This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a9a6ba-d748-40c7-8503-19ba84d84af0/1/whXPzPuEVZS_Ryn2sgcT7m9P8dA.roa File: whXPzPuEVZS_Ryn2sgcT7m9P8dA.roa (raw, json) Hash identifier: JcZ3tM12MerqC0+RrqC4HBYHgE8TDlz33TUN53BsW3I= Subject key identifier: C2:15:CF:CC:FB:84:55:94:BF:47:29:F6:B2:07:13:EE:6F:4F:F1:D0 Certificate issuer: /CN=1eab4e00c0d92cb501bbb223acf039e27091db4e Certificate serial: 019B7A5A9E046BF95AB7D4B547F882A951BD Authority key identifier: 1E:AB:4E:00:C0:D9:2C:B5:01:BB:B2:23:AC:F0:39:E2:70:91:DB:4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqtOAMDZLLUBu7IjrPA54nCR204.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a9a6ba-d748-40c7-8503-19ba84d84af0/1/whXPzPuEVZS_Ryn2sgcT7m9P8dA.roa Signing time: Thu 01 Jan 2026 16:18:37 +0000 ROA not before: Thu 01 Jan 2026 16:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 185.1.61.0/24 maxlen: 32 2001:7f8:9d::/48 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/a9a6ba-d748-40c7-8503-19ba84d84af0/1/HqtOAMDZLLUBu7IjrPA54nCR204.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/a9a6ba-d748-40c7-8503-19ba84d84af0/1/HqtOAMDZLLUBu7IjrPA54nCR204.mft rsync://rpki.ripe.net/repository/DEFAULT/HqtOAMDZLLUBu7IjrPA54nCR204.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:9e:04:6b:f9:5a:b7:d4:b5:47:f8:82:a9:51:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1eab4e00c0d92cb501bbb223acf039e27091db4e Validity Not Before: Jan 1 16:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c215cfccfb845594bf4729f6b20713ee6f4ff1d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:74:65:05:68:24:2f:20:02:0f:c9:07:e6:82: 37:13:28:7b:9b:ed:83:f2:ad:3e:4f:dd:47:b0:90: c1:b3:59:83:b5:2e:2a:28:7c:91:ca:46:47:c3:fa: 0f:41:6c:25:51:4f:49:0e:b6:68:83:f0:5e:52:ad: 19:93:e3:fa:0e:4e:c0:dd:86:8c:87:ab:35:a0:63: 18:55:a7:aa:eb:68:74:78:7e:e0:78:cc:7c:d0:cc: 4c:a5:51:d3:62:f9:de:b0:21:ed:71:98:ac:be:d7: 17:62:60:8c:0c:80:7f:91:02:98:62:2d:60:74:b4: d7:c5:cb:f1:20:c8:71:30:85:79:48:7a:63:ce:f6: d9:d4:b4:1b:ef:36:c4:a3:0b:25:dd:f6:8c:ec:bf: 94:02:e6:b0:b5:86:0b:52:21:d6:22:e0:58:93:4a: 5f:96:c9:d1:e6:8b:2f:2e:c6:fc:36:e8:d0:26:0e: 74:e3:64:e9:0c:b0:39:9d:e6:b2:e0:aa:09:85:98: b2:12:b4:ba:48:4c:41:67:69:7a:85:18:1d:e4:f9: 83:90:44:6e:86:da:4c:ee:68:9c:6e:a3:f0:6f:1f: bc:b7:5e:e7:1d:3f:26:ff:29:52:57:b3:b2:6c:5b: 4b:1e:0c:e9:2d:ef:c1:23:4a:11:1f:04:06:20:14: ad:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:15:CF:CC:FB:84:55:94:BF:47:29:F6:B2:07:13:EE:6F:4F:F1:D0 X509v3 Authority Key Identifier: keyid:1E:AB:4E:00:C0:D9:2C:B5:01:BB:B2:23:AC:F0:39:E2:70:91:DB:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqtOAMDZLLUBu7IjrPA54nCR204.