This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/WiHVRTKANQPSLlslZgPEwLo61sU.roa File: WiHVRTKANQPSLlslZgPEwLo61sU.roa (raw, json) Hash identifier: NTrkcyBW/Rrku+dfbekK8M7MWrvABIKgt6ihPMKiaiM= Subject key identifier: 5A:21:D5:45:32:80:35:03:D2:2E:5B:25:66:03:C4:C0:BA:3A:D6:C5 Certificate issuer: /CN=60a851d59356ca95d4ae78fa6936ba1b8a2b1c7a Certificate serial: 019B797ECCB0A0E378E00FD52BD3A86EEAB7 Authority key identifier: 60:A8:51:D5:93:56:CA:95:D4:AE:78:FA:69:36:BA:1B:8A:2B:1C:7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YKhR1ZNWypXUrnj6aTa6G4orHHo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/WiHVRTKANQPSLlslZgPEwLo61sU.roa Signing time: Thu 01 Jan 2026 12:18:31 +0000 ROA not before: Thu 01 Jan 2026 12:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59474 IP address blocks: 185.253.110.0/24 maxlen: 24 2a10:adc0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.crl rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.mft rsync://rpki.ripe.net/repository/DEFAULT/YKhR1ZNWypXUrnj6aTa6G4orHHo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:cc:b0:a0:e3:78:e0:0f:d5:2b:d3:a8:6e:ea:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60a851d59356ca95d4ae78fa6936ba1b8a2b1c7a Validity Not Before: Jan 1 12:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5a21d54532803503d22e5b256603c4c0ba3ad6c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e7:e8:91:62:84:35:da:4b:e7:30:b0:c9:9b: 32:c7:c1:26:5c:17:38:e6:2c:09:d3:f4:b1:0e:94: e9:cf:92:41:e6:a1:68:52:a9:79:49:46:d3:c7:e8: de:ac:46:db:79:6f:41:30:57:d0:9f:62:d6:25:79: b3:58:ed:81:fe:43:cc:ca:c1:1b:b1:e1:dd:a7:48: f7:fc:99:d9:61:b3:c1:4a:c0:d6:6d:6d:78:a0:a5: 82:0b:48:f2:2c:1f:78:0e:c4:b0:39:3c:26:88:11: a2:75:08:5d:bd:c3:7b:e9:89:83:80:98:7f:09:f5: 67:ec:12:03:41:77:3d:9a:4c:ce:5e:ae:06:96:b5: f4:24:0e:3f:9e:bc:13:6a:b1:8f:88:dc:03:ad:32: 11:81:5f:a1:81:13:19:92:14:f9:49:11:dc:74:29: 5b:fe:72:07:2c:38:a7:78:68:b3:24:da:5a:d4:08: 9c:ef:1f:7c:5f:7c:58:30:b2:5a:94:9e:f6:d9:06: 95:78:d2:ee:12:ee:7d:62:44:11:74:e0:c7:1b:d7: e2:d6:86:fd:80:64:de:66:f1:ed:ca:eb:28:a6:79: 33:98:5d:42:fb:f1:f6:2f:67:ac:99:10:81:9d:b8: bf:49:e1:59:bb:22:d3:0a:e5:5b:16:d4:8b:f5:59: d8:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:21:D5:45:32:80:35:03:D2:2E:5B:25:66:03:C4:C0:BA:3A:D6:C5 X509v3 Authority Key Identifier: keyid:60:A8:51:D5:93:56:CA:95:D4:AE:78:FA:69:36:BA:1B:8A:2B:1C:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YKhR1ZNWypXUrnj6aTa6G4orHHo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/WiHVRTKANQPSLlslZgPEwLo61sU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.253.110.0/24 