This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/WhvYQK76egAZEZEeQfPRqMj2uf0.roa File: WhvYQK76egAZEZEeQfPRqMj2uf0.roa (raw, json) Hash identifier: Q5N9WAS31QPPg96VHbYy1GLBSAM2GSC23NPAQEqvVv8= Subject key identifier: 5A:1B:D8:40:AE:FA:7A:00:19:11:91:1E:41:F3:D1:A8:C8:F6:B9:FD Certificate issuer: /CN=bc63a36d5c80651a89a76906c9e3402fb34568da Certificate serial: 019B7BA4D76029A836D654A8D77EF264C2D6 Authority key identifier: BC:63:A3:6D:5C:80:65:1A:89:A7:69:06:C9:E3:40:2F:B3:45:68:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vGOjbVyAZRqJp2kGyeNAL7NFaNo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/WhvYQK76egAZEZEeQfPRqMj2uf0.roa Signing time: Thu 01 Jan 2026 22:19:19 +0000 ROA not before: Thu 01 Jan 2026 22:19:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12874 IP address blocks: 185.145.102.0/24 maxlen: 24 185.145.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/vGOjbVyAZRqJp2kGyeNAL7NFaNo.crl rsync://rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/vGOjbVyAZRqJp2kGyeNAL7NFaNo.mft rsync://rpki.ripe.net/repository/DEFAULT/vGOjbVyAZRqJp2kGyeNAL7NFaNo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:d7:60:29:a8:36:d6:54:a8:d7:7e:f2:64:c2:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc63a36d5c80651a89a76906c9e3402fb34568da Validity Not Before: Jan 1 22:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5a1bd840aefa7a001911911e41f3d1a8c8f6b9fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ea:2a:55:22:a4:58:b3:92:f6:6b:7e:54:c2: b0:a1:71:34:94:98:ed:8f:74:21:35:ca:16:34:59: 88:8d:d6:d8:a1:92:d6:6f:d0:9d:10:47:37:49:28: f3:f0:e3:70:20:d7:f9:69:67:21:97:0b:4e:f0:36: c8:5d:f3:09:d1:82:26:32:91:c9:3f:a6:69:0d:bd: e3:d3:13:6a:d6:c9:76:b9:7a:71:0d:7e:54:ee:8e: 07:67:3c:39:a0:9c:7e:00:23:45:5b:76:17:a7:32: 3d:e9:56:ee:ff:b1:47:1e:5e:2c:65:15:5c:57:28: 8c:22:80:07:2c:18:3e:4e:1c:e1:22:dd:9f:7e:4d: 77:f8:95:a4:ec:22:b7:13:b5:13:a2:a5:3d:e7:f5: cb:70:1d:d0:33:6f:fc:bf:c8:8d:3c:15:00:04:fb: bb:0c:21:a9:b2:3b:e4:fd:02:40:d9:5e:70:e8:c7: c8:87:4a:55:9e:46:38:52:20:7d:b0:6f:e4:bc:d6: 83:44:5b:50:74:cf:83:6a:4a:21:77:c4:73:4f:41: 9b:24:b6:c9:bb:0a:af:d7:c3:98:ad:46:92:2c:ff: 1d:9c:c8:cd:31:6b:a6:26:b5:ec:d1:86:16:39:30: 18:45:2d:e6:ac:7a:6a:2c:e8:29:b3:b7:04:fb:c5: 9d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:1B:D8:40:AE:FA:7A:00:19:11:91:1E:41:F3:D1:A8:C8:F6:B9:FD X509v3 Authority Key Identifier: keyid:BC:63:A3:6D:5C:80:65:1A:89:A7:69:06:C9:E3:40:2F:B3:45:68:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGOjbVyAZRqJp2kGyeNAL7NFaNo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/WhvYQK76egAZEZEeQfPRqMj2uf0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/vGOjbVyAZRqJp2kGyeNAL7NFaNo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.145.102.0/23 