This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/9b6d9b-8541-44bc-961a-cee5be87a46b/1/WhlF3-97zeKA9zwTPV4rysNOYtc.roa File: WhlF3-97zeKA9zwTPV4rysNOYtc.roa (raw, json) Hash identifier: PZrfxCb0Q8TjoglsmZhLZgPlBsJLljiY6Rncu+AWpPI= Subject key identifier: 5A:19:45:DF:EF:7B:CD:E2:80:F7:3C:13:3D:5E:2B:CA:C3:4E:62:D7 Certificate issuer: /CN=c1ee603b78ad72ba7855682ca2b806ac0e7e98fd Certificate serial: 019B7AC7D8AE7D48E27EFF6A9DAFB7B60D9F Authority key identifier: C1:EE:60:3B:78:AD:72:BA:78:55:68:2C:A2:B8:06:AC:0E:7E:98:FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/we5gO3itcrp4VWgsorgGrA5-mP0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/9b6d9b-8541-44bc-961a-cee5be87a46b/1/WhlF3-97zeKA9zwTPV4rysNOYtc.roa Signing time: Thu 01 Jan 2026 18:17:55 +0000 ROA not before: Thu 01 Jan 2026 18:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1126 IP address blocks: 37.60.192.0/21 maxlen: 24 85.90.64.0/19 maxlen: 24 185.33.68.0/22 maxlen: 24 2001:4d60::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/9b6d9b-8541-44bc-961a-cee5be87a46b/1/we5gO3itcrp4VWgsorgGrA5-mP0.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/9b6d9b-8541-44bc-961a-cee5be87a46b/1/we5gO3itcrp4VWgsorgGrA5-mP0.mft rsync://rpki.ripe.net/repository/DEFAULT/we5gO3itcrp4VWgsorgGrA5-mP0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:d8:ae:7d:48:e2:7e:ff:6a:9d:af:b7:b6:0d:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1ee603b78ad72ba7855682ca2b806ac0e7e98fd Validity Not Before: Jan 1 18:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5a1945dfef7bcde280f73c133d5e2bcac34e62d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:44:28:9f:85:6a:65:eb:c9:6e:20:93:41:73: b6:78:df:be:09:64:92:1e:59:b0:f4:56:3a:ec:92: a7:24:d6:a5:08:fc:3b:02:4b:58:0b:40:fd:76:3c: 37:31:7b:15:8b:ce:a0:00:9c:0c:67:6a:59:3b:9e: 8d:73:ed:e1:22:61:75:ff:d2:71:48:45:d5:84:eb: df:29:5c:d3:5f:45:94:90:4d:da:71:2c:d4:68:c6: fb:8e:a3:d8:bb:6d:ce:3a:94:34:b2:30:87:20:c7: a0:8b:0f:1d:3b:d8:70:0c:1d:45:b6:b6:bb:4f:36: a1:07:07:21:5d:29:a7:65:b1:3f:13:8d:c0:1b:6d: 5f:b7:2c:47:90:20:5a:09:2b:24:35:37:48:13:96: ee:b9:00:e0:5b:1e:30:e2:fb:fd:f1:1d:34:10:25: f5:ad:4e:b3:72:8e:2e:d1:4e:ba:59:45:12:eb:db: a7:eb:4a:3b:de:97:f8:e6:60:7c:30:c6:e4:09:74: 52:62:ca:fa:d5:bf:98:22:bb:06:81:81:b4:c3:92: de:87:25:1a:3f:4d:9e:3a:45:44:27:d9:4a:38:08: 7e:65:58:35:6a:3d:46:bb:6d:3f:1e:fe:fb:68:c4: f8:37:07:a6:fb:46:96:92:b5:f8:22:dc:2f:dd:30: 24:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:19:45:DF:EF:7B:CD:E2:80:F7:3C:13:3D:5E:2B:CA:C3:4E:62:D7 X509v3 Authority Key Identifier: keyid:C1:EE:60:3B:78:AD:72:BA:78:55:68:2C:A2:B8:06:AC:0E:7E:98:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/we5gO3itcrp4VWgsorgGrA5-mP0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/9b6d9b-8541-44bc-961a-cee5be87a46b/1/WhlF3-97zeKA9zwTPV4rysNOYtc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/9b6d9b-8541-44bc-961a-cee5be87a46b/1/we5gO3itcrp4VWgsorgGrA5-mP0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.60.192.0/21 