This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9118e3-13da-4d48-9c38-711fc1a2d0a0/1/Whf025AQDA8tBzOKuKXx8fPC43Q.roa File: Whf025AQDA8tBzOKuKXx8fPC43Q.roa (raw, json) Hash identifier: dUevim2/BiChkKpYz6TYK8JPdP42XFVj+fxwUEJ/mxQ= Subject key identifier: 5A:17:F4:DB:90:10:0C:0F:2D:07:33:8A:B8:A5:F1:F1:F3:C2:E3:74 Certificate issuer: /CN=3a66869dd1a997164ba4fa23e0fd41fb3acb10be Certificate serial: 019B7C13462F8CAD936B6B1ED342B3C69FBE Authority key identifier: 3A:66:86:9D:D1:A9:97:16:4B:A4:FA:23:E0:FD:41:FB:3A:CB:10:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OmaGndGplxZLpPoj4P1B-zrLEL4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9118e3-13da-4d48-9c38-711fc1a2d0a0/1/Whf025AQDA8tBzOKuKXx8fPC43Q.roa Signing time: Fri 02 Jan 2026 00:19:56 +0000 ROA not before: Fri 02 Jan 2026 00:19:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202956 IP address blocks: 185.149.76.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9118e3-13da-4d48-9c38-711fc1a2d0a0/1/OmaGndGplxZLpPoj4P1B-zrLEL4.crl rsync://rpki.ripe.net/repository/DEFAULT/86/9118e3-13da-4d48-9c38-711fc1a2d0a0/1/OmaGndGplxZLpPoj4P1B-zrLEL4.mft rsync://rpki.ripe.net/repository/DEFAULT/OmaGndGplxZLpPoj4P1B-zrLEL4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:46:2f:8c:ad:93:6b:6b:1e:d3:42:b3:c6:9f:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a66869dd1a997164ba4fa23e0fd41fb3acb10be Validity Not Before: Jan 2 00:19:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5a17f4db90100c0f2d07338ab8a5f1f1f3c2e374 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:5b:db:7f:67:4f:16:65:94:64:3a:34:db:50: 0e:27:82:80:8a:1e:77:90:c4:95:64:34:fb:40:e6: 1a:37:5d:41:55:63:74:11:b9:08:5d:d9:13:fc:03: db:05:02:07:a7:07:15:b7:5d:f7:c3:7c:ab:35:0c: fb:e5:b1:de:2d:c9:6f:b0:49:49:0a:73:72:6a:b2: 59:d2:41:ae:8f:9a:f1:07:8b:8d:26:6e:7e:45:20: 2a:e6:2f:f7:5c:fd:6d:b1:19:03:df:0b:dc:cd:c2: f2:0e:b6:0f:46:02:a8:58:dc:b7:f2:5f:89:76:4a: 9f:b8:1d:21:de:d6:1c:b2:61:72:e3:dc:1b:e5:86: 4d:cf:ea:4c:15:aa:46:3d:2f:ba:d8:3b:27:e4:41: 8b:eb:68:48:7d:96:c3:87:db:3b:d7:eb:71:81:3e: e7:ab:aa:3c:33:c5:54:7e:6a:08:d9:01:0c:e4:60: 16:ef:62:58:2b:e8:72:37:09:45:bd:c0:01:8a:7f: bb:4e:50:be:2b:4e:aa:80:42:cc:13:9c:93:dc:26: ba:54:a2:ec:83:c8:1a:12:c1:17:53:61:e3:a6:a8: 37:58:dc:72:a1:76:da:21:59:b2:29:29:58:f8:d1: 71:bd:21:f3:c0:c6:d0:9e:36:18:a1:42:48:96:c2: fa:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:17:F4:DB:90:10:0C:0F:2D:07:33:8A:B8:A5:F1:F1:F3:C2:E3:74 X509v3 Authority Key Identifier: keyid:3A:66:86:9D:D1:A9:97:16:4B:A4:FA:23:E0:FD:41:FB:3A:CB:10:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OmaGndGplxZLpPoj4P1B-zrLEL4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9118e3-13da-4d48-9c38-711fc1a2d0a0/1/Whf025AQDA8tBzOKuKXx8fPC43Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9118e3-13da-4d48-9c38-711fc1a2d0a0/1/OmaGndGplxZLpPoj4P1B-zrLEL4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.149.76.0/22 