This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/e62169-486d-4054-b121-f2c8ba021ca8/1/WH8m0TMkVXBPbucXPDw6oUIRye4.roa File: WH8m0TMkVXBPbucXPDw6oUIRye4.roa (raw, json) Hash identifier: IB0keQjNG9LRUVYhpn54n8Irz+pRxwCtrbopId4wJAg= Subject key identifier: 58:7F:26:D1:33:24:55:70:4F:6E:E7:17:3C:3C:3A:A1:42:11:C9:EE Certificate issuer: /CN=efc3605c32bbc85d235f0a9ce8f45f0796b723cb Certificate serial: 019B79ECAD0BCE12C13EB71DABC887BDEC2A Authority key identifier: EF:C3:60:5C:32:BB:C8:5D:23:5F:0A:9C:E8:F4:5F:07:96:B7:23:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/78NgXDK7yF0jXwqc6PRfB5a3I8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/e62169-486d-4054-b121-f2c8ba021ca8/1/WH8m0TMkVXBPbucXPDw6oUIRye4.roa Signing time: Thu 01 Jan 2026 14:18:32 +0000 ROA not before: Thu 01 Jan 2026 14:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48854 IP address blocks: 185.232.148.0/24 maxlen: 24 185.232.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/e62169-486d-4054-b121-f2c8ba021ca8/1/78NgXDK7yF0jXwqc6PRfB5a3I8s.crl rsync://rpki.ripe.net/repository/DEFAULT/39/e62169-486d-4054-b121-f2c8ba021ca8/1/78NgXDK7yF0jXwqc6PRfB5a3I8s.mft rsync://rpki.ripe.net/repository/DEFAULT/78NgXDK7yF0jXwqc6PRfB5a3I8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:ad:0b:ce:12:c1:3e:b7:1d:ab:c8:87:bd:ec:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=efc3605c32bbc85d235f0a9ce8f45f0796b723cb Validity Not Before: Jan 1 14:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=587f26d1332455704f6ee7173c3c3aa14211c9ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:16:ad:f3:92:19:66:37:dc:50:ca:29:a9:c1: e4:b2:06:56:26:d9:d1:6e:71:2a:7c:79:a0:1e:db: 2d:db:e1:a9:6d:83:e2:ab:2f:b2:40:9f:11:c7:7e: 75:3f:89:ce:44:ba:c9:60:6a:05:ff:91:95:3a:1f: a9:8c:f7:94:17:e4:45:ce:fd:c6:7b:66:1c:31:c7: e4:8e:46:d0:ed:a9:7a:49:0b:a0:c4:54:a2:70:a2: 09:0f:88:28:9d:3c:ce:02:70:76:7d:1a:05:4b:11: da:8a:57:89:66:1e:fb:6e:7d:bd:65:0f:d5:94:e0: fe:ab:97:7c:d6:1b:42:aa:cd:aa:dd:14:17:38:da: cd:f4:55:3c:95:33:02:26:35:1c:50:bd:12:4b:78: 2f:b4:13:aa:97:75:bc:f9:47:b3:d0:64:36:da:a8: f2:89:9f:04:40:6a:17:33:e0:55:81:d3:f2:1c:c3: 73:7c:7f:69:a1:17:57:88:12:de:c5:24:78:1b:4f: b2:e8:6b:4c:88:ed:88:7d:3e:df:67:7c:23:dc:42: cc:13:ce:e3:b8:a8:80:f7:1a:f0:bd:53:94:9f:57: 12:b4:d5:61:0d:88:e6:69:04:fc:db:8c:00:e8:8c: 6c:ec:81:9d:7d:e1:5e:8e:d5:9c:a9:7c:71:48:62: ba:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:7F:26:D1:33:24:55:70:4F:6E:E7:17:3C:3C:3A:A1:42:11:C9:EE X509v3 Authority Key Identifier: keyid:EF:C3:60:5C:32:BB:C8:5D:23:5F:0A:9C:E8:F4:5F:07:96:B7:23:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/78NgXDK7yF0jXwqc6PRfB5a3I8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/e62169-486d-4054-b121-f2c8ba021ca8/1/WH8m0TMkVXBPbucXPDw6oUIRye4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/e62169-486d-4054-b121-f2c8ba021ca8/1/78NgXDK7yF0jXwqc6PRfB5a3I8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.232.148.0/23 