This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/WQZrCmnGTeVoS0hgL0YUsOv_fXU.roa File: WQZrCmnGTeVoS0hgL0YUsOv_fXU.roa (raw, json) Hash identifier: eWCCmbbu8zh+FEmFkCBwJkZKgrWzGjOAichsxrS7Hww= Subject key identifier: 59:06:6B:0A:69:C6:4D:E5:68:4B:48:60:2F:46:14:B0:EB:FF:7D:75 Certificate issuer: /CN=06a4d77dc2e19e6f9603274c0923a61a8addb496 Certificate serial: 019B7D5CB4E8EFF36FBC5D8BD45FE7F89B7B Authority key identifier: 06:A4:D7:7D:C2:E1:9E:6F:96:03:27:4C:09:23:A6:1A:8A:DD:B4:96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BqTXfcLhnm-WAydMCSOmGordtJY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/WQZrCmnGTeVoS0hgL0YUsOv_fXU.roa Signing time: Fri 02 Jan 2026 06:19:46 +0000 ROA not before: Fri 02 Jan 2026 06:19:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1342 IP address blocks: 193.163.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.mft rsync://rpki.ripe.net/repository/DEFAULT/BqTXfcLhnm-WAydMCSOmGordtJY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:b4:e8:ef:f3:6f:bc:5d:8b:d4:5f:e7:f8:9b:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06a4d77dc2e19e6f9603274c0923a61a8addb496 Validity Not Before: Jan 2 06:19:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=59066b0a69c64de5684b48602f4614b0ebff7d75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:41:f8:78:88:79:5c:38:e2:e6:16:7e:25:11: 35:9b:cc:79:b5:aa:c3:6e:d3:bd:00:a8:10:d1:a4: be:92:ee:e9:89:1f:b3:0b:6a:4b:dd:08:b6:8f:a5: bf:64:f3:74:63:ac:16:9d:ae:63:a5:05:15:2e:58: c3:a7:98:c9:27:81:71:8d:1c:82:dd:cb:86:df:83: a2:0a:50:14:95:71:87:b0:01:92:6d:d1:d9:e2:73: 1d:b2:f4:3d:e7:1c:cc:30:2f:ee:34:06:b5:5b:b0: 1e:96:25:dc:78:07:43:f9:f3:f3:b9:97:7b:a1:0a: 12:a4:e6:e0:e2:ed:a9:fe:24:77:ff:aa:30:a7:ca: 58:9c:c9:fa:b7:e9:e0:ef:56:b0:e9:a4:24:2c:45: dd:86:30:2e:11:c2:c2:e7:4b:c3:50:47:53:f8:8b: 7f:ed:8a:65:62:95:64:86:88:8b:9c:2d:26:5a:26: 5e:54:52:4b:f2:ee:18:c9:10:78:fb:f3:4b:06:99: 0a:6a:a2:5a:3b:b8:1e:07:80:5d:73:a5:ab:a8:17: c8:4f:36:87:bf:45:9b:e5:21:c0:94:e9:fb:a3:c1: 36:14:9a:ab:2f:c8:e5:c1:54:78:28:81:20:30:70: 4b:ba:b6:26:c0:d9:e5:f0:1d:be:c6:ab:0b:05:fb: 5f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:06:6B:0A:69:C6:4D:E5:68:4B:48:60:2F:46:14:B0:EB:FF:7D:75 X509v3 Authority Key Identifier: keyid:06:A4:D7:7D:C2:E1:9E:6F:96:03:27:4C:09:23:A6:1A:8A:DD:B4:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BqTXfcLhnm-WAydMCSOmGordtJY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/WQZrCmnGTeVoS0hgL0YUsOv_fXU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.163.4.0/24 