This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/9ff8a1-3647-4134-b15f-e5dd6382a1c7/1/w-HS7u9pOCeavi1t1p3yuKE0Dtk.roa File: w-HS7u9pOCeavi1t1p3yuKE0Dtk.roa (raw, json) Hash identifier: vpKhQFUnBTckNnsA2ROYZZBHVXGsMz3MaClaBLJjb4Y= Subject key identifier: C3:E1:D2:EE:EF:69:38:27:9A:BE:2D:6D:D6:9D:F2:B8:A1:34:0E:D9 Certificate issuer: /CN=46078b2dc086ce5955e62db922f354b82d13cd5b Certificate serial: 019B77C74AD245497BFD0E5F3CEECA5D5943 Authority key identifier: 46:07:8B:2D:C0:86:CE:59:55:E6:2D:B9:22:F3:54:B8:2D:13:CD:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RgeLLcCGzllV5i25IvNUuC0TzVs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/9ff8a1-3647-4134-b15f-e5dd6382a1c7/1/w-HS7u9pOCeavi1t1p3yuKE0Dtk.roa Signing time: Thu 01 Jan 2026 04:18:28 +0000 ROA not before: Thu 01 Jan 2026 04:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60524 IP address blocks: 185.153.84.0/22 maxlen: 22 185.153.84.0/24 maxlen: 24 185.153.85.0/24 maxlen: 24 185.153.86.0/24 maxlen: 24 185.153.87.0/24 maxlen: 24 2a0a:6c00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/9ff8a1-3647-4134-b15f-e5dd6382a1c7/1/RgeLLcCGzllV5i25IvNUuC0TzVs.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/9ff8a1-3647-4134-b15f-e5dd6382a1c7/1/RgeLLcCGzllV5i25IvNUuC0TzVs.mft rsync://rpki.ripe.net/repository/DEFAULT/RgeLLcCGzllV5i25IvNUuC0TzVs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:4a:d2:45:49:7b:fd:0e:5f:3c:ee:ca:5d:59:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46078b2dc086ce5955e62db922f354b82d13cd5b Validity Not Before: Jan 1 04:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c3e1d2eeef6938279abe2d6dd69df2b8a1340ed9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:53:43:99:a1:f9:35:40:37:ce:4b:02:13:f6: 1d:56:98:d4:73:2b:5c:37:c8:a5:a0:64:c2:0d:af: 7b:82:f4:e5:60:5f:c0:ca:90:4d:8d:2f:e1:5b:c2: 36:0c:92:41:e7:3e:dc:9e:db:75:9d:1d:f3:00:9d: f4:d4:95:9a:93:8d:3d:02:6f:6d:75:99:9a:18:ff: c5:10:71:a6:e8:be:9e:43:b0:3b:d6:f5:53:62:f3: 9c:73:a5:b0:f2:61:68:80:98:83:c6:56:2e:17:b7: 12:4d:4a:72:84:1a:f0:67:3e:f0:c1:00:c7:a8:4f: b0:d4:f9:7f:be:98:1c:60:80:8d:f4:f9:9a:44:af: a0:e7:59:d2:e8:d3:40:5d:23:66:37:ce:2d:71:c6: 3b:54:f3:11:ad:fb:30:a2:5e:6b:e6:cf:cf:e4:b0: 17:a2:8a:e6:56:55:0d:cc:5c:7a:eb:79:e7:a4:ec: c5:f8:af:44:22:e7:49:6b:34:af:e3:51:77:0a:e8: cd:a5:76:1c:c0:cd:b2:fe:d7:f5:fb:27:58:d7:51: 0c:c8:92:94:62:c4:93:94:37:77:98:43:af:fd:f3: b1:45:19:b4:41:33:a9:4f:e3:5e:f3:0e:5d:b6:04: e6:95:ef:e4:64:22:1d:0c:4e:ee:7b:38:08:3f:16: d4:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:E1:D2:EE:EF:69:38:27:9A:BE:2D:6D:D6:9D:F2:B8:A1:34:0E:D9 X509v3 Authority Key Identifier: