This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/WHR6l1Q5Ar0v18AKFt90RxwkrKo.roa File: WHR6l1Q5Ar0v18AKFt90RxwkrKo.roa (raw, json) Hash identifier: WNLKDaJxOe6Uz6jgAOWxAF+kTRgHf8gZjh0RxUla/9E= Subject key identifier: 58:74:7A:97:54:39:02:BD:2F:D7:C0:0A:16:DF:74:47:1C:24:AC:AA Certificate issuer: /CN=69ca7c17232db063491cfa585203369ffbeb76ed Certificate serial: 019B79ED592CCDCEB437262C2C2389812673 Authority key identifier: 69:CA:7C:17:23:2D:B0:63:49:1C:FA:58:52:03:36:9F:FB:EB:76:ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/acp8FyMtsGNJHPpYUgM2n_vrdu0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/WHR6l1Q5Ar0v18AKFt90RxwkrKo.roa Signing time: Thu 01 Jan 2026 14:19:16 +0000 ROA not before: Thu 01 Jan 2026 14:19:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57588 IP address blocks: 185.65.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.mft rsync://rpki.ripe.net/repository/DEFAULT/acp8FyMtsGNJHPpYUgM2n_vrdu0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:59:2c:cd:ce:b4:37:26:2c:2c:23:89:81:26:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69ca7c17232db063491cfa585203369ffbeb76ed Validity Not Before: Jan 1 14:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=58747a97543902bd2fd7c00a16df74471c24acaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:df:3b:e5:18:78:36:96:c9:41:8e:42:79:f1: d0:e4:07:f1:4b:04:2c:9b:4b:4f:17:1d:af:f3:fb: 2b:3b:1c:09:cf:db:a3:7d:9c:f6:d1:11:91:9b:06: 64:87:eb:61:bc:a2:4f:13:1b:fd:c8:73:ce:3e:28: 08:8a:87:52:be:7c:e1:a7:4f:01:db:30:a2:14:57: 28:5e:95:d6:d2:44:99:29:7b:fc:76:4b:29:db:a3: ce:d4:1d:36:8f:c7:d0:18:9a:94:7d:f9:a8:7d:40: b1:d0:81:35:aa:27:89:d6:ff:d3:ae:04:3a:8a:8d: 04:f9:e8:89:38:93:2e:1c:2d:ef:11:2c:4a:ed:ae: a8:50:e6:5b:45:26:1e:d1:4a:c7:d0:c3:db:53:43: 66:10:38:57:a6:13:30:27:56:e6:88:84:eb:9b:fa: 9a:a1:e9:7f:c6:33:bd:41:02:fe:b1:9e:69:34:f7: 0b:b5:f6:03:d2:64:5f:50:02:60:0f:84:7c:35:a5: 30:94:c6:1e:ec:4b:18:cc:c8:c9:97:65:f1:f1:6d: de:8e:af:f5:98:e5:a9:fe:d2:4c:af:97:f0:2e:41: 91:0b:9f:b7:18:61:4b:9b:2f:d3:04:17:4c:79:b1: 7e:4e:0f:c4:d7:6c:32:9b:23:fe:18:a9:ff:34:ea: 2b:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:74:7A:97:54:39:02:BD:2F:D7:C0:0A:16:DF:74:47:1C:24:AC:AA X509v3 Authority Key Identifier: keyid:69:CA:7C:17:23:2D:B0:63:49:1C:FA:58:52:03:36:9F:FB:EB:76:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/acp8FyMtsGNJHPpYUgM2n_vrdu0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/WHR6l1Q5Ar0v18AKFt90RxwkrKo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.65.254.