This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/WhbbTrjO4d6D8laBPplxh84WYVc.roa File: WhbbTrjO4d6D8laBPplxh84WYVc.roa (raw, json) Hash identifier: PR+nKFHG16xdl1/3mckLmj9yFgXPMBwN+ado5X/wpjk= Subject key identifier: 5A:16:DB:4E:B8:CE:E1:DE:83:F2:56:81:3E:99:71:87:CE:16:61:57 Certificate issuer: /CN=fdad61d8e8c1abda8596930e21f18211a517681f Certificate serial: 019B77C6E460294479529101C2ACB5D960E9 Authority key identifier: FD:AD:61:D8:E8:C1:AB:DA:85:96:93:0E:21:F1:82:11:A5:17:68:1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_a1h2OjBq9qFlpMOIfGCEaUXaB8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/WhbbTrjO4d6D8laBPplxh84WYVc.roa Signing time: Thu 01 Jan 2026 04:18:01 +0000 ROA not before: Thu 01 Jan 2026 04:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49764 IP address blocks: 185.218.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.mft rsync://rpki.ripe.net/repository/DEFAULT/_a1h2OjBq9qFlpMOIfGCEaUXaB8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 01:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:e4:60:29:44:79:52:91:01:c2:ac:b5:d9:60:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdad61d8e8c1abda8596930e21f18211a517681f Validity Not Before: Jan 1 04:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5a16db4eb8cee1de83f256813e997187ce166157 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:01:33:bd:f9:89:9a:f1:27:e2:65:c0:33:94: 8f:8c:29:fa:d9:e1:6f:34:50:56:ac:e7:5d:e4:16: 21:2a:ec:94:1d:b1:7f:21:2b:d6:04:be:41:c7:fc: 4f:e4:4e:b3:13:a3:af:fe:de:64:ea:1f:e3:60:a2: 6d:c0:bf:92:07:e7:5f:0c:94:73:51:0e:4a:8a:d0: 2b:1a:b6:90:a8:a7:2c:f8:b6:6b:1e:11:f7:9a:63: e0:79:cf:68:4b:58:c1:d5:60:20:53:bf:74:96:12: bc:6f:12:f9:92:b2:ac:ed:ab:cd:c4:6b:e9:79:e3: db:3c:5b:de:f4:64:df:b0:97:62:27:66:20:ef:74: d0:e5:3d:55:01:7e:8b:61:25:14:9a:8a:a7:1b:aa: 58:86:0d:2c:f6:26:6b:92:52:b0:3d:af:c3:f3:79: de:ab:9e:4c:cc:5f:94:c4:15:02:8d:d6:8e:45:1a: 09:95:a9:2e:62:d8:c1:25:f6:ec:f3:57:98:15:6b: b2:eb:9d:dd:ef:1b:09:63:0c:cf:c0:14:b6:7c:75: 75:1c:a0:06:9b:b9:bd:66:e7:79:95:f3:3a:24:72: 9a:34:4d:07:49:62:1e:f6:49:b3:1a:ca:cb:d2:e2: 10:5c:67:86:ea:fc:bc:0d:45:71:2e:fe:3f:77:76: 2c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:16:DB:4E:B8:CE:E1:DE:83:F2:56:81:3E:99:71:87:CE:16:61:57 X509v3 Authority Key Identifier: keyid:FD:AD:61:D8:E8:C1:AB:DA:85:96:93:0E:21:F1:82:11:A5:17:68:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_a1h2OjBq9qFlpMOIfGCEaUXaB8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/WhbbTrjO4d6D8laBPplxh84WYVc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.218.71.