This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/ddc344-64c6-46c8-a25c-d4edc0eb3e0a/1/WaQsZZU2YLYjWKTqh0alZowLSLE.roa File: WaQsZZU2YLYjWKTqh0alZowLSLE.roa (raw, json) Hash identifier: kGjQ24mRi/0YdjnsuS2YWs5ad2+Sfg+BCeumhERZLX8= Subject key identifier: 59:A4:2C:65:95:36:60:B6:23:58:A4:EA:87:46:A5:66:8C:0B:48:B1 Certificate issuer: /CN=009a637282b3d0a0fca4a554f6936f7df42e8165 Certificate serial: 019B77C6DC2A6D852E1AACA5F057B6A42D85 Authority key identifier: 00:9A:63:72:82:B3:D0:A0:FC:A4:A5:54:F6:93:6F:7D:F4:2E:81:65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AJpjcoKz0KD8pKVU9pNvffQugWU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/ddc344-64c6-46c8-a25c-d4edc0eb3e0a/1/WaQsZZU2YLYjWKTqh0alZowLSLE.roa Signing time: Thu 01 Jan 2026 04:17:59 +0000 ROA not before: Thu 01 Jan 2026 04:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200457 IP address blocks: 185.106.172.0/22 maxlen: 24 2a06:3d40::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/ddc344-64c6-46c8-a25c-d4edc0eb3e0a/1/AJpjcoKz0KD8pKVU9pNvffQugWU.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/ddc344-64c6-46c8-a25c-d4edc0eb3e0a/1/AJpjcoKz0KD8pKVU9pNvffQugWU.mft rsync://rpki.ripe.net/repository/DEFAULT/AJpjcoKz0KD8pKVU9pNvffQugWU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:dc:2a:6d:85:2e:1a:ac:a5:f0:57:b6:a4:2d:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=009a637282b3d0a0fca4a554f6936f7df42e8165 Validity Not Before: Jan 1 04:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=59a42c65953660b62358a4ea8746a5668c0b48b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:8b:bf:91:14:78:07:e7:71:7d:f5:5e:92:10: 6d:32:05:c3:a8:e4:9a:56:d6:1e:49:bb:08:e9:5a: 88:32:4d:c1:bb:5f:63:3f:1b:f9:f4:40:5c:7c:67: 7f:ed:a9:93:8f:94:48:bc:7b:d9:12:9e:72:da:45: e7:e2:82:cf:7c:b2:b3:44:0c:cf:26:84:21:99:1a: b6:14:c9:f1:10:40:6c:5d:60:d0:4c:31:1f:92:e9: 5c:6c:29:11:62:97:25:26:1c:ee:1e:4c:76:c9:7c: 44:0a:21:93:07:93:88:a1:4b:a7:ca:51:6d:22:81: 93:48:3b:7a:4a:c1:ed:be:a3:62:83:08:37:5c:86: b5:e2:f2:e8:e3:14:98:cc:7b:01:9c:d4:f4:2d:f2: b9:43:cf:9c:09:16:74:fb:ab:63:e1:09:e4:66:52: b9:5e:aa:84:ee:cc:df:f2:2a:cc:c9:5d:55:45:41: 7c:db:6f:ee:9c:e1:f5:9e:33:26:f4:d0:ff:14:60: 30:9c:7a:e0:66:84:36:9b:94:36:79:07:2f:20:ad: 4c:66:2d:b5:32:64:2a:d1:b7:96:41:76:a3:19:b4: 95:25:e3:58:55:f8:d6:61:35:cd:75:fa:11:93:59: 73:7e:ac:c7:42:09:13:2b:75:59:f3:68:1f:92:a8: 06:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:A4:2C:65:95:36:60:B6:23:58:A4:EA:87:46:A5:66:8C:0B:48:B1 X509v3 Authority Key Identifier: keyid:00:9A:63:72:82:B3:D0:A0:FC:A4:A5:54:F6:93:6F:7D:F4:2E:81:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJpjcoKz0KD8pKVU9pNvffQugWU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ddc344-64c6-46c8-a25c-d4edc0eb3e0a/1/WaQsZZU2YLYjWKTqh0alZowLSLE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ddc344-64c6-46c8-a25c-d4edc0eb3e0a/1/AJpjcoKz0KD8pKVU9pNvffQugWU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.106.172.0/22 