Signature Algorithm: sha256WithRSAEncryption 8f:b4:87:89:5c:91:36:4a:67:37:9b:28:67:cc:80:29:c7:2c: f2:a3:ca:ff:3a:e4:ac:39:e5:ef:a8:c3:18:6d:bd:03:3b:a6: 85:cb:79:32:66:ba:4d:7c:05:fd:9f:e8:80:51:40:fc:fc:21: b3:92:bc:85:4e:0e:be:81:e9:00:65:bc:ec:52:47:45:00:a7: fb:a6:6d:17:b0:a9:07:56:ec:19:5c:99:f8:fc:00:60:eb:5d: c8:e8:be:34:c1:42:71:9a:f6:ae:31:6d:7f:0e:88:f6:b9:02: a1:6d:e1:9d:8f:b4:9f:3c:b9:96:b4:a7:e7:16:61:fe:1b:25: 71:df:d3:94:6d:7f:90:46:9c:e9:46:28:87:7c:f1:19:c1:8a: b9:47:13:56:93:cf:a1:b8:d3:79:b6:39:88:f7:45:66:44:43: 4b:67:53:30:b1:cb:8f:30:f8:f1:bd:25:79:e2:48:dc:8b:09: 31:cc:5a:3e:d5:4c:70:47:8f:dc:35:14:c8:72:bf:96:5a:d7: b7:97:6c:15:2e:54:b3:04:18:a2:56:ac:27:1f:0b:40:1a:ca: 8d:0d:76:3f:83:f2:b7:88:6f:9a:c4:6d:96:42:e2:54:85:9c: 46:c9:86:5b:9d:48:d1:69:92:92:d0:8a:8e:01:04:f7:7b:81: bf:3b:d9:03 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pNdgKag21lSo137yZMLWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjNjNhMzZkNWM4MDY1MWE4OWE3NjkwNmM5ZTM0MDJmYjM0 NTY4ZGEwHhcNMjYwMTAxMjIxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YTFiZDg0MGFlZmE3YTAwMTkxMTkxMWU0MWYzZDFhOGM4ZjZiOWZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAheoqVSKkWLOS9mt+VMKwoXE0lJjt j3QhNcoWNFmIjdbYoZLWb9CdEEc3SSjz8ONwINf5aWchlwtO8DbIXfMJ0YImMpHJ P6ZpDb3j0xNq1sl2uXpxDX5U7o4HZzw5oJx+ACNFW3YXpzI96Vbu/7FHHl4sZRVc VyiMIoAHLBg+ThzhIt2ffk13+JWk7CK3E7UToqU95/XLcB3QM2/8v8iNPBUABPu7 DCGpsjvk/QJA2V5w6MfIh0pVnkY4UiB9sG/kvNaDRFtQdM+Dakohd8RzT0GbJLbJ uwqv18OYrUaSLP8dnMjNMWumJrXs0YYWOTAYRS3mrHpqLOgps7cE+8Wd3QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFob2ECu+noAGRGRHkHz0ajI9rn9MB8GA1UdIwQY MBaAFLxjo21cgGUaiadpBsnjQC+zRWjaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkdPamJWeUFaUnFKcDJrR3llTkFMN05GYU5vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni9jM2FiNjktNzE2Mi00MjIyLWFhMjAt NGUzYjIwZWMxNmEzLzEvV2h2WVFLNzZlZ0FaRVpFZVFmUFJxTWoydWYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni9jM2FiNjktNzE2Mi00MjIyLWFhMjAtNGUzYjIwZWMxNmEz LzEvdkdPamJWeUFaUnFKcDJrR3llTkFMN05GYU5vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuZFmMA0G CSqGSIb3DQEBCwUAA4IBAQCPtIeJXJE2Smc3myhnzIApxyzyo8r/OuSsOeXvqMMY bb0DO6aFy3kyZrpNfAX9n+iAUUD8/CGzkryFTg6+gekAZbzsUkdFAKf7pm0XsKkH VuwZXJn4/ABg613I6L40wUJxmvauMW1/Doj2uQKhbeGdj7SfPLmWtKfnFmH+GyVx 39OUbX+QRpzpRiiHfPEZwYq5RxNWk8+huNN5tjmI90VmRENLZ1MwscuPMPjxvSV5 4kjciwkxzFo+1UxwR4/cNRTIcr+WWte3l2wVLlSzBBiiVqwnHwtAGsqNDXY/g/K3 iG+axG2WQuJUhZxGyYZbnUjRaZKS0IqOAQT3e4G/O9kD -----END CERTIFICATE-----Generated at Sun Jan 25 22:13:37 2026 by rpki-client