This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/WHarR1uRLFFjZYfPYljd_juBYBY.roa File: WHarR1uRLFFjZYfPYljd_juBYBY.roa (raw, json) Hash identifier: f7vPU634ykvMXlxqUGRudW68PijTfAcdqddO3Fn2YQE= Subject key identifier: 58:76:AB:47:5B:91:2C:51:63:65:87:CF:62:58:DD:FE:3B:81:60:16 Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F8507A167238FD32D4C7E84A23B9AA9 Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/WHarR1uRLFFjZYfPYljd_juBYBY.roa Signing time: Fri 02 Jan 2026 16:23:03 +0000 ROA not before: Fri 02 Jan 2026 16:23:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209398 IP address blocks: 95.46.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:07:a1:67:23:8f:d3:2d:4c:7e:84:a2:3b:9a:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:23:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5876ab475b912c51636587cf6258ddfe3b816016 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:2d:f5:33:7c:d8:9d:0b:ff:0a:57:5f:08:38: 6d:24:07:f7:5e:f8:a3:f4:f7:c5:19:05:ef:c8:cc: 12:4c:15:9a:6a:c1:92:94:ca:84:ad:95:d3:56:3b: 13:e9:f6:b4:08:fa:a1:db:68:3f:31:0e:9a:b8:1a: 85:49:ab:a8:d6:b5:3c:08:55:5e:96:fe:46:51:f7: f1:59:00:5c:4a:bf:0f:55:3f:48:82:80:11:94:a0: 88:41:a8:cd:ce:43:e5:54:75:33:00:f5:4c:16:a5: cd:ae:a6:7c:fb:61:a9:86:cd:7d:ec:b6:de:a9:cc: d9:28:c3:1b:9e:ec:e3:26:f1:b4:36:b9:c6:84:21: 5e:74:31:d1:30:c0:50:6f:01:0d:3a:85:04:cb:23: 3a:29:bf:c0:d5:0f:94:87:c6:4d:32:93:35:1c:ed: 75:53:a0:6d:fe:5a:ee:2f:e0:89:b6:ac:76:01:cf: 22:87:55:41:09:1a:17:6f:15:32:54:1c:db:80:a6: a2:90:08:06:0b:c4:83:b4:bc:1c:51:60:af:4a:3f: 1c:83:98:38:8f:03:b8:48:d1:91:5f:4d:54:e5:25: ff:3e:09:e7:7b:61:39:c2:15:ea:2f:13:aa:57:02: 88:75:0a:79:ab:14:a8:98:4e:ec:6f:72:31:57:40: f6:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:76:AB:47:5B:91:2C:51:63:65:87:CF:62:58:DD:FE:3B:81:60:16 X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/WHarR1uRLFFjZYfPYljd_juBYBY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.46.145.0/24 Signature Algorithm: sha256WithRSAEncryption 62:42:ad:5e:e3:7d:9e:90:d2:cf:fd:71:d5:76:35:a3:16:70: 01:20:8a:59:c0:d7:c2:5f:5d:a6:fe:fa:17:1f:53:b1:67:bc: 36:81:1d:a6:ce:ad:9f:92:47:b7:35:99:81:a2:d7:cb:22:bf: 7e:05:33:33:68:15:9a:41:43:77:fb:bd:14:34:72:8e:ae:a0: e9:e5:76:0e:a5:b5:e3:d2:ca:b0:96:4c:aa:a7:eb:22:c5:3a: af:18:61:06:8f:78:21:0d:09:07:b0:9a:48:41:e4:1b:22:d6: 4b:31:f7:31:a3:06:84:89:1a:d9:f7:b6:68:f4:f7:38:e0:c6: f1:f4:c2:eb:40:5c:82:70:51:f8:23:35:84:81:94:6c:5d:ed: ee:74:32:03:51:3a:7b:47:ed:26:cd:04:43:bc:f9:01:8f:8a: c0:aa:8a:0f:29:e9:63:a2:51:a7:e2:c5:57:da:01:15:7b:cf: 18:fe:b0:61:e8:31:63:a4:74:3e:27:8b:74:22:9c:f3:56:64: 76:67:40:73:d1:a4:52:a2:1f:c7:4e:75:98:d6:77:49:43:32: 41:42:98:fd:c4:25:62:20:d8:76:5f:56:df:cb:1a:c6:4e:7e: 12:fa:f9:3e:9c:e1:53:1b:e3:b1:41:ca:ad:9a:76:89:86:9d: a0:a0:e3:48 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hQehZyOP0y1MfoSiO5qpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMzAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ODc2YWI0NzViOTEyYzUxNjM2NTg3Y2Y2MjU4ZGRmZTNiODE2MDE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoS31M3zYnQv/CldfCDhtJAf3Xvij 9PfFGQXvyMwSTBWaasGSlMqErZXTVjsT6fa0CPqh22g/MQ6auBqFSauo1rU8CFVe lv5GUffxWQBcSr8PVT9IgoARlKCIQajNzkPlVHUzAPVMFqXNrqZ8+2Gphs197Lbe qczZKMMbnuzjJvG0NrnGhCFedDHRMMBQbwENOoUEyyM6Kb/A1Q+Uh8ZNMpM1HO11 U6Bt/lruL+CJtqx2Ac8ih1VBCRoXbxUyVBzbgKaikAgGC8SDtLwcUWCvSj8cg5g4 jwO4SNGRX01U5SX/Pgnne2E5whXqLxOqVwKIdQp5qxSomE7sb3IxV0D2dwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFh2q0dbkSxRY2WHz2JY3f47gWAWMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvV0hhclIxdVJMRkZqWllmUFlsamRfanVCWUJZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXy6RMA0G CSqGSIb3DQEBCwUAA4IBAQBiQq1e432ekNLP/XHVdjWjFnABIIpZwNfCX12m/voX H1OxZ7w2gR2mzq2fkke3NZmBotfLIr9+BTMzaBWaQUN3+70UNHKOrqDp5XYOpbXj 0sqwlkyqp+sixTqvGGEGj3ghDQkHsJpIQeQbItZLMfcxowaEiRrZ97Zo9Pc44Mbx 9MLrQFyCcFH4IzWEgZRsXe3udDIDUTp7R+0mzQRDvPkBj4rAqooPKeljolGn4sVX 2gEVe88Y/rBh6DFjpHQ+J4t0IpzzVmR2Z0Bz0aRSoh/HTnWY1ndJQzJBQpj9xCVi INh2X1bfyxrGTn4S+vk+nOFTG+OxQcqtmnaJhp2goONI -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:41 2026 by rpki-client