This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/8976e2-14f5-4cef-9912-cd3c160a6f46/1/wmkrs-T4Qk-NyFJuLfe4BJQMXMw.roa
File: wmkrs-T4Qk-NyFJuLfe4BJQMXMw.roa (raw, json)
Hash identifier: ENCrMS/ggVPvYnMViHVPfzOMTrIXGPczqg+j9lYLbks=
Subject key identifier: C2:69:2B:B3:E4:F8:42:4F:8D:C8:52:6E:2D:F7:B8:04:94:0C:5C:CC
Certificate issuer: /CN=42add08d75249a067dbbc6317be5ba6e3f4d5fc9
Certificate serial: 019B79ED293DB2E209E9B59F5794DAAD70CF
Authority key identifier: 42:AD:D0:8D:75:24:9A:06:7D:BB:C6:31:7B:E5:BA:6E:3F:4D:5F:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/8976e2-14f5-4cef-9912-cd3c160a6f46/1/wmkrs-T4Qk-NyFJuLfe4BJQMXMw.roa
Signing time: Thu 01 Jan 2026 14:19:04 +0000
ROA not before: Thu 01 Jan 2026 14:19:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208150
IP address blocks: 217.138.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/8976e2-14f5-4cef-9912-cd3c160a6f46/1/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/8976e2-14f5-4cef-9912-cd3c160a6f46/1/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:ed:29:3d:b2:e2:09:e9:b5:9f:57:94:da:ad:70:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42add08d75249a067dbbc6317be5ba6e3f4d5fc9
Validity
Not Before: Jan 1 14:19:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c2692bb3e4f8424f8dc8526e2df7b804940c5ccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:50:5d:aa:33:48:b4:37:88:2b:89:cd:9a:97:
cc:cd:8f:da:8d:5b:fc:94:b0:d9:b8:ff:62:1c:5e:
f1:27:da:fb:cb:f4:c0:ed:0d:b6:d7:84:9e:8f:86:
15:e5:10:60:67:d6:d5:1f:e0:84:32:44:c5:0b:05:
c5:d0:c1:a0:13:88:81:e7:2c:a5:b1:25:20:c7:7d:
4c:74:98:36:28:42:9c:6e:6c:fd:1c:45:e5:ee:58:
85:6b:d5:2c:1f:ae:0c:6d:89:7d:84:df:3e:8a:01:
11:69:b0:ea:4a:87:55:14:2f:2a:25:39:f4:a5:5f:
96:4a:c7:01:43:b0:26:4a:13:74:5a:4e:ed:4f:b1:
3f:4d:21:e5:bf:a1:09:58:96:df:5d:7c:74:d1:e9:
b6:84:5a:23:20:92:da:08:dd:c9:91:30:b4:f6:7b:
7f:4a:53:1f:e4:30:56:f2:13:3c:f3:f2:31:a6:26:
cc:a8:47:eb:99:9b:fb:a9:b7:bd:0c:65:a5:f2:0c:
dd:79:56:d8:c7:78:1c:6c:01:1e:0a:85:dc:16:c6:
e8:83:0f:bd:da:2f:b7:da:3f:a0:09:81:ec:6e:01:
50:aa:3c:cb:08:68:00:64:6a:35:8b:2a:d5:93:d4:
46:50:3e:31:a7:17:2c:a2:cb:d5:5d:a9:dd:a7:4d:
88:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:69:2B:B3:E4:F8:42:4F:8D:C8:52:6E:2D:F7:B8:04:94:0C:5C:CC
X509v3 Authority Key Identifier:
keyid:42:AD:D0:8D:75:24:9A:06:7D:BB:C6:31:7B:E5:BA:6E:3F:4D:5F:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/8976e2-14f5-4cef-9912-cd3c160a6f46/1/wmkrs-T4Qk-NyFJuLfe4BJQMXMw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/8976e2-14f5-4cef-9912-cd3c160a6f46/1/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.138.104.0/24
Signature Algorithm: sha256WithRSAEncryption
26:89:74:93:74:57:18:5f:e9:45:b4:7e:a4:eb:2c:0f:76:a9:
cb:20:0b:ac:81:82:70:0e:03:db:d9:63:f8:73:94:11:3d:5e:
95:74:22:e7:3c:2d:17:45:1d:c7:1e:99:b0:ab:0a:e7:df:24:
1b:99:24:11:b2:2f:4d:03:27:ea:f9:39:e3:e2:93:a8:8d:67:
1e:5f:81:25:fc:aa:ce:74:e8:1f:63:ca:b7:73:25:b7:de:72:
5e:0d:d4:44:46:e8:21:5b:45:ad:95:8b:48:fb:68:7e:8a:0c:
e8:e9:b7:7f:c9:86:a6:d5:af:71:28:39:17:aa:fa:5b:ed:44:
12:85:a0:cb:3d:04:e6:f8:80:71:86:a9:36:1f:90:2e:f7:37:
ab:b9:20:01:9c:b4:f9:0b:6b:ea:c0:39:85:bb:1b:1a:4a:e3:
15:77:14:9b:dd:46:31:44:0f:dd:8b:c3:a4:c3:ab:7b:04:86:
63:59:74:01:e2:bb:c0:db:ae:ee:00:3a:94:50:18:23:6d:18:
ec:a2:1a:a6:4a:67:80:66:c4:c9:27:10:d7:ad:6b:b1:e8:07:
3b:b8:37:5e:ca:b8:ce:b6:61:c6:83:1c:7e:b4:81:df:db:82:
e3:fd:03:cb:ed:8a:e2:4c:f7:6d:cd:2a:bc:a5:31:b5:1b:04:
54:fd:1f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:42:27 2026 by rpki-client