This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/wHRMABRpMiyEtjejskYT70NitKw.roa File: wHRMABRpMiyEtjejskYT70NitKw.roa (raw, json) Hash identifier: uaVh9YOmPZr43rpaKkgfhS6YH1UUI05Pvf24DvQSZqo= Subject key identifier: C0:74:4C:00:14:69:32:2C:84:B6:37:A3:B2:46:13:EF:43:62:B4:AC Certificate issuer: /CN=b48f41afdc609568fb2338fdb20b2d0c422b723b Certificate serial: 019B797F405FA3E8122474404F89E9B6EC13 Authority key identifier: B4:8F:41:AF:DC:60:95:68:FB:23:38:FD:B2:0B:2D:0C:42:2B:72:3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tI9Br9xglWj7Izj9sgstDEIrcjs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/wHRMABRpMiyEtjejskYT70NitKw.roa Signing time: Thu 01 Jan 2026 12:19:01 +0000 ROA not before: Thu 01 Jan 2026 12:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6730 IP address blocks: 185.90.152.0/23 maxlen: 23 2a05:e100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft rsync://rpki.ripe.net/repository/DEFAULT/tI9Br9xglWj7Izj9sgstDEIrcjs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:40:5f:a3:e8:12:24:74:40:4f:89:e9:b6:ec:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b48f41afdc609568fb2338fdb20b2d0c422b723b Validity Not Before: Jan 1 12:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c0744c001469322c84b637a3b24613ef4362b4ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:5e:ea:fe:d6:0b:2c:33:f5:12:02:54:5d:ac: f3:43:33:f8:cb:2a:50:f9:fb:22:96:3d:12:89:a0: 38:dc:f8:c2:74:b0:d0:0c:90:8e:ae:bd:0e:f7:f7: 7e:34:a5:c3:d2:f7:85:55:93:2b:b9:66:62:a3:6c: 4f:31:02:c5:71:66:74:7a:bd:a0:1b:bd:e8:07:65: 53:47:f6:70:89:25:52:90:3e:ac:21:2d:6a:de:24: c6:8c:48:57:7c:a6:6b:b4:3e:e0:ef:4e:ea:ba:e5: 41:a3:8d:55:6d:e0:39:c9:8c:da:4a:cd:fb:28:ff: 03:9c:d1:dd:7b:4e:86:10:b9:ad:f3:8d:45:fc:c1: b3:04:53:05:82:91:77:91:29:fe:5f:5c:f5:a7:3f: 85:67:40:06:4a:a0:9d:2d:1e:bc:e1:4a:16:d4:be: 8c:bd:58:63:e7:92:45:33:23:a1:ab:10:bf:87:99: ef:1f:12:56:90:1f:3b:be:9e:3a:99:60:47:6c:2a: d9:df:59:11:5e:af:d2:aa:1e:72:d7:69:5f:cf:cd: 64:a0:f2:8b:6d:65:04:9a:e4:ea:aa:17:ab:7b:85: 5b:f3:e6:f2:78:a9:16:ec:e2:15:3e:51:83:e2:bf: 69:59:79:53:01:e8:9b:cd:c8:3a:8b:90:4f:ee:72: cb:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:74:4C:00:14:69:32:2C:84:B6:37:A3:B2:46:13:EF:43:62:B4:AC X509v3 Authority Key Identifier: keyid:B4:8F:41:AF:DC:60:95:68:FB:23:38:FD:B2:0B:2D:0C:42:2B:72:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tI9Br9xglWj7Izj9sgstDEIrcjs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/wHRMABRpMiyEtjejskYT70NitKw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.90.152.0/23 IPv6: 2a05:e100::/48 