This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/WhXtoavVfH7JG2T7apw-QG5zid0.roa File: WhXtoavVfH7JG2T7apw-QG5zid0.roa (raw, json) Hash identifier: U4pIdKJKn4J4SIlT+YgTWJOxDgxDvJtMszi6mvhVfHY= Subject key identifier: 5A:15:ED:A1:AB:D5:7C:7E:C9:1B:64:FB:6A:9C:3E:40:6E:73:89:DD Certificate issuer: /CN=2874e46bf636ea63e5d12362f551b80b27714780 Certificate serial: 019B7FF2442752735CEA68A15A697A433A19 Authority key identifier: 28:74:E4:6B:F6:36:EA:63:E5:D1:23:62:F5:51:B8:0B:27:71:47:80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KHTka_Y26mPl0SNi9VG4CydxR4A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/WhXtoavVfH7JG2T7apw-QG5zid0.roa Signing time: Fri 02 Jan 2026 18:22:22 +0000 ROA not before: Fri 02 Jan 2026 18:22:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60109 IP address blocks: 37.16.100.0/22 maxlen: 22 37.16.108.0/24 maxlen: 24 37.16.109.0/24 maxlen: 24 185.57.180.0/22 maxlen: 22 2a00:4cc4::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/KHTka_Y26mPl0SNi9VG4CydxR4A.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/KHTka_Y26mPl0SNi9VG4CydxR4A.mft rsync://rpki.ripe.net/repository/DEFAULT/KHTka_Y26mPl0SNi9VG4CydxR4A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:44:27:52:73:5c:ea:68:a1:5a:69:7a:43:3a:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2874e46bf636ea63e5d12362f551b80b27714780 Validity Not Before: Jan 2 18:22:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5a15eda1abd57c7ec91b64fb6a9c3e406e7389dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:76:7b:29:c3:59:22:bc:ab:e8:73:39:30:a0: 7c:d3:4b:be:26:11:9d:f3:0d:33:7d:18:8c:99:48: 45:6b:7a:31:75:3f:b0:54:06:90:eb:e2:18:d6:4c: cc:cb:02:23:61:26:7d:a5:5a:6f:9a:8b:6f:73:d8: 37:6f:07:39:5d:de:45:1a:75:2f:1a:de:3e:ce:64: 8e:b6:cc:38:c5:fb:1c:d0:55:f5:d0:4d:f9:db:82: f3:23:eb:4c:54:08:cf:30:11:f9:3d:36:de:61:7b: a5:89:69:3d:be:57:ee:64:a6:fa:3f:ed:93:15:5e: d5:23:15:62:9d:82:51:cd:17:89:75:41:fa:00:c0: 13:4d:da:a5:dc:97:98:a1:f1:86:6c:dd:12:77:d2: cb:6f:c7:25:d2:66:c2:02:33:19:cb:22:21:4d:a2: 31:51:87:1f:92:f9:cb:f9:20:6f:c4:5d:7b:27:1f: 24:5e:23:47:bc:76:b3:15:14:44:7f:fe:0f:6d:dd: 23:91:fc:f7:2d:c5:8b:f7:e2:77:38:80:be:f2:38: d7:4c:1c:98:7c:42:86:b2:c5:0f:ed:9f:9e:d5:e9: 97:f9:83:7f:17:62:b9:e2:3e:67:bd:ac:df:d2:6e: 47:72:0a:6d:c6:16:9d:b0:bf:5a:c1:e8:e7:6b:fe: 84:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:15:ED:A1:AB:D5:7C:7E:C9:1B:64:FB:6A:9C:3E:40:6E:73:89:DD X509v3 Authority Key Identifier: keyid:28:74:E4:6B:F6:36:EA:63:E5:D1:23:62:F5:51:B8:0B:27:71:47:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KHTka_Y26mPl0SNi9VG4CydxR4A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/WhXtoavVfH7JG2T7apw-QG5zid0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/KHTka_Y26mPl0SNi9VG4CydxR4A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.16.100.0/22 