This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/wxTngr8H44YCJzcu7P6lg3G3SRY.roa
File: wxTngr8H44YCJzcu7P6lg3G3SRY.roa (raw, json)
Hash identifier: QQ3FIar7CVRkDArdx6CFZswBQCLSJjqWlffrOW51P4w=
Subject key identifier: C3:14:E7:82:BF:07:E3:86:02:27:37:2E:EC:FE:A5:83:71:B7:49:16
Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Certificate serial: 019B2793B3E044F1B4E7E8020614C4718551
Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/wxTngr8H44YCJzcu7P6lg3G3SRY.roa
Signing time: Tue 16 Dec 2025 14:32:29 +0000
ROA not before: Tue 16 Dec 2025 14:32:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206760
IP address blocks: 91.107.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 15:46:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:27:93:b3:e0:44:f1:b4:e7:e8:02:06:14:c4:71:85:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Validity
Not Before: Dec 16 14:32:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c314e782bf07e3860227372eecfea58371b74916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:c2:df:43:cf:2e:48:ca:b2:9f:c8:2a:38:ff:
91:78:50:d5:d3:c1:41:da:1b:e5:a2:de:df:75:2e:
71:77:1e:6c:67:a6:a3:35:bb:b9:d5:14:17:4e:5e:
ae:0c:0d:7d:0d:f4:34:93:7d:59:c8:ad:7d:f4:76:
5f:1d:8a:e0:83:7a:d1:15:1c:41:fd:52:e8:23:35:
6a:78:f8:d2:8e:03:be:3c:a3:de:eb:a1:b5:d7:a4:
be:a3:ef:7d:8d:d0:fb:92:75:eb:c8:01:01:01:98:
d6:81:b8:db:d7:9b:7c:56:95:2a:08:36:58:7f:68:
a4:ab:75:aa:1f:c0:97:dc:00:9a:39:68:93:30:95:
58:36:38:a8:bc:f8:a7:b4:7d:0d:75:cd:7e:63:d0:
54:cc:6c:dd:4b:0c:23:0e:96:dc:8d:d5:35:81:f7:
7f:e4:9e:97:7a:b0:44:26:3c:70:e1:5e:2b:47:39:
c3:52:98:f7:99:ed:3a:66:9d:ef:70:50:44:90:9d:
5d:a6:12:31:c9:f0:07:71:60:32:e4:54:72:7d:f1:
68:3d:37:1e:c2:bd:b8:a9:c5:68:7d:03:ae:02:9b:
91:c8:a2:92:31:3b:59:3a:b5:fe:69:39:f9:8d:11:
79:9b:f3:4f:83:1e:8b:4e:e9:e0:e6:6c:a7:51:60:
27:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:14:E7:82:BF:07:E3:86:02:27:37:2E:EC:FE:A5:83:71:B7:49:16
X509v3 Authority Key Identifier:
keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/wxTngr8H44YCJzcu7P6lg3G3SRY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.107.118.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:61:05:48:b2:9e:86:d5:bc:d3:a6:52:53:8c:c7:92:49:88:
77:af:2a:ce:74:16:d4:df:f8:50:a4:2d:f7:1a:04:00:56:87:
30:ad:89:29:3b:66:4f:c0:9d:de:26:81:fa:69:b8:fa:75:a6:
e3:e6:f6:17:86:25:57:4c:9b:4b:96:77:1c:5b:38:a1:c5:cd:
54:53:c6:a8:5a:0d:18:66:6f:1c:59:24:9e:88:38:59:97:10:
81:f5:73:9e:ec:e2:7e:1c:77:75:bd:16:6a:e1:bf:1e:4d:37:
bd:6a:ee:60:f3:43:75:bf:48:44:9b:e0:91:83:ad:97:1a:57:
e7:59:e1:57:e3:82:f7:da:08:83:8f:b6:da:4e:79:dd:63:28:
4a:25:96:e4:5d:75:20:5f:05:c1:9f:16:32:07:d9:74:fb:ea:
00:40:ff:da:c2:f8:cb:ef:ea:88:83:c4:8c:23:88:6a:ce:b2:
d1:75:4e:18:95:4a:1d:a4:6f:25:0c:b1:e4:f5:e7:28:cf:f0:
3e:74:d3:86:68:47:f4:6a:8c:2e:10:f0:7b:48:c1:e2:ad:78:
83:2e:dc:0b:cd:6e:4c:b9:09:5d:9f:3f:f2:3d:25:0e:59:78:
9d:68:74:35:0f:74:5f:f2:98:63:c1:94:dc:a8:59:80:ce:63:
2b:eb:56:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 21:12:33 2025 by rpki-client