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:0b:4e:4a:9e:58:7e:55:24:5c:ca:bd:6f:99:e8:3c:98:8e: 37:39:11:e6:0d:f2:e1:bd:9a:64:d5:d2:28:64:96:05:21:c6: 8f:00:7c:4d:88:2d:0f:a1:e0:e9:52:d4:d7:66:14:07:2a:3e: 33:41:e1:7d:87:bd:41:21:d6:62:e8:77:8d:42:0f:29:db:ff: 5d:16:52:ab:6b:1d:53:f7:5d:8d:20:ed:2f:b2:db:bf:89:52: 3b:71:ec:3a:3f:75:46:60:9e:1a:ca:a3:e7:05:24:b9:15:b2: 1d:6c:2d:4c:a4:0a:bb:cc:22:e9:97:da:5c:f3:40:40:e6:d2: 79:11:4f:be:48:49:14:6e:be:58:87:33:a7:f3:54:f9:6c:ce: b8:22:15:9f:0c:93:7e:42:f9:d9:af:21:16:6d:1b:bd:11:6e: a7:5c:57:16:ea:84:f5:95:b9:5e:d6:ca:0e:a2:d6:14:eb:e7: 8a:af:55:1b:79:f7:8c:55:97:7d:55:0f:49:0a:2c:95:ef:ca: 15:80:a7:4b:38:61:ea:0c:9b:6b:23:19:9f:9f:11:1d:6f:59: f3:f0:e7:49:28:f9:33:89:3d:7e:a7:d7:35:b0:47:06:62:ca: 9b:b7:84:49:18:72:f5:aa:e2:b9:e3:06:d9:83:4d:02:cd:1e: 90:dd:1e:af -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xuRgKUR5UpEBwqy12WDpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkYWQ2MWQ4ZThjMWFiZGE4NTk2OTMwZTIxZjE4MjExYTUx NzY4MWYwHhcNMjYwMTAxMDQxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YTE2ZGI0ZWI4Y2VlMWRlODNmMjU2ODEzZTk5NzE4N2NlMTY2MTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAEzvfmJmvEn4mXAM5SPjCn62eFv NFBWrOdd5BYhKuyUHbF/ISvWBL5Bx/xP5E6zE6Ov/t5k6h/jYKJtwL+SB+dfDJRz UQ5KitArGraQqKcs+LZrHhH3mmPgec9oS1jB1WAgU790lhK8bxL5krKs7avNxGvp eePbPFve9GTfsJdiJ2Yg73TQ5T1VAX6LYSUUmoqnG6pYhg0s9iZrklKwPa/D83ne q55MzF+UxBUCjdaORRoJlakuYtjBJfbs81eYFWuy653d7xsJYwzPwBS2fHV1HKAG m7m9Zud5lfM6JHKaNE0HSWIe9kmzGsrL0uIQXGeG6vy8DUVxLv4/d3Ys+wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFoW2064zuHeg/JWgT6ZcYfOFmFXMB8GA1UdIwQY MBaAFP2tYdjowavahZaTDiHxghGlF2gfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2ExaDJPakJxOXFGbHBNT0lmR0NFYVVYYUI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9hNDZjODYtNGIwOC00ODJiLTkyY2Et ODRlZTIyYTNlZTViLzEvV2hiYlRyak80ZDZEOGxhQlBwbHhoODRXWVZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9hNDZjODYtNGIwOC00ODJiLTkyY2EtODRlZTIyYTNlZTVi LzEvX2ExaDJPakJxOXFGbHBNT0lmR0NFYVVYYUI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudpHMA0G CSqGSIb3DQEBCwUAA4IBAQBMC05Knlh+VSRcyr1vmeg8mI43ORHmDfLhvZpk1dIo ZJYFIcaPAHxNiC0PoeDpUtTXZhQHKj4zQeF9h71BIdZi6HeNQg8p2/9dFlKrax1T 912NIO0vstu/iVI7cew6P3VGYJ4ayqPnBSS5FbIdbC1MpAq7zCLpl9pc80BA5tJ5 EU++SEkUbr5YhzOn81T5bM64IhWfDJN+QvnZryEWbRu9EW6nXFcW6oT1lble1soO otYU6+eKr1UbefeMVZd9VQ9JCiyV78oVgKdLOGHqDJtrIxmfnxEdb1nz8OdJKPkz iT1+p9c1sEcGYsqbt4RJGHL1quK54wbZg00CzR6Q3R6v -----END CERTIFICATE-----Generated at Mon Feb 2 09:39:31 2026 by rpki-client