This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/WQCrfzsax6n4r3v1hlQuR83C7do.roa File: WQCrfzsax6n4r3v1hlQuR83C7do.roa (raw, json) Hash identifier: /xxAd/ECrPZwq/l5JXhCScWy45/GJ5XDOGHFeVobafw= Subject key identifier: 59:00:AB:7F:3B:1A:C7:A9:F8:AF:7B:F5:86:54:2E:47:CD:C2:ED:DA Certificate issuer: /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6 Certificate serial: 019B7F15970DA6E628B3345D31A8F24FB1AD Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/WQCrfzsax6n4r3v1hlQuR83C7do.roa Signing time: Fri 02 Jan 2026 14:21:19 +0000 ROA not before: Fri 02 Jan 2026 14:21:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3170 IP address blocks: 45.84.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 02:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:97:0d:a6:e6:28:b3:34:5d:31:a8:f2:4f:b1:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6 Validity Not Before: Jan 2 14:21:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5900ab7f3b1ac7a9f8af7bf586542e47cdc2edda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:48:be:94:d0:94:76:67:6e:0a:1e:8f:c4:15: 38:7e:cb:4e:8b:d2:d7:03:16:2d:58:47:05:15:5c: 7b:7e:32:c2:35:b1:aa:f2:22:0d:e3:8a:71:0b:e1: 7d:48:89:75:c1:32:97:70:54:19:4b:61:3a:39:ee: e4:46:a6:3d:cd:9e:25:bc:58:5b:da:b8:52:e6:27: fa:54:c7:45:09:9d:65:7e:e5:10:52:93:eb:71:81: 65:84:3a:fd:ac:30:61:1b:c7:d6:b3:21:f7:16:9a: 57:4d:94:6f:e9:33:25:d2:af:fe:d9:27:8b:6f:03: c7:ac:7c:0b:7f:d0:fc:d3:6c:c8:58:a0:71:1d:b1: ea:2a:b9:c0:ae:69:7e:84:85:9c:dd:ca:b0:69:7d: d7:d2:4e:5f:4c:36:90:d5:2a:f3:a5:6e:76:9c:90: 01:94:46:2d:2e:91:13:f1:ae:98:b8:30:95:3d:68: 07:ea:21:bd:24:be:3a:b0:5f:85:95:60:33:7f:bd: 92:c7:64:64:b3:58:b0:10:d1:52:53:2f:3d:c0:82: 4c:5b:b7:54:ab:93:d2:b2:4f:e8:50:bf:7a:ab:8b: f7:b8:22:dc:8f:e5:a1:70:73:38:1e:76:62:b8:2a: 94:60:e9:65:8b:20:45:80:ec:41:e3:dc:7c:c1:40: ec:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:00:AB:7F:3B:1A:C7:A9:F8:AF:7B:F5:86:54:2E:47:CD:C2:ED:DA X509v3 Authority Key Identifier: keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/WQCrfzsax6n4r3v1hlQuR83C7do.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.84.241.0/24 Signature Algorithm: sha256WithRSAEncryption 66:ea:99:77:a0:1e:90:f9:bb:45:31:e4:f1:43:12:08:4a:d7: ac:aa:76:09:04:58:4c:03:98:a2:b8:b3:2c:20:44:19:36:7d: a8:b8:b8:e1:9a:42:d0:70:c0:9b:b1:82:e2:06:c4:f3:33:76: 3c:46:eb:9b:fd:fd:e2:2a:0d:8f:d8:fc:f2:9e:04:40:d4:40: 56:71:8d:24:b6:3a:80:6f:e1:d0:a4:b7:13:db:c0:c8:6a:e0: b5:14:d1:13:71:6a:b9:28:92:fe:e0:d9:bb:93:11:fd:f8:a8: e1:2f:13:3c:4f:b6:c0:08:e3:23:01:83:d0:5d:f4:10:4d:88: bb:23:16:b8:b7:40:fb:2d:2b:55:76:f8:91:a3:9d:05:be:6b: b8:1f:0f:9f:ef:fc:9d:3e:af:94:aa:4b:50:77:3b:ed:7e:3e: 53:a3:dc:8c:64:94:72:e7:ce:93:5b:d5:1c:92:fa:02:99:e5: a6:c2:c0:5f:15:2c:e3:dc:54:33:67:a3:95:f4:a4:50:98:e2: 4a:07:33:54:31:cd:10:be:f7:d4:cf:22:f7:d2:65:4a:69:8a: 51:83:8c:00:6e:e3:57:d5:ef:7d:69:8f:52:03:f9:38:e1:4d: 85:7d:4c:cf:7b:d5:16:3f:5f:78:a8:51:1b:af:fd:9e:eb:51: 00:13:19:45 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FZcNpuYoszRdMajyT7GtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NTE2MDViNjc1ZWNlNGUwZmNlNzE3NWFlMzFhOTNmYTgy NzJiYTYwHhcNMjYwMTAyMTQyMTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OTAwYWI3ZjNiMWFjN2E5ZjhhZjdiZjU4NjU0MmU0N2NkYzJlZGRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Ui+lNCUdmduCh6PxBU4fstOi9LX AxYtWEcFFVx7fjLCNbGq8iIN44pxC+F9SIl1wTKXcFQZS2E6Oe7kRqY9zZ4lvFhb 2rhS5if6VMdFCZ1lfuUQUpPrcYFlhDr9rDBhG8fWsyH3FppXTZRv6TMl0q/+2SeL bwPHrHwLf9D802zIWKBxHbHqKrnArml+hIWc3cqwaX3X0k5fTDaQ1SrzpW52nJAB lEYtLpET8a6YuDCVPWgH6iG9JL46sF+FlWAzf72Sx2Rks1iwENFSUy89wIJMW7dU q5PSsk/oUL96q4v3uCLcj+WhcHM4HnZiuCqUYOlliyBFgOxB49x8wUDsUQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFkAq387Gsep+K979YZULkfNwu3aMB8GA1UdIwQY MBaAFAVRYFtnXs5OD85xda4xqT+oJyumMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlZGZ1cyZGV6azRQem5GMXJqR3BQNmduSzZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yOGVhNDUtN2QzMC00NmRmLThmMmEt MDc3OWY0OGVjZWEwLzEvV1FDcmZ6c2F4Nm40cjN2MWhsUXVSODNDN2RvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8yOGVhNDUtN2QzMC00NmRmLThmMmEtMDc3OWY0OGVjZWEw LzEvQlZGZ1cyZGV6azRQem5GMXJqR3BQNmduSzZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVTxMA0G CSqGSIb3DQEBCwUAA4IBAQBm6pl3oB6Q+btFMeTxQxIIStesqnYJBFhMA5iiuLMs IEQZNn2ouLjhmkLQcMCbsYLiBsTzM3Y8Ruub/f3iKg2P2PzyngRA1EBWcY0ktjqA b+HQpLcT28DIauC1FNETcWq5KJL+4Nm7kxH9+KjhLxM8T7bACOMjAYPQXfQQTYi7 Ixa4t0D7LStVdviRo50Fvmu4Hw+f7/ydPq+UqktQdzvtfj5To9yMZJRy586TW9Uc kvoCmeWmwsBfFSzj3FQzZ6OV9KRQmOJKBzNUMc0QvvfUzyL30mVKaYpRg4wAbuNX 1e99aY9SA/k44U2FfUzPe9UWP194qFEbr/2e61EAExlF -----END CERTIFICATE-----Generated at Sun Jan 25 11:41:43 2026 by rpki-client