keyid:46:07:8B:2D:C0:86:CE:59:55:E6:2D:B9:22:F3:54:B8:2D:13:CD:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RgeLLcCGzllV5i25IvNUuC0TzVs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9ff8a1-3647-4134-b15f-e5dd6382a1c7/1/w-HS7u9pOCeavi1t1p3yuKE0Dtk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9ff8a1-3647-4134-b15f-e5dd6382a1c7/1/RgeLLcCGzllV5i25IvNUuC0TzVs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.153.84.0/22 IPv6: 2a0a:6c00::/29 Signature Algorithm: sha256WithRSAEncryption ce:70:4f:74:31:a5:b1:9a:00:3f:4e:0c:f4:25:ff:d2:ff:74: 49:9a:22:db:b2:01:57:9d:81:2f:24:e4:97:58:a4:09:8a:32: 41:16:e4:a7:9d:6b:83:3f:ca:e3:99:fd:b6:0c:9c:c3:c5:d5: 9c:f3:26:f8:e5:65:a5:bb:d3:9f:d3:d2:27:fa:52:a8:0b:c9: d0:97:c2:e3:b4:78:94:ba:05:56:9a:d7:23:af:fa:b1:18:43: 9a:fb:64:3e:af:fc:c6:84:dd:e0:a1:a0:21:23:a8:bf:67:36: f5:1b:e4:e8:a7:0f:53:d4:fa:a0:09:be:13:1b:fd:12:6b:4e: c2:db:f0:47:66:bb:35:6a:c6:2c:b4:30:d5:35:e9:27:8f:dd: 73:64:5c:d3:b4:73:2a:a5:6b:1b:77:3e:5c:c3:95:de:3f:bd: c3:62:cf:78:65:cd:d9:a5:fd:ab:10:34:66:f0:1d:b6:12:3b: 9e:46:9a:4f:72:9d:58:96:f1:8c:f0:f0:60:6c:e2:71:f7:74: 05:8e:09:84:f4:13:79:c7:29:86:80:55:32:53:13:b6:3a:2c: 6f:47:5d:55:9c:bd:45:46:3e:aa:f0:fe:ed:57:4b:9e:fe:65: a6:d3:4f:f4:4a:70:21:70:4c:36:72:b9:1d:18:c3:48:e0:1c: c2:6e:0a:07 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt3x0rSRUl7/Q5fPO7KXVlDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2MDc4YjJkYzA4NmNlNTk1NWU2MmRiOTIyZjM1NGI4MmQx M2NkNWIwHhcNMjYwMTAxMDQxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjM2UxZDJlZWVmNjkzODI3OWFiZTJkNmRkNjlkZjJiOGExMzQwZWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFNDmaH5NUA3zksCE/YdVpjUcytc N8iloGTCDa97gvTlYF/AypBNjS/hW8I2DJJB5z7cntt1nR3zAJ301JWak409Am9t dZmaGP/FEHGm6L6eQ7A71vVTYvOcc6Ww8mFogJiDxlYuF7cSTUpyhBrwZz7wwQDH qE+w1Pl/vpgcYICN9PmaRK+g51nS6NNAXSNmN84tccY7VPMRrfswol5r5s/P5LAX oormVlUNzFx663nnpOzF+K9EIudJazSv41F3CujNpXYcwM2y/tf1+ydY11EMyJKU YsSTlDd3mEOv/fOxRRm0QTOpT+Ne8w5dtgTmle/kZCIdDE7uezgIPxbURwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFMPh0u7vaTgnmr4tbdad8rihNA7ZMB8GA1UdIwQY MBaAFEYHiy3Ahs5ZVeYtuSLzVLgtE81bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmdlTExjQ0d6bGxWNWkyNUl2TlV1QzBUelZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS85ZmY4YTEtMzY0Ny00MTM0LWIxNWYt ZTVkZDYzODJhMWM3LzEvdy1IUzd1OXBPQ2VhdmkxdDFwM3l1S0UwRHRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS85ZmY4YTEtMzY0Ny00MTM0LWIxNWYtZTVkZDYzODJhMWM3 LzEvUmdlTExjQ0d6bGxWNWkyNUl2TlV1QzBUelZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuZlUMA0E AgACMAcDBQMqCmwAMA0GCSqGSIb3DQEBCwUAA4IBAQDOcE90MaWxmgA/Tgz0Jf/S /3RJmiLbsgFXnYEvJOSXWKQJijJBFuSnnWuDP8rjmf22DJzDxdWc8yb45WWlu9Of 09In+lKoC8nQl8LjtHiUugVWmtcjr/qxGEOa+2Q+r/zGhN3goaAhI6i/Zzb1G+To pw9T1PqgCb4TG/0Sa07C2/BHZrs1asYstDDVNeknj91zZFzTtHMqpWsbdz5cw5Xe P73DYs94Zc3Zpf2rEDRm8B22EjueRppPcp1YlvGM8PBgbOJx93QFjgmE9BN5xymG gFUyUxO2OixvR11VnL1FRj6q8P7tV0ue/mWm00/0SnAhcEw2crkdGMNI4BzCbgoH -----END CERTIFICATE-----Generated at Mon Feb 9 22:31:35 2026 by rpki-client