This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/WHwPKWlS1MbhHwPa_EcSvzO973g.roa File: WHwPKWlS1MbhHwPa_EcSvzO973g.roa (raw, json) Hash identifier: ZJla+7f5axXV/6uT6lJ/b0sWEBJptZZvhKtPIna394I= Subject key identifier: 58:7C:0F:29:69:52:D4:C6:E1:1F:03:DA:FC:47:12:BF:33:BD:EF:78 Certificate issuer: /CN=98cd3ebd65ed3d9aae079a0e24d7132d9a71aab8 Certificate serial: 019B7CEE02980168402A00BFDB38223627DC Authority key identifier: 98:CD:3E:BD:65:ED:3D:9A:AE:07:9A:0E:24:D7:13:2D:9A:71:AA:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mM0-vWXtPZquB5oOJNcTLZpxqrg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/WHwPKWlS1MbhHwPa_EcSvzO973g.roa Signing time: Fri 02 Jan 2026 04:18:51 +0000 ROA not before: Fri 02 Jan 2026 04:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25220 IP address blocks: 46.182.248.0/21 maxlen: 24 62.102.192.0/19 maxlen: 24 82.145.192.0/20 maxlen: 24 85.197.64.0/19 maxlen: 24 85.197.96.0/21 maxlen: 24 85.197.104.0/21 maxlen: 24 185.56.228.0/22 maxlen: 24 193.106.16.0/22 maxlen: 24 193.254.212.0/23 maxlen: 24 195.135.224.0/22 maxlen: 24 2001:4b38::/32 maxlen: 48 2001:4b39::/32 maxlen: 48 2001:4b3a::/32 maxlen: 48 2001:4b3b::/32 maxlen: 48 2a00:9e00::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.mft rsync://rpki.ripe.net/repository/DEFAULT/mM0-vWXtPZquB5oOJNcTLZpxqrg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:02:98:01:68:40:2a:00:bf:db:38:22:36:27:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98cd3ebd65ed3d9aae079a0e24d7132d9a71aab8 Validity Not Before: Jan 2 04:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=587c0f296952d4c6e11f03dafc4712bf33bdef78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:08:4a:7a:b3:60:f0:42:8b:22:3c:1d:21:0b: 89:64:2e:04:93:ad:dd:fb:b1:c9:b3:56:06:3c:6a: 8d:56:00:c8:70:9a:ad:33:d6:d9:ac:48:ec:0c:2d: be:0d:da:60:da:cb:26:6a:4a:71:86:9d:44:00:bc: de:aa:c5:00:c0:4d:34:f5:2a:02:a8:fa:25:0e:54: 1f:79:81:c8:07:5e:4b:e1:40:3f:77:c4:e3:4f:01: ad:30:77:ef:3c:52:6d:a6:f8:99:8b:ee:a2:74:b5: af:af:43:9a:f0:1b:11:af:5c:eb:82:08:b7:76:32: 0b:98:1a:3d:f4:4c:a6:15:f7:0b:3a:9e:8c:cb:0c: f7:e5:05:dd:5b:ea:6d:20:3d:24:40:62:05:a0:d6: 97:20:99:0a:07:9a:92:0b:5c:5f:13:fc:b3:3c:0f: 31:92:db:bc:6b:e7:13:b0:6f:c7:69:26:a5:f8:c9: e3:4c:28:5d:09:fa:bf:21:09:c0:c7:44:7f:4c:1c: e5:08:95:aa:94:f0:32:48:70:e6:e0:b6:11:b1:28: dc:43:ce:a7:8d:97:91:a4:ea:00:46:81:cd:49:bb: 1b:1e:8b:4b:4c:0f:7a:48:4f:26:c8:cf:5f:9c:4a: 91:b1:dc:78:83:2e:24:ba:5a:85:b1:af:7b:56:5a: cf:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:7C:0F:29:69:52:D4:C6:E1:1F:03:DA:FC:47:12:BF:33:BD:EF:78 X509v3 Authority Key Identifier: keyid:98:CD:3E:BD:65:ED:3D:9A:AE:07:9A:0E:24:D7:13:2D:9A:71:AA:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mM0-vWXtPZquB5oOJNcTLZpxqrg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/WHwPKWlS1MbhHwPa_EcSvzO973g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.182.248.0/21 