Signature Algorithm: sha256WithRSAEncryption 19:a9:a8:ce:37:2f:c7:c0:46:f9:97:d6:08:77:4b:e4:79:ac: bf:e2:6f:be:0c:dd:e6:07:de:a3:00:72:e7:12:7b:25:65:51: a7:ac:4e:f5:f0:5a:b8:0d:37:8f:f6:6c:e6:08:1e:a7:53:79: 4a:18:63:f8:4b:a3:64:5e:05:06:91:13:19:5a:a1:db:f8:b4: 29:df:b3:22:d1:3c:bd:af:d9:b9:12:d9:3b:38:b0:2a:5a:8f: 89:69:99:eb:ba:0d:3e:28:0a:f5:c4:75:02:92:ec:bd:d4:15: 4d:46:11:c9:f3:f6:7a:59:24:35:92:da:f5:0b:2d:f3:5a:a4: 92:52:80:ab:09:1c:06:99:db:84:79:b6:01:87:75:d1:71:68: 30:f0:48:46:89:e4:22:b4:9c:e4:32:bb:65:ef:33:e0:46:e3: 5e:f0:ed:c2:6a:57:a6:ad:3c:eb:17:c1:64:48:15:7c:02:a9: fe:c0:dd:5d:83:f7:7a:37:f6:2d:be:f5:e1:ca:5a:54:55:35: 62:0c:ef:4c:df:d1:9d:96:09:7b:ce:eb:85:14:16:04:d8:5e: 7f:e3:66:94:d3:5d:1a:82:b2:9d:29:b4:c8:09:d8:7e:c3:a0: dd:b6:66:ba:97:7c:5f:e1:71:d0:e8:f7:2f:08:8a:db:77:72: 1b:ed:ef:35 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XLTo7/NvvF2L1F/n+Jt7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2YTRkNzdkYzJlMTllNmY5NjAzMjc0YzA5MjNhNjFhOGFk ZGI0OTYwHhcNMjYwMTAyMDYxOTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OTA2NmIwYTY5YzY0ZGU1Njg0YjQ4NjAyZjQ2MTRiMGViZmY3ZDc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4EH4eIh5XDji5hZ+JRE1m8x5tarD btO9AKgQ0aS+ku7piR+zC2pL3Qi2j6W/ZPN0Y6wWna5jpQUVLljDp5jJJ4FxjRyC 3cuG34OiClAUlXGHsAGSbdHZ4nMdsvQ95xzMMC/uNAa1W7AeliXceAdD+fPzuZd7 oQoSpObg4u2p/iR3/6owp8pYnMn6t+ng71aw6aQkLEXdhjAuEcLC50vDUEdT+It/ 7YplYpVkhoiLnC0mWiZeVFJL8u4YyRB4+/NLBpkKaqJaO7geB4Bdc6WrqBfITzaH v0Wb5SHAlOn7o8E2FJqrL8jlwVR4KIEgMHBLurYmwNnl8B2+xqsLBftfOQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFkGawppxk3laEtIYC9GFLDr/311MB8GA1UdIwQY MBaAFAak133C4Z5vlgMnTAkjphqK3bSWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnFUWGZjTGhubS1XQXlkTUNTT21Hb3JkdEpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9kM2I1NDItNmYyMS00ZGM4LTllNmYt NDQ5MmQ5ZjJmNDM4LzEvV1FackNtbkdUZVZvUzBoZ0wwWVVzT3ZfZlhVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS9kM2I1NDItNmYyMS00ZGM4LTllNmYtNDQ5MmQ5ZjJmNDM4 LzEvQnFUWGZjTGhubS1XQXlkTUNTT21Hb3JkdEpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwaMEMA0G CSqGSIb3DQEBCwUAA4IBAQAZqajONy/HwEb5l9YId0vkeay/4m++DN3mB96jAHLn EnslZVGnrE718Fq4DTeP9mzmCB6nU3lKGGP4S6NkXgUGkRMZWqHb+LQp37Mi0Ty9 r9m5Etk7OLAqWo+JaZnrug0+KAr1xHUCkuy91BVNRhHJ8/Z6WSQ1ktr1Cy3zWqSS UoCrCRwGmduEebYBh3XRcWgw8EhGieQitJzkMrtl7zPgRuNe8O3CalemrTzrF8Fk SBV8Aqn+wN1dg/d6N/YtvvXhylpUVTViDO9M39Gdlgl7zuuFFBYE2F5/42aU010a grKdKbTICdh+w6Ddtma6l3xf4XHQ6PcvCIrbd3Ib7e81 -----END CERTIFICATE-----Generated at Mon Feb 9 19:40:07 2026 by rpki-client