This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/RWngzIpflyYrQE7Q5_vjL_MfCps.roa
File: RWngzIpflyYrQE7Q5_vjL_MfCps.roa (raw, json)
Hash identifier: d/wW8tmTZ7+s9myk9bzCrZ8v6wdVzEONc0dmPhpsi5Q=
Subject key identifier: 45:69:E0:CC:8A:5F:97:26:2B:40:4E:D0:E7:FB:E3:2F:F3:1F:0A:9B
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019B7DCB6C1F363BD407003E7BBAEE7694C2
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/RWngzIpflyYrQE7Q5_vjL_MfCps.roa
Signing time: Fri 02 Jan 2026 08:20:42 +0000
ROA not before: Fri 02 Jan 2026 08:20:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205896
IP address blocks: 151.245.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Jan 2026 00:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:cb:6c:1f:36:3b:d4:07:00:3e:7b:ba:ee:76:94:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jan 2 08:20:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4569e0cc8a5f97262b404ed0e7fbe32ff31f0a9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:90:47:d5:ed:f8:65:b1:31:61:eb:94:aa:eb:
15:89:da:58:3a:a1:ab:cf:68:94:a9:61:db:49:6b:
17:ef:85:ce:40:88:1b:4a:2f:24:15:b8:57:9d:a5:
02:08:0e:92:42:fc:b9:36:48:64:bd:0d:36:af:c5:
ce:03:1a:70:76:89:7c:83:a2:f3:b0:ad:94:9d:9e:
37:ea:d0:ce:17:58:e4:cb:26:c5:4a:62:f6:12:45:
3a:a6:75:e3:b3:d4:f7:f8:f4:df:c0:a4:14:b9:c7:
6b:b1:30:24:45:c6:d5:f5:0f:53:bf:3d:ac:a9:c6:
a0:db:97:04:45:4a:a9:2e:22:23:0f:d2:a8:d0:ab:
31:8c:bd:5d:91:cc:4f:3a:2b:c0:6f:71:80:d1:0d:
c3:2d:62:0b:f6:93:15:19:dd:51:73:11:f2:0e:2f:
ed:73:ac:fa:81:0a:77:75:56:ec:da:a1:53:32:8c:
30:c7:a5:40:12:57:5f:6c:1e:7e:37:b3:fd:6b:8a:
88:b3:bf:fd:e6:f0:d3:b5:e2:35:c1:a2:8f:b1:34:
39:46:61:d9:19:63:60:42:e8:ab:df:d3:3a:69:94:
ff:c3:31:f6:d9:a5:01:c2:be:38:eb:81:54:77:56:
2c:f0:67:f2:ab:55:b5:34:c1:af:0d:56:1c:28:03:
2a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:69:E0:CC:8A:5F:97:26:2B:40:4E:D0:E7:FB:E3:2F:F3:1F:0A:9B
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/RWngzIpflyYrQE7Q5_vjL_MfCps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.245.36.0/24
Signature Algorithm: sha256WithRSAEncryption
01:72:3e:79:a3:9b:14:19:2e:b6:a0:ba:41:8f:9c:73:40:76:
6c:74:03:a3:e8:5e:d4:2c:18:62:16:78:2e:c2:15:76:d8:a0:
6d:3d:84:c1:c5:2d:eb:3d:61:58:a5:a9:21:e6:a6:c6:81:ac:
30:8e:da:e9:dd:f4:90:07:36:01:5f:ba:b2:5e:04:80:4a:22:
07:1a:06:0a:53:ac:b1:87:4f:41:a7:31:f7:13:3c:70:7f:e8:
0a:f0:6a:44:21:af:fd:e1:8a:05:bc:c0:cc:0e:c5:42:7e:92:
1a:bc:be:ff:47:b6:50:70:97:12:0c:d6:9f:3f:00:fb:9b:d0:
c6:32:0e:2c:ff:21:89:d7:b5:9a:82:2d:3e:a2:67:cf:99:fd:
c0:98:44:bc:70:61:2a:d1:ab:fc:6a:2f:96:f6:c1:71:08:e8:
a5:38:8d:f1:c4:de:fb:06:68:b6:b0:34:25:f8:b8:a0:d8:ef:
a5:cf:4c:3b:de:64:83:7a:52:04:ee:04:25:d0:3c:1f:8c:f8:
8c:32:7e:bc:13:b4:9a:e4:2c:05:ad:72:07:18:a6:04:5d:ad:
f7:2d:86:f8:35:5b:85:30:e8:82:c3:ef:e7:ef:94:09:44:a9:
d3:d3:5d:94:95:4d:4f:fd:37:97:7c:49:ce:84:3e:28:6c:f0:
17:4a:0b:3b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt9y2wfNjvUBwA+e7rudpTCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwMTAyMDgyMDQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NTY5ZTBjYzhhNWY5NzI2MmI0MDRlZDBlN2ZiZTMyZmYzMWYwYTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5BH1e34ZbExYeuUqusVidpYOqGr
z2iUqWHbSWsX74XOQIgbSi8kFbhXnaUCCA6SQvy5NkhkvQ02r8XOAxpwdol8g6Lz
sK2UnZ436tDOF1jkyybFSmL2EkU6pnXjs9T3+PTfwKQUucdrsTAkRcbV9Q9Tvz2s
qcag25cERUqpLiIjD9Ko0KsxjL1dkcxPOivAb3GA0Q3DLWIL9pMVGd1RcxHyDi/t
c6z6gQp3dVbs2qFTMowwx6VAEldfbB5+N7P9a4qIs7/95vDTteI1waKPsTQ5RmHZ
GWNgQuir39M6aZT/wzH22aUBwr4464FUd1Ys8Gfyq1W1NMGvDVYcKAMqswIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEVp4MyKX5cmK0BO0Of74y/zHwqbMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvUlduZ3pJcGZseVlyUUU3UTVfdmpMX01mQ3BzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/UkMA0G
CSqGSIb3DQEBCwUAA4IBAQABcj55o5sUGS62oLpBj5xzQHZsdAOj6F7ULBhiFngu
whV22KBtPYTBxS3rPWFYpakh5qbGgawwjtrp3fSQBzYBX7qyXgSASiIHGgYKU6yx
h09BpzH3Ezxwf+gK8GpEIa/94YoFvMDMDsVCfpIavL7/R7ZQcJcSDNafPwD7m9DG
Mg4s/yGJ17Wagi0+omfPmf3AmES8cGEq0av8ai+W9sFxCOilOI3xxN77Bmi2sDQl
+Lig2O+lz0w73mSDelIE7gQl0DwfjPiMMn68E7Sa5CwFrXIHGKYEXa33LYb4NVuF
MOiCw+/n75QJRKnT012UlU1P/TeXfEnOhD4obPAXSgs7
-----END CERTIFICATE-----
Generated at Sun Jan 11 07:31:23 2026 by rpki-client