Signature Algorithm: sha256WithRSAEncryption a0:fc:a6:aa:aa:fc:61:cd:1b:16:e3:34:0a:8e:96:76:10:9a: cb:1e:1d:b4:e7:a1:42:d6:7a:68:d4:05:94:f6:c3:6c:52:52: d2:48:1b:dd:d9:9b:83:91:49:a0:07:9e:d7:f9:e9:ef:f1:08: cc:96:12:dd:80:29:98:f0:cd:cf:0a:8b:8b:d9:a3:5c:c3:21: c0:b6:46:a1:50:b7:9a:79:d6:63:ec:ff:90:6a:24:b4:3d:7d: 86:e6:5c:4e:5d:c2:df:f7:f6:f3:46:e1:55:eb:a7:4b:f4:4d: 09:3b:8f:1d:15:f2:09:c4:03:82:95:01:7e:4f:a5:9e:93:ff: 8d:9c:e3:9c:31:8c:91:67:e8:4f:d8:e1:3a:6a:57:1a:54:4c: a8:3c:22:e8:bd:7d:af:5c:2a:53:60:ba:7e:36:aa:01:5a:17: 31:a0:bd:6a:fa:d9:93:32:b3:5f:e8:6e:77:4d:14:7b:64:09: c1:e8:fc:d7:87:df:ff:af:84:de:b0:b8:23:f2:c2:00:c8:f8: 01:76:03:18:32:3a:c1:5f:b6:18:3e:11:34:16:a6:14:53:d1: 8a:ae:8a:55:48:ca:50:6e:ec:c6:13:9a:20:1a:3e:80:83:d0: 78:85:88:74:d6:7d:b0:71:e2:20:9c:94:1e:23:66:ca:34:cf: 6f:18:16:89 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt5f0Bfo+gSJHRAT4nptuwTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0OGY0MWFmZGM2MDk1NjhmYjIzMzhmZGIyMGIyZDBjNDIy YjcyM2IwHhcNMjYwMTAxMTIxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMDc0NGMwMDE0NjkzMjJjODRiNjM3YTNiMjQ2MTNlZjQzNjJiNGFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyl7q/tYLLDP1EgJUXazzQzP4yypQ +fsilj0SiaA43PjCdLDQDJCOrr0O9/d+NKXD0veFVZMruWZio2xPMQLFcWZ0er2g G73oB2VTR/ZwiSVSkD6sIS1q3iTGjEhXfKZrtD7g707quuVBo41VbeA5yYzaSs37 KP8DnNHde06GELmt841F/MGzBFMFgpF3kSn+X1z1pz+FZ0AGSqCdLR684UoW1L6M vVhj55JFMyOhqxC/h5nvHxJWkB87vp46mWBHbCrZ31kRXq/Sqh5y12lfz81koPKL bWUEmuTqqhere4Vb8+byeKkW7OIVPlGD4r9pWXlTAeibzcg6i5BP7nLL/wIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFMB0TAAUaTIshLY3o7JGE+9DYrSsMB8GA1UdIwQY MBaAFLSPQa/cYJVo+yM4/bILLQxCK3I7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEk5QnI5eGdsV2o3SXpqOXNnc3RERUlyY2pzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS80ODU3NjktNTgzNS00N2Y0LWE5ZmYt OGVjNjhlNzg4NmUyLzEvd0hSTUFCUnBNaXlFdGplanNrWVQ3ME5pdEt3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS80ODU3NjktNTgzNS00N2Y0LWE5ZmYtOGVjNjhlNzg4NmUy LzEvdEk5QnI5eGdsV2o3SXpqOXNnc3RERUlyY2pzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBuVqYMA8E AgACMAkDBwAqBeEAAAAwDQYJKoZIhvcNAQELBQADggEBAKD8pqqq/GHNGxbjNAqO lnYQmsseHbTnoULWemjUBZT2w2xSUtJIG93Zm4ORSaAHntf56e/xCMyWEt2AKZjw zc8Ki4vZo1zDIcC2RqFQt5p51mPs/5BqJLQ9fYbmXE5dwt/39vNG4VXrp0v0TQk7 jx0V8gnEA4KVAX5PpZ6T/42c45wxjJFn6E/Y4TpqVxpUTKg8Iui9fa9cKlNgun42 qgFaFzGgvWr62ZMys1/obndNFHtkCcHo/NeH3/+vhN6wuCPywgDI+AF2AxgyOsFf thg+ETQWphRT0YquilVIylBu7MYTmiAaPoCD0HiFiHTWfbBx4iCclB4jZso0z28Y Fok= -----END CERTIFICATE-----Generated at Sun Jan 25 21:39:20 2026 by rpki-client