This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/Whw4eOPRUFj-X_q9R8Pnu4LNJlo.roa File: Whw4eOPRUFj-X_q9R8Pnu4LNJlo.roa (raw, json) Hash identifier: X0Zha2ZlfUGqlz4gFH70EfU/pfb2w6wYl+Jrpp2l7d8= Subject key identifier: 5A:1C:38:78:E3:D1:50:58:FE:5F:FA:BD:47:C3:E7:BB:82:CD:26:5A Certificate issuer: /CN=95b30111b0b720a209f788c8b90f60380b465c2e Certificate serial: 019B7CED5A821EC2830734C23E2D690AD2F7 Authority key identifier: 95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/Whw4eOPRUFj-X_q9R8Pnu4LNJlo.roa Signing time: Fri 02 Jan 2026 04:18:08 +0000 ROA not before: Fri 02 Jan 2026 04:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48624 IP address blocks: 176.56.88.0/22 maxlen: 22 176.56.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:5a:82:1e:c2:83:07:34:c2:3e:2d:69:0a:d2:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95b30111b0b720a209f788c8b90f60380b465c2e Validity Not Before: Jan 2 04:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5a1c3878e3d15058fe5ffabd47c3e7bb82cd265a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1e:e4:00:53:f7:4b:38:59:7f:b9:06:f1:81: cf:cf:7a:bf:08:c3:3e:b3:26:9c:50:66:aa:75:45: 25:da:b3:13:1e:8e:29:be:3d:ba:0a:bb:ec:ad:14: 99:e1:1b:a7:85:37:53:e2:2b:f4:dc:cd:94:63:9d: e5:dc:49:0a:aa:07:5b:92:83:25:67:4c:c4:48:57: fb:90:83:94:b6:fa:95:06:2b:0d:78:3c:09:9e:f2: 0e:e9:49:08:70:d8:21:1b:0b:40:7a:26:63:e5:b5: 2e:1b:52:c9:bb:3c:d4:28:37:88:9c:5e:54:58:dd: ea:9d:0e:3b:9a:e2:34:29:26:24:2e:4c:66:5d:ab: 3f:8d:8e:e8:73:79:86:ed:4f:4b:3d:2d:fa:55:e1: 3a:29:a0:6f:d4:8a:d9:3d:f5:1e:84:95:16:8d:52: 76:35:a3:0b:aa:3c:cf:50:36:b1:3b:dc:44:a4:e9: 97:0f:8d:14:41:70:aa:91:3b:70:ce:3c:44:4c:dd: 1c:9e:7f:c0:77:90:10:c5:0d:4c:4c:67:c3:b2:59: 0c:db:94:e2:af:11:05:13:47:7f:e4:bf:f5:2c:cf: 2f:e2:eb:6c:85:f4:c5:a8:ae:2f:8c:50:41:16:ed: 94:5c:20:cf:e2:7c:f4:83:31:d6:05:b7:43:9d:e6: 20:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:1C:38:78:E3:D1:50:58:FE:5F:FA:BD:47:C3:E7:BB:82:CD:26:5A X509v3 Authority Key Identifier: keyid:95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/Whw4eOPRUFj-X_q9R8Pnu4LNJlo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.56.88.0/22 176.56.95.0/24 Signature Algorithm: sha256WithRSAEncryption 19:ea:00:3d:3b:4f:94:ce:6a:d2:07:46:3f:a2:c4:09:4d:98: ba:f6:4b:12:4a:dd:ce:69:b2:73:d1:b9:04:3f:e9:c7:b7:c6: 61:36:3f:ad:b5:b5:c6:d2:e7:f3:2d:27:3b:a0:65:65:80:a7: 