This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/4ea4f7-d70e-42a2-afd7-3e3a188f49de/1/WYrDXQ0rRZr6M_D44GE486jve2Q.roa
File: WYrDXQ0rRZr6M_D44GE486jve2Q.roa (raw, json)
Hash identifier: 2eWsjEkB/+yPdU7o4VpjzkpuoqTwi7z1HT9ZyI1cZsA=
Subject key identifier: 59:8A:C3:5D:0D:2B:45:9A:FA:33:F0:F8:E0:61:38:F3:A8:EF:7B:64
Certificate issuer: /CN=37915673b28bdfadb2c2019ac68d0464fd21b71a
Certificate serial: 019B7A5AC16C1B681860A6BC04436053C450
Authority key identifier: 37:91:56:73:B2:8B:DF:AD:B2:C2:01:9A:C6:8D:04:64:FD:21:B7:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N5FWc7KL362ywgGaxo0EZP0htxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/4ea4f7-d70e-42a2-afd7-3e3a188f49de/1/WYrDXQ0rRZr6M_D44GE486jve2Q.roa
Signing time: Thu 01 Jan 2026 16:18:46 +0000
ROA not before: Thu 01 Jan 2026 16:18:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 702
IP address blocks: 145.32.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/4ea4f7-d70e-42a2-afd7-3e3a188f49de/1/N5FWc7KL362ywgGaxo0EZP0htxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/4ea4f7-d70e-42a2-afd7-3e3a188f49de/1/N5FWc7KL362ywgGaxo0EZP0htxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/N5FWc7KL362ywgGaxo0EZP0htxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:5a:c1:6c:1b:68:18:60:a6:bc:04:43:60:53:c4:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37915673b28bdfadb2c2019ac68d0464fd21b71a
Validity
Not Before: Jan 1 16:18:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=598ac35d0d2b459afa33f0f8e06138f3a8ef7b64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1f:b2:44:b5:95:27:fa:26:d2:2d:43:59:e0:
96:94:41:20:d0:11:53:3d:ff:fe:cb:f1:26:c4:39:
d3:84:31:95:e6:e0:ee:ad:f8:bb:c1:93:f1:11:f3:
91:ae:06:e2:8e:1c:62:9d:42:85:e8:4e:ef:38:86:
62:13:36:4f:d6:f5:ff:7e:5e:d1:e8:89:23:4e:a0:
fe:ae:df:7f:bc:85:5e:d4:ac:42:51:f8:94:e3:f5:
b8:c2:f8:63:a5:98:aa:a0:4a:e1:73:13:66:b1:f9:
96:0b:55:f7:d7:67:a8:4e:21:81:ba:20:63:78:c4:
ab:89:c9:cf:0f:2c:6f:1a:d9:9c:74:07:26:23:da:
6d:e7:5e:db:85:7f:db:db:25:81:b7:6a:27:ac:66:
c8:90:e3:5f:cb:4a:2b:c7:a5:ef:1a:3b:70:ed:ff:
6f:b1:ec:55:c7:28:20:23:60:7f:15:31:4f:f5:c6:
03:0c:10:6d:ce:12:55:6a:dc:bf:db:2e:29:78:a4:
8a:e2:01:23:e7:9b:4a:71:ed:f2:fe:4d:ef:d9:44:
ca:38:b3:54:ce:12:6c:48:1c:b9:f5:9e:ad:5b:29:
5a:4b:dc:61:54:9d:cf:79:4c:72:b5:ca:15:73:88:
a9:1a:43:14:1d:e4:0c:a5:9d:b9:2a:20:6b:68:7c:
7c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:8A:C3:5D:0D:2B:45:9A:FA:33:F0:F8:E0:61:38:F3:A8:EF:7B:64
X509v3 Authority Key Identifier:
keyid:37:91:56:73:B2:8B:DF:AD:B2:C2:01:9A:C6:8D:04:64:FD:21:B7:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5FWc7KL362ywgGaxo0EZP0htxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/4ea4f7-d70e-42a2-afd7-3e3a188f49de/1/WYrDXQ0rRZr6M_D44GE486jve2Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/4ea4f7-d70e-42a2-afd7-3e3a188f49de/1/N5FWc7KL362ywgGaxo0EZP0htxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.32.0.0/16
