This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/W4KHw-He6kWePo83bS5E3YXxts0.roa File: W4KHw-He6kWePo83bS5E3YXxts0.roa (raw, json) Hash identifier: HnOkT9H7Ca2rZOkZ/pXWIqV8bBgY7J8LEGyl2k3M+hY= Subject key identifier: 5B:82:87:C3:E1:DE:EA:45:9E:3E:8F:37:6D:2E:44:DD:85:F1:B6:CD Certificate issuer: /CN=485e3ee1c3258175f4ff6d9b559da54c83ec0b4f Certificate serial: 019B7C1250A6AEC52404840FBA61B1AE7A0A Authority key identifier: 48:5E:3E:E1:C3:25:81:75:F4:FF:6D:9B:55:9D:A5:4C:83:EC:0B:4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SF4-4cMlgXX0_22bVZ2lTIPsC08.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/W4KHw-He6kWePo83bS5E3YXxts0.roa Signing time: Fri 02 Jan 2026 00:18:53 +0000 ROA not before: Fri 02 Jan 2026 00:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30935 IP address blocks: 91.223.186.0/24 maxlen: 24 185.253.204.0/22 maxlen: 24 193.16.220.0/24 maxlen: 24 2a0c:40c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/SF4-4cMlgXX0_22bVZ2lTIPsC08.crl rsync://rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/SF4-4cMlgXX0_22bVZ2lTIPsC08.mft rsync://rpki.ripe.net/repository/DEFAULT/SF4-4cMlgXX0_22bVZ2lTIPsC08.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:50:a6:ae:c5:24:04:84:0f:ba:61:b1:ae:7a:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=485e3ee1c3258175f4ff6d9b559da54c83ec0b4f Validity Not Before: Jan 2 00:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5b8287c3e1deea459e3e8f376d2e44dd85f1b6cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:13:13:55:7c:f9:1a:e7:d2:2d:c7:52:a7:0e: fc:99:f6:d5:9c:92:f9:fa:be:f1:11:b5:56:e3:c4: 75:24:b8:4c:92:d6:12:3d:59:a2:cb:9a:35:9f:b3: 0d:ff:12:d5:79:ad:47:0b:46:9a:64:34:54:f1:d1: e7:ed:e2:c7:f3:e9:e4:d0:53:0d:b2:09:58:95:00: b7:0d:50:fe:ac:38:98:25:c4:9d:b3:9d:51:e2:6f: 9c:85:11:fa:10:e8:15:f5:fb:10:ef:e1:30:ce:89: 41:77:a3:20:80:3f:c0:44:57:dc:0f:1a:1c:9a:8a: 0e:b3:f7:32:cd:b3:c5:25:30:1a:d9:e2:f7:3f:1c: 1d:13:c6:62:4a:09:41:a5:4b:01:2f:57:72:8d:1a: df:c1:60:67:bf:a3:bf:a9:40:b2:21:e0:13:f1:0d: 8a:5f:31:5d:59:6a:f4:56:77:3a:11:c9:18:ea:fd: be:32:3d:0c:26:c2:ba:94:95:01:21:16:23:e0:1f: 9e:af:7a:01:b2:1b:d8:ee:db:25:ea:87:21:75:1c: d2:db:20:3a:78:07:21:12:4c:c8:22:81:71:c7:1a: 77:bf:d6:80:40:84:62:44:f1:03:ab:28:ec:70:df: 01:57:92:0a:7b:48:cd:fa:9b:69:b7:09:13:32:47: 6f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:82:87:C3:E1:DE:EA:45:9E:3E:8F:37:6D:2E:44:DD:85:F1:B6:CD X509v3 Authority Key Identifier: keyid:48:5E:3E:E1:C3:25:81:75:F4:FF:6D:9B:55:9D:A5:4C:83:EC:0B:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SF4-4cMlgXX0_22bVZ2lTIPsC08.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/W4KHw-He6kWePo83bS5E3YXxts0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/SF4-4cMlgXX0_22bVZ2lTIPsC08.