This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/96d0e2-184f-47e3-9bf6-55a03cb83bf6/1/WH9MtYAjhnZexRfLWNZUYcRJcYU.roa File: WH9MtYAjhnZexRfLWNZUYcRJcYU.roa (raw, json) Hash identifier: KLzTItCMkuqh0f0qD5QoElv/ivKn4xdXzfd7Tf8Ak2s= Subject key identifier: 58:7F:4C:B5:80:23:86:76:5E:C5:17:CB:58:D6:54:61:C4:49:71:85 Certificate issuer: /CN=cecc9f2b825fd967e978c4209279595fcf332c5a Certificate serial: 019B7EA58034DA7714784554CF656AAE5CE5 Authority key identifier: CE:CC:9F:2B:82:5F:D9:67:E9:78:C4:20:92:79:59:5F:CF:33:2C:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsyfK4Jf2WfpeMQgknlZX88zLFo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/96d0e2-184f-47e3-9bf6-55a03cb83bf6/1/WH9MtYAjhnZexRfLWNZUYcRJcYU.roa Signing time: Fri 02 Jan 2026 12:18:54 +0000 ROA not before: Fri 02 Jan 2026 12:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12762 IP address blocks: 193.186.88.0/21 maxlen: 21 193.186.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/96d0e2-184f-47e3-9bf6-55a03cb83bf6/1/zsyfK4Jf2WfpeMQgknlZX88zLFo.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/96d0e2-184f-47e3-9bf6-55a03cb83bf6/1/zsyfK4Jf2WfpeMQgknlZX88zLFo.mft rsync://rpki.ripe.net/repository/DEFAULT/zsyfK4Jf2WfpeMQgknlZX88zLFo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:80:34:da:77:14:78:45:54:cf:65:6a:ae:5c:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cecc9f2b825fd967e978c4209279595fcf332c5a Validity Not Before: Jan 2 12:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=587f4cb5802386765ec517cb58d65461c4497185 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:11:cb:a4:a8:6d:b8:98:ff:55:c3:5a:c4:e8: be:42:e0:a3:7f:b6:8b:76:33:ac:df:06:e4:ea:eb: 4a:b1:42:08:ea:3a:dd:a5:f8:06:3e:59:49:b0:0d: d4:9d:bd:71:f3:25:3c:7a:5a:2b:cf:0b:cf:38:40: dc:59:e8:25:71:c6:c0:23:5b:c5:38:21:86:d6:49: 60:bc:9e:e8:4d:b1:e3:1a:88:35:c1:4b:fb:c9:5a: 89:ba:74:c2:c4:ff:d4:95:1e:e0:84:16:f3:0a:e3: 6a:d7:c9:a6:90:72:01:15:dc:b1:19:34:d2:3a:eb: 42:52:61:77:db:9a:71:69:59:7c:bf:85:ae:ef:19: e7:e9:fe:79:db:54:60:5e:60:48:3a:b5:a9:a1:64: f2:47:92:34:f8:f6:67:ab:a2:03:1a:48:8d:64:67: 40:fd:49:be:20:ba:ec:e2:05:b8:4e:cf:9d:3d:6c: 62:e7:17:fd:dd:28:e7:1f:f8:81:df:e4:dd:03:d0: 1d:79:21:8c:4e:3f:2b:26:a1:56:aa:db:7a:0d:dc: 3a:65:28:9d:45:a6:b0:2a:36:18:a6:7b:fe:d6:91: 50:95:a7:ed:a2:66:17:4e:f7:8d:83:a9:8f:e7:99: 3c:b6:3b:5e:35:ef:96:b2:94:a6:c7:64:57:b9:4f: 5f:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:7F:4C:B5:80:23:86:76:5E:C5:17:CB:58:D6:54:61:C4:49:71:85 X509v3 Authority Key Identifier: keyid:CE:CC:9F:2B:82:5F:D9:67:E9:78:C4:20:92:79:59:5F:CF:33:2C:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsyfK4Jf2WfpeMQgknlZX88zLFo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/96d0e2-184f-47e3-9bf6-55a03cb83bf6/1/WH9MtYAjhnZexRfLWNZUYcRJcYU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/96d0e2-184f-47e3-9bf6-55a03cb83bf6/1/zsyfK4Jf2WfpeMQgknlZX88zLFo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.186.88.0-193.186.103.255 