This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/WN_c9kKwagAeGsBSX1hLLfG9GhY.roa
File: WN_c9kKwagAeGsBSX1hLLfG9GhY.roa (raw, json)
Hash identifier: ni14CmnfkewrmXe7hYsacGxSaktHpNFossFW4YlPphk=
Subject key identifier: 58:DF:DC:F6:42:B0:6A:00:1E:1A:C0:52:5F:58:4B:2D:F1:BD:1A:16
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019B8CA0AE19E7952F0833103A8EB8386C6A
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/WN_c9kKwagAeGsBSX1hLLfG9GhY.roa
Signing time: Mon 05 Jan 2026 05:28:19 +0000
ROA not before: Mon 05 Jan 2026 05:28:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 146996
IP address blocks: 151.243.210.0/24 maxlen: 24
151.243.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Jan 2026 21:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:8c:a0:ae:19:e7:95:2f:08:33:10:3a:8e:b8:38:6c:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jan 5 05:28:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=58dfdcf642b06a001e1ac0525f584b2df1bd1a16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:82:88:7a:47:be:79:f6:08:8a:e5:2f:42:35:
f6:8a:b7:ee:f8:9a:91:c7:2c:ec:b1:3a:f7:19:4b:
e0:8a:a8:a0:ec:c5:5e:bd:8e:7a:c3:18:56:6e:a4:
a6:dd:a7:78:a2:cd:17:ae:39:18:ab:b0:f1:40:e6:
1b:ab:11:d0:20:cf:f3:06:10:1c:df:a5:0b:1b:1e:
00:be:18:a6:eb:91:cf:1b:ee:e5:71:2b:0c:62:ef:
f2:06:b4:99:11:4d:54:67:5e:f5:7c:6c:8f:7f:43:
af:74:d2:da:02:4e:28:5e:ce:ae:58:ba:4f:1e:70:
cb:58:e6:79:9c:1e:22:cd:8a:72:26:67:57:9f:6d:
7f:53:34:c2:6a:0d:5d:fc:35:b7:c6:34:e0:e9:a4:
f6:8b:20:60:ff:9e:67:0e:ef:28:22:ed:99:3a:95:
8b:fb:80:36:28:fb:2a:ce:e4:4f:fb:b4:bf:66:2c:
5f:f9:26:8e:8d:6e:49:7c:83:1f:30:76:58:5f:71:
c6:92:1b:4c:e4:83:32:06:54:6a:2b:d1:0e:ce:22:
ca:69:c9:6a:99:06:9e:cf:3a:d2:53:5d:06:c2:f4:
84:f6:ed:c8:8a:33:0c:e5:61:53:25:75:bb:45:65:
ca:f4:2f:1d:34:e5:ce:97:69:bb:92:85:c7:76:a6:
47:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:DF:DC:F6:42:B0:6A:00:1E:1A:C0:52:5F:58:4B:2D:F1:BD:1A:16
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/WN_c9kKwagAeGsBSX1hLLfG9GhY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.210.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:be:9e:2b:06:6a:1e:6d:45:08:6d:e3:d0:d1:ba:da:15:a9:
f9:ac:ac:25:f9:e8:d9:1e:ee:73:73:b7:37:50:16:7b:ce:04:
5d:d7:a8:46:29:45:be:3e:be:be:c8:d3:fc:40:4d:32:f9:11:
9c:8f:c0:24:70:81:40:a1:44:c2:26:12:c3:ea:fc:14:d7:da:
4e:d2:06:b3:ce:8e:e9:cf:63:c4:25:b3:24:ec:2e:62:dc:7b:
cb:6b:59:c7:14:40:51:1e:78:a8:f0:d6:97:6a:21:df:22:bc:
6e:35:58:af:93:14:a3:ce:b2:05:59:e7:aa:08:9e:19:99:cb:
1d:0b:94:dc:b0:31:f6:29:43:3b:4f:b6:7b:aa:fa:9e:de:b0:
40:72:08:82:f6:6e:56:56:14:9c:7b:ff:83:71:c4:c5:be:ac:
99:b7:25:a6:59:97:2e:31:cf:01:23:70:ff:e3:04:18:c6:f7:
ad:6f:66:19:8b:7b:08:1c:a3:66:e9:33:02:29:e9:f9:64:18:
9c:2f:99:9d:bb:84:96:8f:21:64:94:2b:bc:24:02:a7:df:57:
24:10:76:4b:3d:40:42:5d:4f:6e:1e:b3:69:29:91:0b:55:d4:
db:f5:00:a7:50:21:30:a7:1e:e9:36:ff:8b:d8:45:67:a8:2f:
f8:89:54:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 06:27:37 2026 by rpki-client