This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WQsGILUrdOkjujpfknh222flBW4.roa
File: WQsGILUrdOkjujpfknh222flBW4.roa (raw, json)
Hash identifier: jS8RNtty157ZsNJwgLNNODG9khw4HKZD+Tohhjb9lA4=
Subject key identifier: 59:0B:06:20:B5:2B:74:E9:23:BA:3A:5F:92:78:76:DB:67:E5:05:6E
Certificate issuer: /CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Certificate serial: 019B7F151702592A675C88710C1DFD603C35
Authority key identifier: 58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WQsGILUrdOkjujpfknh222flBW4.roa
Signing time: Fri 02 Jan 2026 14:20:47 +0000
ROA not before: Fri 02 Jan 2026 14:20:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213725
IP address blocks: 2a14:c380:280::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:15:17:02:59:2a:67:5c:88:71:0c:1d:fd:60:3c:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Validity
Not Before: Jan 2 14:20:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=590b0620b52b74e923ba3a5f927876db67e5056e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8c:45:1e:74:cb:99:62:50:df:34:76:bd:82:
29:71:35:ee:4d:54:4a:3b:32:0f:2b:94:49:ba:eb:
63:ed:eb:3a:e4:4c:ab:01:98:5e:5e:d1:50:ae:9b:
e2:58:98:14:a9:0f:32:4f:70:36:bf:8d:86:44:cd:
4e:0e:bc:81:1d:8c:a5:b8:fc:cf:42:f2:7a:af:76:
89:f6:15:f9:53:8c:64:55:56:76:b3:77:90:25:7c:
fd:0d:18:a2:0f:67:c7:3c:c0:51:d2:e0:62:d2:f4:
20:7a:be:20:6f:db:e9:d3:7b:6b:ac:86:fd:42:cc:
06:7b:ef:da:3c:48:04:79:56:79:4c:e5:eb:1e:c3:
9f:ef:c0:2a:93:4e:30:bb:00:e8:33:62:61:fa:d8:
8e:51:23:43:a3:38:93:83:9b:22:9c:9f:55:27:14:
ca:83:68:c1:fd:1e:35:20:7a:e6:ab:cd:78:be:19:
d2:4c:3e:14:81:c1:8f:26:a5:8d:78:c7:e5:74:18:
cf:5e:9c:cc:dd:a6:21:aa:1a:85:2e:7f:fe:bf:8b:
fb:7e:b6:cf:a9:0a:80:e8:1c:a0:03:48:6b:d6:c1:
76:24:e8:ce:2f:5d:5e:8a:3b:0e:be:cc:73:db:85:
93:a7:31:4d:89:41:46:41:c0:c9:3f:5e:ac:66:e4:
d8:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:0B:06:20:B5:2B:74:E9:23:BA:3A:5F:92:78:76:DB:67:E5:05:6E
X509v3 Authority Key Identifier:
keyid:58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WQsGILUrdOkjujpfknh222flBW4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:c380:280::/44
Signature Algorithm: sha256WithRSAEncryption
3e:a8:67:f8:3a:88:8a:66:d0:8b:ff:f4:c1:08:a3:1e:8e:52:
61:7c:47:6a:71:31:a7:83:a7:d6:91:f3:06:94:aa:79:9b:a3:
c3:bc:74:3c:fc:e2:ae:af:48:4c:0c:91:a4:10:35:58:2f:da:
47:3e:e0:14:8a:41:41:65:7a:83:c8:a2:ca:26:94:89:67:6c:
09:1e:7c:56:d2:91:22:8d:0a:78:59:f8:70:06:4b:46:90:31:
8b:57:d0:cc:bd:6f:2e:1b:da:e1:aa:82:65:61:16:3d:67:20:
ea:f3:77:6d:bc:63:07:e2:e8:45:a2:d3:f1:61:fc:ca:93:eb:
45:e7:76:00:ee:ce:b1:76:1a:d0:b3:60:3f:f3:0a:12:ae:59:
ce:34:41:50:43:1f:5a:96:8e:d5:f0:24:bd:15:04:03:8d:61:
d3:e1:1f:20:6f:a1:f8:d0:a3:6f:70:80:ae:e2:47:ec:7a:0e:
9d:b2:47:67:41:8d:d5:89:b8:77:8c:70:cd:eb:bf:19:1b:4d:
96:ce:b2:e6:2c:eb:3b:dd:a5:f6:6b:f0:be:e7:ab:38:55:23:
46:66:3c:99:d2:50:b7:75:ae:6c:ab:d3:1d:f5:5b:78:d0:ef:
4b:1e:30:39:8e:c8:01:fc:71:bc:fc:7f:3f:16:25:33:a7:87:
fb:19:2a:39
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZt/FRcCWSpnXIhxDB39YDw1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4YjNkZTVmOWFkYjUwZmU0MWY2ZGM3OGZmZDBhMmM5MDg2
ZDI1MTIwHhcNMjYwMTAyMTQyMDQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OTBiMDYyMGI1MmI3NGU5MjNiYTNhNWY5Mjc4NzZkYjY3ZTUwNTZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4xFHnTLmWJQ3zR2vYIpcTXuTVRK
OzIPK5RJuutj7es65EyrAZheXtFQrpviWJgUqQ8yT3A2v42GRM1ODryBHYyluPzP
QvJ6r3aJ9hX5U4xkVVZ2s3eQJXz9DRiiD2fHPMBR0uBi0vQger4gb9vp03trrIb9
QswGe+/aPEgEeVZ5TOXrHsOf78Aqk04wuwDoM2Jh+tiOUSNDoziTg5sinJ9VJxTK
g2jB/R41IHrmq814vhnSTD4UgcGPJqWNeMfldBjPXpzM3aYhqhqFLn/+v4v7frbP
qQqA6BygA0hr1sF2JOjOL11eijsOvsxz24WTpzFNiUFGQcDJP16sZuTY8QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFFkLBiC1K3TpI7o6X5J4dttn5QVuMB8GA1UdIwQY
MBaAFFiz3l+a21D+QfbceP/QoskIbSUSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0xQZVg1cmJVUDVCOXR4NF85Q2l5UWh0SlJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC82Yjc0OTAtZTEwYS00MmUwLTllMmUt
NTMyMWQ2OWQ5NzlkLzEvV1FzR0lMVXJkT2tqdWpwZmtuaDIyMmZsQlc0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC82Yjc0OTAtZTEwYS00MmUwLTllMmUtNTMyMWQ2OWQ5Nzlk
LzEvV0xQZVg1cmJVUDVCOXR4NF85Q2l5UWh0SlJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhTDgAKA
MA0GCSqGSIb3DQEBCwUAA4IBAQA+qGf4OoiKZtCL//TBCKMejlJhfEdqcTGng6fW
kfMGlKp5m6PDvHQ8/OKur0hMDJGkEDVYL9pHPuAUikFBZXqDyKLKJpSJZ2wJHnxW
0pEijQp4WfhwBktGkDGLV9DMvW8uG9rhqoJlYRY9ZyDq83dtvGMH4uhFotPxYfzK
k+tF53YA7s6xdhrQs2A/8woSrlnONEFQQx9alo7V8CS9FQQDjWHT4R8gb6H40KNv
cICu4kfseg6dskdnQY3Vibh3jHDN678ZG02WzrLmLOs73aX2a/C+56s4VSNGZjyZ
0lC3da5sq9Md9Vt40O9LHjA5jsgB/HG8/H8/FiUzp4f7GSo5
-----END CERTIFICATE-----
Generated at Sun Jan 25 16:17:47 2026 by rpki-client