This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/whA7R8JHYB_rcFJRNTHcskelA6E.roa File: whA7R8JHYB_rcFJRNTHcskelA6E.roa (raw, json) Hash identifier: HG5G1IpzBPU5qry70Qtlk4SiqFVGwO8ZlSb7hfa+/Bc= Subject key identifier: C2:10:3B:47:C2:47:60:1F:EB:70:52:51:35:31:DC:B2:47:A5:03:A1 Certificate issuer: /CN=ebb08be800126511cff8d25699d9ac136ed0ec8c Certificate serial: 019B791023C87FB5E111E49A48E9C7128B84 Authority key identifier: EB:B0:8B:E8:00:12:65:11:CF:F8:D2:56:99:D9:AC:13:6E:D0:EC:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67CL6AASZRHP-NJWmdmsE27Q7Iw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/whA7R8JHYB_rcFJRNTHcskelA6E.roa Signing time: Thu 01 Jan 2026 10:17:39 +0000 ROA not before: Thu 01 Jan 2026 10:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41695 IP address blocks: 89.21.224.0/19 maxlen: 19 134.0.64.0/21 maxlen: 21 2a01:420::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.crl rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft rsync://rpki.ripe.net/repository/DEFAULT/67CL6AASZRHP-NJWmdmsE27Q7Iw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:23:c8:7f:b5:e1:11:e4:9a:48:e9:c7:12:8b:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebb08be800126511cff8d25699d9ac136ed0ec8c Validity Not Before: Jan 1 10:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c2103b47c247601feb7052513531dcb247a503a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:aa:1c:a8:22:42:60:5a:db:e0:ff:00:eb:64: 61:c8:93:b0:11:b5:fb:2d:f9:9c:2d:50:4f:9c:2e: ab:db:35:ae:e4:72:bc:a0:e5:cc:10:2f:05:9b:f8: b4:f7:a5:4d:ca:41:fe:04:f1:c8:8e:95:b9:2f:dd: d2:6b:c6:3b:92:3d:60:f9:04:7e:b7:26:08:71:b2: 25:f5:fa:b3:b0:52:86:44:7b:36:09:a1:c5:ea:34: 44:44:67:18:ab:75:74:b4:ad:d5:03:d4:07:f8:b5: a5:f6:8e:49:59:77:02:f9:1f:e3:0d:bb:f8:7c:c1: 7f:7b:9b:9a:30:85:b7:fc:01:6d:f2:16:dd:55:42: b6:19:06:30:ff:7d:07:5b:48:10:04:06:a4:1a:d0: 5d:85:e4:54:15:27:1f:6f:d5:93:a5:ef:9f:b3:02: 76:05:4b:4a:87:bb:4d:5b:b2:80:40:97:de:d7:b5: 4a:9f:b2:fe:7e:4d:ea:5d:f0:6a:a9:44:09:ec:02: d5:d4:30:26:76:fe:a2:99:4c:9f:3d:4b:c8:3a:61: 88:3d:7c:7a:11:4b:40:6a:ff:0d:7a:75:e9:a8:25: cc:be:da:41:4e:f0:88:ab:e6:47:13:6c:4e:28:dc: 04:46:ef:c8:c8:7d:2a:5c:f5:21:c1:32:c5:e6:77: 38:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:10:3B:47:C2:47:60:1F:EB:70:52:51:35:31:DC:B2:47:A5:03:A1 X509v3 Authority Key Identifier: keyid:EB:B0:8B:E8:00:12:65:11:CF:F8:D2:56:99:D9:AC:13:6E:D0:EC:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67CL6AASZRHP-NJWmdmsE27Q7Iw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/whA7R8JHYB_rcFJRNTHcskelA6E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.21.224.0/19 