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a9a6ba-d748-40c7-8503-19ba84d84af0/1/whXPzPuEVZS_Ryn2sgcT7m9P8dA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a9a6ba-d748-40c7-8503-19ba84d84af0/1/HqtOAMDZLLUBu7IjrPA54nCR204.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.1.61.0/24 IPv6: 2001:7f8:9d::/48 Signature Algorithm: sha256WithRSAEncryption 29:28:31:1c:4b:8d:5e:44:b9:08:9f:01:c5:13:a9:d3:4f:ba: e7:d8:6e:d0:74:8e:f9:82:b7:ee:2c:aa:45:3d:79:59:2b:36: 7f:bc:e9:d7:75:ab:12:47:e3:4f:eb:4f:b7:49:cc:f9:2f:58: e9:a4:35:ee:13:05:db:2a:f7:a3:62:ea:e1:88:87:16:36:40: 66:f9:5b:88:b1:13:7e:98:80:ce:14:7c:d0:af:75:d1:ab:93: 98:5d:b0:97:aa:f1:24:3f:cc:30:1c:cf:d1:5d:11:0a:b3:93: 42:8b:83:af:87:1d:f5:43:b3:e8:6c:a8:d4:7c:d9:ed:63:6b: 00:05:38:2e:11:fd:62:6c:cb:61:b5:0d:59:8e:4b:af:24:d5: 05:71:c0:c7:69:42:15:a7:c3:55:2f:69:61:6d:64:36:bb:d2: 9f:3c:8c:a7:16:20:75:f2:cf:6d:00:a6:3c:a3:b8:3c:64:7b: e8:3d:31:75:23:ad:ea:d0:5f:64:47:ad:f7:df:c5:03:92:de: 02:5c:e9:48:38:79:0c:25:1e:92:55:12:4e:4c:ac:85:94:30: 04:68:89:cb:46:20:f9:1a:2b:69:39:a5:3f:50:bd:79:28:37: cf:65:ff:27:da:d0:61:42:63:d8:06:80:0f:07:98:10:c9:79: 6d:88:2f:21 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt6Wp4Ea/lat9S1R/iCqVG9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlYWI0ZTAwYzBkOTJjYjUwMWJiYjIyM2FjZjAzOWUyNzA5 MWRiNGUwHhcNMjYwMTAxMTYxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMjE1Y2ZjY2ZiODQ1NTk0YmY0NzI5ZjZiMjA3MTNlZTZmNGZmMWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03RlBWgkLyACD8kH5oI3Eyh7m+2D 8q0+T91HsJDBs1mDtS4qKHyRykZHw/oPQWwlUU9JDrZog/BeUq0Zk+P6Dk7A3YaM h6s1oGMYVaeq62h0eH7geMx80MxMpVHTYvnesCHtcZisvtcXYmCMDIB/kQKYYi1g dLTXxcvxIMhxMIV5SHpjzvbZ1LQb7zbEowsl3faM7L+UAuawtYYLUiHWIuBYk0pf lsnR5osvLsb8NujQJg5042TpDLA5neay4KoJhZiyErS6SExBZ2l6hRgd5PmDkERu htpM7micbqPwbx+8t17nHT8m/ylSV7OybFtLHgzpLe/BI0oRHwQGIBStMQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFMIVz8z7hFWUv0cp9rIHE+5vT/HQMB8GA1UdIwQY MBaAFB6rTgDA2Sy1AbuyI6zwOeJwkdtOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHF0T0FNRFpMTFVCdTdJanJQQTU0bkNSMjA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9hOWE2YmEtZDc0OC00MGM3LTg1MDMt MTliYTg0ZDg0YWYwLzEvd2hYUHpQdUVWWlNfUnluMnNnY1Q3bTlQOGRBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9hOWE2YmEtZDc0OC00MGM3LTg1MDMtMTliYTg0ZDg0YWYw LzEvSHF0T0FNRFpMTFVCdTdJanJQQTU0bkNSMjA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuQE9MA8E AgACMAkDBwAgAQf4AJ0wDQYJKoZIhvcNAQELBQADggEBACkoMRxLjV5EuQifAcUT qdNPuufYbtB0jvmCt+4sqkU9eVkrNn+86dd1qxJH40/rT7dJzPkvWOmkNe4TBdsq 96Ni6uGIhxY2QGb5W4ixE36YgM4UfNCvddGrk5hdsJeq8SQ/zDAcz9FdEQqzk0KL g6+HHfVDs+hsqNR82e1jawAFOC4R/WJsy2G1DVmOS68k1QVxwMdpQhWnw1UvaWFt ZDa70p88jKcWIHXyz20ApjyjuDxke+g9MXUjrerQX2RHrfffxQOS3gJc6Ug4eQwl HpJVEk5MrIWUMARoictGIPkaK2k5pT9QvXkoN89l/yfa0GFCY9gGgA8HmBDJeW2I LyE= -----END CERTIFICATE-----Generated at Fri Jan 9 17:05:26 2026 by rpki-client