This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/wEYCPvzGdfuRMRbs2Up9OrFeADg.roa
File: wEYCPvzGdfuRMRbs2Up9OrFeADg.roa (raw, json)
Hash identifier: csFCH/KSttX48LqWJcynIZFXFy7MYez696KFFCPsuuQ=
Subject key identifier: C0:46:02:3E:FC:C6:75:FB:91:31:16:EC:D9:4A:7D:3A:B1:5E:00:38
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019B7DCB6EC303B20AE536EAFD46696C9E8A
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/wEYCPvzGdfuRMRbs2Up9OrFeADg.roa
Signing time: Fri 02 Jan 2026 08:20:42 +0000
ROA not before: Fri 02 Jan 2026 08:20:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206286
IP address blocks: 151.242.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Jan 2026 21:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:cb:6e:c3:03:b2:0a:e5:36:ea:fd:46:69:6c:9e:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jan 2 08:20:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c046023efcc675fb913116ecd94a7d3ab15e0038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:cf:39:62:49:6f:27:57:be:8d:69:50:e5:8e:
d8:f7:d3:fc:79:fd:f2:7c:11:9c:2d:26:23:f9:e9:
41:7b:79:18:38:64:17:61:80:9d:d3:57:7c:7e:49:
e2:d8:3a:15:a1:86:26:ef:c8:64:bb:99:dd:06:50:
9e:86:9c:f8:60:8d:be:60:c5:78:56:f0:34:91:9e:
84:d3:4a:c3:ff:7c:f9:75:c5:71:ff:48:85:1d:cf:
31:0b:1e:c1:69:ab:d2:2b:4d:b3:8b:4c:c0:53:af:
f7:97:7d:5a:7b:06:4d:be:49:34:12:da:a3:f5:9d:
18:9c:6b:8c:22:58:5b:5f:2d:dd:22:6e:a1:97:87:
11:54:a4:0a:bb:c3:a0:42:e4:c5:93:7b:fb:d2:af:
1f:0c:bd:09:f8:6d:ee:5a:b4:dc:f5:2e:1c:3f:93:
f7:4d:dd:b9:fa:26:69:80:4c:be:e3:5c:00:1e:87:
06:30:c6:52:92:83:12:7c:61:e8:7f:70:da:21:df:
1b:19:c4:6c:13:9b:ce:03:a4:ba:af:20:db:10:1c:
42:68:98:77:61:4f:a8:cd:cb:3b:c4:46:da:c1:27:
40:15:b4:a3:3d:d4:50:9d:3e:cc:57:c0:63:a6:89:
fd:5d:a5:b9:f1:97:0a:80:2b:48:9d:66:3d:9c:4b:
3e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:46:02:3E:FC:C6:75:FB:91:31:16:EC:D9:4A:7D:3A:B1:5E:00:38
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/wEYCPvzGdfuRMRbs2Up9OrFeADg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.75.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:a0:91:8a:ba:7e:c7:45:c7:ed:1f:fb:77:d9:1c:35:b7:aa:
8e:c8:b7:50:64:ed:16:2a:2d:9f:c0:12:42:d6:e2:0d:a2:d2:
48:99:9e:09:6a:99:2d:a1:ec:c1:c4:f5:08:80:a0:f1:12:b9:
b4:46:81:9a:8f:4b:ad:f7:35:6d:68:fb:c0:64:d7:7a:f6:47:
c0:8e:ef:5e:6e:b5:a2:44:36:d7:f7:69:9e:8c:ac:21:be:39:
cf:d3:f6:d4:e4:03:0a:05:70:09:ba:81:68:ab:57:14:66:9f:
a4:19:c2:e3:cd:14:11:c5:21:c6:55:57:8d:21:81:b1:16:21:
0b:af:b6:12:c6:0f:a5:fa:e9:f0:60:60:44:50:bb:94:71:19:
2f:e3:b7:32:2e:46:4a:68:0a:c1:f2:3e:89:53:6a:4b:99:2d:
db:9e:c1:62:35:5d:ca:94:6a:9d:7b:02:f9:ff:3d:7b:49:40:
78:44:59:9c:93:a2:15:38:ad:6b:ee:d5:b9:ec:f5:0d:e1:61:
78:c3:a1:b6:ec:cf:45:2a:d3:89:1f:f0:70:91:57:53:de:06:
17:dd:84:ac:21:db:4c:e1:20:fa:19:8d:e0:3b:f4:b8:08:6c:
01:73:24:84:3a:ed:68:61:33:42:09:0e:7d:e4:46:df:3a:d8:
8f:51:c8:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 06:27:36 2026 by rpki-client