This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/wCYaXW9yQXdX5eY6SwGBDpsbJ2M.roa
File: wCYaXW9yQXdX5eY6SwGBDpsbJ2M.roa (raw, json)
Hash identifier: +1+KMrFBvRETqP/PeuYGipr75ZikVYJF14sV08bslAk=
Subject key identifier: C0:26:1A:5D:6F:72:41:77:57:E5:E6:3A:4B:01:81:0E:9B:1B:27:63
Certificate issuer: /CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Certificate serial: 019B79101AFB5AB46D59286D954157DBEE7A
Authority key identifier: 08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/wCYaXW9yQXdX5eY6SwGBDpsbJ2M.roa
Signing time: Thu 01 Jan 2026 10:17:37 +0000
ROA not before: Thu 01 Jan 2026 10:17:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207409
IP address blocks: 45.9.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:10:1a:fb:5a:b4:6d:59:28:6d:95:41:57:db:ee:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Validity
Not Before: Jan 1 10:17:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c0261a5d6f72417757e5e63a4b01810e9b1b2763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ed:91:e6:b3:4c:b2:32:5f:a5:5f:c5:db:bd:
36:f3:0f:f4:b7:15:04:1c:6a:b1:0b:2e:ba:9d:45:
02:17:28:99:bc:87:9f:27:7f:36:dc:21:5c:8d:e4:
68:fc:21:ab:56:8f:68:c9:3e:8a:fc:2a:7f:87:8f:
60:12:32:4e:0a:40:02:fe:4b:ea:18:94:e4:5c:82:
9c:97:94:df:87:3f:37:d6:3e:da:b1:3c:02:5d:bf:
74:c5:1c:9a:bd:c0:42:47:95:7f:6e:28:9d:e3:79:
ee:ff:15:a3:12:6a:79:b0:15:9c:d8:b7:42:fb:60:
0d:d8:e7:1a:40:f7:63:7e:e5:7b:25:6a:03:90:27:
4f:3a:34:91:08:bf:47:c7:f2:bb:08:23:94:3a:ea:
14:f0:9a:b0:c8:f7:8d:6f:53:dc:6b:a9:64:13:0e:
b4:86:95:3f:98:7f:2b:e1:32:e5:15:20:db:c5:82:
44:09:99:95:47:9a:fa:1d:72:44:0f:90:1a:90:d9:
0a:6e:6a:43:f4:bf:b9:76:f5:0b:47:a1:8e:73:bc:
84:af:d0:6e:fd:3b:2d:2b:19:71:6d:67:0d:35:7d:
84:45:d2:11:11:71:a9:d5:0f:51:12:60:67:be:c6:
65:09:b4:86:70:42:1b:6c:66:18:0d:97:82:0d:85:
99:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:26:1A:5D:6F:72:41:77:57:E5:E6:3A:4B:01:81:0E:9B:1B:27:63
X509v3 Authority Key Identifier:
keyid:08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/wCYaXW9yQXdX5eY6SwGBDpsbJ2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.255.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:24:4f:62:ad:c1:1c:fb:4e:f9:c7:77:77:b8:8f:d4:80:85:
8d:be:c5:3c:9b:70:ee:37:f4:a3:28:65:57:d5:29:26:6c:62:
f8:8b:62:5e:31:0a:0a:6a:e0:95:07:6e:dd:65:0e:c6:b4:3e:
a3:92:75:50:4e:97:37:1d:cc:f1:4d:78:cf:3a:00:af:7f:4c:
ab:17:ef:7a:2f:4d:9c:a6:9a:6b:0d:ad:8e:32:e5:5f:aa:91:
78:7a:33:c2:1d:7e:1a:e3:b1:7b:fc:76:0b:6d:11:b2:5c:13:
9a:85:3e:84:1b:60:d5:3a:d5:f8:ed:c3:35:a1:d2:c0:5b:f3:
0c:d6:33:67:50:97:0d:00:b5:95:a4:6f:9c:55:22:04:13:3e:
49:86:15:cf:9e:4b:6d:cc:4e:98:29:27:1b:6a:bb:a4:ff:29:
f1:45:f4:f3:d1:24:2b:a0:0b:02:53:91:d8:52:94:40:c7:e2:
fc:78:2a:76:c2:df:70:de:ff:75:32:ea:ab:71:39:b2:17:1b:
62:d3:4e:84:49:33:c1:c8:cd:41:44:70:f0:75:91:04:5d:71:
62:ef:af:52:5d:e2:67:80:37:a0:52:85:b0:fe:63:fe:7c:5d:
08:97:c5:23:be:4e:0f:f1:59:c9:f5:3a:fb:dd:e5:d7:c9:f9:
fa:dc:32:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:41:19 2026 by rpki-client