This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Wh_WGuWdedhCdqZqjThQGaM1w4o.roa File: Wh_WGuWdedhCdqZqjThQGaM1w4o.roa (raw, json) Hash identifier: TDzn9Zqz5rle6yhiWfswdL6rCeqSKjFPMelBLgNL/WY= Subject key identifier: 5A:1F:D6:1A:E5:9D:79:D8:42:76:A6:6A:8D:38:50:19:A3:35:C3:8A Certificate issuer: /CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933 Certificate serial: 019B7D5D00079727FD864EAAEFA8F4D6ABF9 Authority key identifier: 1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Wh_WGuWdedhCdqZqjThQGaM1w4o.roa Signing time: Fri 02 Jan 2026 06:20:05 +0000 ROA not before: Fri 02 Jan 2026 06:20:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42402 IP address blocks: 195.94.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.mft rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:00:07:97:27:fd:86:4e:aa:ef:a8:f4:d6:ab:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933 Validity Not Before: Jan 2 06:20:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5a1fd61ae59d79d84276a66a8d385019a335c38a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:9d:08:e5:da:5b:95:35:55:cf:c2:4e:f4:af: a9:92:3d:6a:d6:d9:c4:0d:a8:0f:c1:d8:49:b4:3a: 27:ff:78:8e:33:05:3b:dc:4d:da:6b:bb:a6:13:e1: 64:80:6a:31:c7:07:e4:49:07:4e:46:7f:5a:87:97: 7e:44:d7:a7:5c:72:1d:d8:6f:2e:14:9a:06:dc:de: 41:46:5a:64:50:36:ee:3b:96:de:78:2b:d1:fe:41: 09:81:07:4a:1f:58:2d:a9:9c:9e:2a:09:b0:cd:c4: dd:ee:76:1f:16:b2:9b:30:fa:f8:10:ea:f3:b7:fd: cf:d1:a9:17:96:2e:db:76:5d:e4:3a:d0:fd:a8:cf: 55:e8:46:1e:e6:19:5a:5d:9f:0e:f0:59:ab:02:c4: 4a:c0:65:45:47:90:71:a0:ae:b0:3a:fd:a5:c1:33: 42:6f:ff:30:42:38:41:38:29:6e:6e:61:e3:73:1a: 38:0d:68:6b:18:ad:82:b6:8c:5f:19:d2:ac:66:16: b6:3f:b7:82:83:14:a5:d7:0c:16:65:bf:27:b0:4f: f6:a5:e0:a8:dc:1f:7b:19:09:a5:10:6d:a6:03:9e: 2a:5c:55:a5:38:b9:43:92:4a:3b:9c:c9:7d:be:5d: de:ae:ad:47:86:62:fb:24:66:e6:ad:b8:4b:58:25: a6:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:1F:D6:1A:E5:9D:79:D8:42:76:A6:6A:8D:38:50:19:A3:35:C3:8A X509v3 Authority Key Identifier: keyid:1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Wh_WGuWdedhCdqZqjThQGaM1w4o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.94.202.0/24 Signature Algorithm: sha256WithRSAEncryption 69:13:fe:24:57:d2:3e:76:6c:b6:6a:44:df:1a:2c:16:23:f6: 17:01:c7:df:d5:2e:41:40:b4:45:f3:df:f8:c0:97:48:8f:57: 06:b2:ca:51:ce:52:f6:71:01:54:ff:83:1c:de:bf:fc:bd:22: 01:56:13:49:7c:51:bf:0f:1f:63:13:3c:e8:c9:25:a6:34:f9: 50:ae:e6:34:18:26:da:2d:59:c8:65:95:37:b5:29:76:2d:78: 7f:b6:57:fa:f6:d3:86:72:8a:95:57:ca:73:69:71:f4:e5:ca: 5b:23:52:3a:9b:4c:6e:7f:a0:f3:6e:82:d3:1b:56:f5:0d:24: e5:cf:9e:0b:e3:f6:26:87:ab:9b:cd:cb:a2:08:5a:49:e0:34: 05:2f:0d:68:ab:a2:5e:2c:f6:71:e6:ca:c0:4b:11:a9:48:13: 71:7a:4d:41:db:50:7c:46:cb:bd:48:3a:0f:ba:08:65:8f:8c: 60:30:f7:8b:48:ee:66:8a:66:94:77:08:58:eb:aa:50:17:35: 6c:97:43:37:0a:62:78:80:76:f0:62:5b:57:e3:8b:c0:33:d0: 48:ea:4e:3d:7f:20:d5:31:b8:55:87:80:81:7b:46:45:23:e0: 21:be:9b:a0:28:fd:89:a0:89:bc:18:ee:f9:a6:5f:37:fa:fe: f3:5c:a4:78 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XQAHlyf9hk6q76j01qv5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhY2E2M2RmMjQ4YjdhZGYzZGRkMDdlOGMyZDNlZWRkMDJj ZWY5MzMwHhcNMjYwMTAyMDYyMDA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YTFmZDYxYWU1OWQ3OWQ4NDI3NmE2NmE4ZDM4NTAxOWEzMzVjMzhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZ0I5dpblTVVz8JO9K+pkj1q1tnE DagPwdhJtDon/3iOMwU73E3aa7umE+FkgGoxxwfkSQdORn9ah5d+RNenXHId2G8u FJoG3N5BRlpkUDbuO5beeCvR/kEJgQdKH1gtqZyeKgmwzcTd7nYfFrKbMPr4EOrz t/3P0akXli7bdl3kOtD9qM9V6EYe5hlaXZ8O8FmrAsRKwGVFR5BxoK6wOv2lwTNC b/8wQjhBOClubmHjcxo4DWhrGK2CtoxfGdKsZha2P7eCgxSl1wwWZb8nsE/2peCo 3B97GQmlEG2mA54qXFWlOLlDkko7nMl9vl3erq1HhmL7JGbmrbhLWCWmSwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFof1hrlnXnYQnamao04UBmjNcOKMB8GA1UdIwQY MBaAFBrKY98ki3rfPd0H6MLT7t0CzvkzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3NwajN5U0xldDg5M1Fmb3d0UHUzUUxPLVRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8xZjY0NTgtZGM3NS00YWRkLWFlNzIt OTFlMzE4NGJiMGFiLzEvV2hfV0d1V2RlZGhDZHFacWpUaFFHYU0xdzRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS8xZjY0NTgtZGM3NS00YWRkLWFlNzItOTFlMzE4NGJiMGFi LzEvR3NwajN5U0xldDg5M1Fmb3d0UHUzUUxPLVRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw17KMA0G CSqGSIb3DQEBCwUAA4IBAQBpE/4kV9I+dmy2akTfGiwWI/YXAcff1S5BQLRF89/4 wJdIj1cGsspRzlL2cQFU/4Mc3r/8vSIBVhNJfFG/Dx9jEzzoySWmNPlQruY0GCba LVnIZZU3tSl2LXh/tlf69tOGcoqVV8pzaXH05cpbI1I6m0xuf6DzboLTG1b1DSTl z54L4/Ymh6ubzcuiCFpJ4DQFLw1oq6JeLPZx5srASxGpSBNxek1B21B8Rsu9SDoP ughlj4xgMPeLSO5mimaUdwhY66pQFzVsl0M3CmJ4gHbwYltX44vAM9BI6k49fyDV MbhVh4CBe0ZFI+AhvpugKP2JoIm8GO75pl83+v7zXKR4 -----END CERTIFICATE-----Generated at Sun Jan 25 17:47:29 2026 by rpki-client