This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/WH4cZPqKh_HRv2geAJO8p1KTMDo.roa File: WH4cZPqKh_HRv2geAJO8p1KTMDo.roa (raw, json) Hash identifier: DnNXUL7rlATONJI9qkIw9c2MA411ZA2BH7COBh0VTjQ= Subject key identifier: 58:7E:1C:64:FA:8A:87:F1:D1:BF:68:1E:00:93:BC:A7:52:93:30:3A Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A321BB1FAA802F51E928546AAB9228 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/WH4cZPqKh_HRv2geAJO8p1KTMDo.roa Signing time: Thu 01 Jan 2026 08:18:35 +0000 ROA not before: Thu 01 Jan 2026 08:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199759 IP address blocks: 87.120.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:21:bb:1f:aa:80:2f:51:e9:28:54:6a:ab:92:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=587e1c64fa8a87f1d1bf681e0093bca75293303a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:dc:9e:06:a7:e1:61:8a:44:3d:53:5b:2f:13: 32:9b:32:d8:7f:17:5c:b0:5c:2e:19:f1:2b:e4:b7: ff:db:65:ee:b7:d6:a5:3a:4c:56:6f:03:a8:91:32: c2:bc:74:5a:32:05:1a:d2:78:fb:21:c6:1a:a5:c6: d9:2b:4f:7c:e0:39:6f:06:b8:0c:59:bc:7e:a6:c0: 1e:dc:ab:9c:15:7c:ce:70:1b:ba:1c:1d:26:2f:9d: 23:a9:24:60:dd:5c:26:f0:e3:fa:c4:96:90:aa:64: dc:cf:54:ef:61:5c:3f:53:4f:7f:5e:82:ab:9c:f9: cc:8f:25:6e:a9:c8:fd:44:59:e7:52:61:4b:79:23: 22:cd:68:6e:12:db:68:7d:55:de:4f:27:de:9a:1d: 61:ae:0c:1a:9e:cc:53:0e:24:df:80:fc:0a:fa:a7: 9f:3c:37:7f:d9:e8:0d:7a:75:4e:73:8f:ba:7c:fe: f8:e2:74:3a:22:9d:56:f5:80:32:a1:3e:06:c9:eb: 8b:ff:fb:0a:b5:dc:4c:0d:78:7e:f6:1d:74:95:63: 52:90:c1:9b:6e:d0:58:f6:b9:ab:c6:1c:9d:76:ed: 4e:8e:91:1e:2a:8f:01:b3:ea:c2:be:f0:f2:6e:9a: 3e:cd:07:29:2a:52:23:55:7e:d5:ac:5d:51:0a:d7: e4:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:7E:1C:64:FA:8A:87:F1:D1:BF:68:1E:00:93:BC:A7:52:93:30:3A X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/WH4cZPqKh_HRv2geAJO8p1KTMDo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.120.143.0/24 Signature Algorithm: sha256WithRSAEncryption 11:ed:95:89:fd:bb:1f:55:f2:46:ea:4a:b8:8a:3c:35:da:76: 89:b1:01:fe:7d:c8:30:89:7b:3a:47:14:67:06:7a:14:cb:e5: 50:a3:a5:aa:8c:c5:9f:7c:47:e8:e9:d1:77:19:7b:32:26:33: 5a:2f:38:b8:78:cd:e2:1b:3d:a6:db:68:64:48:13:69:28:bf: 60:d9:35:bd:98:0b:a7:e2:a2:cc:f5:4c:57:29:9d:72:28:74: f1:76:42:5a:8c:5c:ca:9c:73:3a:ed:ce:cf:6d:ab:cc:bc:a1: e1:a1:2a:e1:dc:0e:1e:f0:12:4f:f9:09:77:21:a6:d0:9e:86: 4a:5b:a0:f2:68:b8:df:fc:df:13:bd:0a:7a:93:9c:00:ce:6d: 9a:1b:3c:59:8e:63:26:ec:e6:df:27:af:92:67:45:bd:55:f2: 4e:28:7a:e5:c2:fc:35:b4:2a:bc:0f:21:04:c8:b0:91:20:ba: 21:df:57:1f:76:39:86:74:ed:80:52:4c:dd:81:6c:1d:cb:45: ba:be:c1:5d:47:40:38:74:6c:6b:e2:67:dc:49:64:b6:39:a3: 5a:00:dc:a7:4e:50:fb:44:d3:92:31:cc:53:ce:51:16:64:d6: c7:22:a0:ec:ef:3a:4b:a8:fa:d2:e2:a6:b5:17:19:9f:d6:05: 91:72:e4:57 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oyG7H6qAL1HpKFRqq5IoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ODdlMWM2NGZhOGE4N2YxZDFiZjY4MWUwMDkzYmNhNzUyOTMzMDNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdyeBqfhYYpEPVNbLxMymzLYfxdc sFwuGfEr5Lf/22Xut9alOkxWbwOokTLCvHRaMgUa0nj7IcYapcbZK0984DlvBrgM Wbx+psAe3KucFXzOcBu6HB0mL50jqSRg3Vwm8OP6xJaQqmTcz1TvYVw/U09/XoKr nPnMjyVuqcj9RFnnUmFLeSMizWhuEttofVXeTyfemh1hrgwansxTDiTfgPwK+qef PDd/2egNenVOc4+6fP744nQ6Ip1W9YAyoT4GyeuL//sKtdxMDXh+9h10lWNSkMGb btBY9rmrxhyddu1OjpEeKo8Bs+rCvvDybpo+zQcpKlIjVX7VrF1RCtfkEQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFh+HGT6iofx0b9oHgCTvKdSkzA6MB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvV0g0Y1pQcUtoX0hSdjJnZUFKTzhwMUtUTURvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV3iPMA0G CSqGSIb3DQEBCwUAA4IBAQAR7ZWJ/bsfVfJG6kq4ijw12naJsQH+fcgwiXs6RxRn BnoUy+VQo6WqjMWffEfo6dF3GXsyJjNaLzi4eM3iGz2m22hkSBNpKL9g2TW9mAun 4qLM9UxXKZ1yKHTxdkJajFzKnHM67c7PbavMvKHhoSrh3A4e8BJP+Ql3IabQnoZK W6DyaLjf/N8TvQp6k5wAzm2aGzxZjmMm7ObfJ6+SZ0W9VfJOKHrlwvw1tCq8DyEE yLCRILoh31cfdjmGdO2AUkzdgWwdy0W6vsFdR0A4dGxr4mfcSWS2OaNaANynTlD7 RNOSMcxTzlEWZNbHIqDs7zpLqPrS4qa1Fxmf1gWRcuRX -----END CERTIFICATE-----Generated at Fri Jan 2 12:03:29 2026 by rpki-client