This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/eb0ea4-2458-4977-827d-fce2795fd80b/1/W2HofMkNPIvDF6tV8PIYeD0QhqI.roa File: W2HofMkNPIvDF6tV8PIYeD0QhqI.roa (raw, json) Hash identifier: 1cvQOBDWUIcL7H47mVGINqcDDkaEmkeSFndn1V9RKDY= Subject key identifier: 5B:61:E8:7C:C9:0D:3C:8B:C3:17:AB:55:F0:F2:18:78:3D:10:86:A2 Certificate issuer: /CN=16b43fb87e804922d1c6d07e2597b61e04ee17f0 Certificate serial: 019B797E3A613427FA8E9D77A7B0BC80F786 Authority key identifier: 16:B4:3F:B8:7E:80:49:22:D1:C6:D0:7E:25:97:B6:1E:04:EE:17:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FrQ_uH6ASSLRxtB-JZe2HgTuF_A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/eb0ea4-2458-4977-827d-fce2795fd80b/1/W2HofMkNPIvDF6tV8PIYeD0QhqI.roa Signing time: Thu 01 Jan 2026 12:17:53 +0000 ROA not before: Thu 01 Jan 2026 12:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209622 IP address blocks: 5.154.240.0/24 maxlen: 24 88.218.118.0/24 maxlen: 24 185.201.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/eb0ea4-2458-4977-827d-fce2795fd80b/1/FrQ_uH6ASSLRxtB-JZe2HgTuF_A.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/eb0ea4-2458-4977-827d-fce2795fd80b/1/FrQ_uH6ASSLRxtB-JZe2HgTuF_A.mft rsync://rpki.ripe.net/repository/DEFAULT/FrQ_uH6ASSLRxtB-JZe2HgTuF_A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 00:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:3a:61:34:27:fa:8e:9d:77:a7:b0:bc:80:f7:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16b43fb87e804922d1c6d07e2597b61e04ee17f0 Validity Not Before: Jan 1 12:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5b61e87cc90d3c8bc317ab55f0f218783d1086a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:dc:63:22:7d:67:bc:84:3c:73:d0:32:44:aa: 52:6e:02:c8:44:2e:0c:ab:04:e7:36:96:4d:37:3c: 0a:ea:54:08:dc:52:da:ce:fa:11:a6:71:69:6f:5d: c8:e5:b4:8e:5c:05:8e:19:fb:0b:b1:ee:d1:8a:88: 82:ef:cc:07:03:dc:12:6e:f8:b5:34:c8:79:42:f7: 9e:1b:0f:9a:ec:8a:95:cd:a2:43:df:b0:06:3b:bd: 86:94:f5:f2:47:2e:81:d6:53:23:4d:d4:e3:9d:07: 71:73:3a:65:83:f8:90:61:93:fc:0a:12:73:fb:c1: 0a:32:18:59:8a:cf:46:65:28:d8:cd:f5:c1:03:8a: e7:d9:3c:89:8f:2e:9f:41:47:95:08:ef:01:5c:16: 59:b7:b5:35:42:61:9b:63:19:02:b5:12:76:d5:a6: 23:96:cc:3a:ec:64:8f:47:06:ef:64:05:8f:5b:41: 7b:5d:a6:2b:f7:21:27:5a:4c:f8:d9:4b:5d:60:16: bb:df:c8:10:b0:c2:7e:d6:be:90:a7:18:b4:67:f7: f7:43:96:06:c8:a7:1e:8e:b3:29:d6:d4:18:28:dd: 06:a0:ea:50:f0:f6:06:0c:bf:3a:cd:83:92:b0:94: ac:ae:e1:b8:92:0d:d8:25:82:df:4a:89:86:a2:da: 63:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:61:E8:7C:C9:0D:3C:8B:C3:17:AB:55:F0:F2:18:78:3D:10:86:A2 X509v3 Authority Key Identifier: keyid:16:B4:3F:B8:7E:80:49:22:D1:C6:D0:7E:25:97:B6:1E:04:EE:17:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FrQ_uH6ASSLRxtB-JZe2HgTuF_A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/eb0ea4-2458-4977-827d-fce2795fd80b/1/W2HofMkNPIvDF6tV8PIYeD0QhqI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/eb0ea4-2458-4977-827d-fce2795fd80b/1/FrQ_uH6ASSLRxtB-JZe2HgTuF_A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.154.240.0/24 88.218.118.0/24 185.201.151.