62.102.192.0/19 82.145.192.0/20 85.197.64.0-85.197.111.255 185.56.228.0/22 193.106.16.0/22 193.254.212.0/23 195.135.224.0/22 IPv6: 2001:4b38::/30 2a00:9e00::/32 Signature Algorithm: sha256WithRSAEncryption 61:91:7f:27:ac:65:3a:1f:5e:3d:ff:21:f5:07:68:a0:49:6d: a8:01:8f:cb:8f:08:ac:91:b7:3a:e1:53:0b:56:ba:b1:85:21: 4b:fe:3a:d6:4c:de:fb:6c:11:73:48:c1:bd:77:f6:63:1c:53: e9:5f:c7:00:33:57:a1:2b:bb:74:a7:9f:74:06:1b:80:1e:c4: 91:9a:b0:96:42:16:dc:9d:ae:41:e8:aa:3c:79:bc:5e:26:10: 02:31:b0:53:8e:f1:9a:8e:33:ca:20:4f:52:55:b8:34:7a:19: 1c:d6:e9:5c:fa:e6:2d:32:0b:d9:2e:3b:c3:c4:4b:fb:4d:a2: a8:85:15:33:57:b9:52:ce:a2:62:c4:95:96:dd:8c:9d:aa:16: b7:24:6c:44:12:66:ab:85:90:fc:e9:6d:14:0f:1b:e0:74:01: d9:df:f6:14:38:82:57:7b:10:e3:b6:ab:99:a3:96:b5:cb:ae: e9:ae:11:e8:7d:6f:42:57:a1:e8:e5:ab:05:04:ec:29:35:85: 4d:85:11:32:d8:ed:74:e8:d2:a4:67:6a:85:77:e5:53:9b:2e: 7c:d9:76:b2:66:4c:bc:81:66:a9:17:6f:b9:f6:71:48:23:60: 64:57:61:da:08:b6:a7:24:03:87:6d:63:c0:7a:1b:34:9d:55: 97:9d:ae:4d -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgISAZt87gKYAWhAKgC/2zgiNifcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4Y2QzZWJkNjVlZDNkOWFhZTA3OWEwZTI0ZDcxMzJkOWE3 MWFhYjgwHhcNMjYwMTAyMDQxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ODdjMGYyOTY5NTJkNGM2ZTExZjAzZGFmYzQ3MTJiZjMzYmRlZjc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4AhKerNg8EKLIjwdIQuJZC4Ek63d +7HJs1YGPGqNVgDIcJqtM9bZrEjsDC2+Ddpg2ssmakpxhp1EALzeqsUAwE009SoC qPolDlQfeYHIB15L4UA/d8TjTwGtMHfvPFJtpviZi+6idLWvr0Oa8BsRr1zrggi3 djILmBo99EymFfcLOp6Mywz35QXdW+ptID0kQGIFoNaXIJkKB5qSC1xfE/yzPA8x ktu8a+cTsG/HaSal+MnjTChdCfq/IQnAx0R/TBzlCJWqlPAySHDm4LYRsSjcQ86n jZeRpOoARoHNSbsbHotLTA96SE8myM9fnEqRsdx4gy4kulqFsa97VlrPWQIDAQAB o4ICUTCCAk0wHQYDVR0OBBYEFFh8DylpUtTG4R8D2vxHEr8zve94MB8GA1UdIwQY MBaAFJjNPr1l7T2argeaDiTXEy2acaq4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbU0wLXZXWHRQWnF1QjVvT0pOY1RMWnB4cXJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9jY2M2NDUtNTMyMy00YjIwLWI0NzUt ZjM3NzA1MzYxY2Y4LzEvV0h3UEtXbFMxTWJoSHdQYV9FY1N2ek85NzNnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS9jY2M2NDUtNTMyMy00YjIwLWI0NzUtZjM3NzA1MzYxY2Y4 LzEvbU0wLXZXWHRQWnF1QjVvT0pOY1RMWnB4cXJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGcGCCsGAQUFBwEHAQH/BFgwVjA+BAIAATA4AwQDLrb4AwQF PmbAAwQEUpHAMAwDBAZVxUADBARVxWADBAK5OOQDBALBahADBAHB/tQDBALDh+Aw FAQCAAIwDgMFAiABSzgDBQAqAJ4AMA0GCSqGSIb3DQEBCwUAA4IBAQBhkX8nrGU6 H149/yH1B2igSW2oAY/Ljwiskbc64VMLVrqxhSFL/jrWTN77bBFzSMG9d/ZjHFPp X8cAM1ehK7t0p590BhuAHsSRmrCWQhbcna5B6Ko8ebxeJhACMbBTjvGajjPKIE9S Vbg0ehkc1ulc+uYtMgvZLjvDxEv7TaKohRUzV7lSzqJixJWW3Yydqha3JGxEEmar hZD86W0UDxvgdAHZ3/YUOIJXexDjtquZo5a1y67prhHofW9CV6Ho5asFBOwpNYVN hREy2O106NKkZ2qFd+VTmy582XayZky8gWapF2+59nFII2BkV2HaCLanJAOHbWPA ehs0nVWXna5N -----END CERTIFICATE-----Generated at Mon Feb 9 21:27:01 2026 by rpki-client