This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/W4mvkwwtCHw5UN6S5XPPqY3EGO4.roa
File: W4mvkwwtCHw5UN6S5XPPqY3EGO4.roa (raw, json)
Hash identifier: heQKmiXC52Rg17ABJcAeS2vcOORoQN22Gv/bSUHzMzQ=
Subject key identifier: 5B:89:AF:93:0C:2D:08:7C:39:50:DE:92:E5:73:CF:A9:8D:C4:18:EE
Certificate issuer: /CN=c20f008c1ccca62e6fc356d6342055a627dc6cf2
Certificate serial: 019AE76BBD395BB717102907789A32CDE1C9
Authority key identifier: C2:0F:00:8C:1C:CC:A6:2E:6F:C3:56:D6:34:20:55:A6:27:DC:6C:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wg8AjBzMpi5vw1bWNCBVpifcbPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/W4mvkwwtCHw5UN6S5XPPqY3EGO4.roa
Signing time: Thu 04 Dec 2025 03:33:08 +0000
ROA not before: Thu 04 Dec 2025 03:33:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 196969
IP address blocks: 195.54.184.0/22 maxlen: 22
195.54.184.0/24 maxlen: 24
195.54.185.0/24 maxlen: 24
195.54.186.0/24 maxlen: 24
195.54.187.0/24 maxlen: 24
195.54.188.0/23 maxlen: 23
195.54.188.0/24 maxlen: 24
195.54.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/wg8AjBzMpi5vw1bWNCBVpifcbPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/wg8AjBzMpi5vw1bWNCBVpifcbPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/wg8AjBzMpi5vw1bWNCBVpifcbPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:e7:6b:bd:39:5b:b7:17:10:29:07:78:9a:32:cd:e1:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c20f008c1ccca62e6fc356d6342055a627dc6cf2
Validity
Not Before: Dec 4 03:33:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b89af930c2d087c3950de92e573cfa98dc418ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8b:4f:99:64:c0:16:19:4e:c2:8f:5e:06:46:
2b:e8:7f:26:51:db:bd:07:91:5e:cd:e8:14:88:2b:
3c:49:ad:eb:f6:26:c1:c4:f4:f2:8f:34:ac:b2:fd:
bd:ad:f3:b6:09:03:9b:f1:20:fa:0c:7a:54:c0:39:
59:a8:0c:bb:40:09:75:2d:f5:5e:3a:ef:79:86:42:
0d:bf:05:87:9c:6b:6c:a3:a5:a2:7b:16:3f:ec:ef:
63:22:9c:b1:1a:32:47:d0:b2:35:fb:f8:88:38:5b:
ec:f0:ee:b9:58:03:4d:77:c4:75:bf:e6:26:93:28:
46:85:32:ed:a7:01:f2:3a:71:6e:16:21:1d:d3:13:
9a:6e:83:8f:1f:e0:3b:df:25:70:36:38:2c:6e:a3:
08:b7:a9:92:43:93:90:d8:a4:59:1c:10:7e:cb:6c:
f4:5c:b4:14:e8:d2:59:43:18:4e:1a:77:91:39:8e:
43:72:fc:16:55:f6:bd:87:6a:98:fd:63:e9:cc:49:
07:74:18:c9:e6:ed:c4:5f:66:aa:3a:00:56:64:27:
a7:5c:5b:2f:44:0a:ff:2a:5d:d5:89:50:28:7d:fd:
a2:ca:c6:3e:57:e9:a5:fe:34:83:e4:97:d5:8a:77:
d0:24:03:3a:ba:16:da:9d:cf:40:ae:d0:73:f8:e9:
9c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:89:AF:93:0C:2D:08:7C:39:50:DE:92:E5:73:CF:A9:8D:C4:18:EE
X509v3 Authority Key Identifier:
keyid:C2:0F:00:8C:1C:CC:A6:2E:6F:C3:56:D6:34:20:55:A6:27:DC:6C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wg8AjBzMpi5vw1bWNCBVpifcbPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/W4mvkwwtCHw5UN6S5XPPqY3EGO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/wg8AjBzMpi5vw1bWNCBVpifcbPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.54.184.0-195.54.189.255
Signature Algorithm: sha256WithRSAEncryption
98:30:a6:90:3e:4f:96:fe:3f:2b:10:8f:d5:17:20:c3:0d:97:
9a:f6:bd:33:3b:16:00:05:10:ae:ce:58:aa:ce:93:e5:82:43:
2b:d0:9f:6e:e5:b5:74:5e:53:5d:87:68:e8:01:a3:c6:03:4b:
6b:df:b4:7d:c6:7a:21:14:b5:b5:c7:78:d3:38:eb:64:66:28:
4c:f8:39:49:23:ad:58:7f:22:7d:78:6b:cd:25:82:df:61:3b:
9e:b5:52:52:5d:96:7d:73:df:ec:dd:a6:d5:18:95:ee:97:25:
7f:8c:a4:18:3f:e7:3b:94:0d:d8:99:3f:a0:35:14:94:66:7e:
39:ea:7e:55:7a:e8:87:d1:79:cb:b7:05:eb:59:78:6f:f9:5b:
25:43:64:71:3d:97:3c:3c:30:2c:40:59:97:0e:4e:9c:1b:53:
6d:29:ea:f7:6a:e1:0f:df:fd:54:52:d5:38:0f:d7:dd:3f:9b:
fe:58:0c:a8:b8:c9:3c:f2:08:cd:52:49:2b:e5:8f:ec:49:4b:
80:fc:82:4b:41:01:5e:b0:ca:2f:66:4e:d2:37:12:4f:1e:67:
26:67:e5:e9:e5:e0:6b:44:ab:b6:55:82:7e:eb:93:e6:2e:49:
1b:31:3a:fb:49:77:26:f7:2a:69:da:8e:33:b5:c5:ce:49:1b:
c9:6c:38:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:07:16 2025 by rpki-client