This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/wEHhuPc8GsdhkQgVGMkbrI-5WHs.roa File: wEHhuPc8GsdhkQgVGMkbrI-5WHs.roa (raw, json) Hash identifier: YBH4FXzXpaoiHtWlM14Qe38dELp1cYUayA1eVEoD73A= Subject key identifier: C0:41:E1:B8:F7:3C:1A:C7:61:91:08:15:18:C9:1B:AC:8F:B9:58:7B Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Certificate serial: 019B7AC7D2D977F34156BA1C01F35FB1A4D9 Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/wEHhuPc8GsdhkQgVGMkbrI-5WHs.roa Signing time: Thu 01 Jan 2026 18:17:54 +0000 ROA not before: Thu 01 Jan 2026 18:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 53356 IP address blocks: 79.135.128.0/19 maxlen: 22 80.254.208.0/20 maxlen: 22 80.254.208.0/22 maxlen: 22 80.254.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:d2:d9:77:f3:41:56:ba:1c:01:f3:5f:b1:a4:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Validity Not Before: Jan 1 18:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c041e1b8f73c1ac76191081518c91bac8fb9587b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:73:4b:5c:a7:69:b2:64:cf:0c:49:1b:24:08: 8d:dd:42:cb:43:8a:10:11:40:e0:e7:50:a0:b5:b9: 3b:9f:86:f8:8c:dd:2a:8a:67:93:43:fa:0b:fa:49: 2b:3d:3c:74:5e:73:d5:23:56:82:3f:41:7f:0a:92: 35:a7:0e:f4:1b:a2:5b:5a:b6:ab:4a:d6:48:b8:b0: 8d:20:47:12:63:a5:76:c6:4e:25:c3:15:37:f6:5e: 6e:6e:0a:7b:3e:d4:e9:5d:ff:08:cd:ad:1b:2a:86: a5:de:75:04:18:81:9b:9b:e4:4b:72:43:71:98:01: 8b:63:b5:58:fc:0b:24:c6:f1:f2:2e:12:dd:7a:45: d4:69:c8:9b:7b:10:ba:50:e2:8a:09:47:dc:de:65: 7c:35:4a:0d:d7:1a:7f:7c:a2:fc:53:5c:f6:8c:ff: 5b:cb:cf:03:0e:3d:49:ac:b5:00:31:95:0f:96:fe: be:90:a5:f8:da:f1:61:0e:14:19:17:da:e6:64:96: ce:fb:0c:84:98:e0:7d:f0:85:47:37:3f:47:46:a6: 34:72:c7:c6:ee:45:ba:6f:fb:91:6b:a9:95:93:25: 07:b0:b7:c6:85:f4:c4:34:d0:75:77:2b:d3:bb:b3: 34:83:33:af:10:3e:32:2c:2a:1a:83:16:0c:b7:47: 95:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:41:E1:B8:F7:3C:1A:C7:61:91:08:15:18:C9:1B:AC:8F:B9:58:7B X509v3 Authority Key Identifier: keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/wEHhuPc8GsdhkQgVGMkbrI-5WHs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.135.128.0/19 80.254.208.0/20 Signature Algorithm: sha256WithRSAEncryption 34:43:7d:3b:22:12:e7:50:fc:e5:97:fb:d5:ca:0e:12:ae:17: 27:95:ec:db:58:b1:28:c8:ce:ae:ae:83:1a:96:07:68:9e:cd: 3f:3b:79:07:5b:92:35:99:51:87:0e:43:f1:b3:8c:e3:35:c0: 17:d2:bd:77:10:49:d3:d4:1e:f7:fd:ab:ce:36:ef:e9:23:8f: 7e:64:e4:0b:c9:29:78:e4:01:35:66:90:f1:1a:6a:4e:c6:16: 89:cd:f3:9b:9c:59:21:4c:dc:eb:4a:f7:e8:e4:f3:a6:dc:b6: e8:ba:06:73:2f:bc:64:78:5a:f1:44:ce:21:d7:19:06:2d:c2: d1:44:4b:cd:5f:4f:fe:87:e6:54:04:2b:28:32:10:55:bf:48: 93:90:1d:c2:a3:79:8a:a3:5e:21:3b:2f:cb:89:01:9e:55:b8: 3c:26:4c:b0:4b:a2:d4:47:0d:59:5d:dd:93:44:26:ef:7c:1d: 1b:82:b4:a5:c5:86:34:21:ae:42:5f:92:60:d0:98:c6:73:4c: b3:0a:78:5a:05:f9:8b:7e:e4:91:01:43:3c:b6:e3:4c:2f:eb: 39:2b:ca:29:51:ec:bc:9a:8e:a2:df:4b:da:91:78:aa:82:e6: 24:3d:73:5f:18:5b:14:07:01:12:05:2f:ac:61:95:04:c1:b5: 5d:1e:60:e5 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6x9LZd/NBVrocAfNfsaTZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiMDk1MmM4YmE4ZGFkYjFkMzRkZTZjNmE5Mzg2NGE2MDlm YzQxZWMwHhcNMjYwMTAxMTgxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMDQxZTFiOGY3M2MxYWM3NjE5MTA4MTUxOGM5MWJhYzhmYjk1ODdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHNLXKdpsmTPDEkbJAiN3ULLQ4oQ EUDg51Cgtbk7n4b4jN0qimeTQ/oL+kkrPTx0XnPVI1aCP0F/CpI1pw70G6JbWrar StZIuLCNIEcSY6V2xk4lwxU39l5ubgp7PtTpXf8Iza0bKoal3nUEGIGbm+RLckNx mAGLY7VY/AskxvHyLhLdekXUacibexC6UOKKCUfc3mV8NUoN1xp/fKL8U1z2jP9b y88DDj1JrLUAMZUPlv6+kKX42vFhDhQZF9rmZJbO+wyEmOB98IVHNz9HRqY0csfG 7kW6b/uRa6mVkyUHsLfGhfTENNB1dyvTu7M0gzOvED4yLCoagxYMt0eVXQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMBB4bj3PBrHYZEIFRjJG6yPuVh7MB8GA1UdIwQY MBaAFKsJUsi6ja2x003mxqk4ZKYJ/EHsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAt NTU1NGQ2ZTE2ODZmLzEvd0VIaHVQYzhHc2Roa1FnVkdNa2JySS01V0hzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAtNTU1NGQ2ZTE2ODZm LzEvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFT4eAAwQE UP7QMA0GCSqGSIb3DQEBCwUAA4IBAQA0Q307IhLnUPzll/vVyg4SrhcnlezbWLEo yM6uroMalgdons0/O3kHW5I1mVGHDkPxs4zjNcAX0r13EEnT1B73/avONu/pI49+ ZOQLySl45AE1ZpDxGmpOxhaJzfObnFkhTNzrSvfo5POm3LbougZzL7xkeFrxRM4h 1xkGLcLRREvNX0/+h+ZUBCsoMhBVv0iTkB3Co3mKo14hOy/LiQGeVbg8JkywS6LU Rw1ZXd2TRCbvfB0bgrSlxYY0Ia5CX5Jg0JjGc0yzCnhaBfmLfuSRAUM8tuNML+s5 K8opUey8mo6i30vakXiqguYkPXNfGFsUBwESBS+sYZUEwbVdHmDl -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:50 2026 by rpki-client