This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/WHVnB7K1cz0iVc9Ds9i0qMLmFrc.roa File: WHVnB7K1cz0iVc9Ds9i0qMLmFrc.roa (raw, json) Hash identifier: QD8EoQ/Mss8g3Q2xXeraMyDtX/0gt24YRG6MYFXgiKc= Subject key identifier: 58:75:67:07:B2:B5:73:3D:22:55:CF:43:B3:D8:B4:A8:C2:E6:16:B7 Certificate issuer: /CN=093282fe3f3d7d46bd1b1cb77b2fec37dee00663 Certificate serial: 019B7CEE25CD487650FF881985B71579FF5B Authority key identifier: 09:32:82:FE:3F:3D:7D:46:BD:1B:1C:B7:7B:2F:EC:37:DE:E0:06:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTKC_j89fUa9Gxy3ey_sN97gBmM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/WHVnB7K1cz0iVc9Ds9i0qMLmFrc.roa Signing time: Fri 02 Jan 2026 04:19:00 +0000 ROA not before: Fri 02 Jan 2026 04:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25173 IP address blocks: 193.201.45.0/24 maxlen: 24 2001:67c:2004::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.crl rsync://rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.mft rsync://rpki.ripe.net/repository/DEFAULT/CTKC_j89fUa9Gxy3ey_sN97gBmM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:25:cd:48:76:50:ff:88:19:85:b7:15:79:ff:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=093282fe3f3d7d46bd1b1cb77b2fec37dee00663 Validity Not Before: Jan 2 04:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=58756707b2b5733d2255cf43b3d8b4a8c2e616b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:71:ea:9c:35:9c:02:64:05:30:1c:a2:5d:d4: 40:de:13:e0:75:a9:0e:94:a6:bd:28:4f:6c:39:80: 70:c6:ae:87:c4:74:6e:94:7e:ee:ce:9e:61:45:1d: e2:52:d4:9f:c6:d0:27:e5:7a:eb:11:a7:64:92:54: 6f:c7:c1:a2:66:5f:d8:1f:03:49:43:7e:f5:d8:cb: 38:87:6a:09:28:5f:b4:93:f9:d4:14:c9:36:97:8e: 2e:31:7e:07:8d:cd:90:0b:88:5e:71:2f:f6:67:27: 95:75:4a:28:ff:4a:60:15:cc:4b:6a:e8:47:dd:fb: d9:e2:e3:94:b4:85:82:51:31:1e:0d:68:b5:ed:0f: a9:b0:05:03:84:b3:0a:ca:9c:04:aa:35:76:be:f8: b0:ec:bd:19:19:c7:f0:4a:1e:9b:dc:46:d9:21:07: ff:1a:7c:e6:b1:ea:13:14:f2:76:b9:25:56:c3:8b: b7:a2:bc:d1:25:c3:0c:12:52:0c:52:b7:ad:a1:f5: 5a:00:a4:80:20:2a:ad:c7:99:0a:5e:72:d6:ed:47: 88:0a:ec:5d:91:c7:3c:e9:04:da:ca:2e:a2:b9:98: 9d:9a:13:d4:c3:30:e7:51:df:bf:56:94:00:76:48: dc:1d:34:90:fb:9d:44:10:62:7a:95:f3:5b:61:b9: dc:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:75:67:07:B2:B5:73:3D:22:55:CF:43:B3:D8:B4:A8:C2:E6:16:B7 X509v3 Authority Key Identifier: keyid:09:32:82:FE:3F:3D:7D:46:BD:1B:1C:B7:7B:2F:EC:37:DE:E0:06:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTKC_j89fUa9Gxy3ey_sN97gBmM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/WHVnB7K1cz0iVc9Ds9i0qMLmFrc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.201.45.0/24 