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.223.186.0/24 185.253.204.0/22 193.16.220.0/24 IPv6: 2a0c:40c0::/29 Signature Algorithm: sha256WithRSAEncryption 59:5e:f2:3d:44:d4:7d:a2:6b:1c:3b:08:0a:8f:9d:b0:89:37: 0c:8a:85:95:26:03:05:87:e7:7e:1a:91:19:25:42:34:e8:b8: 0a:f8:2c:c8:1b:63:6e:60:43:ea:01:90:06:21:19:d2:77:fa: 62:b8:e0:c0:68:9c:ae:e3:ed:5c:ae:89:7d:b3:39:95:1f:3c: ad:db:6a:45:12:3d:50:dc:aa:5a:2c:74:84:e3:70:5e:a3:3b: ee:bc:a8:33:12:89:f0:c7:d3:82:09:18:87:d1:b6:d1:82:c7: aa:d0:e3:08:f2:d9:c8:a1:aa:3f:af:87:a9:d7:91:39:be:cd: c8:5b:93:1b:71:09:15:e2:b9:ea:04:f0:8d:93:e9:d4:5f:96: cd:f6:bd:a6:de:e1:02:c0:34:54:13:43:5c:17:00:34:9e:59: 58:84:4e:5d:6a:fa:ab:f7:91:80:0c:fd:f4:e8:f6:af:81:79: 8e:5e:39:a2:23:1f:4b:e4:3b:2f:92:5c:c4:a2:d8:e5:3a:5f: 56:d9:30:08:13:ef:2c:b2:2c:5a:3b:20:02:65:21:4b:e2:6e: 3c:11:46:15:2d:e6:a6:0a:93:b1:da:a6:8e:72:ef:91:d5:bd: 11:7c:1e:e5:2a:ec:74:d2:ad:da:29:aa:ed:cb:e9:4b:4d:ea: a7:0e:2d:43 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt8ElCmrsUkBIQPumGxrnoKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4NWUzZWUxYzMyNTgxNzVmNGZmNmQ5YjU1OWRhNTRjODNl YzBiNGYwHhcNMjYwMTAyMDAxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YjgyODdjM2UxZGVlYTQ1OWUzZThmMzc2ZDJlNDRkZDg1ZjFiNmNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBMTVXz5GufSLcdSpw78mfbVnJL5 +r7xEbVW48R1JLhMktYSPVmiy5o1n7MN/xLVea1HC0aaZDRU8dHn7eLH8+nk0FMN sglYlQC3DVD+rDiYJcSds51R4m+chRH6EOgV9fsQ7+EwzolBd6MggD/ARFfcDxoc mooOs/cyzbPFJTAa2eL3PxwdE8ZiSglBpUsBL1dyjRrfwWBnv6O/qUCyIeAT8Q2K XzFdWWr0Vnc6EckY6v2+Mj0MJsK6lJUBIRYj4B+er3oBshvY7tsl6ochdRzS2yA6 eAchEkzIIoFxxxp3v9aAQIRiRPEDqyjscN8BV5IKe0jN+ptptwkTMkdvNQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFFuCh8Ph3upFnj6PN20uRN2F8bbNMB8GA1UdIwQY MBaAFEhePuHDJYF19P9tm1WdpUyD7AtPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0Y0LTRjTWxnWFgwXzIyYlZaMmxUSVBzQzA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC85NmQwMjItZWUwMi00NDdjLWEzNDkt OWM5MzNjY2QxNmM3LzEvVzRLSHctSGU2a1dlUG84M2JTNUUzWVh4dHMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC85NmQwMjItZWUwMi00NDdjLWEzNDktOWM5MzNjY2QxNmM3 LzEvU0Y0LTRjTWxnWFgwXzIyYlZaMmxUSVBzQzA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQAW9+6AwQC uf3MAwQAwRDcMA0EAgACMAcDBQMqDEDAMA0GCSqGSIb3DQEBCwUAA4IBAQBZXvI9 RNR9omscOwgKj52wiTcMioWVJgMFh+d+GpEZJUI06LgK+CzIG2NuYEPqAZAGIRnS d/piuODAaJyu4+1crol9szmVHzyt22pFEj1Q3KpaLHSE43BeozvuvKgzEonwx9OC CRiH0bbRgseq0OMI8tnIoao/r4ep15E5vs3IW5MbcQkV4rnqBPCNk+nUX5bN9r2m 3uECwDRUE0NcFwA0nllYhE5davqr95GADP306PavgXmOXjmiIx9L5DsvklzEotjl Ol9W2TAIE+8ssixaOyACZSFL4m48EUYVLeamCpOx2qaOcu+R1b0RfB7lKux00q3a Karty+lLTeqnDi1D -----END CERTIFICATE-----Generated at Sun Jan 25 16:32:42 2026 by rpki-client