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:14:34:46:34:2d:3c:01:06:48:77:8a:64:a2:a7:ec:15:e3: e5:2b:02:20:d3:a7:27:0f:5b:cd:d6:a6:eb:28:ca:67:83:db: 8f:47:5a:37:ef:17:0d:7b:a0:e7:c0:c6:a3:84:2e:21:22:43: 5f:ec:2e:82:ef:18:8e:85:84:f5:f0:13:53:16:7b:9a:fc:8a: 3a:26:71:3b:60:5f:51:42:6f:0e:80:81:34:34:e7:3c:c0:9f: 7f:13:5b:a2:d7:00:6c:c3:d7:bd:b6:71:89:2d:c3:14:42:5f: ba:13:73:1c:82:2d:e7:36:a0:50:fc:14:4f:e1:cb:3d:ad:9a: 36:a9:19:58:ab:e0:49:db:ca:85:3d:10:a1:84:7d:cc:86:27: cc:47:45:19:20:6c:a0:9b:a0:ea:29:6a:1b:88:4e:d5:c6:c4: df:e9:27:be:c7:46:e6:0f:4c:c6:2f:f4:e2:f7:ba:5e:b6:7e: 58:69:91:fc:59:8f:89:0a:0d:13:d0:05:db:cc:92:eb:2b:f7: 9e:35:14:54:83:d6:4f:8c:82:4c:75:a5:6a:ef:ef:a4:92:b5: 8e:e0:a8:65:1e:38:d1:55:99:cc:71:e0:4c:7e:3a:47:3a:ed: cb:3a:94:f9:74:e3:94:b4:b5:4f:f2:63:94:10:f7:b6:eb:fe: 7d:cb:e0:54 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57Vkszc60NyYsLCOJgSZzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5Y2E3YzE3MjMyZGIwNjM0OTFjZmE1ODUyMDMzNjlmZmJl Yjc2ZWQwHhcNMjYwMTAxMTQxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ODc0N2E5NzU0MzkwMmJkMmZkN2MwMGExNmRmNzQ0NzFjMjRhY2FhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArt875Rh4NpbJQY5CefHQ5AfxSwQs m0tPFx2v8/srOxwJz9ujfZz20RGRmwZkh+thvKJPExv9yHPOPigIiodSvnzhp08B 2zCiFFcoXpXW0kSZKXv8dksp26PO1B02j8fQGJqUffmofUCx0IE1qieJ1v/TrgQ6 io0E+eiJOJMuHC3vESxK7a6oUOZbRSYe0UrH0MPbU0NmEDhXphMwJ1bmiITrm/qa oel/xjO9QQL+sZ5pNPcLtfYD0mRfUAJgD4R8NaUwlMYe7EsYzMjJl2Xx8W3ejq/1 mOWp/tJMr5fwLkGRC5+3GGFLmy/TBBdMebF+Tg/E12wymyP+GKn/NOorhQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFh0epdUOQK9L9fAChbfdEccJKyqMB8GA1UdIwQY MBaAFGnKfBcjLbBjSRz6WFIDNp/763btMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWNwOEZ5TXRzR05KSFBwWVVnTTJuX3ZyZHUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9iZmI0MjMtZGE2OS00MjY1LTk1ZTUt ZjQ3YWU3ZGRhZWMwLzEvV0hSNmwxUTVBcjB2MThBS0Z0OTBSeHdrcktvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9iZmI0MjMtZGE2OS00MjY1LTk1ZTUtZjQ3YWU3ZGRhZWMw LzEvYWNwOEZ5TXRzR05KSFBwWVVnTTJuX3ZyZHUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuUH+MA0G CSqGSIb3DQEBCwUAA4IBAQCNFDRGNC08AQZId4pkoqfsFePlKwIg06cnD1vN1qbr KMpng9uPR1o37xcNe6DnwMajhC4hIkNf7C6C7xiOhYT18BNTFnua/Io6JnE7YF9R Qm8OgIE0NOc8wJ9/E1ui1wBsw9e9tnGJLcMUQl+6E3Mcgi3nNqBQ/BRP4cs9rZo2 qRlYq+BJ28qFPRChhH3MhifMR0UZIGygm6DqKWobiE7VxsTf6Se+x0bmD0zGL/Ti 97petn5YaZH8WY+JCg0T0AXbzJLrK/eeNRRUg9ZPjIJMdaVq7++kkrWO4KhlHjjR VZnMceBMfjpHOu3LOpT5dOOUtLVP8mOUEPe26/59y+BU -----END CERTIFICATE-----Generated at Sun Jan 25 21:39:28 2026 by rpki-client