This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/whkpgt0q_REPc2uK4OcI2RlJUQ4.roa File: whkpgt0q_REPc2uK4OcI2RlJUQ4.roa (raw, json) Hash identifier: zBKXPtQtmxNv3y5PCdkU7YLD9V6U8Nbq09lKh+AT61w= Subject key identifier: C2:19:29:82:DD:2A:FD:11:0F:73:6B:8A:E0:E7:08:D9:19:49:51:0E Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Certificate serial: 019B7F82C2BE4A2257FB6BBCF1B76DE8E9EA Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/whkpgt0q_REPc2uK4OcI2RlJUQ4.roa Signing time: Fri 02 Jan 2026 16:20:34 +0000 ROA not before: Fri 02 Jan 2026 16:20:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 64249 IP address blocks: 5.182.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 07:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:c2:be:4a:22:57:fb:6b:bc:f1:b7:6d:e8:e9:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Validity Not Before: Jan 2 16:20:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c2192982dd2afd110f736b8ae0e708d91949510e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:7c:ed:9e:d7:50:8a:fe:4d:c7:02:ed:bb:e4: ad:b9:86:1d:39:81:ca:33:20:2f:51:74:4f:ad:96: 0e:bb:03:e1:ea:59:a4:63:b9:e0:18:f0:86:5a:b7: c8:83:f8:26:f3:77:0a:a4:a3:18:4f:a2:b4:6d:88: db:ef:1d:53:ff:3d:a5:39:96:b2:f1:23:57:4d:69: d3:08:36:33:98:46:a7:1d:1e:dc:8b:64:ff:7f:68: 9d:fa:d2:07:55:95:51:3f:1c:5d:c8:d3:0b:e8:3a: 80:93:7c:c7:e1:cd:86:98:20:28:40:e7:38:5b:d4: 72:c8:cd:97:b3:78:bd:36:b3:45:4a:06:fe:6c:08: 73:c9:6a:5b:73:fc:26:e8:0f:65:7f:6c:c5:d7:7b: 93:b1:65:a5:b4:03:31:5a:93:58:55:cd:ec:6a:c9: 2a:d3:36:e1:1c:f3:00:e0:03:98:a0:92:49:5a:d2: 89:58:3e:40:bf:7e:90:0f:61:38:4d:19:98:0f:02: f9:88:54:e5:b3:08:93:4f:ab:ba:b9:f1:e0:1a:7a: 7a:ce:39:45:97:54:14:45:2c:d8:28:2a:2a:44:6e: 6e:a8:4f:34:1d:f5:33:04:5b:ce:e9:a9:16:f8:b8: b9:bc:13:e3:fe:e3:bf:1d:5a:e1:be:3f:47:63:6c: dd:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:19:29:82:DD:2A:FD:11:0F:73:6B:8A:E0:E7:08:D9:19:49:51:0E X509v3 Authority Key Identifier: keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/whkpgt0q_REPc2uK4OcI2RlJUQ4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.182.51.0/24 Signature Algorithm: sha256WithRSAEncryption 46:3a:43:ff:ac:6c:6d:00:93:18:9b:ea:9b:03:7d:94:a4:a2: a3:a1:12:47:8c:06:91:f9:f7:78:4a:02:df:3f:e3:f8:f3:06: 86:7c:61:b2:60:5b:61:d6:8b:b5:81:53:e6:47:f5:1a:17:7e: 57:bb:91:1e:cc:87:3a:f4:59:cb:f0:bd:af:90:3b:6b:50:f4: f9:0e:3c:5f:77:1f:6e:6d:59:cb:66:ac:a4:c4:b2:0b:d2:24: a5:54:56:c4:89:67:ec:cc:8a:3d:72:52:9a:68:a7:ca:80:f5: 05:90:27:89:8c:2c:09:30:1d:91:41:fd:f4:f0:62:50:cd:06: 88:f9:97:a4:65:28:6e:2f:87:c3:7c:09:fc:83:e3:e5:5c:2a: a8:55:0a:6f:2f:99:96:84:c3:43:a6:8c:ba:8c:25:87:62:00: 23:e4:47:31:c5:74:b6:94:a1:bd:bc:4a:9c:db:37:84:70:3c: ca:41:e4:b8:ce:89:59:23:42:e9:d0:38:13:7e:ba:cf:8b:ca: a9:5e:d0:ee:b8:21:2f:a2:25:72:37:57:83:5d:3e:8f:15:72: 38:71:dc:c0:0c:62:aa:14:28:3a:62:fa:09:f8:26:90:2c:28: af:c6:b9:34:50:d9:1e:42:e4:7a:b2:9b:26:fa:2f:d0:ae:2c: 51:33:fd:31 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gsK+SiJX+2u88bdt6OnqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz YjUwMzQwHhcNMjYwMTAyMTYyMDM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMjE5Mjk4MmRkMmFmZDExMGY3MzZiOGFlMGU3MDhkOTE5NDk1MTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4XztntdQiv5NxwLtu+StuYYdOYHK MyAvUXRPrZYOuwPh6lmkY7ngGPCGWrfIg/gm83cKpKMYT6K0bYjb7x1T/z2lOZay 8SNXTWnTCDYzmEanHR7ci2T/f2id+tIHVZVRPxxdyNML6DqAk3zH4c2GmCAoQOc4 W9RyyM2Xs3i9NrNFSgb+bAhzyWpbc/wm6A9lf2zF13uTsWWltAMxWpNYVc3saskq 0zbhHPMA4AOYoJJJWtKJWD5Av36QD2E4TRmYDwL5iFTlswiTT6u6ufHgGnp6zjlF l1QURSzYKCoqRG5uqE80HfUzBFvO6akW+Li5vBPj/uO/HVrhvj9HY2zdoQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMIZKYLdKv0RD3NriuDnCNkZSVEOMB8GA1UdIwQY MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It Mzk0YWNkMjFmMzliLzEvd2hrcGd0MHFfUkVQYzJ1SzRPY0kyUmxKVVE0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2ItMzk0YWNkMjFmMzli LzEvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABbYzMA0G CSqGSIb3DQEBCwUAA4IBAQBGOkP/rGxtAJMYm+qbA32UpKKjoRJHjAaR+fd4SgLf P+P48waGfGGyYFth1ou1gVPmR/UaF35Xu5EezIc69FnL8L2vkDtrUPT5Djxfdx9u bVnLZqykxLIL0iSlVFbEiWfszIo9clKaaKfKgPUFkCeJjCwJMB2RQf308GJQzQaI +ZekZShuL4fDfAn8g+PlXCqoVQpvL5mWhMNDpoy6jCWHYgAj5EcxxXS2lKG9vEqc 2zeEcDzKQeS4zolZI0Lp0DgTfrrPi8qpXtDuuCEvoiVyN1eDXT6PFXI4cdzADGKq FCg6YvoJ+CaQLCivxrk0UNkeQuR6spsm+i/QrixRM/0x -----END CERTIFICATE-----Generated at Tue Jan 20 15:18:00 2026 by rpki-client