This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/41ebbf-80ca-41e1-b1cc-ca378e52930c/1/won-rMlVc5f0fR1j1wVR-WJ4XwM.roa
File: won-rMlVc5f0fR1j1wVR-WJ4XwM.roa (raw, json)
Hash identifier: sFqj/s20YQjjosi4ia2yNwu6UamPVX+VuDC5TE8JqcM=
Subject key identifier: C2:89:FE:AC:C9:55:73:97:F4:7D:1D:63:D7:05:51:F9:62:78:5F:03
Certificate issuer: /CN=8f3012474e6aa1b36b42064dd175b30ed822e735
Certificate serial: 019B77C686F7402AE619C95A1EFD8376AA69
Authority key identifier: 8F:30:12:47:4E:6A:A1:B3:6B:42:06:4D:D1:75:B3:0E:D8:22:E7:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzASR05qobNrQgZN0XWzDtgi5zU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/41ebbf-80ca-41e1-b1cc-ca378e52930c/1/won-rMlVc5f0fR1j1wVR-WJ4XwM.roa
Signing time: Thu 01 Jan 2026 04:17:38 +0000
ROA not before: Thu 01 Jan 2026 04:17:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205843
IP address blocks: 185.158.205.0/24 maxlen: 24
2a10:2140::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/41ebbf-80ca-41e1-b1cc-ca378e52930c/1/jzASR05qobNrQgZN0XWzDtgi5zU.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/41ebbf-80ca-41e1-b1cc-ca378e52930c/1/jzASR05qobNrQgZN0XWzDtgi5zU.mft
rsync://rpki.ripe.net/repository/DEFAULT/jzASR05qobNrQgZN0XWzDtgi5zU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c6:86:f7:40:2a:e6:19:c9:5a:1e:fd:83:76:aa:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3012474e6aa1b36b42064dd175b30ed822e735
Validity
Not Before: Jan 1 04:17:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c289feacc9557397f47d1d63d70551f962785f03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:15:e1:75:ed:de:e5:2c:89:b5:5a:19:3e:0d:
c7:dd:06:62:f7:32:26:18:98:01:8e:94:cf:0e:c7:
a4:88:60:6a:cd:32:45:bc:84:62:40:b8:b7:ca:a4:
74:ed:73:3c:c4:2d:8e:bb:68:a2:b5:64:b4:84:38:
2f:58:ea:07:45:09:7b:9c:4c:08:f1:65:c0:f7:5a:
c9:78:00:9c:28:1d:31:95:3e:57:7a:cb:a4:28:ed:
e1:5f:6b:3b:ee:49:8e:98:51:3f:02:ad:1d:74:64:
88:34:e0:e3:b7:2a:0a:a5:55:7d:5c:82:36:e7:41:
86:4f:6e:f4:80:93:9b:fa:e3:bd:57:67:62:04:7e:
0d:54:0a:9c:53:41:ca:d9:e4:41:3c:8c:91:70:e9:
2b:38:8d:e4:19:c0:fc:20:b7:f3:63:37:a8:cf:cc:
cf:4a:6e:0b:d0:62:d0:da:a6:c1:65:26:f6:ab:07:
b4:be:b9:5b:65:0a:be:e6:56:2a:36:d6:6e:cc:c6:
e0:15:78:5a:91:c0:33:1f:90:62:da:b3:33:6c:1b:
03:1b:ea:bf:09:4a:4d:b8:ad:32:fc:cc:04:9c:f6:
ce:1a:6b:88:de:42:dc:36:18:b3:92:ea:7f:32:17:
48:1e:e6:aa:5e:57:af:3c:d7:ca:94:8a:04:14:16:
3d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:89:FE:AC:C9:55:73:97:F4:7D:1D:63:D7:05:51:F9:62:78:5F:03
X509v3 Authority Key Identifier:
keyid:8F:30:12:47:4E:6A:A1:B3:6B:42:06:4D:D1:75:B3:0E:D8:22:E7:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzASR05qobNrQgZN0XWzDtgi5zU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/41ebbf-80ca-41e1-b1cc-ca378e52930c/1/won-rMlVc5f0fR1j1wVR-WJ4XwM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/41ebbf-80ca-41e1-b1cc-ca378e52930c/1/jzASR05qobNrQgZN0XWzDtgi5zU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.158.205.0/24
IPv6:
2a10:2140::/29
Signature Algorithm: sha256WithRSAEncryption
79:83:4d:d7:d6:87:fa:31:a9:95:2c:e8:8c:0f:33:d0:76:b5:
23:50:9e:30:49:f4:11:00:5a:5e:e3:e1:9b:24:37:eb:a4:f6:
d5:44:fb:74:47:3b:07:8e:fa:60:ab:e2:40:9c:51:f2:c1:5b:
f1:47:e4:c6:96:ea:9f:69:87:c0:2e:b9:69:eb:35:78:a8:d6:
22:27:81:83:5c:49:df:59:b1:13:c1:bf:64:4a:b0:a0:f7:c5:
5d:e5:eb:ac:7d:98:6c:3e:a7:cc:92:6e:cb:88:29:49:48:5c:
f8:76:99:46:6f:cd:08:82:46:90:2c:29:91:ac:ab:d9:3a:17:
f3:e3:23:39:a1:27:05:fe:9a:63:14:40:bf:8f:02:4c:63:1d:
cd:e6:85:aa:5a:ca:b2:71:65:96:7f:58:a5:30:2a:02:cc:44:
2e:f3:a2:71:26:8f:cd:e6:bd:1c:65:93:f5:1c:47:dd:6f:b9:
87:91:c3:f7:eb:20:87:ba:9a:45:21:ce:5d:2d:a0:6d:6a:18:
3a:da:4c:db:d4:35:51:f0:48:52:a7:30:e6:59:7b:d9:7f:b5:
3f:73:88:93:1e:ed:7d:3a:56:54:10:f5:ee:59:6d:cb:96:e2:
60:91:ec:ea:5e:06:cf:64:b5:b6:0c:e1:44:11:32:51:24:81:
ab:4c:5f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:42:32 2026 by rpki-client