This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wsU-SDGGPY0WF8Dk9lkXo4SBGfQ.roa
File: wsU-SDGGPY0WF8Dk9lkXo4SBGfQ.roa (raw, json)
Hash identifier: D4upRALbSj0MUlYocexGfZTqElkFHFvjUoUJ+pi7VU8=
Subject key identifier: C2:C5:3E:48:31:86:3D:8D:16:17:C0:E4:F6:59:17:A3:84:81:19:F4
Certificate issuer: /CN=c2d21e804ab7713ad7877dde603aa7824b31983c
Certificate serial: 019B78A2B4E2BB176D1E5A76099E0E737631
Authority key identifier: C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wsU-SDGGPY0WF8Dk9lkXo4SBGfQ.roa
Signing time: Thu 01 Jan 2026 08:18:07 +0000
ROA not before: Thu 01 Jan 2026 08:18:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47377
IP address blocks: 195.182.200.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Jan 2026 23:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:a2:b4:e2:bb:17:6d:1e:5a:76:09:9e:0e:73:76:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2d21e804ab7713ad7877dde603aa7824b31983c
Validity
Not Before: Jan 1 08:18:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c2c53e4831863d8d1617c0e4f65917a3848119f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:4f:16:67:de:05:8c:02:dd:56:22:71:95:31:
02:26:3d:e5:19:66:63:59:fd:e1:41:ae:87:34:f0:
1c:7c:a0:01:63:2e:88:db:dc:89:a2:df:2c:17:b9:
5d:6a:69:ea:38:62:1d:9e:b5:b0:27:86:fa:a1:c3:
7d:cf:b0:d7:5d:cd:b4:cc:18:0c:7a:25:f6:0f:fb:
c4:2d:1a:d6:60:1d:c7:05:00:0e:73:15:d7:bd:27:
77:24:39:d2:46:06:f4:68:ce:6c:47:09:65:f0:f9:
38:f8:69:f9:5d:93:36:74:99:5c:f3:47:1e:68:73:
ef:fa:73:42:d0:11:db:45:c1:2a:4b:4b:d7:9b:02:
2d:70:b2:4f:a0:83:ce:2c:bd:8a:f4:34:8c:48:5b:
16:79:26:0d:04:a9:39:41:1e:86:86:46:32:0d:4d:
b8:d8:b2:30:c1:0e:57:f9:97:62:95:47:fe:c5:57:
5e:97:13:d9:55:00:c8:0a:45:12:b0:0a:81:f7:7e:
49:bd:56:59:97:7a:eb:b3:11:46:0c:da:d8:dd:7e:
48:5c:23:02:17:b1:41:fe:64:a3:5b:f6:a5:bb:6a:
57:7b:60:05:1c:d1:83:bc:49:89:93:0d:ad:71:02:
d7:17:31:60:1f:38:67:27:6c:73:50:35:0f:81:d3:
cf:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:C5:3E:48:31:86:3D:8D:16:17:C0:E4:F6:59:17:A3:84:81:19:F4
X509v3 Authority Key Identifier:
keyid:C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wsU-SDGGPY0WF8Dk9lkXo4SBGfQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.182.200.0/23
Signature Algorithm: sha256WithRSAEncryption
60:f8:7f:21:f8:3d:46:4f:f6:00:89:4e:7f:57:98:af:ad:39:
a7:31:3e:1c:49:19:01:b8:8d:e7:ac:9d:99:06:33:c0:2a:66:
e3:70:c3:63:49:83:bf:70:5b:00:2e:25:54:26:64:16:18:59:
a9:44:50:1b:03:38:06:f6:c1:95:b9:4d:ad:1f:e4:ec:79:a6:
46:3a:9d:89:3b:1c:f9:aa:e4:22:9f:2d:d9:72:92:8e:eb:5f:
f5:9a:4b:0c:81:a9:fe:ca:8b:bd:59:f5:7c:b3:87:83:71:1b:
e6:c8:c4:e9:ba:5e:5d:61:31:9f:f2:08:cb:71:59:43:0c:c5:
4d:b7:c2:76:08:7c:7d:4f:97:6e:7e:58:a6:08:98:e6:86:e9:
fc:41:73:27:5a:21:72:b5:2d:23:95:93:6a:90:de:99:8b:0f:
d7:99:3f:67:1c:f9:ac:2f:30:31:19:f5:79:57:bf:3c:2f:1c:
4c:89:a9:88:4e:b8:08:72:54:49:c3:a5:35:01:82:f6:79:36:
3f:80:a4:85:50:26:68:ee:ce:ba:06:65:39:f8:df:7e:ee:28:
d9:30:ec:e9:d6:27:a5:e3:e9:97:f5:3f:89:a2:44:8f:f8:d4:
7a:f0:b4:b5:62:a1:02:ad:f1:2d:4c:72:11:5d:32:0f:9f:03:
ea:90:76:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:37:47 2026 by rpki-client