Signature Algorithm: sha256WithRSAEncryption f4:8b:b4:bb:ce:87:22:d9:21:76:95:a9:be:ef:fb:1f:2e:dd: 89:5f:c1:7c:c3:d5:e7:8a:83:a8:e2:6c:40:f4:5d:89:49:be: 76:1c:ed:b0:a3:bc:77:7f:f4:a2:9d:f2:a1:de:8d:d1:04:42: 22:c8:bd:a6:21:d6:a0:e9:0b:84:bc:d2:3f:a3:c0:72:72:71: c8:ad:98:08:11:d3:85:3b:c0:d2:43:e2:4b:a3:28:af:d6:dc: 2e:02:62:2a:24:bf:bc:d5:df:a3:9e:cc:7f:88:c5:b1:4f:87: 49:52:49:53:12:45:a6:60:53:31:c2:dd:7e:36:9c:6d:31:9d: e2:df:90:22:ca:bf:c1:7b:01:d8:d4:95:cd:6d:f3:53:bf:88: 31:57:9e:6d:38:82:3b:0b:2d:80:05:b6:9e:1a:0a:3f:4d:71: 29:5c:09:b0:94:4e:df:bf:da:73:69:6f:31:3f:c1:84:f3:bc: 06:49:83:86:ab:14:66:5f:ef:5f:b9:d3:88:59:e5:72:37:55: b3:f7:ff:f4:9d:76:c2:d7:fb:88:c1:77:db:ff:66:89:ce:e4: e1:fa:9a:96:e3:0e:e5:04:45:bd:58:81:81:10:1d:52:73:95: 46:59:f4:01:e6:18:bf:73:49:ee:06:15:65:92:18:a1:88:ff: e5:21:77:d8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8E0YvjK2Ta2se00Kzxp++MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhNjY4NjlkZDFhOTk3MTY0YmE0ZmEyM2UwZmQ0MWZiM2Fj YjEwYmUwHhcNMjYwMTAyMDAxOTU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YTE3ZjRkYjkwMTAwYzBmMmQwNzMzOGFiOGE1ZjFmMWYzYzJlMzc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAylvbf2dPFmWUZDo021AOJ4KAih53 kMSVZDT7QOYaN11BVWN0EbkIXdkT/APbBQIHpwcVt133w3yrNQz75bHeLclvsElJ CnNyarJZ0kGuj5rxB4uNJm5+RSAq5i/3XP1tsRkD3wvczcLyDrYPRgKoWNy38l+J dkqfuB0h3tYcsmFy49wb5YZNz+pMFapGPS+62Dsn5EGL62hIfZbDh9s71+txgT7n q6o8M8VUfmoI2QEM5GAW72JYK+hyNwlFvcABin+7TlC+K06qgELME5yT3Ca6VKLs g8gaEsEXU2Hjpqg3WNxyoXbaIVmyKSlY+NFxvSHzwMbQnjYYoUJIlsL6AQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFoX9NuQEAwPLQcziril8fHzwuN0MB8GA1UdIwQY MBaAFDpmhp3RqZcWS6T6I+D9Qfs6yxC+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT21hR25kR3BseFpMcFBvajRQMUItenJMRUw0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni85MTE4ZTMtMTNkYS00ZDQ4LTljMzgt NzExZmMxYTJkMGEwLzEvV2hmMDI1QVFEQTh0QnpPS3VLWHg4ZlBDNDNRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni85MTE4ZTMtMTNkYS00ZDQ4LTljMzgtNzExZmMxYTJkMGEw LzEvT21hR25kR3BseFpMcFBvajRQMUItenJMRUw0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuZVMMA0G CSqGSIb3DQEBCwUAA4IBAQD0i7S7zoci2SF2lam+7/sfLt2JX8F8w9XnioOo4mxA 9F2JSb52HO2wo7x3f/SinfKh3o3RBEIiyL2mIdag6QuEvNI/o8BycnHIrZgIEdOF O8DSQ+JLoyiv1twuAmIqJL+81d+jnsx/iMWxT4dJUklTEkWmYFMxwt1+NpxtMZ3i 35Aiyr/BewHY1JXNbfNTv4gxV55tOII7Cy2ABbaeGgo/TXEpXAmwlE7fv9pzaW8x P8GE87wGSYOGqxRmX+9fudOIWeVyN1Wz9//0nXbC1/uIwXfb/2aJzuTh+pqW4w7l BEW9WIGBEB1Sc5VGWfQB5hi/c0nuBhVlkhihiP/lIXfY -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:52 2026 by rpki-client