This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/wAB319bF59pbqogEGue3dUyMfyU.roa
File: wAB319bF59pbqogEGue3dUyMfyU.roa (raw, json)
Hash identifier: 7tbkhOvjhN26XlWaA9QFm7KpD6qs3B3JEKiopbBlJO8=
Subject key identifier: C0:00:77:D7:D6:C5:E7:DA:5B:AA:88:04:1A:E7:B7:75:4C:8C:7F:25
Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Certificate serial: 019B7D5D1FE8F7BEBCE4462E439BD769F5D8
Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/wAB319bF59pbqogEGue3dUyMfyU.roa
Signing time: Fri 02 Jan 2026 06:20:13 +0000
ROA not before: Fri 02 Jan 2026 06:20:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51660
IP address blocks: 84.1.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.mft
rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:5d:1f:e8:f7:be:bc:e4:46:2e:43:9b:d7:69:f5:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Validity
Not Before: Jan 2 06:20:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c00077d7d6c5e7da5baa88041ae7b7754c8c7f25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:42:25:25:5c:87:00:b1:f3:20:d1:28:56:47:
d6:f7:db:cc:83:70:70:cc:5e:16:c1:d7:89:e0:17:
d5:69:f1:09:54:0b:78:7a:02:02:9f:3c:48:ff:f6:
5b:7d:c3:a1:37:72:59:e9:15:3a:38:15:2a:e1:37:
6d:7f:24:af:bb:55:7d:48:73:52:8f:fd:13:37:93:
b4:59:b3:48:41:7d:14:70:3a:97:d0:97:c2:2f:1a:
ba:fb:84:73:77:87:4a:32:c4:b3:d6:21:8c:ba:4a:
9e:69:54:96:7c:c8:86:51:c2:8d:05:18:76:fc:19:
af:eb:61:5e:d4:04:64:93:d2:b3:c6:ac:74:da:cc:
d9:de:7a:77:88:d1:99:a0:ad:c3:76:9d:44:ef:26:
db:63:6a:d6:dd:2a:9e:50:ed:d2:69:55:7d:36:f9:
93:33:0e:fa:bf:3a:92:9d:89:74:fd:55:dd:2a:ed:
98:69:44:2c:00:4e:70:4c:75:a7:40:60:00:02:bc:
a9:ba:82:be:c7:81:87:cf:5a:73:2b:2f:da:ab:2a:
7d:57:91:9b:84:39:e8:83:96:b9:f8:af:e5:ff:c3:
dc:76:1c:4e:57:31:af:8d:ef:b1:e3:dc:10:0b:48:
0e:b7:45:c6:da:26:43:43:2e:96:53:55:5c:34:52:
4a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:00:77:D7:D6:C5:E7:DA:5B:AA:88:04:1A:E7:B7:75:4C:8C:7F:25
X509v3 Authority Key Identifier:
keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/wAB319bF59pbqogEGue3dUyMfyU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.1.44.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:3c:77:eb:e5:08:ff:b7:c8:05:e5:e5:f1:2a:1c:b4:b5:fa:
17:03:7b:2c:ce:c5:ba:9d:b5:83:a0:6b:13:7e:63:e5:3d:3f:
56:e6:dd:42:ca:51:c8:eb:5a:bb:45:a9:ea:67:8c:b3:99:5e:
cf:fb:ac:36:47:fc:c4:54:51:73:99:c3:4b:04:22:35:05:c0:
ca:a6:c1:93:3f:91:9d:4f:db:f7:49:55:20:c8:40:21:5d:15:
6f:e4:89:09:1d:05:b2:0d:be:2a:f9:84:51:af:88:cd:c2:ba:
b4:a3:fb:83:91:d9:6e:21:88:db:f3:7d:54:21:c7:70:2a:1e:
af:44:79:34:c5:13:cf:43:7a:3f:e4:45:74:05:2f:92:c4:e0:
80:de:ea:54:0a:ba:cd:40:72:42:93:c2:8e:6f:23:99:c2:7b:
00:d6:2d:7a:2f:13:ab:98:0b:a3:2e:fd:f5:64:bf:2e:75:c5:
de:a4:d8:76:5f:18:2c:db:07:87:7e:92:55:91:2b:65:5f:b1:
b0:c5:57:33:1b:f0:53:62:b7:a2:77:2a:9d:83:7e:59:7d:55:
40:a2:5d:20:dd:77:42:b0:dc:e6:25:4e:91:46:fb:cd:41:8f:
8f:df:dd:47:3a:42:33:d2:a4:77:e9:20:5d:31:b7:a2:01:f4:
d6:24:e0:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:36:23 2026 by rpki-client