This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/wh_A1Ywd9PlQ177YVaXtq3eGCuQ.roa
File: wh_A1Ywd9PlQ177YVaXtq3eGCuQ.roa (raw, json)
Hash identifier: 53+0yVnHLQ77916U1STNg9D9Toz5NayIfx2I9V3mCKA=
Subject key identifier: C2:1F:C0:D5:8C:1D:F4:F9:50:D7:BE:D8:55:A5:ED:AB:77:86:0A:E4
Certificate issuer: /CN=042d9f4d6aff383c59e9de7802dbee024ee887dc
Certificate serial: 019B7BA4E07EF711335DF9D03A68EA9325F5
Authority key identifier: 04:2D:9F:4D:6A:FF:38:3C:59:E9:DE:78:02:DB:EE:02:4E:E8:87:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BC2fTWr_ODxZ6d54AtvuAk7oh9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/wh_A1Ywd9PlQ177YVaXtq3eGCuQ.roa
Signing time: Thu 01 Jan 2026 22:19:21 +0000
ROA not before: Thu 01 Jan 2026 22:19:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60068
IP address blocks: 151.248.104.96/27 maxlen: 27
151.248.104.128/27 maxlen: 27
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/BC2fTWr_ODxZ6d54AtvuAk7oh9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Jan 2026 00:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:a4:e0:7e:f7:11:33:5d:f9:d0:3a:68:ea:93:25:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=042d9f4d6aff383c59e9de7802dbee024ee887dc
Validity
Not Before: Jan 1 22:19:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c21fc0d58c1df4f950d7bed855a5edab77860ae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:69:4e:22:27:63:53:d4:a9:a2:1e:2c:33:27:
e7:bf:64:40:df:5d:22:2e:de:19:07:02:fa:d5:8f:
62:e8:bc:eb:14:10:7a:8c:7c:6f:48:fe:95:d0:3a:
0c:8a:9d:d0:f1:af:62:14:60:26:50:81:ac:36:f1:
5e:eb:92:2c:1f:15:70:38:a8:63:62:33:cc:42:72:
39:2e:90:44:d7:29:59:4f:05:0e:2c:0b:ef:d4:d9:
0c:e5:95:d3:db:97:a0:db:4c:f3:e6:3e:f5:2b:b4:
53:c3:fc:aa:f4:fa:6a:05:01:57:1a:d2:4e:38:08:
94:0e:e1:52:cb:ed:f6:48:04:a7:57:83:3a:8d:ea:
59:02:d6:ab:e7:57:5f:16:18:8a:ba:3f:5e:bc:fb:
7f:41:4b:2b:4c:39:06:a4:c6:db:55:72:e9:80:24:
22:72:b5:4f:0a:1d:9c:7f:0f:86:a6:88:23:39:c7:
6b:02:02:96:55:f2:88:77:bd:ca:8a:da:af:3a:cc:
81:90:82:60:3d:c9:06:a4:25:50:ec:c5:30:52:cc:
0d:ad:11:4f:a5:a6:6f:0f:f7:f6:f0:70:44:32:6e:
2e:e0:95:47:6b:3d:c6:59:f7:38:3f:0f:ec:bb:46:
98:02:97:96:a4:55:08:ba:24:fd:41:ad:fc:f7:0d:
d5:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:1F:C0:D5:8C:1D:F4:F9:50:D7:BE:D8:55:A5:ED:AB:77:86:0A:E4
X509v3 Authority Key Identifier:
keyid:04:2D:9F:4D:6A:FF:38:3C:59:E9:DE:78:02:DB:EE:02:4E:E8:87:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BC2fTWr_ODxZ6d54AtvuAk7oh9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/wh_A1Ywd9PlQ177YVaXtq3eGCuQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.248.104.96-151.248.104.159
Signature Algorithm: sha256WithRSAEncryption
01:17:ea:cb:58:65:bc:3a:f7:75:e2:94:96:44:29:08:82:fd:
7e:36:9b:a7:a7:95:34:b6:34:28:31:09:ff:d5:3d:bb:11:c5:
51:77:4f:9a:fa:58:64:ac:fd:69:82:5e:ba:88:19:26:fa:a4:
62:61:6e:11:a8:a2:8f:30:11:37:56:a2:7e:61:7f:3d:7b:cb:
74:d3:c1:38:16:da:74:8b:60:f5:43:4f:2f:d4:7b:99:0c:9f:
ad:fa:d2:0e:d7:5a:54:a2:77:7e:1b:fb:85:b7:52:ba:5f:bd:
60:61:57:e7:9f:8f:54:e7:9e:60:38:b4:d8:e7:1d:8b:eb:a9:
47:f0:ad:fb:46:43:bb:4b:13:13:ff:84:16:48:9f:05:ce:b8:
4c:57:f4:1e:2e:67:05:52:9f:33:04:33:1a:b7:c5:66:d4:5f:
1b:38:02:f2:d6:39:e5:aa:45:8f:54:eb:39:44:a8:b9:b9:fc:
ca:76:fb:2f:7a:e0:d0:9a:2f:3f:89:2c:a4:3b:bd:dd:c7:01:
b9:30:14:a5:b8:d8:d1:e2:b5:49:f6:e7:79:fa:76:35:f4:70:
15:f8:01:67:2e:8a:82:a9:87:54:d3:29:90:7b:42:36:f5:1c:
83:f8:6e:d7:f1:2d:f6:a5:02:7d:20:46:43:24:98:ad:20:6a:
19:95:da:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 07:24:41 2026 by rpki-client