This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/791c33-a10e-43a9-ac29-e0d13230b9d5/1/wye8DmlYkdaQC1jq2FD5iM2DhEY.roa
File: wye8DmlYkdaQC1jq2FD5iM2DhEY.roa (raw, json)
Hash identifier: mjAPnFxN50juugPjJtBivCThtWn3b1yEogIYi0ZrGDQ=
Subject key identifier: C3:27:BC:0E:69:58:91:D6:90:0B:58:EA:D8:50:F9:88:CD:83:84:46
Certificate issuer: /CN=59d0a3f9c34307b0a5b36d2e6d1899aefe7bbeb4
Certificate serial: 019B7C80DAE408BD27C330F389745C59F93A
Authority key identifier: 59:D0:A3:F9:C3:43:07:B0:A5:B3:6D:2E:6D:18:99:AE:FE:7B:BE:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WdCj-cNDB7Cls20ubRiZrv57vrQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/791c33-a10e-43a9-ac29-e0d13230b9d5/1/wye8DmlYkdaQC1jq2FD5iM2DhEY.roa
Signing time: Fri 02 Jan 2026 02:19:37 +0000
ROA not before: Fri 02 Jan 2026 02:19:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60369
IP address blocks: 195.155.152.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/791c33-a10e-43a9-ac29-e0d13230b9d5/1/WdCj-cNDB7Cls20ubRiZrv57vrQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/791c33-a10e-43a9-ac29-e0d13230b9d5/1/WdCj-cNDB7Cls20ubRiZrv57vrQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/WdCj-cNDB7Cls20ubRiZrv57vrQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 01:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:80:da:e4:08:bd:27:c3:30:f3:89:74:5c:59:f9:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59d0a3f9c34307b0a5b36d2e6d1899aefe7bbeb4
Validity
Not Before: Jan 2 02:19:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c327bc0e695891d6900b58ead850f988cd838446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:80:f0:96:02:49:c8:cd:46:36:cc:00:06:48:
8e:83:11:b2:fc:25:c2:fe:07:d1:b3:b8:ff:7a:1f:
af:cf:92:6f:8a:86:eb:a7:f4:b0:f9:59:4e:28:01:
f0:94:b7:65:ac:ab:dd:16:f3:2b:41:85:9c:34:8f:
c7:48:06:aa:8a:e5:39:9e:cd:96:09:37:ad:e6:26:
e2:48:6d:e3:5e:2c:42:bc:4b:32:8a:78:8f:54:2b:
86:2d:7c:3e:4b:bf:e1:cc:c7:32:8b:70:94:7b:f2:
cd:3c:71:94:a5:f4:49:9a:08:cb:0f:b3:2a:a1:68:
a6:bb:e0:ab:cd:ac:8e:e3:16:07:38:a1:f9:a8:fc:
10:30:b7:2d:96:74:51:bd:ad:14:a8:fb:0c:a6:1b:
0f:af:e3:e2:60:a9:64:03:78:2c:78:ec:46:aa:c9:
e3:c4:0d:34:bf:54:22:1f:92:aa:17:26:6d:e8:6d:
f9:1f:e2:ab:e4:77:3a:56:55:33:3d:28:a7:91:c2:
e9:56:da:a9:c7:34:b4:01:36:fe:76:01:1b:8f:ff:
2d:63:94:07:62:61:e4:27:a0:51:ec:dc:10:e4:c8:
82:cb:aa:f4:d2:7b:0d:d8:85:92:e2:61:d8:81:95:
aa:32:e4:bd:35:4a:90:f9:cc:28:42:f3:35:8a:2c:
c6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:27:BC:0E:69:58:91:D6:90:0B:58:EA:D8:50:F9:88:CD:83:84:46
X509v3 Authority Key Identifier:
keyid:59:D0:A3:F9:C3:43:07:B0:A5:B3:6D:2E:6D:18:99:AE:FE:7B:BE:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WdCj-cNDB7Cls20ubRiZrv57vrQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/791c33-a10e-43a9-ac29-e0d13230b9d5/1/wye8DmlYkdaQC1jq2FD5iM2DhEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/791c33-a10e-43a9-ac29-e0d13230b9d5/1/WdCj-cNDB7Cls20ubRiZrv57vrQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.155.152.0/23
Signature Algorithm: sha256WithRSAEncryption
62:2a:ea:ed:c6:ad:3d:42:d0:03:4a:c5:76:3d:de:e3:e6:82:
47:0b:51:fe:4f:1b:f6:7c:61:dc:8b:05:6a:8a:00:57:a3:45:
ba:6e:e8:3c:cb:81:eb:65:62:4d:ab:ad:e0:93:42:15:a2:8e:
93:af:b1:75:b5:51:5b:0e:9c:ae:b0:6b:53:89:c8:2d:b5:67:
c1:b5:8e:ff:82:54:61:3f:6e:5f:5e:1c:59:bb:3f:ba:f4:52:
10:74:04:af:37:f8:5a:06:31:b7:25:83:36:79:98:6f:b6:89:
ad:9a:f9:59:48:1e:48:16:5d:75:de:2b:36:f2:87:89:bd:3c:
db:ed:e4:fc:ec:ec:6b:c7:fc:f1:cc:17:1e:bf:c2:4c:f0:ca:
7d:0c:75:a7:37:34:72:2f:6f:0e:78:b6:03:ed:47:2b:03:9d:
49:a0:39:e9:c0:55:26:91:79:44:e1:13:98:88:84:99:3d:51:
4b:c8:b0:38:7a:19:b3:34:c1:a4:fb:27:a9:28:d5:ab:b6:66:
f0:05:92:b8:48:9e:76:a5:9e:9e:c3:00:b8:49:ac:da:2c:cb:
b8:b4:fa:ff:a3:5f:aa:1e:e3:d5:be:b0:21:72:95:3e:42:ad:
81:ea:32:39:07:59:b0:b4:69:51:3e:ca:de:66:2e:90:67:3c:
73:1b:af:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 10:23:08 2026 by rpki-client