IPv6: 2001:67c:2004::/48 Signature Algorithm: sha256WithRSAEncryption 20:f8:d1:7c:48:44:e8:48:67:b4:9a:58:e8:2b:03:fd:a5:6b: 3e:1e:f7:ed:7c:45:1e:ec:6c:5f:a4:08:f6:5d:f7:ee:a0:00: 47:a2:91:0e:e9:e8:03:2e:0f:59:4b:44:0b:a7:a2:c2:45:a1: f3:3e:04:de:cd:33:08:b3:53:01:f4:1e:46:03:cb:96:a4:e5: 0d:da:a6:0a:92:4f:f6:a8:ac:83:b9:a7:fc:b7:bb:31:09:77: 1e:9a:ca:9c:bc:43:b0:53:49:04:3b:47:b3:1e:a9:42:14:c7: ac:89:80:54:67:63:8c:1f:a3:31:f2:23:b0:34:15:53:d3:27: c6:83:24:ec:00:16:91:fd:95:5c:de:8b:12:a6:53:a8:97:e9: 47:2b:72:39:4e:74:9d:c1:4d:37:73:d8:bb:ff:0f:b2:23:99: b0:b1:f1:9e:71:7e:68:aa:8b:e7:fb:96:ee:c0:f5:ba:75:3a: 85:d0:fc:e7:30:9c:af:2f:d0:84:ea:c9:2f:d8:63:e5:7f:72: 18:9e:05:a5:67:8f:2d:2d:7b:2f:0f:f0:2a:4f:85:bb:5a:3b: 95:96:3d:4f:c2:e7:d5:0d:1e:6f:30:8e:33:4c:bc:64:c0:af: 45:b2:57:0c:fb:88:c1:a8:ac:c0:ed:87:ba:b6:77:0e:57:0f: ec:0e:24:5d -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt87iXNSHZQ/4gZhbcVef9bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MzI4MmZlM2YzZDdkNDZiZDFiMWNiNzdiMmZlYzM3ZGVl MDA2NjMwHhcNMjYwMTAyMDQxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ODc1NjcwN2IyYjU3MzNkMjI1NWNmNDNiM2Q4YjRhOGMyZTYxNmI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3HqnDWcAmQFMByiXdRA3hPgdakO lKa9KE9sOYBwxq6HxHRulH7uzp5hRR3iUtSfxtAn5XrrEadkklRvx8GiZl/YHwNJ Q3712Ms4h2oJKF+0k/nUFMk2l44uMX4Hjc2QC4hecS/2ZyeVdUoo/0pgFcxLauhH 3fvZ4uOUtIWCUTEeDWi17Q+psAUDhLMKypwEqjV2vviw7L0ZGcfwSh6b3EbZIQf/ GnzmseoTFPJ2uSVWw4u3orzRJcMMElIMUretofVaAKSAICqtx5kKXnLW7UeICuxd kcc86QTayi6iuZidmhPUwzDnUd+/VpQAdkjcHTSQ+51EEGJ6lfNbYbncKQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFFh1ZweytXM9IlXPQ7PYtKjC5ha3MB8GA1UdIwQY MBaAFAkygv4/PX1GvRsct3sv7Dfe4AZjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1RLQ19qODlmVWE5R3h5M2V5X3NOOTdnQm1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9mYTcxOTUtYTBmZS00Zjg0LTgxM2Mt MmE3NzZmNzg3YTFjLzEvV0hWbkI3SzFjejBpVmM5RHM5aTBxTUxtRnJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS9mYTcxOTUtYTBmZS00Zjg0LTgxM2MtMmE3NzZmNzg3YTFj LzEvQ1RLQ19qODlmVWE5R3h5M2V5X3NOOTdnQm1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwcktMA8E AgACMAkDBwAgAQZ8IAQwDQYJKoZIhvcNAQELBQADggEBACD40XxIROhIZ7SaWOgr A/2laz4e9+18RR7sbF+kCPZd9+6gAEeikQ7p6AMuD1lLRAunosJFofM+BN7NMwiz UwH0HkYDy5ak5Q3apgqST/aorIO5p/y3uzEJdx6aypy8Q7BTSQQ7R7MeqUIUx6yJ gFRnY4wfozHyI7A0FVPTJ8aDJOwAFpH9lVzeixKmU6iX6UcrcjlOdJ3BTTdz2Lv/ D7IjmbCx8Z5xfmiqi+f7lu7A9bp1OoXQ/OcwnK8v0ITqyS/YY+V/chieBaVnjy0t ey8P8CpPhbtaO5WWPU/C59UNHm8wjjNMvGTAr0WyVwz7iMGorMDth7q2dw5XD+wO JF0= -----END CERTIFICATE-----Generated at Tue Feb 10 00:15:00 2026 by rpki-client