This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/wehcPMWdUQvCmWJevdZknxgIA3c.roa File: wehcPMWdUQvCmWJevdZknxgIA3c.roa (raw, json) Hash identifier: LUZzWvM19nGNUyYCC4muLiqCKcZL6hOtbafsQKTgU7I= Subject key identifier: C1:E8:5C:3C:C5:9D:51:0B:C2:99:62:5E:BD:D6:64:9F:18:08:03:77 Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7 Certificate serial: 019B79106098D774886FDD42237CB0929BAC Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/wehcPMWdUQvCmWJevdZknxgIA3c.roa Signing time: Thu 01 Jan 2026 10:17:54 +0000 ROA not before: Thu 01 Jan 2026 10:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 401838 IP address blocks: 91.225.225.0/24 maxlen: 24 91.225.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:60:98:d7:74:88:6f:dd:42:23:7c:b0:92:9b:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7 Validity Not Before: Jan 1 10:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c1e85c3cc59d510bc299625ebdd6649f18080377 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:49:b4:a6:f0:f5:66:79:ad:3b:16:77:d9:45: 4c:90:af:56:bd:cb:bb:bf:9d:78:e2:c7:15:86:9d: ab:2b:43:2e:6b:62:78:08:04:94:3f:ce:fb:6c:12: cc:fd:21:90:52:42:b9:40:f9:05:50:12:2e:d5:2a: de:57:91:eb:22:d8:ff:24:41:35:57:37:1f:d8:79: 09:a4:bd:c4:d9:1a:fd:40:19:a3:61:02:0c:bb:7f: a1:a5:74:40:ec:81:f4:9d:03:78:ea:00:86:3c:64: f1:e0:f7:c9:bf:16:e3:7d:b1:21:67:a0:35:3d:2f: fe:72:24:c6:2f:39:b1:35:19:5b:07:32:ad:12:23: 81:5d:c8:51:4f:65:1f:ca:e3:83:34:ea:11:ab:78: a4:6f:d4:08:c8:ee:61:97:a8:da:a5:21:1d:e7:63: 86:65:9f:a0:fb:e9:f9:df:8f:c7:9a:98:e8:98:b1: 32:fc:5a:49:30:bf:c1:1f:5a:b3:89:18:99:ce:62: 0d:37:12:92:45:a5:35:84:51:5c:26:b3:c2:35:54: cc:c1:87:95:9c:87:f2:5f:f8:0b:3e:67:ca:1c:e5: 80:64:f0:ed:e0:98:b9:38:3a:aa:ab:87:42:bb:ea: c6:1a:0e:3e:dc:db:d9:37:6d:55:05:f9:04:a4:2b: 65:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:E8:5C:3C:C5:9D:51:0B:C2:99:62:5E:BD:D6:64:9F:18:08:03:77 X509v3 Authority Key Identifier: keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/wehcPMWdUQvCmWJevdZknxgIA3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.225.225.0-91.225.226.255 Signature Algorithm: sha256WithRSAEncryption 76:74:0a:47:7d:bd:13:9b:14:c2:0c:09:cd:93:d7:cb:55:f7: 8a:2d:13:39:5f:ed:7d:8d:43:05:f6:14:04:54:b9:dd:a4:19: 77:09:87:bb:ad:df:12:04:ec:5d:da:e4:a7:cd:04:10:56:55: d4:a6:f7:4d:3e:b5:bb:fe:0e:0a:2e:e3:03:d5:57:e9:1b:49: d4:5d:f4:6e:07:16:b9:75:8f:66:e2:51:c7:dd:11:63:2e:93: 15:22:48:41:15:6d:e7:27:52:41:0c:c7:7c:45:b7:0e:fa:0e: 00:52:2e:7f:3c:a8:db:63:68:69:3b:78:f6:29:f3:7d:d0:15: c8:fe:9c:ee:7a:d0:26:52:04:bc:1b:32:f8:4d:51:d6:c3:8e: 1d:0d:36:af:fc:85:a1:eb:bd:4c:54:79:0a:cc:f1:61:8d:6d: d9:a8:ae:17:1d:09:e6:72:24:df:02:57:1e:60:e0:55:8c:b6: c2:60:cf:21:9b:39:8a:cd:2e:58:23:9d:31:9c:ac:25:64:4b: a1:8c:da:b9:fd:60:eb:89:58:71:ee:2a:aa:0c:05:1f:a4:49: f6:f7:fc:26:80:3d:e3:4a:ed:39:97:18:98:05:85:64:c0:ab: 24:2c:47:78:c2:30:2c:73:53:2c:d1:1b:4d:6e:c3:0b:d8:36: cc:23:88:1f -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt5EGCY13SIb91CI3ywkpusMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkMWFjODNlZTNhM2Y5NjhkNjZhZDJmZGY0NjE2ZTdiYjFl NGQxZDcwHhcNMjYwMTAxMTAxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMWU4NWMzY2M1OWQ1MTBiYzI5OTYyNWViZGQ2NjQ5ZjE4MDgwMzc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEm0pvD1ZnmtOxZ32UVMkK9Wvcu7 v5144scVhp2rK0Mua2J4CASUP877bBLM/SGQUkK5QPkFUBIu1SreV5HrItj/JEE1 Vzcf2HkJpL3E2Rr9QBmjYQIMu3+hpXRA7IH0nQN46gCGPGTx4PfJvxbjfbEhZ6A1 PS/+ciTGLzmxNRlbBzKtEiOBXchRT2UfyuODNOoRq3ikb9QIyO5hl6japSEd52OG ZZ+g++n534/HmpjomLEy/FpJML/BH1qziRiZzmINNxKSRaU1hFFcJrPCNVTMwYeV nIfyX/gLPmfKHOWAZPDt4Ji5ODqqq4dCu+rGGg4+3NvZN21VBfkEpCtlnwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFMHoXDzFnVELwpliXr3WZJ8YCAN3MB8GA1UdIwQY MBaAFI0ayD7jo/lo1mrS/fRhbnux5NHXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi80YWJmM2YtMTU4Zi00ZjYyLWE5ZWIt ZGRmNTY3ZWRlZDAzLzEvd2VoY1BNV2RVUXZDbVdKZXZkWmtueGdJQTNjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi80YWJmM2YtMTU4Zi00ZjYyLWE5ZWItZGRmNTY3ZWRlZDAz LzEvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABb4eED BABb4eIwDQYJKoZIhvcNAQELBQADggEBAHZ0Ckd9vRObFMIMCc2T18tV94otEzlf 7X2NQwX2FARUud2kGXcJh7ut3xIE7F3a5KfNBBBWVdSm900+tbv+Dgou4wPVV+kb SdRd9G4HFrl1j2biUcfdEWMukxUiSEEVbecnUkEMx3xFtw76DgBSLn88qNtjaGk7 ePYp833QFcj+nO560CZSBLwbMvhNUdbDjh0NNq/8haHrvUxUeQrM8WGNbdmorhcd CeZyJN8CVx5g4FWMtsJgzyGbOYrNLlgjnTGcrCVkS6GM2rn9YOuJWHHuKqoMBR+k Sfb3/CaAPeNK7TmXGJgFhWTAqyQsR3jCMCxzUyzRG01uwwvYNswjiB8= -----END CERTIFICATE-----Generated at Wed Jan 21 05:18:07 2026 by rpki-client