This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/40WOA288Q_jSUFllbasR15JjMsc.roa
File: 40WOA288Q_jSUFllbasR15JjMsc.roa (raw, json)
Hash identifier: A94QwYbFqJm6hs1SWfNhMYpDaq8tC8TaimLHf8Tikbg=
Subject key identifier: E3:45:8E:03:6F:3C:43:F8:D2:50:59:65:6D:AB:11:D7:92:63:32:C7
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019BE1AD05FB9FF8912DEF54E2CA7454829D
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/40WOA288Q_jSUFllbasR15JjMsc.roa
Signing time: Wed 21 Jan 2026 17:49:31 +0000
ROA not before: Wed 21 Jan 2026 17:49:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205168
IP address blocks: 151.247.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Jan 2026 21:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:e1:ad:05:fb:9f:f8:91:2d:ef:54:e2:ca:74:54:82:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jan 21 17:49:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e3458e036f3c43f8d25059656dab11d7926332c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d5:fb:aa:05:d7:11:71:af:6f:6d:84:1f:10:
87:53:a9:df:8c:2c:54:fa:90:dc:fa:ca:ec:d2:32:
44:e3:cc:6e:30:4f:87:7e:bb:41:6d:35:80:16:a6:
0f:bb:78:d6:05:2a:14:9f:1b:74:37:7d:c3:e8:95:
2b:72:dd:0a:6b:8f:47:dc:4e:45:4a:69:be:db:09:
3e:f7:1c:a7:f3:39:4b:cc:74:ce:4b:c0:2d:48:ed:
31:7e:b6:c6:fe:a7:1e:3f:94:ab:6e:f1:60:de:db:
98:1a:a4:7f:84:51:12:cd:81:ca:e9:29:d0:25:c7:
3c:4f:dc:b9:9a:fd:55:a7:a9:8a:fa:93:38:06:57:
f9:91:56:1e:13:fa:b4:b7:f2:1b:81:9d:d0:2b:2c:
ba:88:b2:33:f0:51:86:eb:f6:ce:b6:6c:80:6d:d9:
1f:42:f6:38:26:34:9b:77:ed:db:9f:e4:83:12:d4:
cf:34:ac:aa:97:cb:17:5d:aa:a7:96:5b:bc:2f:7c:
a4:78:75:46:8f:2d:e7:0e:7d:1c:c1:8d:35:9f:3f:
76:6f:e2:1f:f7:56:18:02:d3:f9:ea:db:94:17:fa:
f0:9a:c9:cc:f3:60:2e:2d:07:7c:f3:ab:22:52:92:
37:8a:29:81:c5:9d:d8:62:4b:1b:b8:2d:cb:5f:5e:
8a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:45:8E:03:6F:3C:43:F8:D2:50:59:65:6D:AB:11:D7:92:63:32:C7
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/40WOA288Q_jSUFllbasR15JjMsc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.247.19.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:4e:5b:95:78:48:8c:af:c0:53:0c:c7:14:91:64:db:37:70:
71:56:0c:7b:40:d2:84:6a:39:17:96:dc:91:21:ae:23:fd:14:
31:28:23:f6:ff:ca:79:a1:46:87:49:1f:84:1d:3d:4b:b1:d6:
97:bf:19:03:72:bd:25:ee:0f:30:a1:7f:49:7d:b5:cb:88:fc:
2c:ea:dc:9c:a7:bd:1d:e7:57:8c:d0:26:01:15:b7:b0:59:7c:
df:d8:8a:5f:ff:23:02:06:51:3e:2a:b8:33:c4:93:b2:fa:0c:
4a:a2:f5:09:5e:f5:09:b5:54:02:29:21:fa:70:65:9e:cf:08:
42:e7:3e:4d:48:2d:58:19:92:20:15:97:6a:76:14:0d:0a:fe:
d4:7e:53:38:aa:a0:26:cd:a4:e9:12:d4:da:be:a6:3f:5a:78:
93:ab:97:62:ca:f4:b0:5d:da:77:5b:cd:b7:b4:5b:2c:1d:de:
c4:96:c3:fa:6d:a5:85:9c:45:06:b8:ae:6d:57:73:67:b2:25:
66:7a:fa:bf:90:17:ac:93:be:60:35:0e:13:b0:3a:4a:d6:e1:
9a:97:07:dc:e8:ac:e8:20:1b:17:6c:40:00:26:99:6c:7b:41:
8b:09:19:3c:fc:b1:9b:9d:b9:aa:88:58:e2:7d:9e:b4:69:de:
7d:13:c1:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:16:48 2026 by rpki-client