IPv6: 2a10:adc0::/29 Signature Algorithm: sha256WithRSAEncryption c3:22:19:d5:b7:85:90:8f:53:8b:cf:b3:a4:8f:08:8a:16:23: 61:1c:ba:45:9e:af:5f:9c:ac:4f:2b:a0:57:54:17:d4:6e:e2: 44:34:dd:e4:a0:3b:2f:e7:1b:0e:7e:c7:c1:36:d9:4e:15:3a: 75:9d:7d:fd:00:e0:fb:42:4c:13:35:2c:39:b9:cc:09:f1:72: bb:52:31:cc:a6:94:70:bc:97:4a:b4:87:3c:21:85:8d:c5:ec: b2:ab:16:6c:c0:ef:1e:c5:29:07:9b:5d:b2:25:5c:cc:86:c0: b3:f1:6a:99:64:55:54:33:bc:18:20:3d:d3:59:ed:8f:d2:d9: 10:5f:fb:1f:44:94:22:46:3c:78:4a:08:46:66:9c:48:bb:ea: 6b:76:a8:a0:a6:36:38:01:ff:4c:b2:8b:b2:8d:b2:9a:0a:48: 01:e9:7b:aa:c1:62:68:9d:74:88:1e:ac:7a:7d:5a:40:42:15: 0b:e2:89:1f:39:a3:b4:58:0e:28:d8:82:5e:c3:49:53:db:65: 20:e8:60:65:d6:b7:95:a7:ef:da:b8:66:18:7b:9c:ea:13:f1: 6a:44:a9:5f:7b:f7:1b:86:ad:09:00:b7:8c:b9:cf:e1:e5:26: 2c:aa:ea:94:dd:e9:32:d1:8e:87:e9:29:26:71:c5:a2:e8:8a: 6f:08:1e:3e -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5fsywoON44A/VK9Oobuq3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwYTg1MWQ1OTM1NmNhOTVkNGFlNzhmYTY5MzZiYTFiOGEy YjFjN2EwHhcNMjYwMTAxMTIxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YTIxZDU0NTMyODAzNTAzZDIyZTViMjU2NjAzYzRjMGJhM2FkNmM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArefokWKENdpL5zCwyZsyx8EmXBc4 5iwJ0/SxDpTpz5JB5qFoUql5SUbTx+jerEbbeW9BMFfQn2LWJXmzWO2B/kPMysEb seHdp0j3/JnZYbPBSsDWbW14oKWCC0jyLB94DsSwOTwmiBGidQhdvcN76YmDgJh/ CfVn7BIDQXc9mkzOXq4GlrX0JA4/nrwTarGPiNwDrTIRgV+hgRMZkhT5SRHcdClb /nIHLDineGizJNpa1Aic7x98X3xYMLJalJ722QaVeNLuEu59YkQRdODHG9fi1ob9 gGTeZvHtyusopnkzmF1C+/H2L2esmRCBnbi/SeFZuyLTCuVbFtSL9VnY0wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFFoh1UUygDUD0i5bJWYDxMC6OtbFMB8GA1UdIwQY MBaAFGCoUdWTVsqV1K54+mk2uhuKKxx6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUtoUjFaTld5cFhVcm5qNmFUYTZHNG9ySEhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9jOTc4OTgtNWU3Mi00NTRhLWJlMmYt NTQ4ZTdiN2ZhNGUxLzEvV2lIVlJUS0FOUVBTTGxzbFpnUEV3TG82MXNVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9jOTc4OTgtNWU3Mi00NTRhLWJlMmYtNTQ4ZTdiN2ZhNGUx LzEvWUtoUjFaTld5cFhVcm5qNmFUYTZHNG9ySEhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuf1uMA0E AgACMAcDBQMqEK3AMA0GCSqGSIb3DQEBCwUAA4IBAQDDIhnVt4WQj1OLz7OkjwiK FiNhHLpFnq9fnKxPK6BXVBfUbuJENN3koDsv5xsOfsfBNtlOFTp1nX39AOD7QkwT NSw5ucwJ8XK7UjHMppRwvJdKtIc8IYWNxeyyqxZswO8exSkHm12yJVzMhsCz8WqZ ZFVUM7wYID3TWe2P0tkQX/sfRJQiRjx4SghGZpxIu+prdqigpjY4Af9MsouyjbKa CkgB6XuqwWJonXSIHqx6fVpAQhUL4okfOaO0WA4o2IJew0lT22Ug6GBl1reVp+/a uGYYe5zqE/FqRKlfe/cbhq0JALeMuc/h5SYsquqU3eky0Y6H6SkmccWi6IpvCB4+ -----END CERTIFICATE-----Generated at Mon Jan 26 07:07:25 2026 by rpki-client