This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/WhNnG7RGoKzd13ukyLrTiCjdCGU.roa File: WhNnG7RGoKzd13ukyLrTiCjdCGU.roa (raw, json) Hash identifier: xIXQvTfLd53mh36/jnGCyL3HlmPNklCfsGo5gTXyrIc= Subject key identifier: 5A:13:67:1B:B4:46:A0:AC:DD:D7:7B:A4:C8:BA:D3:88:28:DD:08:65 Certificate issuer: /CN=bc9c403ad007e2a242a6b09061a3c1a360a64d5a Certificate serial: 019B7F14F2B00E1FB5D88C908D45C8C436C2 Authority key identifier: BC:9C:40:3A:D0:07:E2:A2:42:A6:B0:90:61:A3:C1:A3:60:A6:4D:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJxAOtAH4qJCprCQYaPBo2CmTVo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/WhNnG7RGoKzd13ukyLrTiCjdCGU.roa Signing time: Fri 02 Jan 2026 14:20:37 +0000 ROA not before: Fri 02 Jan 2026 14:20:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204149 IP address blocks: 185.112.188.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.mft rsync://rpki.ripe.net/repository/DEFAULT/vJxAOtAH4qJCprCQYaPBo2CmTVo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:f2:b0:0e:1f:b5:d8:8c:90:8d:45:c8:c4:36:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc9c403ad007e2a242a6b09061a3c1a360a64d5a Validity Not Before: Jan 2 14:20:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5a13671bb446a0acddd77ba4c8bad38828dd0865 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f6:34:e4:ac:5c:3e:24:e4:25:d0:60:08:a1: fe:e4:35:23:21:68:59:4b:a7:a2:74:4f:97:7a:24: 15:e6:2b:ec:a7:f1:42:2a:dc:68:e1:f2:9b:ee:63: 3a:1e:0d:cc:22:87:dd:68:7b:27:eb:03:a9:88:d0: d1:aa:61:c5:d2:87:5a:41:8d:65:ed:90:32:9c:fb: 7d:06:f3:43:9a:8c:70:58:11:f7:33:08:f6:91:e1: 05:d4:53:7a:e1:62:a2:83:8d:23:cd:4d:3c:69:9b: 50:b6:c0:6a:a8:06:9c:d2:0a:b1:2e:85:e0:1f:85: 03:c1:20:59:88:ef:e7:49:e1:66:75:24:5e:92:43: 97:bc:f2:6f:4f:49:24:48:61:b8:47:34:8a:0e:15: 55:dd:00:80:37:77:f8:00:ca:bf:e4:b0:c8:47:67: df:ac:70:e8:b8:85:69:41:20:61:a6:53:7b:fd:10: 63:8e:53:ed:5a:26:05:2f:df:78:bc:cd:30:ca:ee: dc:5f:af:7f:ec:e8:57:e2:ae:df:2a:a6:a5:bd:fc: 5b:18:f2:11:9f:a4:ab:e2:79:37:d7:d9:2f:d8:44: 96:25:ca:99:3f:72:10:09:4e:ec:1a:80:ac:8a:50: 09:c2:d6:d6:d1:5c:d6:b8:fe:a6:47:4e:81:49:c9: b0:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:13:67:1B:B4:46:A0:AC:DD:D7:7B:A4:C8:BA:D3:88:28:DD:08:65 X509v3 Authority Key Identifier: keyid:BC:9C:40:3A:D0:07:E2:A2:42:A6:B0:90:61:A3:C1:A3:60:A6:4D:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJxAOtAH4qJCprCQYaPBo2CmTVo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/WhNnG7RGoKzd13ukyLrTiCjdCGU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.112.188.0/22 