This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/WW2jLA5cdwrG7xUDwvvWb1u0Z_I.roa File: WW2jLA5cdwrG7xUDwvvWb1u0Z_I.roa (raw, json) Hash identifier: NQTSDeY1v8QUdlY/Nw06UqgN+UAxhAYxrfmI+hdgIDU= Subject key identifier: 59:6D:A3:2C:0E:5C:77:0A:C6:EF:15:03:C2:FB:D6:6F:5B:B4:67:F2 Certificate issuer: /CN=10f1d0dbe093c722350618f4045c25ba94317f87 Certificate serial: 019B7E392661323149F27DDD8B5846E9CE69 Authority key identifier: 10:F1:D0:DB:E0:93:C7:22:35:06:18:F4:04:5C:25:BA:94:31:7F:87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/WW2jLA5cdwrG7xUDwvvWb1u0Z_I.roa Signing time: Fri 02 Jan 2026 10:20:33 +0000 ROA not before: Fri 02 Jan 2026 10:20:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213054 IP address blocks: 185.221.244.0/24 maxlen: 24 2a04:3f83:44::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.mft rsync://rpki.ripe.net/repository/DEFAULT/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:26:61:32:31:49:f2:7d:dd:8b:58:46:e9:ce:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10f1d0dbe093c722350618f4045c25ba94317f87 Validity Not Before: Jan 2 10:20:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=596da32c0e5c770ac6ef1503c2fbd66f5bb467f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:17:4d:9e:92:bf:2e:c4:c4:54:ef:10:72:d3: 9c:e9:8b:57:5f:5f:d0:e5:c7:2c:4e:ce:bc:0c:d9: 95:62:ab:f6:7b:f3:7d:8c:05:c9:1f:31:76:79:1d: 88:77:a7:02:0f:79:78:7a:0e:a3:09:74:72:15:98: d9:db:cb:e8:39:60:4a:4f:14:17:3e:bf:d5:17:48: d4:93:7a:25:88:9f:46:86:30:17:1f:fe:15:d6:06: 24:71:47:0b:1c:d7:99:65:83:bf:fe:23:90:15:c6: d3:8d:c8:7e:f8:10:de:85:65:7e:fe:51:a2:59:0b: 63:d8:57:e6:9b:41:77:c8:bf:a6:9a:c2:08:d6:9f: b7:53:7c:24:54:77:89:3c:e9:f7:fe:1b:68:4c:29: 0f:69:47:2c:6b:a3:6d:c1:01:3e:29:27:f8:09:2d: 0b:9a:7c:65:0b:49:04:3f:58:68:1a:07:f4:9f:8a: 49:bf:46:33:cd:dc:01:be:be:e3:a9:42:32:00:ac: 1a:08:e9:41:2d:8d:2c:14:36:e3:41:5d:4c:21:59: 92:27:51:f8:ed:27:13:22:b8:5d:2b:32:67:b0:f7: bc:1b:3c:d5:e6:6c:a6:f4:88:02:65:25:a1:59:03: cd:1e:98:38:5d:f4:ae:2b:1e:eb:44:56:10:ef:28: 99:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:6D:A3:2C:0E:5C:77:0A:C6:EF:15:03:C2:FB:D6:6F:5B:B4:67:F2 X509v3 Authority Key Identifier: keyid:10:F1:D0:DB:E0:93:C7:22:35:06:18:F4:04:5C:25:BA:94:31:7F:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/WW2jLA5cdwrG7xUDwvvWb1u0Z_I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.221.244.0/24 IPv6: 2a04:3f83:44::/48 Signature Algorithm: sha256WithRSAEncryption 9c:80:92:ca:c2:ca:2a:57:ca:b7:e4:76:58:70:84:2a:15:da: 