This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/cdd815-8bd3-414f-a9b8-055b1b0e60f4/1/WH-_bI4WqJ-kwzMckP87FDKHAKg.roa File: WH-_bI4WqJ-kwzMckP87FDKHAKg.roa (raw, json) Hash identifier: DQHUcfKPCyAX+Y0cqgfiiasXSEVfuHlMXkVoiKeaPC0= Subject key identifier: 58:7F:BF:6C:8E:16:A8:9F:A4:C3:33:1C:90:FF:3B:14:32:87:00:A8 Certificate issuer: /CN=5e3a7835377b9e849fe7c33f9fca4572d902673f Certificate serial: 019B7E3905FD737E9F62620AC8588154C186 Authority key identifier: 5E:3A:78:35:37:7B:9E:84:9F:E7:C3:3F:9F:CA:45:72:D9:02:67:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xjp4NTd7noSf58M_n8pFctkCZz8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/cdd815-8bd3-414f-a9b8-055b1b0e60f4/1/WH-_bI4WqJ-kwzMckP87FDKHAKg.roa Signing time: Fri 02 Jan 2026 10:20:24 +0000 ROA not before: Fri 02 Jan 2026 10:20:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201339 IP address blocks: 194.127.204.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/cdd815-8bd3-414f-a9b8-055b1b0e60f4/1/Xjp4NTd7noSf58M_n8pFctkCZz8.crl rsync://rpki.ripe.net/repository/DEFAULT/88/cdd815-8bd3-414f-a9b8-055b1b0e60f4/1/Xjp4NTd7noSf58M_n8pFctkCZz8.mft rsync://rpki.ripe.net/repository/DEFAULT/Xjp4NTd7noSf58M_n8pFctkCZz8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:05:fd:73:7e:9f:62:62:0a:c8:58:81:54:c1:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e3a7835377b9e849fe7c33f9fca4572d902673f Validity Not Before: Jan 2 10:20:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=587fbf6c8e16a89fa4c3331c90ff3b14328700a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:af:a5:a3:e4:06:85:04:3f:3d:07:a3:ec:54: c2:43:0a:7c:3c:4a:23:56:97:8f:ea:85:fe:d4:45: 61:91:5a:41:fc:d4:40:53:47:0f:11:4f:7e:0c:b4: 40:b8:2f:77:b5:70:cb:df:d6:75:66:f7:1a:11:b1: 82:dd:87:04:26:08:aa:cd:62:56:e2:1f:ed:dd:38: c5:bb:03:23:de:33:93:17:b4:92:24:dc:f3:8b:ac: f0:35:51:ff:94:fc:77:76:74:a4:49:95:5f:d5:d0: 99:36:1d:86:d3:99:1d:98:87:71:01:7f:67:8d:5d: 5d:94:47:77:b0:84:10:e7:63:b3:c8:40:c6:8c:25: 0b:b1:ef:6a:89:15:0e:51:4d:0c:06:f5:1a:73:7e: bc:05:a9:6c:73:70:c2:17:aa:9e:c4:c8:a2:60:22: 3f:aa:ed:4d:4f:4b:97:33:fb:44:64:ae:33:2c:3f: 04:82:56:0a:ff:77:76:b3:a7:05:a0:34:20:57:57: fd:d3:58:18:35:a2:e8:a6:24:c1:05:10:6a:c6:93: a0:72:83:c0:65:e3:9a:8a:da:86:a8:1a:8d:a3:53: 63:70:e7:84:b2:4a:33:d3:aa:33:27:c3:46:8c:3e: bb:32:b7:e7:c1:13:d8:d2:2e:3a:20:6f:bc:8d:6f: 0e:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:7F:BF:6C:8E:16:A8:9F:A4:C3:33:1C:90:FF:3B:14:32:87:00:A8 X509v3 Authority Key Identifier: keyid:5E:3A:78:35:37:7B:9E:84:9F:E7:C3:3F:9F:CA:45:72:D9:02:67:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xjp4NTd7noSf58M_n8pFctkCZz8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/cdd815-8bd3-414f-a9b8-055b1b0e60f4/1/WH-_bI4WqJ-kwzMckP87FDKHAKg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/cdd815-8bd3-414f-a9b8-055b1b0e60f4/1/Xjp4NTd7noSf58M_n8pFctkCZz8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.127.204.0/23 