85.90.64.0/19 185.33.68.0/22 IPv6: 2001:4d60::/32 Signature Algorithm: sha256WithRSAEncryption 66:3c:71:d5:89:64:3a:a7:50:5c:b4:da:af:10:4c:db:89:fd: f9:0b:3f:4b:24:59:13:ab:b5:68:08:9a:d0:ef:c7:c0:f5:17: 72:36:96:37:9a:f9:a5:e4:39:b9:4b:75:16:f2:2b:ca:fd:55: 4b:79:b9:e2:81:50:04:ae:52:a0:25:5d:4e:a5:5b:87:19:55: 2a:af:aa:1b:78:05:6e:74:b2:c4:b8:7b:f6:60:ad:46:51:03: e5:18:2f:fb:16:84:4c:ce:25:38:9c:ee:19:54:71:93:a8:f1: cb:03:14:10:99:e1:05:b0:3f:55:f5:d2:2f:59:fd:b0:90:14: a3:bf:8b:53:16:77:36:f9:b2:98:de:9e:2e:6c:75:1a:86:97: 38:e3:8d:7a:a3:d1:40:a0:e6:fa:30:53:a4:df:83:ed:cd:7d: a2:89:27:10:60:27:dc:28:fd:23:a7:51:a4:d7:ca:b7:66:3a: 6b:32:f0:db:d2:12:9e:72:9b:e9:1f:4d:72:14:6d:f4:bb:61: 6a:0e:36:4f:45:3b:2a:8a:4e:9d:23:bd:be:40:ab:b1:3b:69: 96:15:11:1c:3d:d2:e4:3f:ce:9e:65:ce:ae:6d:53:58:07:4d: 0a:ae:f7:05:fc:6f:76:cd:be:7c:26:32:df:e4:0f:ae:22:98: 3b:8f:ba:1f -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt6x9iufUjifv9qna+3tg2fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxZWU2MDNiNzhhZDcyYmE3ODU1NjgyY2EyYjgwNmFjMGU3 ZTk4ZmQwHhcNMjYwMTAxMTgxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YTE5NDVkZmVmN2JjZGUyODBmNzNjMTMzZDVlMmJjYWMzNGU2MmQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykQon4VqZevJbiCTQXO2eN++CWSS Hlmw9FY67JKnJNalCPw7AktYC0D9djw3MXsVi86gAJwMZ2pZO56Nc+3hImF1/9Jx SEXVhOvfKVzTX0WUkE3acSzUaMb7jqPYu23OOpQ0sjCHIMegiw8dO9hwDB1Ftra7 TzahBwchXSmnZbE/E43AG21ftyxHkCBaCSskNTdIE5buuQDgWx4w4vv98R00ECX1 rU6zco4u0U66WUUS69un60o73pf45mB8MMbkCXRSYsr61b+YIrsGgYG0w5LehyUa P02eOkVEJ9lKOAh+ZVg1aj1Gu20/Hv77aMT4Nwem+0aWkrX4Itwv3TAkqwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFFoZRd/ve83igPc8Ez1eK8rDTmLXMB8GA1UdIwQY MBaAFMHuYDt4rXK6eFVoLKK4BqwOfpj9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2U1Z08zaXRjcnA0Vldnc29yZ0dyQTUtbVAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy85YjZkOWItODU0MS00NGJjLTk2MWEt Y2VlNWJlODdhNDZiLzEvV2hsRjMtOTd6ZUtBOXp3VFBWNHJ5c05PWXRjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy85YjZkOWItODU0MS00NGJjLTk2MWEtY2VlNWJlODdhNDZi LzEvd2U1Z08zaXRjcnA0Vldnc29yZ0dyQTUtbVAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDJTzAAwQF VVpAAwQCuSFEMA0EAgACMAcDBQAgAU1gMA0GCSqGSIb3DQEBCwUAA4IBAQBmPHHV iWQ6p1BctNqvEEzbif35Cz9LJFkTq7VoCJrQ78fA9RdyNpY3mvml5Dm5S3UW8ivK /VVLebnigVAErlKgJV1OpVuHGVUqr6obeAVudLLEuHv2YK1GUQPlGC/7FoRMziU4 nO4ZVHGTqPHLAxQQmeEFsD9V9dIvWf2wkBSjv4tTFnc2+bKY3p4ubHUahpc44416 o9FAoOb6MFOk34PtzX2iiScQYCfcKP0jp1Gk18q3ZjprMvDb0hKecpvpH01yFG30 u2FqDjZPRTsqik6dI72+QKuxO2mWFREcPdLkP86eZc6ubVNYB00KrvcF/G92zb58 JjLf5A+uIpg7j7of -----END CERTIFICATE-----Generated at Tue Feb 10 03:06:12 2026 by rpki-client