Signature Algorithm: sha256WithRSAEncryption 71:35:98:5a:2a:f2:0d:4a:38:90:28:23:02:21:f6:b5:02:59: db:22:76:5e:79:7c:aa:88:05:85:bb:9a:9d:78:5d:f8:eb:35: 16:03:89:13:64:55:2e:c9:02:37:b2:5a:5d:e8:2c:83:2c:6a: c0:a3:d4:a6:84:54:77:ce:d1:88:3a:ba:a0:5d:4f:7d:91:d4: 2d:99:ed:56:04:eb:3f:e6:f7:6a:42:dd:6d:3d:ac:96:9d:32: 64:88:49:63:a6:97:81:b3:74:f1:29:2b:1b:34:b0:b5:ba:e8: d3:41:2a:41:ef:a7:81:ca:64:16:72:7d:73:b1:9a:64:66:93: c9:84:2c:a4:7c:a3:ab:69:61:a8:e8:52:97:78:27:4e:3f:b5: a6:34:43:87:6a:e1:61:7d:f8:4c:d5:4a:2d:73:15:f0:50:95: 35:ca:45:66:7a:c1:8a:67:19:10:36:f3:b4:2d:7d:fb:1e:61: c1:7c:46:8d:1d:33:e7:79:e7:d8:2a:22:1a:a4:c9:09:ce:9d: c7:50:46:17:1b:7e:67:74:76:33:a5:0e:a9:97:04:1f:84:d7: 83:94:81:c6:91:b8:ea:1a:c9:6f:ba:c0:bc:62:e5:3d:18:ad: cb:3e:63:cd:7f:85:78:68:fe:9e:f7:88:a4:08:e0:80:aa:54: 06:2f:0f:9f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FPKwDh+12IyQjUXIxDbCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjOWM0MDNhZDAwN2UyYTI0MmE2YjA5MDYxYTNjMWEzNjBh NjRkNWEwHhcNMjYwMTAyMTQyMDM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YTEzNjcxYmI0NDZhMGFjZGRkNzdiYTRjOGJhZDM4ODI4ZGQwODY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPY05KxcPiTkJdBgCKH+5DUjIWhZ S6eidE+XeiQV5ivsp/FCKtxo4fKb7mM6Hg3MIofdaHsn6wOpiNDRqmHF0odaQY1l 7ZAynPt9BvNDmoxwWBH3Mwj2keEF1FN64WKig40jzU08aZtQtsBqqAac0gqxLoXg H4UDwSBZiO/nSeFmdSRekkOXvPJvT0kkSGG4RzSKDhVV3QCAN3f4AMq/5LDIR2ff rHDouIVpQSBhplN7/RBjjlPtWiYFL994vM0wyu7cX69/7OhX4q7fKqalvfxbGPIR n6Sr4nk319kv2ESWJcqZP3IQCU7sGoCsilAJwtbW0VzWuP6mR06BScmw0wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFoTZxu0RqCs3dd7pMi604go3QhlMB8GA1UdIwQY MBaAFLycQDrQB+KiQqawkGGjwaNgpk1aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkp4QU90QUg0cUpDcHJDUVlhUEJvMkNtVFZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS80YWU0YzctZjI4Ni00YzZlLTk1MTQt ODhlNjgxNjI3MWY3LzEvV2hObkc3UkdvS3pkMTN1a3lMclRpQ2pkQ0dVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS80YWU0YzctZjI4Ni00YzZlLTk1MTQtODhlNjgxNjI3MWY3 LzEvdkp4QU90QUg0cUpDcHJDUVlhUEJvMkNtVFZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuXC8MA0G CSqGSIb3DQEBCwUAA4IBAQBxNZhaKvINSjiQKCMCIfa1AlnbInZeeXyqiAWFu5qd eF346zUWA4kTZFUuyQI3slpd6CyDLGrAo9SmhFR3ztGIOrqgXU99kdQtme1WBOs/ 5vdqQt1tPayWnTJkiEljppeBs3TxKSsbNLC1uujTQSpB76eBymQWcn1zsZpkZpPJ hCykfKOraWGo6FKXeCdOP7WmNEOHauFhffhM1UotcxXwUJU1ykVmesGKZxkQNvO0 LX37HmHBfEaNHTPneefYKiIapMkJzp3HUEYXG35ndHYzpQ6plwQfhNeDlIHGkbjq GslvusC8YuU9GK3LPmPNf4V4aP6e94ikCOCAqlQGLw+f -----END CERTIFICATE-----Generated at Sun Jan 25 14:21:02 2026 by rpki-client