IPv6: 2a06:3d40::/29 Signature Algorithm: sha256WithRSAEncryption 32:68:11:b8:30:17:71:d4:fe:3b:fb:06:bc:49:d6:d1:df:0a: 18:a3:7d:8b:4c:00:0a:6b:d0:d6:e1:96:fd:2d:a8:50:63:4b: 7e:fc:3a:51:79:57:11:51:81:e4:80:28:73:6e:4f:fd:9d:eb: 0b:f9:43:75:c1:43:48:13:0c:17:ec:ab:a2:34:76:47:59:5f: 28:2e:6f:b4:7e:c6:5a:7f:04:fc:6f:29:ef:f4:ec:72:23:91: af:ee:27:86:57:79:c5:06:be:be:66:3e:85:b0:d0:6d:7a:48: c4:1f:4f:bd:bc:5d:fd:65:f2:5f:ee:58:56:ab:62:49:d3:86: 29:a2:b5:ee:0a:f9:19:92:2f:ab:18:61:11:6e:17:b2:02:ca: 4f:f7:8e:d2:fc:a9:a4:2d:e2:6b:c1:f5:27:08:a4:7a:3f:41: b5:cb:69:0e:65:c4:6b:4f:19:1b:e7:61:a5:06:a2:32:00:30: 78:cc:2d:0f:59:53:21:3d:0d:a8:8e:b1:89:20:19:78:b7:c7: de:16:da:b6:6b:02:50:18:ff:45:0a:66:96:cf:f3:57:7f:ba: 17:ed:e5:64:7d:de:96:a4:b1:f5:02:9e:04:1d:de:70:74:d6: 2c:a9:e2:a2:5e:4e:fe:5c:72:97:4e:1c:44:94:4b:21:29:f8: 7f:ef:8f:9e -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt3xtwqbYUuGqyl8Fe2pC2FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwOWE2MzcyODJiM2QwYTBmY2E0YTU1NGY2OTM2ZjdkZjQy ZTgxNjUwHhcNMjYwMTAxMDQxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OWE0MmM2NTk1MzY2MGI2MjM1OGE0ZWE4NzQ2YTU2NjhjMGI0OGIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ou/kRR4B+dxffVekhBtMgXDqOSa VtYeSbsI6VqIMk3Bu19jPxv59EBcfGd/7amTj5RIvHvZEp5y2kXn4oLPfLKzRAzP JoQhmRq2FMnxEEBsXWDQTDEfkulcbCkRYpclJhzuHkx2yXxECiGTB5OIoUunylFt IoGTSDt6SsHtvqNigwg3XIa14vLo4xSYzHsBnNT0LfK5Q8+cCRZ0+6tj4QnkZlK5 XqqE7szf8irMyV1VRUF822/unOH1njMm9ND/FGAwnHrgZoQ2m5Q2eQcvIK1MZi21 MmQq0beWQXajGbSVJeNYVfjWYTXNdfoRk1lzfqzHQgkTK3VZ82gfkqgG2QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFFmkLGWVNmC2I1ik6odGpWaMC0ixMB8GA1UdIwQY MBaAFACaY3KCs9Cg/KSlVPaTb330LoFlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUpwamNvS3owS0Q4cEtWVTlwTnZmZlF1Z1dVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9kZGMzNDQtNjRjNi00NmM4LWEyNWMt ZDRlZGMwZWIzZTBhLzEvV2FRc1paVTJZTFlqV0tUcWgwYWxab3dMU0xFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi9kZGMzNDQtNjRjNi00NmM4LWEyNWMtZDRlZGMwZWIzZTBh LzEvQUpwamNvS3owS0Q4cEtWVTlwTnZmZlF1Z1dVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuWqsMA0E AgACMAcDBQMqBj1AMA0GCSqGSIb3DQEBCwUAA4IBAQAyaBG4MBdx1P47+wa8SdbR 3woYo32LTAAKa9DW4Zb9LahQY0t+/DpReVcRUYHkgChzbk/9nesL+UN1wUNIEwwX 7KuiNHZHWV8oLm+0fsZafwT8bynv9OxyI5Gv7ieGV3nFBr6+Zj6FsNBtekjEH0+9 vF39ZfJf7lhWq2JJ04YporXuCvkZki+rGGERbheyAspP947S/KmkLeJrwfUnCKR6 P0G1y2kOZcRrTxkb52GlBqIyADB4zC0PWVMhPQ2ojrGJIBl4t8feFtq2awJQGP9F CmaWz/NXf7oX7eVkfd6WpLH1Ap4EHd5wdNYsqeKiXk7+XHKXThxElEshKfh/74+e -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:57 2026 by rpki-client