This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/WHq-HnXpka6rpneJHgIs142O010.roa File: WHq-HnXpka6rpneJHgIs142O010.roa (raw, json) Hash identifier: vIU6EqtRsEPuNd3qk5b/5wKThF8xlpJsgvmp83AjeXY= Subject key identifier: 58:7A:BE:1E:75:E9:91:AE:AB:A6:77:89:1E:02:2C:D7:8D:8E:D3:5D Certificate issuer: /CN=07090fba663b072bb54cc7d49e88a0380374cb6e Certificate serial: 019B7DC876C16DC56AB102FDD8F59B9FF6FC Authority key identifier: 07:09:0F:BA:66:3B:07:2B:B5:4C:C7:D4:9E:88:A0:38:03:74:CB:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BwkPumY7Byu1TMfUnoigOAN0y24.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/WHq-HnXpka6rpneJHgIs142O010.roa Signing time: Fri 02 Jan 2026 08:17:28 +0000 ROA not before: Fri 02 Jan 2026 08:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197161 IP address blocks: 94.154.14.0/24 maxlen: 24 185.65.80.0/22 maxlen: 24 195.42.148.0/23 maxlen: 23 195.42.148.0/24 maxlen: 24 195.42.149.0/24 maxlen: 24 2a03:1a60::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.mft rsync://rpki.ripe.net/repository/DEFAULT/BwkPumY7Byu1TMfUnoigOAN0y24.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c8:76:c1:6d:c5:6a:b1:02:fd:d8:f5:9b:9f:f6:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07090fba663b072bb54cc7d49e88a0380374cb6e Validity Not Before: Jan 2 08:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=587abe1e75e991aeaba677891e022cd78d8ed35d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:3a:b9:94:ec:ac:f9:cb:36:3c:03:66:12:1c: cd:54:67:ba:81:59:bb:c3:db:8c:ff:d1:09:47:a8: b5:38:e8:e7:fc:cf:30:f3:fc:87:ed:cc:cb:71:5a: f9:c2:81:ea:57:76:1b:92:2a:8d:ad:ab:d0:2f:70: 1c:a1:f1:46:c0:8e:04:5f:a7:fd:a9:cc:cf:e5:8a: 6d:d2:5f:f4:5f:6c:35:a7:6c:f9:ac:a6:a6:72:a1: 14:8c:fa:52:16:69:84:26:db:d9:c5:d4:ac:7b:42: 42:39:ba:9d:89:a4:52:56:b1:32:56:1e:a9:aa:f6: d2:0a:39:82:1e:4e:be:f0:02:7f:7b:f2:b6:6c:c3: 84:08:54:86:23:3d:00:59:03:ac:da:74:76:44:97: b0:fb:91:2a:73:c1:d6:3f:00:d2:da:b0:25:fd:b0: 39:ad:9f:3e:53:56:c5:ec:55:b3:f4:80:b5:44:e6: 11:58:9b:f0:3f:22:30:b6:02:c6:df:45:34:62:9b: 6e:df:61:b9:c5:50:24:c5:95:35:8f:28:3c:38:81: b1:8d:52:4e:36:ae:1d:ff:5b:69:eb:6b:d6:c8:dc: 9f:7b:e8:11:ae:d0:d9:f6:fc:db:c3:68:9c:fd:08: 81:a5:ab:44:18:4e:7b:76:2a:31:63:af:ae:d0:eb: c2:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:7A:BE:1E:75:E9:91:AE:AB:A6:77:89:1E:02:2C:D7:8D:8E:D3:5D X509v3 Authority Key Identifier: keyid:07:09:0F:BA:66:3B:07:2B:B5:4C:C7:D4:9E:88:A0:38:03:74:CB:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BwkPumY7Byu1TMfUnoigOAN0y24.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/WHq-HnXpka6rpneJHgIs142O010.