This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/e7a772-8b39-430d-b192-a1b8bc5b2cd7/1/WEFbXTk7yeRkC088JT7a_ioRbi0.roa
File: WEFbXTk7yeRkC088JT7a_ioRbi0.roa (raw, json)
Hash identifier: 3qKJYS5NzbZWhGkSEbXPMuOX8xOy4zfcmmxRc/G+Gk4=
Subject key identifier: 58:41:5B:5D:39:3B:C9:E4:64:0B:4F:3C:25:3E:DA:FE:2A:11:6E:2D
Certificate issuer: /CN=de0af7d83c5eeb0d434ad753c6a5f47549698b37
Certificate serial: 019B7758796C8189560DAA74D1EC8D8461CB
Authority key identifier: DE:0A:F7:D8:3C:5E:EB:0D:43:4A:D7:53:C6:A5:F4:75:49:69:8B:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3gr32Dxe6w1DStdTxqX0dUlpizc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/e7a772-8b39-430d-b192-a1b8bc5b2cd7/1/WEFbXTk7yeRkC088JT7a_ioRbi0.roa
Signing time: Thu 01 Jan 2026 02:17:25 +0000
ROA not before: Thu 01 Jan 2026 02:17:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47543
IP address blocks: 194.26.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/e7a772-8b39-430d-b192-a1b8bc5b2cd7/1/3gr32Dxe6w1DStdTxqX0dUlpizc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/e7a772-8b39-430d-b192-a1b8bc5b2cd7/1/3gr32Dxe6w1DStdTxqX0dUlpizc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3gr32Dxe6w1DStdTxqX0dUlpizc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 14:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:58:79:6c:81:89:56:0d:aa:74:d1:ec:8d:84:61:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de0af7d83c5eeb0d434ad753c6a5f47549698b37
Validity
Not Before: Jan 1 02:17:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=58415b5d393bc9e4640b4f3c253edafe2a116e2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:3f:d8:f8:6e:37:c6:e4:20:28:be:77:78:26:
59:33:65:3a:d1:47:dc:41:27:a7:08:92:fc:8a:31:
40:ed:02:24:ea:af:da:ea:e2:b9:15:65:36:a2:78:
d5:49:3f:6e:fa:3d:87:42:1e:f9:22:2e:2c:21:82:
89:b8:8b:70:d5:7c:77:d5:55:a3:83:66:8f:50:d4:
96:f3:10:3e:93:1b:90:bf:8d:e0:73:ed:ed:f3:01:
5d:13:c4:8e:74:f0:48:b1:e0:c5:69:a8:fa:97:87:
07:77:79:66:d6:70:97:f9:99:2a:87:d2:15:2c:ac:
8c:77:aa:43:5e:f4:be:16:bc:f2:ad:58:98:46:c2:
36:a3:90:c5:12:7e:33:4d:b5:00:4c:f8:da:02:d4:
1e:01:19:b1:0e:0e:64:7c:64:17:91:05:84:dc:13:
71:ce:c1:a7:67:57:a0:6c:74:48:d0:48:e0:fa:58:
a8:cc:cf:d1:84:e3:91:e9:cf:a7:d3:cb:95:da:61:
36:90:7e:01:a5:8a:0a:20:9a:80:1b:89:5e:df:55:
7f:7e:d0:b5:2e:3c:45:07:31:0f:c2:f9:4f:f1:f3:
6b:02:db:6d:47:ef:8a:eb:86:45:6d:ce:c2:45:ad:
0d:07:dc:53:c7:c6:61:bc:c4:5c:74:46:8b:64:13:
ff:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:41:5B:5D:39:3B:C9:E4:64:0B:4F:3C:25:3E:DA:FE:2A:11:6E:2D
X509v3 Authority Key Identifier:
keyid:DE:0A:F7:D8:3C:5E:EB:0D:43:4A:D7:53:C6:A5:F4:75:49:69:8B:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3gr32Dxe6w1DStdTxqX0dUlpizc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e7a772-8b39-430d-b192-a1b8bc5b2cd7/1/WEFbXTk7yeRkC088JT7a_ioRbi0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e7a772-8b39-430d-b192-a1b8bc5b2cd7/1/3gr32Dxe6w1DStdTxqX0dUlpizc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.148.0/24
Signature Algorithm: sha256WithRSAEncryption
85:e1:43:21:04:c8:ea:73:fe:7e:ff:26:fa:d7:b5:e1:d1:16:
e5:65:79:b8:40:c0:71:75:5c:37:88:60:25:a1:f8:4d:72:90:
9c:63:5d:f3:d8:9a:4d:cd:83:19:45:a2:68:12:30:09:b9:f8:
b0:56:69:eb:b3:51:b4:cc:56:3b:da:2b:52:40:20:58:2f:bf:
6c:5b:65:0e:82:52:fa:98:46:46:9b:db:f0:ab:72:41:20:46:
de:ce:c3:49:ed:1a:96:e3:f2:38:55:1e:27:9a:53:59:ba:13:
7f:ed:00:d7:49:12:80:cb:65:4d:46:1f:df:c3:fe:20:6f:44:
5d:18:a4:8d:52:51:59:d0:55:0c:06:89:53:a7:8a:bd:86:18:
82:ef:54:dc:16:1d:db:3d:68:4d:92:d2:06:cb:a3:fe:ec:c4:
ea:11:3d:65:61:06:7f:47:b2:e9:94:06:ca:91:4b:bc:77:98:
e6:b8:4f:9e:c4:7a:2f:c3:f8:8b:6c:5d:bb:f1:b6:dc:00:1f:
3d:55:f1:08:0c:92:55:0f:57:c0:f7:45:7a:20:cb:5f:41:23:
8b:8a:e2:8f:76:b4:7e:81:0b:d7:06:e2:e9:ed:c7:dd:7b:53:
85:b0:af:0c:55:c7:34:36:36:96:88:f9:a8:e4:09:a0:0c:85:
8c:6e:7b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 18:10:51 2026 by rpki-client