This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/whyP5FxoblHoIHhMTAeqWb1jp8w.roa File: whyP5FxoblHoIHhMTAeqWb1jp8w.roa (raw, json) Hash identifier: a7SodNhSARcbHydA3wymHLN4IRqMOWIhBwT2PU/EoPc= Subject key identifier: C2:1C:8F:E4:5C:68:6E:51:E8:20:78:4C:4C:07:AA:59:BD:63:A7:CC Certificate issuer: /CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f Certificate serial: 019B7F1520D452025AE1D6766381C6939DE1 Authority key identifier: 32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/whyP5FxoblHoIHhMTAeqWb1jp8w.roa Signing time: Fri 02 Jan 2026 14:20:49 +0000 ROA not before: Fri 02 Jan 2026 14:20:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 23470 IP address blocks: 185.73.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.mft rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 00:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:20:d4:52:02:5a:e1:d6:76:63:81:c6:93:9d:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f Validity Not Before: Jan 2 14:20:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c21c8fe45c686e51e820784c4c07aa59bd63a7cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d9:8c:d2:d4:86:3e:23:37:1d:fb:fe:a5:4f: e6:ac:c8:d9:fa:7c:0c:7b:9a:b0:38:d1:67:f5:dd: 50:ef:0a:9a:97:39:f2:3f:ac:30:ee:c9:b8:f0:7c: 06:3a:45:c0:ac:dc:7f:75:36:68:53:9a:f8:07:fc: ff:fa:5f:6a:ae:95:c6:e4:7b:8e:81:a9:ff:68:57: 19:f4:74:07:85:ab:21:21:d4:48:b3:d3:44:22:bc: 88:28:08:62:a5:87:34:8c:6c:81:40:1e:3e:71:5a: 20:f3:fb:27:95:69:98:7e:d8:09:84:45:98:a8:29: 06:81:ee:dc:f6:f3:7a:5a:d8:cd:66:29:6c:6a:74: 5b:c9:93:16:f2:ae:c5:e2:aa:2c:06:f2:98:8d:f1: 7b:05:b2:0d:e9:85:ae:82:90:d1:00:c1:25:5c:7b: 45:b0:fd:8a:85:e2:02:94:ee:9e:69:81:af:be:f7: f7:47:5e:bf:ff:6e:bb:3a:38:75:b9:30:62:c8:31: f8:25:a6:5b:2d:56:a8:1d:60:ab:3f:0b:c8:1d:d6: 62:6a:fe:01:b8:ec:7a:8f:f7:1d:9e:d5:b7:86:5b: d0:ce:b0:bf:c7:ce:99:5d:52:0c:95:d6:ee:10:fd: 3c:09:29:52:a4:ed:b6:5b:b6:86:0b:57:2a:81:f4: 1a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:1C:8F:E4:5C:68:6E:51:E8:20:78:4C:4C:07:AA:59:BD:63:A7:CC X509v3 Authority Key Identifier: keyid:32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/whyP5FxoblHoIHhMTAeqWb1jp8w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.73.243.0/24 Signature Algorithm: sha256WithRSAEncryption b6:73:b5:e4:2a:34:77:91:d2:dd:98:d8:62:7d:67:06:ff:b9: 6e:f7:96:d0:25:0a:43:40:8b:97:aa:a5:33:94:4e:b1:89:94: 33:38:4c:a7:fc:88:69:b1:67:f2:59:f5:cc:95:f4:e8:37:66: d0:4d:c9:5d:7a:fc:03:92:78:67:2b:0b:47:26:55:77:88:e9: f6:3b:69:cf:1b:08:c2:07:c6:dc:7e:69:4e:54:41:90:d1:cb: 38:37:0a:36:3b:f0:3e:c0:1a:de:8c:41:e2:d8:cb:20:9d:de: c0:d6:0c:27:1e:c2:e6:e3:01:fa:1c:15:59:4e:63:54:52:dc: bc:68:c6:b1:b2:9d:02:df:00:f1:57:68:06:f8:e9:7a:91:fa: fc:78:d4:c9:cd:06:bd:bb:e0:1d:3a:9c:b6:16:8c:78:ad:38: 02:37:34:65:8c:1f:24:f5:ca:f2:84:68:5f:16:73:e3:51:2b: b8:15:9e:2a:40:ad:89:a2:f7:a5:ed:b5:e4:a5:93:8c:52:3c: c0:46:cd:0b:fb:25:f2:f1:1d:8f:84:b1:ab:62:dd:fb:82:eb: 5a:fe:8c:0f:bc:02:c6:53:a7:bc:7d:8e:e1:c5:f3:71:ab:b0: 3a:14:97:fd:9f:b3:1d:41:75:b9:93:08:37:31:54:59:c8:cd: bf:c2:8e:bb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FSDUUgJa4dZ2Y4HGk53hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNDc0YWM3Y2E4NWUwOWMyZDQ4YjMzZTdiZjY2ZjhlZDc2 NGRlMGYwHhcNMjYwMTAyMTQyMDQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMjFjOGZlNDVjNjg2ZTUxZTgyMDc4NGM0YzA3YWE1OWJkNjNhN2NjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9mM0tSGPiM3Hfv+pU/mrMjZ+nwM e5qwONFn9d1Q7wqalznyP6ww7sm48HwGOkXArNx/dTZoU5r4B/z/+l9qrpXG5HuO gan/aFcZ9HQHhashIdRIs9NEIryIKAhipYc0jGyBQB4+cVog8/snlWmYftgJhEWY qCkGge7c9vN6WtjNZilsanRbyZMW8q7F4qosBvKYjfF7BbIN6YWugpDRAMElXHtF sP2KheIClO6eaYGvvvf3R16//267Ojh1uTBiyDH4JaZbLVaoHWCrPwvIHdZiav4B uOx6j/cdntW3hlvQzrC/x86ZXVIMldbuEP08CSlSpO22W7aGC1cqgfQaGQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMIcj+RcaG5R6CB4TEwHqlm9Y6fMMB8GA1UdIwQY MBaAFDJHSsfKheCcLUizPnv2b47XZN4PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWtkS3g4cUY0Snd0U0xNLWVfWnZqdGRrM2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8xZmQwYTYtNDUxNy00YTBiLWIzYzkt MTJlYzIyYzljNWEyLzEvd2h5UDVGeG9ibEhvSUhoTVRBZXFXYjFqcDh3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC8xZmQwYTYtNDUxNy00YTBiLWIzYzktMTJlYzIyYzljNWEy LzEvTWtkS3g4cUY0Snd0U0xNLWVfWnZqdGRrM2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuUnzMA0G CSqGSIb3DQEBCwUAA4IBAQC2c7XkKjR3kdLdmNhifWcG/7lu95bQJQpDQIuXqqUz lE6xiZQzOEyn/IhpsWfyWfXMlfToN2bQTcldevwDknhnKwtHJlV3iOn2O2nPGwjC B8bcfmlOVEGQ0cs4Nwo2O/A+wBrejEHi2Msgnd7A1gwnHsLm4wH6HBVZTmNUUty8 aMaxsp0C3wDxV2gG+Ol6kfr8eNTJzQa9u+AdOpy2Fox4rTgCNzRljB8k9cryhGhf FnPjUSu4FZ4qQK2Jovel7bXkpZOMUjzARs0L+yXy8R2PhLGrYt37guta/owPvALG U6e8fY7hxfNxq7A6FJf9n7MdQXW5kwg3MVRZyM2/wo67 -----END CERTIFICATE-----Generated at Thu Jan 8 09:23:16 2026 by rpki-client