This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/WC6EBIjiAER5lgIGGhXpUnsJaMY.roa
File: WC6EBIjiAER5lgIGGhXpUnsJaMY.roa (raw, json)
Hash identifier: fIsVrWQoNzwMR1jG4hms/me3nMp9f7WFOVArNQIs1TQ=
Subject key identifier: 58:2E:84:04:88:E2:00:44:79:96:02:06:1A:15:E9:52:7B:09:68:C6
Certificate issuer: /CN=815887f45abbc081aa469a65c1798de6110d9c89
Certificate serial: 019B7AC90924F4120A446F50C7D140006146
Authority key identifier: 81:58:87:F4:5A:BB:C0:81:AA:46:9A:65:C1:79:8D:E6:11:0D:9C:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gViH9Fq7wIGqRpplwXmN5hENnIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/WC6EBIjiAER5lgIGGhXpUnsJaMY.roa
Signing time: Thu 01 Jan 2026 18:19:14 +0000
ROA not before: Thu 01 Jan 2026 18:19:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3303
IP address blocks: 194.48.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/gViH9Fq7wIGqRpplwXmN5hENnIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/gViH9Fq7wIGqRpplwXmN5hENnIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gViH9Fq7wIGqRpplwXmN5hENnIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:c9:09:24:f4:12:0a:44:6f:50:c7:d1:40:00:61:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=815887f45abbc081aa469a65c1798de6110d9c89
Validity
Not Before: Jan 1 18:19:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=582e840488e20044799602061a15e9527b0968c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7f:7b:4a:62:6a:fd:3a:7c:c1:a7:36:07:67:
e2:4d:24:ce:ff:ee:f2:98:f3:de:4d:ae:bc:fe:3c:
e2:7e:ba:ec:6b:8d:20:08:da:94:39:fe:53:5b:67:
97:f8:5c:98:cc:8c:26:6c:d2:72:16:b9:90:01:b5:
53:fe:90:0e:63:62:af:d2:5d:69:e6:a5:78:08:e1:
4b:9c:3f:d4:2a:d6:42:d2:11:bb:0d:2e:da:a5:35:
fd:3f:9c:6e:06:6d:7c:c6:56:15:42:84:9a:8e:a5:
91:ad:c9:1a:b5:70:76:41:df:c7:a1:71:4b:84:a4:
e8:8e:b9:4f:d0:76:e3:cc:eb:81:99:d7:84:ba:1e:
6e:ec:02:1c:ef:ed:32:7f:57:25:18:1d:6f:c2:bb:
56:4b:88:3e:24:06:9b:0a:e0:74:ba:bb:e6:a4:7e:
de:7f:a4:bf:b2:1b:e8:1d:ea:cd:2a:5a:bd:25:7c:
4a:19:54:ed:52:b2:e5:7b:f2:d2:82:bb:11:64:ca:
e5:88:e0:50:53:59:95:1c:5d:45:ef:15:04:51:73:
9b:91:78:4a:11:68:66:6c:34:40:ca:c9:7b:5c:3d:
5f:a9:19:2b:f9:38:df:38:71:8a:b7:09:37:3d:50:
4f:8a:92:f3:71:47:92:02:d0:7d:05:6b:cf:d2:0d:
6f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:2E:84:04:88:E2:00:44:79:96:02:06:1A:15:E9:52:7B:09:68:C6
X509v3 Authority Key Identifier:
keyid:81:58:87:F4:5A:BB:C0:81:AA:46:9A:65:C1:79:8D:E6:11:0D:9C:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gViH9Fq7wIGqRpplwXmN5hENnIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/WC6EBIjiAER5lgIGGhXpUnsJaMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/gViH9Fq7wIGqRpplwXmN5hENnIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.48.215.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:73:17:84:6c:a2:8a:87:47:f4:ab:93:57:f7:f5:72:a8:97:
62:7f:cf:e4:f8:c5:48:0b:23:31:aa:a2:6e:40:95:94:33:a0:
53:e8:09:8f:65:4b:18:88:55:82:b2:8a:b0:5e:41:2c:8f:14:
c5:97:42:a1:18:90:95:56:ff:c9:e3:f6:62:ce:1e:2a:d2:4b:
f0:ee:ef:bd:a4:1b:da:e9:7c:0e:33:65:cc:1f:3c:0f:b1:f7:
11:3c:02:a4:ee:d5:0a:ac:90:b7:ed:2d:4c:d7:dd:e4:c8:c8:
89:66:43:11:50:76:d1:1b:2f:fb:47:ee:8c:d6:d1:31:8a:34:
24:e4:4e:fa:8a:e9:09:2e:6c:2d:ca:c3:e2:47:4e:a3:f2:0b:
66:51:fb:7a:aa:05:e5:56:44:f8:1a:e5:62:30:94:41:31:99:
27:13:fb:04:b3:54:4b:1a:33:66:e0:bf:61:d2:82:50:b6:c1:
64:7f:8b:6c:4c:5a:c4:de:c5:d2:5d:d1:d6:eb:e1:c1:f2:e0:
46:2e:d7:4a:d6:b1:08:23:3e:c6:e2:24:31:fc:de:b4:3c:87:
43:c0:50:5b:40:ac:51:5a:66:05:95:16:76:68:60:4c:a9:44:
41:4b:4c:53:7a:cc:3b:4c:93:96:e5:5e:45:aa:a3:a0:96:f7:
43:1d:ad:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:22:21 2026 by rpki-client