This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/Wc1vP6_SY_r3YRWRNCEYvgmMIEU.roa File: Wc1vP6_SY_r3YRWRNCEYvgmMIEU.roa (raw, json) Hash identifier: DTSBhlEZWBIgKWeFJQfKtS9sYqKdFbuY0AXldEHxAZ4= Subject key identifier: 59:CD:6F:3F:AF:D2:63:FA:F7:61:15:91:34:21:18:BE:09:8C:20:45 Certificate issuer: /CN=a7d78de0234e6f99701592f536e45f5f5594eec3 Certificate serial: 019B7F843A26AA1D031D5FB71940C278D3BB Authority key identifier: A7:D7:8D:E0:23:4E:6F:99:70:15:92:F5:36:E4:5F:5F:55:94:EE:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/Wc1vP6_SY_r3YRWRNCEYvgmMIEU.roa Signing time: Fri 02 Jan 2026 16:22:10 +0000 ROA not before: Fri 02 Jan 2026 16:22:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62294 IP address blocks: 85.222.164.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:3a:26:aa:1d:03:1d:5f:b7:19:40:c2:78:d3:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7d78de0234e6f99701592f536e45f5f5594eec3 Validity Not Before: Jan 2 16:22:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=59cd6f3fafd263faf7611591342118be098c2045 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:30:92:04:e1:45:75:9d:c6:c6:31:ec:f8:f0: 35:5a:53:f8:cd:79:df:96:28:53:db:29:d5:be:2c: 54:c5:d9:cc:27:c7:f1:ee:db:94:b1:06:02:bf:19: d6:34:46:8c:96:f7:3e:75:75:8b:0c:51:58:5f:8e: 6e:7e:5d:b1:0b:e2:5e:44:c6:13:ce:12:72:01:bf: 7a:f1:30:ba:78:ec:af:d8:0e:c0:68:f7:6a:95:33: 46:db:01:41:f1:ad:03:a7:50:13:e0:21:2a:ab:db: 20:4c:bb:09:d6:64:df:88:95:27:96:72:cb:de:66: c9:a8:29:6f:1e:30:7a:77:e4:8d:55:2d:3c:b0:7b: 0d:4f:e6:02:d1:64:ef:94:0b:16:31:05:3a:af:1c: ac:79:a9:ac:05:81:fc:2a:a3:31:84:be:c8:e2:1e: 01:8c:13:0d:74:c6:ee:e3:d7:16:0b:5f:fd:a5:43: ad:b1:3c:fa:4b:79:f8:06:1e:03:2d:11:44:7e:bc: 51:67:53:ed:bf:49:8e:40:dc:3f:fc:b0:d6:b4:cb: 5b:98:7f:3f:f7:a3:fe:0c:17:30:c4:8f:27:22:e8: 81:54:7d:6e:91:42:ba:4e:65:b8:58:05:33:20:82: e9:ed:12:e4:3d:b2:c3:26:35:78:f9:54:9a:d1:a7: 63:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:CD:6F:3F:AF:D2:63:FA:F7:61:15:91:34:21:18:BE:09:8C:20:45 X509v3 Authority Key Identifier: keyid:A7:D7:8D:E0:23:4E:6F:99:70:15:92:F5:36:E4:5F:5F:55:94:EE:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/Wc1vP6_SY_r3YRWRNCEYvgmMIEU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.222.164.0/22 Signature Algorithm: sha256WithRSAEncryption 0f:17:54:f7:f4:0a:04:69:7f:ca:c4:a2:77:bf:9b:cf:90:90: da:d5:66:db:2b:42:65:2f:e0:c1:eb:4e:85:92:d8:13:f2:a6: 