This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/W7nZVgb0zUWTa-CQSc8zglFn-yk.roa
File: W7nZVgb0zUWTa-CQSc8zglFn-yk.roa (raw, json)
Hash identifier: 8qZZ+7l1ZHC/t+K4fj+5zc9uGqORgxBHYmAlmab2Xnc=
Subject key identifier: 5B:B9:D9:56:06:F4:CD:45:93:6B:E0:90:49:CF:33:82:51:67:FB:29
Certificate issuer: /CN=a608db43964b6986ec740f0b5e33f627589ac560
Certificate serial: 019B7C1265D79AB928711AAD603FFF996CD7
Authority key identifier: A6:08:DB:43:96:4B:69:86:EC:74:0F:0B:5E:33:F6:27:58:9A:C5:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/W7nZVgb0zUWTa-CQSc8zglFn-yk.roa
Signing time: Fri 02 Jan 2026 00:18:59 +0000
ROA not before: Fri 02 Jan 2026 00:18:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41202
IP address blocks: 176.96.236.0/24 maxlen: 24
176.96.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 15:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:12:65:d7:9a:b9:28:71:1a:ad:60:3f:ff:99:6c:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a608db43964b6986ec740f0b5e33f627589ac560
Validity
Not Before: Jan 2 00:18:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5bb9d95606f4cd45936be09049cf33825167fb29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d8:7a:57:89:ae:14:fd:ca:28:ae:3a:86:65:
fc:32:5a:bf:86:d9:1c:84:68:b5:bd:a6:f4:28:ea:
97:d8:ca:28:14:80:15:90:ab:87:bf:5f:f0:79:bd:
75:cb:6f:cb:c8:56:81:62:ce:5d:88:c3:01:21:59:
bc:fc:10:79:aa:40:a5:a6:ec:48:ef:b7:90:ed:5e:
5e:86:be:2f:22:ff:f0:67:bf:23:e0:b2:54:9c:43:
3b:3f:be:66:28:49:bd:f5:e9:dd:03:a6:4d:6f:35:
4f:20:ae:e2:ca:f2:a0:54:7c:6c:c6:c8:e4:bd:3a:
ab:31:35:18:9a:8b:1e:2f:5a:74:10:67:50:8c:07:
1b:f3:a5:b3:69:58:19:59:70:6f:d1:4d:bb:6a:07:
25:35:52:8e:d5:36:1c:58:b3:17:f0:bd:15:0b:3b:
64:1e:5f:9c:5e:5a:ad:d1:c5:8a:db:f2:7d:91:79:
50:ae:5a:e7:2c:9f:b0:75:aa:f1:64:e8:d4:01:2d:
ba:2f:cd:2e:47:41:94:bf:76:fc:48:44:e6:df:31:
00:e0:ce:ba:75:ae:2a:05:37:f6:e7:35:91:a9:da:
93:9b:bb:8c:d7:fb:e2:72:03:fb:b5:ba:37:54:80:
15:f1:db:b3:0c:ff:c3:83:6a:43:d9:32:fb:97:6d:
e7:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:B9:D9:56:06:F4:CD:45:93:6B:E0:90:49:CF:33:82:51:67:FB:29
X509v3 Authority Key Identifier:
keyid:A6:08:DB:43:96:4B:69:86:EC:74:0F:0B:5E:33:F6:27:58:9A:C5:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/W7nZVgb0zUWTa-CQSc8zglFn-yk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.96.236.0/24
176.96.254.0/24
Signature Algorithm: sha256WithRSAEncryption
38:35:19:19:64:5e:31:1f:41:78:ab:88:05:87:0f:dc:dc:8e:
30:07:71:68:c9:38:1a:6a:cf:77:7d:17:38:a5:31:a7:2c:1b:
4f:d1:ed:e7:44:d8:b3:a6:1d:a9:95:b4:03:84:4c:a0:be:89:
e7:4e:93:9b:a6:9d:6f:37:c4:37:c5:94:10:79:40:00:69:6b:
46:c1:fa:2f:4a:46:40:a7:53:d0:76:d7:82:7f:7b:79:d6:28:
3d:51:8e:0b:c1:ae:74:3d:36:a9:6d:81:d5:93:ef:61:94:ed:
64:98:db:c7:5f:8a:03:12:04:29:7c:85:1e:e4:65:84:c0:d3:
60:9c:cd:c1:4b:97:b4:d1:78:91:47:79:9c:5f:f9:b8:e7:c7:
87:49:cc:de:6e:d6:e0:21:ee:1c:16:d5:52:c6:93:38:a4:df:
7a:83:9e:3b:4e:9f:6b:3b:51:9f:13:d7:6f:c0:e1:82:74:90:
cd:86:89:db:11:be:6b:db:a2:d1:fa:1f:54:0d:04:17:04:77:
05:c5:6c:cb:6c:36:cf:e0:da:fc:ae:20:27:d0:0e:ca:69:fd:
eb:a1:c4:ba:63:83:0b:96:84:08:13:05:e1:6e:44:a4:4e:e0:
ab:e2:1b:b6:4a:bc:f6:cc:1a:2f:e7:81:10:73:d8:1a:94:83:
75:61:d5:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:15:36 2026 by rpki-client