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:e7:4b:f1:89:fa:63:9d:a2:53:20:ee:a6:6c:d5:eb:9c:ec: 6a:6a:57:3f:22:b3:8b:99:df:81:2d:87:da:ce:08:d3:65:e7: f9:21:27:2a:ac:c1:e8:2b:de:85:ea:f9:1d:ad:66:f6:1c:f5: 10:ba:cb:9d:d2:7e:0d:40:3a:0d:ef:d6:16:f6:7f:26:15:88: 2d:a5:1d:f5:ea:26:a5:5a:fd:c6:2a:76:14:8d:2c:da:62:1d: 04:0e:8b:10:19:57:b0:f6:68:34:a4:df:64:d7:a0:d1:e5:76: e7:2e:1d:8b:fa:13:13:35:2b:fa:de:a4:63:58:a8:d6:5f:ec: 1d:35:7a:7d:6d:ea:83:07:b5:52:50:22:7a:4b:06:4c:5c:ec: ce:f7:80:62:ec:03:1d:35:61:24:55:f7:85:1a:c0:5b:a7:8a: 4a:8b:46:76:82:35:24:cb:51:11:03:f6:4b:86:78:9d:4c:c9: a7:34:ad:84:b2:c9:5c:5b:a9:d7:cb:98:62:5f:7d:ac:38:55: 66:39:52:b6:15:bc:50:cc:94:43:8b:c7:cf:07:0b:23:da:9a: 35:33:17:bb:89:aa:bf:97:31:85:3b:39:03:50:e5:be:95:95: 72:5b:0c:92:8d:6a:7f:29:6c:32:02:9c:d6:24:11:3a:14:2c: 35:f9:e3:d3 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt5fjphNCf6jp13p7C8gPeGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2YjQzZmI4N2U4MDQ5MjJkMWM2ZDA3ZTI1OTdiNjFlMDRl ZTE3ZjAwHhcNMjYwMTAxMTIxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YjYxZTg3Y2M5MGQzYzhiYzMxN2FiNTVmMGYyMTg3ODNkMTA4NmEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydxjIn1nvIQ8c9AyRKpSbgLIRC4M qwTnNpZNNzwK6lQI3FLazvoRpnFpb13I5bSOXAWOGfsLse7RioiC78wHA9wSbvi1 NMh5QveeGw+a7IqVzaJD37AGO72GlPXyRy6B1lMjTdTjnQdxczplg/iQYZP8ChJz +8EKMhhZis9GZSjYzfXBA4rn2TyJjy6fQUeVCO8BXBZZt7U1QmGbYxkCtRJ21aYj lsw67GSPRwbvZAWPW0F7XaYr9yEnWkz42UtdYBa738gQsMJ+1r6Qpxi0Z/f3Q5YG yKcejrMp1tQYKN0GoOpQ8PYGDL86zYOSsJSsruG4kg3YJYLfSomGotpj8QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFFth6HzJDTyLwxerVfDyGHg9EIaiMB8GA1UdIwQY MBaAFBa0P7h+gEki0cbQfiWXth4E7hfwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnJRX3VINkFTU0xSeHRCLUpaZTJIZ1R1Rl9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9lYjBlYTQtMjQ1OC00OTc3LTgyN2Qt ZmNlMjc5NWZkODBiLzEvVzJIb2ZNa05QSXZERjZ0VjhQSVllRDBRaHFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9lYjBlYTQtMjQ1OC00OTc3LTgyN2QtZmNlMjc5NWZkODBi LzEvRnJRX3VINkFTU0xSeHRCLUpaZTJIZ1R1Rl9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQABZrwAwQA WNp2AwQAucmXMA0GCSqGSIb3DQEBCwUAA4IBAQA/50vxifpjnaJTIO6mbNXrnOxq alc/IrOLmd+BLYfazgjTZef5IScqrMHoK96F6vkdrWb2HPUQusud0n4NQDoN79YW 9n8mFYgtpR316ialWv3GKnYUjSzaYh0EDosQGVew9mg0pN9k16DR5XbnLh2L+hMT NSv63qRjWKjWX+wdNXp9beqDB7VSUCJ6SwZMXOzO94Bi7AMdNWEkVfeFGsBbp4pK i0Z2gjUky1ERA/ZLhnidTMmnNK2EsslcW6nXy5hiX32sOFVmOVK2FbxQzJRDi8fP Bwsj2po1Mxe7iaq/lzGFOzkDUOW+lZVyWwySjWp/KWwyApzWJBE6FCw1+ePT -----END CERTIFICATE-----Generated at Mon Jan 12 04:55:43 2026 by rpki-client