This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/WHkFXJTy8xbCo4evLO1rUJmq1M8.roa File: WHkFXJTy8xbCo4evLO1rUJmq1M8.roa (raw, json) Hash identifier: 4+w16HxaV2lp0UTgRJbgP+9rmRTPBxax+wA4dOtlgng= Subject key identifier: 58:79:05:5C:94:F2:F3:16:C2:A3:87:AF:2C:ED:6B:50:99:AA:D4:CF Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9 Certificate serial: 019B7E37ED3A7FE26238F65E38E30C30EF36 Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/WHkFXJTy8xbCo4evLO1rUJmq1M8.roa Signing time: Fri 02 Jan 2026 10:19:13 +0000 ROA not before: Fri 02 Jan 2026 10:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 55002 IP address blocks: 62.244.244.0/24 maxlen: 24 213.248.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.mft rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 10:01:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:ed:3a:7f:e2:62:38:f6:5e:38:e3:0c:30:ef:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9 Validity Not Before: Jan 2 10:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5879055c94f2f316c2a387af2ced6b5099aad4cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:de:eb:cb:14:ec:05:65:fc:ac:e4:28:f4:bf: 5f:35:bb:96:46:b3:e2:92:96:e9:12:51:a8:b8:b9: 90:10:af:c8:36:47:f9:78:d2:dd:b3:0b:fb:50:60: 28:32:6e:f0:e8:db:3e:2f:ce:fc:76:a7:52:a1:a5: b1:df:e3:58:d2:2e:a2:c3:e3:ca:75:2a:b1:9e:e7: 71:91:50:04:f1:b5:21:af:92:34:07:e3:84:8c:2a: 99:d6:09:94:b2:9a:76:2f:d6:17:0f:a5:92:51:27: 6a:c5:32:ac:fb:ff:71:aa:d9:fc:83:61:f7:c9:76: 19:40:34:df:ca:06:0a:e5:42:b9:e3:d7:5c:e4:17: 86:9d:3a:89:e5:be:07:c2:76:7d:e5:59:41:4f:01: a8:22:0a:45:a9:bf:17:d4:18:f4:cd:23:80:22:b8: ec:c7:e6:00:2a:e2:97:0f:22:cb:20:43:90:6c:69: e5:5c:16:02:fa:ef:35:62:6b:2f:f9:77:b7:29:64: f1:17:37:fb:cd:d9:06:7b:fe:6d:d0:f2:20:d0:69: 7c:fe:73:7d:d7:7e:1a:4c:2a:c4:4e:01:ba:8b:62: a8:49:1c:b3:89:3f:3a:bc:66:f0:42:3f:56:12:e2: b7:ec:8e:74:b3:52:c7:a0:86:ce:5f:2b:96:d9:fa: 9e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:79:05:5C:94:F2:F3:16:C2:A3:87:AF:2C:ED:6B:50:99:AA:D4:CF X509v3 Authority Key Identifier: keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/WHkFXJTy8xbCo4evLO1rUJmq1M8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.244.244.0/24 213.248.141.0/24 Signature Algorithm: sha256WithRSAEncryption b1:62:f9:15:94:17:8e:44:f4:78:72:29:7e:31:df:c7:7a:37: f9:e5:0f:fe:1d:01:87:88:8c:ea:32:32:2d:26:30:f7:2f:2f: 7e:8a:cd:2f:01:eb:bd:a3:c6:7e:e1:46:96:0e:7e:e7:ec:43: d6:d7:ec:43:ec:f3:41:97:85:97:a7:0e:b0:a6:c1:a1:46:86: d1:25:13:ff:b4:cd:12:4f:9a:ca:06:0e:d2:1a:45:16:cf:a7: 03:57:3d:b6:cb:3d:46:b2:a1:a5:5c:5c:9a:0a:ab:7c:77:f1: bb:d5:36:5a:a7:b8:35:3e:8c:ca:f8:80:2b:37:b3:69:6a:5c: 3f:8b:18:20:3d:f5:44:f5:ed:77:72:7a:ae:8f:41:8c:d6:0b: f0:82:56:77:af:e8:68:f1:93:2f:4b:a7:08:ed:af:8c:1d:7e: 0a:38:5a:ed:40:ae:f6:73:bd:76:25:c2:61:81:08:65:49:de: cd:fd:72:af:e9:ca:46:e7:3d:7d:ed:fb:65:0d:8a:74:ea:35: 46:a4:bb:88:30:fe:a2:0f:a8:b5:d3:fa:4f:d9:22:70:6b:26: 27:ba:a0:49:94:28:30:e4:74:d2:5e:fc:b8:b6:12:05:30:1e: b8:f7:f2:32:dc:ff:ec:f5:98:c2:dd:66:fb:a2:ad:6f:66:98: 63:3c:0b:e3 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+N+06f+JiOPZeOOMMMO82MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2OGZlMzVjYzk2MjYzM2EyNzU3YWYxMGEwZTZlOGFiNmQw MWY0YzkwHhcNMjYwMTAyMTAxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ODc5MDU1Yzk0ZjJmMzE2YzJhMzg3YWYyY2VkNmI1MDk5YWFkNGNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3t7ryxTsBWX8rOQo9L9fNbuWRrPi kpbpElGouLmQEK/INkf5eNLdswv7UGAoMm7w6Ns+L878dqdSoaWx3+NY0i6iw+PK dSqxnudxkVAE8bUhr5I0B+OEjCqZ1gmUspp2L9YXD6WSUSdqxTKs+/9xqtn8g2H3 yXYZQDTfygYK5UK549dc5BeGnTqJ5b4HwnZ95VlBTwGoIgpFqb8X1Bj0zSOAIrjs x+YAKuKXDyLLIEOQbGnlXBYC+u81Ymsv+Xe3KWTxFzf7zdkGe/5t0PIg0Gl8/nN9 134aTCrETgG6i2KoSRyziT86vGbwQj9WEuK37I50s1LHoIbOXyuW2fqe9QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFh5BVyU8vMWwqOHryzta1CZqtTPMB8GA1UdIwQY MBaAFFaP41zJYmM6J1evEKDm6KttAfTJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVm9falhNbGlZem9uVjY4UW9PYm9xMjBCOU1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8zN2ViZTYtOGJmZS00YzFmLWExODMt ODNkNjQ4Zjc5NzQ2LzEvV0hrRlhKVHk4eGJDbzRldkxPMXJVSm1xMU04LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC8zN2ViZTYtOGJmZS00YzFmLWExODMtODNkNjQ4Zjc5NzQ2 LzEvVm9falhNbGlZem9uVjY4UW9PYm9xMjBCOU1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAPvT0AwQA 1fiNMA0GCSqGSIb3DQEBCwUAA4IBAQCxYvkVlBeORPR4cil+Md/Hejf55Q/+HQGH iIzqMjItJjD3Ly9+is0vAeu9o8Z+4UaWDn7n7EPW1+xD7PNBl4WXpw6wpsGhRobR JRP/tM0ST5rKBg7SGkUWz6cDVz22yz1GsqGlXFyaCqt8d/G71TZap7g1PozK+IAr N7Npalw/ixggPfVE9e13cnquj0GM1gvwglZ3r+ho8ZMvS6cI7a+MHX4KOFrtQK72 c712JcJhgQhlSd7N/XKv6cpG5z197ftlDYp06jVGpLuIMP6iD6i10/pP2SJwayYn uqBJlCgw5HTSXvy4thIFMB649/Iy3P/s9ZjC3Wb7oq1vZphjPAvj -----END CERTIFICATE-----Generated at Tue Jan 20 14:14:20 2026 by rpki-client