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.154.14.0/24 185.65.80.0/22 195.42.148.0/23 IPv6: 2a03:1a60::/32 Signature Algorithm: sha256WithRSAEncryption 3d:5e:40:b8:ed:77:2c:38:75:65:fd:d0:07:7c:20:28:37:67: 66:f8:f1:c1:aa:81:59:b4:da:59:d3:d2:29:9e:fb:8e:d2:d9: 1e:a5:fb:dc:45:7f:cb:7a:4d:24:6a:a0:cf:cc:4f:38:fe:4c: e8:70:56:3c:8c:a8:85:11:1e:31:b7:7f:d3:43:f8:d1:7b:2e: 27:b2:17:a5:3b:6e:a7:18:9e:c0:6c:ea:4b:a7:9c:a1:5a:94: 08:2a:4e:a2:a3:29:17:7c:18:8d:37:bd:cd:d5:6b:68:37:a2: 38:c8:da:d7:45:a1:bc:3b:98:6b:4c:de:31:8d:68:66:ef:4f: 29:08:91:a1:71:40:24:ab:8b:59:fd:ee:f2:52:b6:64:73:6f: 56:c1:a1:da:3c:41:a4:67:e2:04:6b:f7:d4:78:da:fa:f7:bf: ad:82:e2:dc:d2:02:b2:2f:cb:75:ec:21:c4:2d:57:3d:43:0b: bc:8a:0c:14:8c:5a:31:db:1c:3f:5a:4f:ec:9e:58:f1:db:6f: cd:2e:4c:9e:31:0d:66:af:96:0d:51:e3:87:b3:af:e4:fd:3c: dc:61:07:26:89:48:16:ee:95:4a:b7:68:51:b9:c4:97:61:85: 0b:a4:38:59:3c:b9:cb:90:1b:2f:23:39:27:8c:c0:ed:2b:af: 31:cb:cf:1b -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt9yHbBbcVqsQL92PWbn/b8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3MDkwZmJhNjYzYjA3MmJiNTRjYzdkNDllODhhMDM4MDM3 NGNiNmUwHhcNMjYwMTAyMDgxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ODdhYmUxZTc1ZTk5MWFlYWJhNjc3ODkxZTAyMmNkNzhkOGVkMzVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDq5lOys+cs2PANmEhzNVGe6gVm7 w9uM/9EJR6i1OOjn/M8w8/yH7czLcVr5woHqV3YbkiqNravQL3AcofFGwI4EX6f9 qczP5Ypt0l/0X2w1p2z5rKamcqEUjPpSFmmEJtvZxdSse0JCObqdiaRSVrEyVh6p qvbSCjmCHk6+8AJ/e/K2bMOECFSGIz0AWQOs2nR2RJew+5Eqc8HWPwDS2rAl/bA5 rZ8+U1bF7FWz9IC1ROYRWJvwPyIwtgLG30U0Yptu32G5xVAkxZU1jyg8OIGxjVJO Nq4d/1tp62vWyNyfe+gRrtDZ9vzbw2ic/QiBpatEGE57dioxY6+u0OvCZwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFFh6vh516ZGuq6Z3iR4CLNeNjtNdMB8GA1UdIwQY MBaAFAcJD7pmOwcrtUzH1J6IoDgDdMtuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQndrUHVtWTdCeXUxVE1mVW5vaWdPQU4weTI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hMDczNDItMTc0Mi00MWExLThiYzct MDFhMjhhNzZjY2Y0LzEvV0hxLUhuWHBrYTZycG5lSkhnSXMxNDJPMDEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9hMDczNDItMTc0Mi00MWExLThiYzctMDFhMjhhNzZjY2Y0 LzEvQndrUHVtWTdCeXUxVE1mVW5vaWdPQU4weTI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQAXpoOAwQC uUFQAwQBwyqUMA0EAgACMAcDBQAqAxpgMA0GCSqGSIb3DQEBCwUAA4IBAQA9XkC4 7XcsOHVl/dAHfCAoN2dm+PHBqoFZtNpZ09IpnvuO0tkepfvcRX/Lek0kaqDPzE84 /kzocFY8jKiFER4xt3/TQ/jRey4nshelO26nGJ7AbOpLp5yhWpQIKk6ioykXfBiN N73N1WtoN6I4yNrXRaG8O5hrTN4xjWhm708pCJGhcUAkq4tZ/e7yUrZkc29WwaHa PEGkZ+IEa/fUeNr697+tguLc0gKyL8t17CHELVc9Qwu8igwUjFox2xw/Wk/snljx 22/NLkyeMQ1mr5YNUeOHs6/k/TzcYQcmiUgW7pVKt2hRucSXYYULpDhZPLnLkBsv IzknjMDtK68xy88b -----END CERTIFICATE-----Generated at Mon Feb 9 23:45:49 2026 by rpki-client