134.0.64.0/21 IPv6: 2a01:420::/32 Signature Algorithm: sha256WithRSAEncryption e6:e1:b8:f1:fb:72:c4:e9:0d:31:51:06:75:2a:59:47:bd:f2: 7c:32:00:fb:7f:f7:35:1f:ba:bc:d0:91:9d:5d:4f:e8:e8:2e: ef:cd:79:41:22:8c:8a:80:6e:bd:46:5b:1c:d3:8b:5a:54:4e: e6:8f:d2:ba:28:25:af:fa:72:5a:e5:bd:b3:78:fc:39:01:61: 45:8b:f4:b2:43:d2:ff:69:1c:c9:5c:33:7e:24:03:f5:a4:ec: 5a:71:02:66:b3:cd:80:c7:ab:a2:21:ff:33:db:6e:71:23:98: 23:e7:b0:bc:3d:7e:da:9c:2e:95:70:02:3e:d1:cd:e4:4c:0a: b4:98:9f:71:6b:14:71:17:9f:d6:c5:8f:08:2e:fb:68:d6:b1: e2:33:67:6e:60:23:b2:31:a8:bb:12:7c:8c:4e:93:f1:3b:c0: 8f:61:a2:3c:3c:6f:54:30:c2:20:5b:94:73:c8:ec:23:de:ca: 73:ca:8c:57:f0:63:73:31:a6:fc:ab:fc:66:ff:bb:7a:29:0a: d5:af:e1:17:8a:63:75:73:63:55:c8:63:9b:5e:3b:c3:71:e4: 41:5b:d7:86:a7:b4:e4:34:3d:89:85:58:d3:4a:15:f8:80:0a: 54:29:19:c0:9c:c7:4e:5e:ff:4c:12:7d:53:f3:74:8a:ac:45: 5c:b5:5d:8d -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt5ECPIf7XhEeSaSOnHEouEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViYjA4YmU4MDAxMjY1MTFjZmY4ZDI1Njk5ZDlhYzEzNmVk MGVjOGMwHhcNMjYwMTAxMTAxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMjEwM2I0N2MyNDc2MDFmZWI3MDUyNTEzNTMxZGNiMjQ3YTUwM2ExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaocqCJCYFrb4P8A62RhyJOwEbX7 LfmcLVBPnC6r2zWu5HK8oOXMEC8Fm/i096VNykH+BPHIjpW5L93Sa8Y7kj1g+QR+ tyYIcbIl9fqzsFKGRHs2CaHF6jRERGcYq3V0tK3VA9QH+LWl9o5JWXcC+R/jDbv4 fMF/e5uaMIW3/AFt8hbdVUK2GQYw/30HW0gQBAakGtBdheRUFScfb9WTpe+fswJ2 BUtKh7tNW7KAQJfe17VKn7L+fk3qXfBqqUQJ7ALV1DAmdv6imUyfPUvIOmGIPXx6 EUtAav8NenXpqCXMvtpBTvCIq+ZHE2xOKNwERu/IyH0qXPUhwTLF5nc4lwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFMIQO0fCR2Af63BSUTUx3LJHpQOhMB8GA1UdIwQY MBaAFOuwi+gAEmURz/jSVpnZrBNu0OyMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNjdDTDZBQVNaUkhQLU5KV21kbXNFMjdRN0l3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS82YzE0MmEtMmI1ZS00MTZiLTk0ZGUt YmE5ZDUxZmU5ZTJiLzEvd2hBN1I4SkhZQl9yY0ZKUk5USGNza2VsQTZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS82YzE0MmEtMmI1ZS00MTZiLTk0ZGUtYmE5ZDUxZmU5ZTJi LzEvNjdDTDZBQVNaUkhQLU5KV21kbXNFMjdRN0l3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQFWRXgAwQD hgBAMA0EAgACMAcDBQAqAQQgMA0GCSqGSIb3DQEBCwUAA4IBAQDm4bjx+3LE6Q0x UQZ1KllHvfJ8MgD7f/c1H7q80JGdXU/o6C7vzXlBIoyKgG69Rlsc04taVE7mj9K6 KCWv+nJa5b2zePw5AWFFi/SyQ9L/aRzJXDN+JAP1pOxacQJms82Ax6uiIf8z225x I5gj57C8PX7anC6VcAI+0c3kTAq0mJ9xaxRxF5/WxY8ILvto1rHiM2duYCOyMai7 EnyMTpPxO8CPYaI8PG9UMMIgW5RzyOwj3spzyoxX8GNzMab8q/xm/7t6KQrVr+EX imN1c2NVyGObXjvDceRBW9eGp7TkND2JhVjTShX4gApUKRnAnMdOXv9MEn1T83SK rEVctV2N -----END CERTIFICATE-----Generated at Mon Feb 9 23:44:07 2026 by rpki-client