Signature Algorithm: sha256WithRSAEncryption
55:1f:f4:fb:b3:e5:f8:54:d7:c2:09:db:ee:25:f8:de:9b:26:
58:9f:df:af:06:36:73:8b:c2:3b:09:96:a2:d7:38:b7:27:7f:
17:32:66:ae:bb:eb:2b:2a:7b:07:7b:48:f2:8b:45:b0:47:4e:
db:86:57:22:b7:07:ff:9e:e3:e1:df:17:9d:8a:41:b6:6e:1e:
87:71:d7:96:75:da:ce:27:55:24:11:99:58:29:f8:7d:55:4b:
e1:4b:a9:33:b4:cb:19:54:82:7e:24:d2:c1:50:ce:3c:d6:2f:
31:1f:28:62:40:46:4c:6c:2e:32:0e:62:ff:6f:e1:9b:01:ec:
6f:e5:2d:05:0d:92:f9:06:ad:16:a8:e4:69:b7:6b:65:84:9d:
39:3e:05:2e:50:c7:8b:8d:eb:e0:0f:dc:06:e7:83:cc:8e:92:
d9:43:45:e2:d2:0f:59:ea:27:fb:75:63:5c:99:1b:b9:a2:c0:
c0:8b:23:ed:10:34:e1:18:5e:87:ee:6d:e2:f1:a7:df:03:84:
e8:40:6f:84:6b:95:0a:9e:3c:f7:55:e4:ee:bd:9e:bc:68:37:
bd:26:f0:4b:88:cd:66:93:63:b3:72:12:ec:45:48:18:a2:ec:
52:f1:2e:5d:70:5c:7f:fb:cb:97:7d:0c:bb:e7:ba:8a:cc:18:
9d:d2:dc:87
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgISAZt6WsFsG2gYYKa8BENgU8RQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3OTE1NjczYjI4YmRmYWRiMmMyMDE5YWM2OGQwNDY0ZmQy
MWI3MWEwHhcNMjYwMTAxMTYxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OThhYzM1ZDBkMmI0NTlhZmEzM2YwZjhlMDYxMzhmM2E4ZWY3YjY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoR+yRLWVJ/om0i1DWeCWlEEg0BFT
Pf/+y/EmxDnThDGV5uDurfi7wZPxEfORrgbijhxinUKF6E7vOIZiEzZP1vX/fl7R
6IkjTqD+rt9/vIVe1KxCUfiU4/W4wvhjpZiqoErhcxNmsfmWC1X312eoTiGBuiBj
eMSricnPDyxvGtmcdAcmI9pt517bhX/b2yWBt2onrGbIkONfy0orx6XvGjtw7f9v
sexVxyggI2B/FTFP9cYDDBBtzhJVaty/2y4peKSK4gEj55tKce3y/k3v2UTKOLNU
zhJsSBy59Z6tWylaS9xhVJ3PeUxytcoVc4ipGkMUHeQMpZ25KiBraHx8hwIDAQAB
o4ICCDCCAgQwHQYDVR0OBBYEFFmKw10NK0Wa+jPw+OBhOPOo73tkMB8GA1UdIwQY
MBaAFDeRVnOyi9+tssIBmsaNBGT9IbcaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjVGV2M3S0wzNjJ5d2dHYXhvMEVaUDBodHhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS80ZWE0ZjctZDcwZS00MmEyLWFmZDct
M2UzYTE4OGY0OWRlLzEvV1lyRFhRMHJSWnI2TV9ENDRHRTQ4Nmp2ZTJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS80ZWE0ZjctZDcwZS00MmEyLWFmZDctM2UzYTE4OGY0OWRl
LzEvTjVGV2M3S0wzNjJ5d2dHYXhvMEVaUDBodHhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAkSAwDQYJ
KoZIhvcNAQELBQADggEBAFUf9Puz5fhU18IJ2+4l+N6bJlif368GNnOLwjsJlqLX
OLcnfxcyZq676ysqewd7SPKLRbBHTtuGVyK3B/+e4+HfF52KQbZuHodx15Z12s4n
VSQRmVgp+H1VS+FLqTO0yxlUgn4k0sFQzjzWLzEfKGJARkxsLjIOYv9v4ZsB7G/l
LQUNkvkGrRao5Gm3a2WEnTk+BS5Qx4uN6+AP3Abng8yOktlDReLSD1nqJ/t1Y1yZ
G7miwMCLI+0QNOEYXofubeLxp98DhOhAb4RrlQqePPdV5O69nrxoN70m8EuIzWaT
Y7NyEuxFSBii7FLxLl1wXH/7y5d9DLvnuorMGJ3S3Ic=
-----END CERTIFICATE-----
Generated at Sun Jan 25 15:14:07 2026 by rpki-client