This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/d597b0-6425-425f-b723-4eb8b0b49c4a/1/WJZilYaZAHsOAmj637C-MdulMxc.roa File: WJZilYaZAHsOAmj637C-MdulMxc.roa (raw, json) Hash identifier: wLuopCEozLlg7zWAHBk3a03yzRSeylXpXNn0hBm9JS0= Subject key identifier: 58:96:62:95:86:99:00:7B:0E:02:68:FA:DF:B0:BE:31:DB:A5:33:17 Certificate issuer: /CN=892d21566ccfc3bb079ec5854b044ab809804157 Certificate serial: 019B76EB91EF252A9ADC7F0B4860061A1965 Authority key identifier: 89:2D:21:56:6C:CF:C3:BB:07:9E:C5:85:4B:04:4A:B8:09:80:41:57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iS0hVmzPw7sHnsWFSwRKuAmAQVc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/d597b0-6425-425f-b723-4eb8b0b49c4a/1/WJZilYaZAHsOAmj637C-MdulMxc.roa Signing time: Thu 01 Jan 2026 00:18:28 +0000 ROA not before: Thu 01 Jan 2026 00:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208288 IP address blocks: 85.255.92.0/22 maxlen: 22 85.255.92.0/23 maxlen: 23 85.255.92.0/24 maxlen: 24 85.255.93.0/24 maxlen: 24 85.255.94.0/23 maxlen: 23 85.255.94.0/24 maxlen: 24 85.255.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/d597b0-6425-425f-b723-4eb8b0b49c4a/1/iS0hVmzPw7sHnsWFSwRKuAmAQVc.crl rsync://rpki.ripe.net/repository/DEFAULT/74/d597b0-6425-425f-b723-4eb8b0b49c4a/1/iS0hVmzPw7sHnsWFSwRKuAmAQVc.mft rsync://rpki.ripe.net/repository/DEFAULT/iS0hVmzPw7sHnsWFSwRKuAmAQVc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:91:ef:25:2a:9a:dc:7f:0b:48:60:06:1a:19:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=892d21566ccfc3bb079ec5854b044ab809804157 Validity Not Before: Jan 1 00:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=589662958699007b0e0268fadfb0be31dba53317 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d8:bc:5b:27:f2:c0:20:b4:f3:34:85:31:e2: b5:fa:4a:01:93:08:dc:a5:d6:31:7f:dd:17:2b:82: 9e:33:f3:c2:0b:6a:d0:9b:1f:4d:d6:5f:af:41:d0: b7:eb:fd:7d:e3:e8:6b:c7:b9:07:f8:38:fa:d5:68: a0:e4:30:6a:f4:1d:77:73:9d:48:de:c5:42:d1:52: e4:af:30:16:d1:58:35:15:44:cb:ca:b8:75:70:2f: fb:c2:f4:f3:d6:d4:cd:d6:f3:96:b4:15:8f:89:3e: b6:d2:46:f2:88:24:ff:54:bd:b1:4b:34:b0:8c:82: 98:c4:ab:7d:c2:cd:bd:1d:3d:20:4a:d4:66:3e:4f: 32:bd:c5:a1:23:83:c9:6a:95:01:3a:8d:08:17:f7: 1e:f8:43:da:e0:e4:16:99:39:3e:35:ea:f6:56:fd: 2c:9c:8d:48:5d:bd:f7:be:65:8b:19:66:9d:f6:ab: 17:5c:00:ca:aa:72:68:58:e3:1b:fa:2a:e6:2a:35: ae:28:28:29:08:bc:fe:12:28:f3:52:b5:00:c0:90: d1:8b:3b:07:a6:f1:09:f9:ee:20:cf:31:a1:89:2a: cc:91:88:55:fe:e3:50:6f:7e:de:40:29:e6:60:9b: e6:51:29:9c:4a:2b:97:7b:54:f9:5e:76:27:97:8e: 27:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:96:62:95:86:99:00:7B:0E:02:68:FA:DF:B0:BE:31:DB:A5:33:17 X509v3 Authority Key Identifier: keyid:89:2D:21:56:6C:CF:C3:BB:07:9E:C5:85:4B:04:4A:B8:09:80:41:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iS0hVmzPw7sHnsWFSwRKuAmAQVc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d597b0-6425-425f-b723-4eb8b0b49c4a/1/WJZilYaZAHsOAmj637C-MdulMxc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d597b0-6425-425f-b723-4eb8b0b49c4a/1/iS0hVmzPw7sHnsWFSwRKuAmAQVc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.255.92.0/22 Signature Algorithm: sha256WithRSAEncryption 38:aa:7b:00:aa:39:97:0a:16:b2:a1:c1:07:0e:a0:68:02:01: 26:0b:0d:e1:d8:67:24:e8:c1:a4:04:9a:da:bd:7a:78:fd:5f: 0b:45:05:00:1e:37:d2:d6:49:96:03:b1:97:09:af:10:2c:3f: d1:b1:de:58:13:71:07:44:42:f3:ab:46:61:51:5e:eb:43:08: b6:d8:69:a3:c6:6f:ba:f8:78:6a:18:77:43:73:c8:c6:d0:cb: d9:6a:80:04:bf:88:6a:7e:7a:ac:76:7b:b7:9c:74:b4:8a:68: 8c:ab:b4:3e:31:76:15:85:79:3d:d9:ad:a4:bd:3e:82:49:48: e5:f8:7b:00:4c:c5:51:7a:bb:09:5a:e5:de:84:e2:02:58:79: 5a:74:c1:17:08:b7:d8:cd:7e:17:62:0d:62:ef:41:15:87:a8: a7:3d:b2:76:12:54:ca:d9:6b:cd:6d:ad:8f:2b:8a:c7:2a:d5: 02:cf:ca:ac:d6:a3:9a:41:55:6c:c6:41:10:60:57:b5:7e:4a: ab:34:ea:a6:f1:86:a5:e0:8e:b4:61:2b:c1:f7:71:b6:56:6f: 3a:0a:0b:6a:60:22:fe:1e:f0:72:55:48:4f:81:33:d8:c4:8e: a4:e7:a2:33:7f:46:da:39:93:c1:bb:19:f8:1b:68:0b:d0:23: 7d:bb:cf:b3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt265HvJSqa3H8LSGAGGhllMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5MmQyMTU2NmNjZmMzYmIwNzllYzU4NTRiMDQ0YWI4MDk4 MDQxNTcwHhcNMjYwMTAxMDAxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ODk2NjI5NTg2OTkwMDdiMGUwMjY4ZmFkZmIwYmUzMWRiYTUzMzE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoti8WyfywCC08zSFMeK1+koBkwjc pdYxf90XK4KeM/PCC2rQmx9N1l+vQdC36/194+hrx7kH+Dj61Wig5DBq9B13c51I 3sVC0VLkrzAW0Vg1FUTLyrh1cC/7wvTz1tTN1vOWtBWPiT620kbyiCT/VL2xSzSw jIKYxKt9ws29HT0gStRmPk8yvcWhI4PJapUBOo0IF/ce+EPa4OQWmTk+Ner2Vv0s nI1IXb33vmWLGWad9qsXXADKqnJoWOMb+irmKjWuKCgpCLz+EijzUrUAwJDRizsH pvEJ+e4gzzGhiSrMkYhV/uNQb37eQCnmYJvmUSmcSiuXe1T5XnYnl44nJQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFiWYpWGmQB7DgJo+t+wvjHbpTMXMB8GA1UdIwQY MBaAFIktIVZsz8O7B57FhUsESrgJgEFXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVMwaFZtelB3N3NIbnNXRlN3Ukt1QW1BUVZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9kNTk3YjAtNjQyNS00MjVmLWI3MjMt NGViOGIwYjQ5YzRhLzEvV0paaWxZYVpBSHNPQW1qNjM3Qy1NZHVsTXhjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC9kNTk3YjAtNjQyNS00MjVmLWI3MjMtNGViOGIwYjQ5YzRh LzEvaVMwaFZtelB3N3NIbnNXRlN3Ukt1QW1BUVZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCVf9cMA0G CSqGSIb3DQEBCwUAA4IBAQA4qnsAqjmXChayocEHDqBoAgEmCw3h2Gck6MGkBJra vXp4/V8LRQUAHjfS1kmWA7GXCa8QLD/Rsd5YE3EHRELzq0ZhUV7rQwi22Gmjxm+6 +HhqGHdDc8jG0MvZaoAEv4hqfnqsdnu3nHS0imiMq7Q+MXYVhXk92a2kvT6CSUjl +HsATMVRersJWuXehOICWHladMEXCLfYzX4XYg1i70EVh6inPbJ2ElTK2WvNba2P K4rHKtUCz8qs1qOaQVVsxkEQYFe1fkqrNOqm8Yal4I60YSvB93G2Vm86CgtqYCL+ HvByVUhPgTPYxI6k56Izf0baOZPBuxn4G2gL0CN9u8+z -----END CERTIFICATE-----Generated at Mon Jan 26 15:35:28 2026 by rpki-client