0c:48:98:87:65:3d:d8:71:44:68:da:07:8a:fb:28:92:8f:bd: 64:6d:0e:84:d4:9c:ed:0f:e0:a7:81:f3:57:44:1e:0e:b5:4c: b3:f8:40:bd:25:25:da:1f:ca:52:2a:c6:ec:c4:9f:57:f1:b2: 86:7a:72:7d:5c:3a:f2:a5:86:74:4f:b2:70:de:c6:70:71:65: d8:32:c2:6b:ee:ee:41:41:0b:3a:fd:b3:75:5d:a9:fd:30:bf: eb:52:3f:36:a1:aa:d0:ed:37:4a:6b:0d:9d:28:99:35:ec:4a: 89:03:04:4c:0d:e6:77:2b:2e:3b:9f:c5:44:1f:fc:d0:fd:ef: 61:3f:c0:81:05:81:1c:bb:bb:fb:ef:8e:9f:63:97:b8:32:0d: 6b:bf:80:9b:6c:24:2e:4a:68:08:36:de:01:94:c5:d6:83:b7: ed:ce:3e:15:86:2b:cc:a1:d1:ed:dd:fd:7c:40:c0:81:77:c1: 5b:f6:c0:0c:a7:a3:a2:d8:0a:7f:e9:c8:67:c1:88:ba:ab:2a: 6b:10:e8:af -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt87VqCHsKDBzTCPi1pCtL3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1YjMwMTExYjBiNzIwYTIwOWY3ODhjOGI5MGY2MDM4MGI0 NjVjMmUwHhcNMjYwMTAyMDQxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YTFjMzg3OGUzZDE1MDU4ZmU1ZmZhYmQ0N2MzZTdiYjgyY2QyNjVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArx7kAFP3SzhZf7kG8YHPz3q/CMM+ syacUGaqdUUl2rMTHo4pvj26CrvsrRSZ4RunhTdT4iv03M2UY53l3EkKqgdbkoMl Z0zESFf7kIOUtvqVBisNeDwJnvIO6UkIcNghGwtAeiZj5bUuG1LJuzzUKDeInF5U WN3qnQ47muI0KSYkLkxmXas/jY7oc3mG7U9LPS36VeE6KaBv1IrZPfUehJUWjVJ2 NaMLqjzPUDaxO9xEpOmXD40UQXCqkTtwzjxETN0cnn/Ad5AQxQ1MTGfDslkM25Ti rxEFE0d/5L/1LM8v4utshfTFqK4vjFBBFu2UXCDP4nz0gzHWBbdDneYgDQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFocOHjj0VBY/l/6vUfD57uCzSZaMB8GA1UdIwQY MBaAFJWzARGwtyCiCfeIyLkPYDgLRlwuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGJNQkViQzNJS0lKOTRqSXVROWdPQXRHWEM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8wM2JmMjgtYzU1ZC00YzdhLTkxYmIt OTE2NDZiZjAxNTNkLzEvV2h3NGVPUFJVRmotWF9xOVI4UG51NExOSmxvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8wM2JmMjgtYzU1ZC00YzdhLTkxYmItOTE2NDZiZjAxNTNk LzEvbGJNQkViQzNJS0lKOTRqSXVROWdPQXRHWEM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCsDhYAwQA sDhfMA0GCSqGSIb3DQEBCwUAA4IBAQAZ6gA9O0+UzmrSB0Y/osQJTZi69ksSSt3O abJz0bkEP+nHt8ZhNj+ttbXG0ufzLSc7oGVlgKcMSJiHZT3YcURo2geK+yiSj71k bQ6E1JztD+CngfNXRB4OtUyz+EC9JSXaH8pSKsbsxJ9X8bKGenJ9XDrypYZ0T7Jw 3sZwcWXYMsJr7u5BQQs6/bN1Xan9ML/rUj82oarQ7TdKaw2dKJk17EqJAwRMDeZ3 Ky47n8VEH/zQ/e9hP8CBBYEcu7v7746fY5e4Mg1rv4CbbCQuSmgINt4BlMXWg7ft zj4VhivModHt3f18QMCBd8Fb9sAMp6Oi2Ap/6chnwYi6qyprEOiv -----END CERTIFICATE-----Generated at Sun Jan 25 20:47:54 2026 by rpki-client