Signature Algorithm: sha256WithRSAEncryption 05:fa:0e:11:ac:96:06:e6:db:4a:6f:95:26:6f:c7:a2:b3:60: d0:35:2e:15:83:3e:0e:5d:0a:53:97:71:08:7a:e3:52:16:8f: 55:7a:f4:91:4e:6c:7e:e9:ce:1b:c3:90:2f:b6:15:20:29:b8: 88:a3:60:58:ff:ac:1b:7f:79:5f:0b:38:82:60:ae:75:4b:9f: f6:cc:c9:5e:d3:a8:4a:7a:b7:52:c1:4d:86:4c:b8:a6:cb:4f: 81:ac:dd:d4:52:6e:85:e8:d5:38:15:9f:28:7a:9f:61:93:1e: a4:09:77:40:83:9b:5f:36:21:3a:76:dd:f0:a7:67:f2:29:aa: 8c:89:b2:bc:fd:41:85:51:24:5f:11:7d:f8:13:13:26:2f:50: 1b:4f:6b:74:9a:4c:8f:65:c0:11:70:ec:1e:83:59:fa:22:75: 40:80:9f:ff:8b:bf:4e:2b:ce:ac:d6:2f:6e:d3:93:dd:78:68: 81:ea:c8:d2:8c:77:6b:a9:9f:5e:fe:93:5b:d3:87:e6:20:87: d8:cd:79:2e:54:16:77:60:c0:8f:f6:63:d2:5e:02:76:89:79: c6:8b:cb:0e:fe:9a:14:80:a5:12:9c:e5:3a:89:c1:8b:39:ae: cf:ed:e9:1a:fa:cc:a7:11:3c:6e:88:95:be:0e:46:88:16:0f: 6b:22:75:a4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OQX9c36fYmIKyFiBVMGGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlM2E3ODM1Mzc3YjllODQ5ZmU3YzMzZjlmY2E0NTcyZDkw MjY3M2YwHhcNMjYwMTAyMTAyMDI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ODdmYmY2YzhlMTZhODlmYTRjMzMzMWM5MGZmM2IxNDMyODcwMGE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArq+lo+QGhQQ/PQej7FTCQwp8PEoj VpeP6oX+1EVhkVpB/NRAU0cPEU9+DLRAuC93tXDL39Z1ZvcaEbGC3YcEJgiqzWJW 4h/t3TjFuwMj3jOTF7SSJNzzi6zwNVH/lPx3dnSkSZVf1dCZNh2G05kdmIdxAX9n jV1dlEd3sIQQ52OzyEDGjCULse9qiRUOUU0MBvUac368Balsc3DCF6qexMiiYCI/ qu1NT0uXM/tEZK4zLD8EglYK/3d2s6cFoDQgV1f901gYNaLopiTBBRBqxpOgcoPA ZeOaitqGqBqNo1NjcOeEskoz06ozJ8NGjD67MrfnwRPY0i46IG+8jW8OTQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFh/v2yOFqifpMMzHJD/OxQyhwCoMB8GA1UdIwQY MBaAFF46eDU3e56En+fDP5/KRXLZAmc/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGpwNE5UZDdub1NmNThNX244cEZjdGtDWno4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9jZGQ4MTUtOGJkMy00MTRmLWE5Yjgt MDU1YjFiMGU2MGY0LzEvV0gtX2JJNFdxSi1rd3pNY2tQODdGREtIQUtnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC9jZGQ4MTUtOGJkMy00MTRmLWE5YjgtMDU1YjFiMGU2MGY0 LzEvWGpwNE5UZDdub1NmNThNX244cEZjdGtDWno4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwn/MMA0G CSqGSIb3DQEBCwUAA4IBAQAF+g4RrJYG5ttKb5Umb8eis2DQNS4Vgz4OXQpTl3EI euNSFo9VevSRTmx+6c4bw5AvthUgKbiIo2BY/6wbf3lfCziCYK51S5/2zMle06hK erdSwU2GTLimy0+BrN3UUm6F6NU4FZ8oep9hkx6kCXdAg5tfNiE6dt3wp2fyKaqM ibK8/UGFUSRfEX34ExMmL1AbT2t0mkyPZcARcOweg1n6InVAgJ//i79OK86s1i9u 05PdeGiB6sjSjHdrqZ9e/pNb04fmIIfYzXkuVBZ3YMCP9mPSXgJ2iXnGi8sO/poU gKUSnOU6icGLOa7P7eka+synETxuiJW+DkaIFg9rInWk -----END CERTIFICATE-----Generated at Tue Jan 27 09:56:27 2026 by rpki-client