54:f0:b8:5b:c3:96:47:46:fa:b4:ad:a0:8c:1e:80:60:96:e9: 24:cd:14:1f:c0:76:fc:ae:57:d8:6b:a3:5e:fd:aa:2a:b7:32: f5:79:78:63:f8:7c:06:8b:8b:b6:06:9a:04:a1:b2:68:c3:b0: a2:5f:24:41:ea:5f:60:34:5f:c0:b4:ab:aa:48:9c:b6:ec:11: 3f:cb:32:ab:88:4d:de:66:b2:22:58:4d:3e:32:9d:62:81:44: 79:eb:9e:f9:6d:b5:d7:b2:50:5f:d7:58:47:83:7e:bf:66:4d: d0:df:77:f4:e2:91:e9:2c:49:e0:37:db:4d:c1:1c:ba:be:a3: cc:b4:82:15:b2:db:1c:1f:64:4d:e5:44:fc:2e:2b:cd:8a:96: a7:54:b7:70:86:7f:55:be:02:e3:33:56:89:2d:47:03:97:ce: 9f:cc:12:06:92:01:a1:55:4f:e1:1b:fe:86:cf:a2:e9:34:97: f4:2a:76:ef:d3:ab:bc:d7:3a:e3:11:90:8d:aa:44:30:d6:ec: 77:5f:ac:53:1c:72:8c:4e:ac:65:7f:e4:9c:7c:d4:4c:d6:fc: cd:35:73:fe -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hDomqh0DHV+3GUDCeNO7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3ZDc4ZGUwMjM0ZTZmOTk3MDE1OTJmNTM2ZTQ1ZjVmNTU5 NGVlYzMwHhcNMjYwMTAyMTYyMjEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OWNkNmYzZmFmZDI2M2ZhZjc2MTE1OTEzNDIxMThiZTA5OGMyMDQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjCSBOFFdZ3GxjHs+PA1WlP4zXnf lihT2ynVvixUxdnMJ8fx7tuUsQYCvxnWNEaMlvc+dXWLDFFYX45ufl2xC+JeRMYT zhJyAb968TC6eOyv2A7AaPdqlTNG2wFB8a0Dp1AT4CEqq9sgTLsJ1mTfiJUnlnLL 3mbJqClvHjB6d+SNVS08sHsNT+YC0WTvlAsWMQU6rxyseamsBYH8KqMxhL7I4h4B jBMNdMbu49cWC1/9pUOtsTz6S3n4Bh4DLRFEfrxRZ1Ptv0mOQNw//LDWtMtbmH8/ 96P+DBcwxI8nIuiBVH1ukUK6TmW4WAUzIILp7RLkPbLDJjV4+VSa0adjgwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFnNbz+v0mP692EVkTQhGL4JjCBFMB8GA1UdIwQY MBaAFKfXjeAjTm+ZcBWS9TbkX19VlO7DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDllTjRDTk9iNWx3RlpMMU51UmZYMVdVN3NNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My8zMWFhYmEtYWM3ZS00ODlmLTg3N2Mt MjhkNWI2MDdhNDdmLzEvV2MxdlA2X1NZX3IzWVJXUk5DRVl2Z21NSUVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My8zMWFhYmEtYWM3ZS00ODlmLTg3N2MtMjhkNWI2MDdhNDdm LzEvcDllTjRDTk9iNWx3RlpMMU51UmZYMVdVN3NNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCVd6kMA0G CSqGSIb3DQEBCwUAA4IBAQAPF1T39AoEaX/KxKJ3v5vPkJDa1WbbK0JlL+DB606F ktgT8qZU8Lhbw5ZHRvq0raCMHoBglukkzRQfwHb8rlfYa6Ne/aoqtzL1eXhj+HwG i4u2BpoEobJow7CiXyRB6l9gNF/AtKuqSJy27BE/yzKriE3eZrIiWE0+Mp1igUR5 6575bbXXslBf11hHg36/Zk3Q33f04pHpLEngN9tNwRy6vqPMtIIVstscH2RN5UT8 LivNipanVLdwhn9VvgLjM1aJLUcDl86fzBIGkgGhVU/hG/6Gz6LpNJf0Knbv06u8 1zrjEZCNqkQw1ux3X6xTHHKMTqxlf+ScfNRM1vzNNXP+ -----END CERTIFICATE-----Generated at Mon Jan 26 10:24:08 2026 by rpki-client