44:4e:c7:75:20:51:66:7e:56:43:fc:f9:a8:2a:6c:6f:0c:ea: 05:96:97:51:5b:86:9f:fc:7c:2c:ab:0c:c4:21:b4:1d:0a:ba: 6e:1e:56:24:68:61:b3:ba:5e:70:d1:73:1d:5b:f2:40:f3:b9: 95:6b:a3:7b:e5:d3:f3:11:ca:f8:9f:cb:5c:e5:e6:6e:bc:0c: 70:19:76:4d:db:65:e2:30:79:1f:cc:80:3f:68:4a:26:f0:72: bc:9f:8d:a0:63:9c:6f:e4:04:2b:8c:fd:39:a7:91:84:ec:aa: 91:98:11:ab:e3:08:d5:ca:26:21:75:8c:7a:f3:99:d0:ec:06: 58:81:b6:05:81:ac:0a:65:65:62:90:d2:c0:99:3b:9e:1b:d1: 88:97:c8:83:fe:e7:12:f4:68:d8:d8:cf:d8:e2:e3:dd:37:f3: 31:ed:32:13:69:fe:9f:44:b2:19:90:b0:d5:1a:50:6f:d0:80: df:93:41:07:bc:68:0d:da:3c:2d:cc:8c:e5:51:c4:5a:d2:e6: 05:e7:91:11:bf:de:7c:37:4c:b5:52:0a:43:1a:95:c3:17:5e: 19:67:6d:c7:40:17:e9:26:57:b6:73:35:c2:e0:73:82:a5:03: 3a:e5:ff:1a -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt+OSZhMjFJ8n3di1hG6c5pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwZjFkMGRiZTA5M2M3MjIzNTA2MThmNDA0NWMyNWJhOTQz MTdmODcwHhcNMjYwMTAyMTAyMDMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OTZkYTMyYzBlNWM3NzBhYzZlZjE1MDNjMmZiZDY2ZjViYjQ2N2YyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0BdNnpK/LsTEVO8QctOc6YtXX1/Q 5ccsTs68DNmVYqv2e/N9jAXJHzF2eR2Id6cCD3l4eg6jCXRyFZjZ28voOWBKTxQX Pr/VF0jUk3oliJ9GhjAXH/4V1gYkcUcLHNeZZYO//iOQFcbTjch++BDehWV+/lGi WQtj2Ffmm0F3yL+mmsII1p+3U3wkVHeJPOn3/htoTCkPaUcsa6NtwQE+KSf4CS0L mnxlC0kEP1hoGgf0n4pJv0YzzdwBvr7jqUIyAKwaCOlBLY0sFDbjQV1MIVmSJ1H4 7ScTIrhdKzJnsPe8GzzV5mym9IgCZSWhWQPNHpg4XfSuKx7rRFYQ7yiZzwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFFltoywOXHcKxu8VA8L71m9btGfyMB8GA1UdIwQY MBaAFBDx0Nvgk8ciNQYY9ARcJbqUMX+HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVBIUTItQ1R4eUkxQmhqMEJGd2x1cFF4ZjRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC82MDVmMWMtMGQ3YS00YmQzLTg4YjYt MmYwYTZiZGJiZTUxLzEvV1cyakxBNWNkd3JHN3hVRHd2dldiMXUwWl9JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC82MDVmMWMtMGQ3YS00YmQzLTg4YjYtMmYwYTZiZGJiZTUx LzEvRVBIUTItQ1R4eUkxQmhqMEJGd2x1cFF4ZjRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAud30MA8E AgACMAkDBwAqBD+DAEQwDQYJKoZIhvcNAQELBQADggEBAJyAksrCyipXyrfkdlhw hCoV2kROx3UgUWZ+VkP8+agqbG8M6gWWl1Fbhp/8fCyrDMQhtB0Kum4eViRoYbO6 XnDRcx1b8kDzuZVro3vl0/MRyvify1zl5m68DHAZdk3bZeIweR/MgD9oSibwcryf jaBjnG/kBCuM/TmnkYTsqpGYEavjCNXKJiF1jHrzmdDsBliBtgWBrAplZWKQ0sCZ O54b0YiXyIP+5xL0aNjYz9ji49038zHtMhNp/p9EshmQsNUaUG/QgN+TQQe8aA3a PC3MjOVRxFrS5gXnkRG/3nw3TLVSCkMalcMXXhlnbcdAF+kmV7ZzNcLgc4KlAzrl /xo= -----END CERTIFICATE-----Generated at Mon Feb 2 08:06:40 2026 by rpki-client