This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/wmwwuc2J8lTkXFaf4tOjpW8KxnA.roa
File: wmwwuc2J8lTkXFaf4tOjpW8KxnA.roa (raw, json)
Hash identifier: cU6AgM/v4ffZ1Oc0+CAzIkq1QF3SV3vuE/LeuVRBHyE=
Subject key identifier: C2:6C:30:B9:CD:89:F2:54:E4:5C:56:9F:E2:D3:A3:A5:6F:0A:C6:70
Certificate issuer: /CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
Certificate serial: 019B7F831809C44E988ADAA6E410A4172042
Authority key identifier: E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/wmwwuc2J8lTkXFaf4tOjpW8KxnA.roa
Signing time: Fri 02 Jan 2026 16:20:56 +0000
ROA not before: Fri 02 Jan 2026 16:20:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43940
IP address blocks: 212.200.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:83:18:09:c4:4e:98:8a:da:a6:e4:10:a4:17:20:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
Validity
Not Before: Jan 2 16:20:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c26c30b9cd89f254e45c569fe2d3a3a56f0ac670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c1:1d:0a:84:48:cc:72:9e:74:0d:2e:76:26:
df:47:30:de:81:2b:61:00:e1:9e:79:0e:0a:6e:4a:
1d:ce:90:04:c0:42:ca:97:c8:43:15:02:39:0d:84:
b4:20:fa:89:cd:19:6c:df:09:f5:5e:2f:76:41:bb:
35:71:4e:3b:d5:6b:fc:2d:6c:65:dc:f1:69:4e:02:
e9:1c:f9:c5:d0:12:32:49:52:80:b2:5a:cc:72:5e:
eb:a2:ac:db:4e:64:6d:6d:7a:78:d2:ee:19:3f:ce:
b8:12:a2:24:c3:3f:01:7a:91:b7:27:01:34:7d:ce:
24:9d:3d:ac:51:a0:23:a1:3e:bf:8a:c0:2d:e0:ff:
c7:8c:32:14:d3:0e:a5:ed:1d:ef:5d:89:3f:4d:bf:
23:68:c2:57:7f:78:21:ff:82:cb:0b:96:7c:49:2e:
38:7d:be:e9:46:67:2b:61:ba:1f:b0:b2:cb:1b:3d:
77:7d:63:85:d7:4c:33:40:9d:82:98:6c:a5:dc:a7:
a8:e6:79:63:59:60:d6:e0:b1:39:14:45:70:c6:07:
25:3d:1a:ed:1b:bf:48:82:39:c1:e2:a5:54:ba:24:
bf:9b:fa:2d:06:23:39:a0:95:0d:d1:6c:48:b4:c9:
c9:64:c9:80:1c:d0:da:7a:c0:60:11:e3:aa:c0:59:
f4:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:6C:30:B9:CD:89:F2:54:E4:5C:56:9F:E2:D3:A3:A5:6F:0A:C6:70
X509v3 Authority Key Identifier:
keyid:E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/wmwwuc2J8lTkXFaf4tOjpW8KxnA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.200.246.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:fe:c6:f5:90:89:70:3e:a8:c5:dc:b3:a6:ec:25:39:2e:36:
8e:25:7f:5d:c4:ce:e6:65:1e:ef:58:f0:28:06:ac:2a:3b:dd:
fe:8d:63:d8:4b:ec:71:08:63:82:a6:8e:2d:40:11:c1:cc:f7:
bd:49:07:31:56:c6:d6:c8:e1:a8:7c:2d:48:ed:64:1c:de:e6:
be:3f:89:0c:72:91:b9:75:1b:03:1a:3f:ab:72:fc:08:17:fe:
78:ca:dc:5e:0e:e4:19:e1:b8:da:db:e2:a0:18:a7:52:91:39:
f1:6e:ca:65:23:3f:5e:67:4b:28:67:0f:5a:ee:ac:96:f1:3e:
a4:dd:cc:66:27:3b:08:6d:35:95:f4:bd:0a:00:b1:74:bc:2a:
57:48:f4:96:1f:83:e3:14:7f:15:a0:90:a0:ab:d1:af:ea:a6:
7f:26:e5:42:2e:4e:08:38:bb:37:62:e3:2a:f8:49:f9:96:58:
0f:d2:2a:a9:98:32:30:c8:5e:5b:82:42:26:2a:80:0c:82:9e:
b7:bc:d6:d6:f4:ea:20:c1:32:6c:90:3c:f3:67:c4:49:a5:60:
36:f2:48:a6:81:2f:49:54:d4:8a:3e:1c:86:4d:c7:f8:c5:93:
f1:26:f6:0b:4f:a6:ec:c9:67:60:48:34:0d:b2:d3:69:c2:91:
0c:7e:43:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:36:06 2026 by rpki-client