Signature Algorithm: sha256WithRSAEncryption 35:3e:2b:b2:8e:47:ed:85:31:88:40:52:f8:ae:40:06:3a:c9: 5f:21:d7:a9:98:a0:d9:ed:93:89:a2:19:ce:23:96:6d:e0:7f: ad:7e:51:08:c9:e9:c2:46:99:d9:24:2e:94:ee:53:9e:56:bb: 86:0f:42:3c:c9:c5:2d:c6:69:54:33:c4:33:d3:ca:05:d3:df: 68:b4:3f:76:bd:ad:04:d5:f0:dd:ae:04:c8:91:7a:48:b7:a5: d1:50:f5:54:5f:1f:3b:d4:e1:ab:0b:dd:ad:85:3e:04:17:bf: 83:a8:ac:6c:5c:81:df:b4:4d:0e:c2:3d:48:bc:64:98:a9:c3: 6e:0e:47:42:44:70:53:22:c0:b5:e4:19:18:ad:cd:48:a3:0e: 28:cc:80:72:90:56:5d:1b:d5:45:bf:84:d6:7c:4d:97:e6:bb: 86:1e:64:47:2c:a4:b2:4b:fd:82:56:33:e4:04:f4:d0:27:9f: 43:1c:d4:39:04:8f:7d:56:f9:22:ca:13:22:b0:2e:82:b4:35: a8:9b:f6:a7:5a:1e:06:19:67:d5:e1:d9:a5:53:44:a1:58:f4: de:1f:52:bd:54:96:47:70:24:ae:bc:22:df:6c:8e:d2:c0:1d: 19:84:d1:07:b2:94:09:a0:8b:5b:e2:56:c4:7d:d1:2a:13:d1: 6f:d3:7a:54 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt+pYA02ncUeEVUz2VqrlzlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlY2M5ZjJiODI1ZmQ5NjdlOTc4YzQyMDkyNzk1OTVmY2Yz MzJjNWEwHhcNMjYwMTAyMTIxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ODdmNGNiNTgwMjM4Njc2NWVjNTE3Y2I1OGQ2NTQ2MWM0NDk3MTg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhHLpKhtuJj/VcNaxOi+QuCjf7aL djOs3wbk6utKsUII6jrdpfgGPllJsA3Unb1x8yU8elorzwvPOEDcWeglccbAI1vF OCGG1klgvJ7oTbHjGog1wUv7yVqJunTCxP/UlR7ghBbzCuNq18mmkHIBFdyxGTTS OutCUmF325pxaVl8v4Wu7xnn6f5521RgXmBIOrWpoWTyR5I0+PZnq6IDGkiNZGdA /Um+ILrs4gW4Ts+dPWxi5xf93SjnH/iB3+TdA9AdeSGMTj8rJqFWqtt6Ddw6ZSid RaawKjYYpnv+1pFQlaftomYXTveNg6mP55k8tjteNe+WspSmx2RXuU9f5wIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFFh/TLWAI4Z2XsUXy1jWVGHESXGFMB8GA1UdIwQY MBaAFM7MnyuCX9ln6XjEIJJ5WV/PMyxaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenN5Zks0SmYyV2ZwZU1RZ2tubFpYODh6TEZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi85NmQwZTItMTg0Zi00N2UzLTliZjYt NTVhMDNjYjgzYmY2LzEvV0g5TXRZQWpoblpleFJmTFdOWlVZY1JKY1lVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi85NmQwZTItMTg0Zi00N2UzLTliZjYtNTVhMDNjYjgzYmY2 LzEvenN5Zks0SmYyV2ZwZU1RZ2tubFpYODh6TEZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAPBulgD BAPBumAwDQYJKoZIhvcNAQELBQADggEBADU+K7KOR+2FMYhAUviuQAY6yV8h16mY oNntk4miGc4jlm3gf61+UQjJ6cJGmdkkLpTuU55Wu4YPQjzJxS3GaVQzxDPTygXT 32i0P3a9rQTV8N2uBMiReki3pdFQ9VRfHzvU4asL3a2FPgQXv4OorGxcgd+0TQ7C PUi8ZJipw24OR0JEcFMiwLXkGRitzUijDijMgHKQVl0b1UW/hNZ8TZfmu4YeZEcs pLJL/YJWM+QE9NAnn0Mc1DkEj31W+SLKEyKwLoK0Naib9qdaHgYZZ9Xh2aVTRKFY 9N4fUr1UlkdwJK68It9sjtLAHRmE0QeylAmgi1viVsR90SoT0W/TelQ= -----END CERTIFICATE-----Generated at Mon Jan 26 19:34:29 2026 by rpki-client