Signature Algorithm: sha256WithRSAEncryption 96:d9:6b:d5:26:18:59:f2:63:2e:ec:46:35:82:e5:18:d9:f3: 09:da:3d:00:9d:8c:16:2e:87:5c:96:89:79:a3:88:3c:14:7d: 10:fd:1d:0f:b1:d3:c7:a8:85:ce:62:42:0c:58:15:95:43:30: bd:47:3d:3e:8d:92:0b:23:50:ed:e8:c9:54:31:c6:c3:19:f7: 98:97:6d:0a:d3:e2:58:92:f1:cb:ba:01:1f:2b:54:2e:6f:03: 9f:35:0c:12:d3:4b:b1:e4:c0:a4:b6:83:28:54:4d:16:43:e9: 9f:26:76:b1:cc:c3:46:5a:6c:76:51:85:d1:5f:2f:c6:e0:7f: 71:94:a0:ac:5d:23:bb:23:a7:a9:14:d6:d8:fd:23:58:94:fa: 43:31:14:c1:76:95:b1:c4:6b:33:c0:36:dc:d5:29:6a:92:f1: 73:38:5a:9e:54:b2:0e:71:42:71:b0:d6:19:e8:d1:7f:47:54: 69:dc:2e:63:38:f0:3f:5f:80:ec:7a:97:4a:2d:c9:71:c4:32: ec:bb:5a:76:d0:9b:2e:91:65:95:5b:6c:15:87:be:c9:67:f7: ea:27:4d:6f:30:0a:d8:1b:46:b1:86:ea:87:c1:3f:69:c6:9a: 54:cc:90:21:33:ac:aa:af:3c:ba:d6:49:e6:76:24:1f:d2:1f: 0f:1b:7e:9f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57K0LzhLBPrcdq8iHvewqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmYzM2MDVjMzJiYmM4NWQyMzVmMGE5Y2U4ZjQ1ZjA3OTZi NzIzY2IwHhcNMjYwMTAxMTQxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ODdmMjZkMTMzMjQ1NTcwNGY2ZWU3MTczYzNjM2FhMTQyMTFjOWVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxat85IZZjfcUMopqcHksgZWJtnR bnEqfHmgHtst2+GpbYPiqy+yQJ8Rx351P4nORLrJYGoF/5GVOh+pjPeUF+RFzv3G e2YcMcfkjkbQ7al6SQugxFSicKIJD4gonTzOAnB2fRoFSxHaileJZh77bn29ZQ/V lOD+q5d81htCqs2q3RQXONrN9FU8lTMCJjUcUL0SS3gvtBOql3W8+Uez0GQ22qjy iZ8EQGoXM+BVgdPyHMNzfH9poRdXiBLexSR4G0+y6GtMiO2IfT7fZ3wj3ELME87j uKiA9xrwvVOUn1cStNVhDYjmaQT824wA6Ixs7IGdfeFejtWcqXxxSGK6lwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFh/JtEzJFVwT27nFzw8OqFCEcnuMB8GA1UdIwQY MBaAFO/DYFwyu8hdI18KnOj0XweWtyPLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzhOZ1hESzd5RjBqWHdxYzZQUmZCNWEzSThzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9lNjIxNjktNDg2ZC00MDU0LWIxMjEt ZjJjOGJhMDIxY2E4LzEvV0g4bTBUTWtWWEJQYnVjWFBEdzZvVUlSeWU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS9lNjIxNjktNDg2ZC00MDU0LWIxMjEtZjJjOGJhMDIxY2E4 LzEvNzhOZ1hESzd5RjBqWHdxYzZQUmZCNWEzSThzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBueiUMA0G CSqGSIb3DQEBCwUAA4IBAQCW2WvVJhhZ8mMu7EY1guUY2fMJ2j0AnYwWLodclol5 o4g8FH0Q/R0PsdPHqIXOYkIMWBWVQzC9Rz0+jZILI1Dt6MlUMcbDGfeYl20K0+JY kvHLugEfK1QubwOfNQwS00ux5MCktoMoVE0WQ+mfJnaxzMNGWmx2UYXRXy/G4H9x lKCsXSO7I6epFNbY/SNYlPpDMRTBdpWxxGszwDbc1SlqkvFzOFqeVLIOcUJxsNYZ 6NF/R1Rp3C5jOPA/X4DsepdKLclxxDLsu1p20JsukWWVW2wVh77JZ/fqJ01vMArY G0axhuqHwT9pxppUzJAhM6yqrzy61knmdiQf0h8PG36f -----END CERTIFICATE-----Generated at Mon Jan 26 05:05:53 2026 by rpki-client