SCteFlJB9eLuPHKHaFg4oMvC1sZK4wQy9lS3vF
4NGwCY7XlHlxDgbOHwgaWndBm04e0yDPmm5R7GunMivqfxpKkQ93CZppVPX8/b8l
Nh9GZQsL7zLKQedMvG3p3OTs5vJg3IrhLbIHi2A08eD/Rd0Rb2L0hjkqZc5Szboo
8r44c+3VpgS65pJyFdKfwNfWc0Suql/KhK7g+byW1WxkqWhmWJF+6PfjE9TUG1GP
SR7BH35VMKTGpKsg++BjhUmE5Fupa1ziz/sNZJjPtN7wN8dkc1b/feW7KwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFigyi7/rbetm/QvdTgssz4UPznEMB8GA1UdIwQY
MBaAFGeSBCD3IvfX88SyWoDhfXKQFxGAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjVJRUlQY2k5OWZ6eExKYWdPRjljcEFYRVlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8yN2NhMTYtZjQ2Yi00ZjhlLWI5MmUt
NWVkMDg5YzFhZmVkLzEvV0tES0x2LXR0NjJiOUM5MU9DeXpQaFFfT2NRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi8yN2NhMTYtZjQ2Yi00ZjhlLWI5MmUtNWVkMDg5YzFhZmVk
LzEvWjVJRUlQY2k5OWZ6eExKYWdPRjljcEFYRVlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuVIlMA0G
CSqGSIb3DQEBCwUAA4IBAQA9WTCTh0fBICIwnbybYHkQwnuL3+ESLQvRdOalM7Nw
NAbD84CBJRhBSNSLhRO3mLl4R7pjvoDeujZc3t6uR7TmcM0HlQQfa9bPjHaYDsH8
TJWXhXKITGc1QmjFHGuk/uTjVtVzhi7OKZdNs+I55UFAeisfGS02VEtoxry5Z6Pg
jwHfImNwhiRZWCrdCeh+w15aeRBdzc8Ynu1j3MFSvafZ3ig88g1ArQLS7AasUwv1
XEVt/xCq+b3mxg/6/DkQMet78PHoWd/R4yKtUkHkKWFexoI9uuJTjjjM04ZS2OX1
QvTktn/ePwQJXExteOk3FEWOMK9RqXuQ+yCHje45avpe
-----END CERTIFICATE-----
Generated at Sun Jan 25 22:30:11 2026 by rpki-client