37.16.108.0/23 185.57.180.0/22 IPv6: 2a00:4cc4::/32 Signature Algorithm: sha256WithRSAEncryption 60:ce:a5:94:a3:3e:8c:ca:b0:63:ab:64:31:ce:ed:e1:84:88: 5d:77:5c:3b:0d:a7:31:46:e3:c3:41:87:0a:3c:76:87:6e:a9: 89:29:94:7b:46:c3:fe:84:9a:3e:ea:8b:54:81:3e:d6:b0:c9: 12:6a:f4:65:60:04:07:f7:f7:26:cc:86:d1:00:1f:6c:25:c8: da:3f:fd:b5:23:18:94:27:4d:21:1c:2c:33:e5:74:32:f6:3a: b2:27:a4:2f:f2:23:97:27:89:bc:b0:04:8f:a4:42:7e:e6:c5: e8:fb:4d:80:18:af:81:80:95:55:46:0b:81:b5:13:f3:ca:bb: ee:00:80:41:0e:35:58:70:45:48:dd:42:d6:90:56:87:13:11: 7b:f4:b0:65:36:b4:97:dc:83:e0:ab:24:e6:16:05:64:6b:7c: de:55:4f:ca:b3:24:ef:c1:df:d7:d3:7c:23:dc:b7:3b:a6:be: 58:fa:28:9e:1b:61:23:a2:ce:d5:57:71:32:64:48:11:a6:a7: 67:6c:5e:e6:29:1a:a2:80:54:5b:a6:00:97:6d:50:c4:27:5d: eb:fb:3e:78:76:7d:99:3c:81:2a:25:b5:59:48:2e:c8:84:09: d1:1a:c4:15:b5:73:cd:1c:59:50:ba:ba:fa:22:7b:98:4b:61: 35:35:db:4a -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt/8kQnUnNc6mihWml6QzoZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4NzRlNDZiZjYzNmVhNjNlNWQxMjM2MmY1NTFiODBiMjc3 MTQ3ODAwHhcNMjYwMTAyMTgyMjIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YTE1ZWRhMWFiZDU3YzdlYzkxYjY0ZmI2YTljM2U0MDZlNzM4OWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHZ7KcNZIryr6HM5MKB800u+JhGd 8w0zfRiMmUhFa3oxdT+wVAaQ6+IY1kzMywIjYSZ9pVpvmotvc9g3bwc5Xd5FGnUv Gt4+zmSOtsw4xfsc0FX10E3524LzI+tMVAjPMBH5PTbeYXuliWk9vlfuZKb6P+2T FV7VIxVinYJRzReJdUH6AMATTdql3JeYofGGbN0Sd9LLb8cl0mbCAjMZyyIhTaIx UYcfkvnL+SBvxF17Jx8kXiNHvHazFRREf/4Pbd0jkfz3LcWL9+J3OIC+8jjXTByY fEKGssUP7Z+e1emX+YN/F2K54j5nvazf0m5HcgptxhadsL9awejna/6EdQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFFoV7aGr1Xx+yRtk+2qcPkBuc4ndMB8GA1UdIwQY MBaAFCh05Gv2Nupj5dEjYvVRuAsncUeAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0hUa2FfWTI2bVBsMFNOaTlWRzRDeWR4UjRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9lZGRjMDUtNDAyZC00ZGE3LTk3ZWYt YzEwZGE2YWFjMWIxLzEvV2hYdG9hdlZmSDdKRzJUN2Fwdy1RRzV6aWQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9lZGRjMDUtNDAyZC00ZGE3LTk3ZWYtYzEwZGE2YWFjMWIx LzEvS0hUa2FfWTI2bVBsMFNOaTlWRzRDeWR4UjRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCJRBkAwQB JRBsAwQCuTm0MA0EAgACMAcDBQAqAEzEMA0GCSqGSIb3DQEBCwUAA4IBAQBgzqWU oz6MyrBjq2Qxzu3hhIhdd1w7DacxRuPDQYcKPHaHbqmJKZR7RsP+hJo+6otUgT7W sMkSavRlYAQH9/cmzIbRAB9sJcjaP/21IxiUJ00hHCwz5XQy9jqyJ6Qv8iOXJ4m8 sASPpEJ+5sXo+02AGK+BgJVVRguBtRPzyrvuAIBBDjVYcEVI3ULWkFaHExF79LBl NrSX3IPgqyTmFgVka3zeVU/KsyTvwd/X03wj3Lc7pr5Y+iieG2Ejos7VV3EyZEgR pqdnbF7mKRqigFRbpgCXbVDEJ13r+z54dn2ZPIEqJbVZSC7IhAnRGsQVtXPNHFlQ urr6InuYS2E1NdtK -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:16 2026 by rpki-client