This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/437ae5-c2ab-4c71-9d06-fec6c2701eda/1/WQjl92RW0jdBTqM0hadCVWAMXP8.roa File: WQjl92RW0jdBTqM0hadCVWAMXP8.roa (raw, json) Hash identifier: CIaHkNR2G65+9/3FHuVOGVz2ojdxwlcnxwiCYecNZcg= Subject key identifier: 59:08:E5:F7:64:56:D2:37:41:4E:A3:34:85:A7:42:55:60:0C:5C:FF Certificate issuer: /CN=748e99a31f3582400ab5dfa777c60d16acaeddb3 Certificate serial: 019B7C7F84D8CFB92C92C6EC94566277E734 Authority key identifier: 74:8E:99:A3:1F:35:82:40:0A:B5:DF:A7:77:C6:0D:16:AC:AE:DD:B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dI6Zox81gkAKtd-nd8YNFqyu3bM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/437ae5-c2ab-4c71-9d06-fec6c2701eda/1/WQjl92RW0jdBTqM0hadCVWAMXP8.roa Signing time: Fri 02 Jan 2026 02:18:10 +0000 ROA not before: Fri 02 Jan 2026 02:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41174 IP address blocks: 185.84.52.0/23 maxlen: 23 185.84.54.0/24 maxlen: 24 185.84.55.0/24 maxlen: 24 2a05:a140::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/437ae5-c2ab-4c71-9d06-fec6c2701eda/1/dI6Zox81gkAKtd-nd8YNFqyu3bM.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/437ae5-c2ab-4c71-9d06-fec6c2701eda/1/dI6Zox81gkAKtd-nd8YNFqyu3bM.mft rsync://rpki.ripe.net/repository/DEFAULT/dI6Zox81gkAKtd-nd8YNFqyu3bM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:84:d8:cf:b9:2c:92:c6:ec:94:56:62:77:e7:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=748e99a31f3582400ab5dfa777c60d16acaeddb3 Validity Not Before: Jan 2 02:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5908e5f76456d237414ea33485a74255600c5cff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e0:d1:7f:80:41:2f:ad:50:04:3f:ef:6c:4e: 84:ac:eb:10:e7:ae:f8:1a:9d:bc:be:d1:d9:d8:e6: 19:36:07:7c:af:74:a5:b5:9b:4d:07:d1:b6:0c:99: 71:5a:d2:04:d4:f6:4c:e4:51:54:aa:fb:ba:98:fa: 55:d2:5c:99:ef:5c:b0:15:44:1b:ad:fb:dd:95:a6: 17:29:52:c4:cc:db:52:79:cb:51:d1:bc:2f:9c:a5: 18:aa:fb:a9:06:40:29:a8:09:a0:5e:64:cf:51:1b: fd:fc:80:5e:90:27:30:98:6b:42:d4:59:2c:04:25: e1:09:15:41:b2:b0:c7:a3:02:e5:64:c6:ba:08:b3: f7:cc:15:1b:4d:9e:7c:a5:ef:24:fa:a9:6d:17:eb: 4f:ca:51:9b:d2:97:ff:e4:fe:bd:64:b5:59:0d:34: 53:a3:1e:f0:80:28:1c:ec:d3:4a:48:5e:76:00:6a: b4:c6:82:d4:57:5e:e5:d0:ac:07:5f:1d:8f:83:98: 0a:f2:a6:fe:5f:20:26:54:e2:19:bb:30:56:01:23: 70:10:79:1b:a5:ae:f1:dd:bf:77:5b:1d:92:74:ca: 5d:0f:19:4b:83:7b:f6:b6:42:dd:75:54:f6:61:0b: 11:3c:8d:88:dc:65:5a:c6:40:3b:70:11:e2:22:62: 22:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:08:E5:F7:64:56:D2:37:41:4E:A3:34:85:A7:42:55:60:0C:5C:FF X509v3 Authority Key Identifier: keyid:74:8E:99:A3:1F:35:82:40:0A:B5:DF:A7:77:C6:0D:16:AC:AE:DD:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dI6Zox81gkAKtd-nd8YNFqyu3bM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/437ae5-c2ab-4c71-9d06-fec6c2701eda/1/WQjl92RW0jdBTqM0hadCVWAMXP8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/437ae5-c2ab-4c71-9d06-fec6c2701eda/1/dI6Zox81gkAKtd-nd8YNFqyu3bM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.84.52.0/22 IPv6: 2a05:a140::/29 Signature Algorithm: sha256WithRSAEncryption 20:b9:fe:8f:8c:76:cf:bb:92:68:42:e3:17:74:07:28:fc:2c: 55:a6:25:60:d7:38:50:01:ea:96:78:e1:8b:67:21:69:70:48: 25:f9:64:86:f5:30:96:b6:03:75:e2:9c:c1:f3:d5:b7:99:25: 53:be:cb:d9:9b:90:91:85:8e:ed:ef:44:de:80:1b:d3:bf:dc: 4c:76:f4:17:94:df:57:9c:19:98:c8:29:33:72:de:af:ab:01: 67:4a:77:5d:21:ef:c1:9e:cd:1c:85:06:ed:b0:80:60:81:28: 9e:78:98:b3:81:71:f7:01:ee:4c:06:5d:73:c0:18:cf:6b:18: 46:9b:21:ae:53:e0:70:5d:e4:1a:3a:f2:05:ad:89:2c:52:9f: 41:8e:8e:eb:44:8d:88:e6:6d:cf:23:ad:99:47:18:92:27:08: f1:81:57:e2:61:67:29:65:c7:3d:4d:e0:41:0a:3c:58:4b:09: c4:6f:0e:b7:64:90:11:28:89:71:d5:ed:5c:93:b4:09:25:32: 76:2f:10:84:07:12:83:62:33:b1:10:2d:07:65:bb:40:03:46: b3:d5:ef:59:c4:af:2e:a0:bb:a7:e2:4f:b8:0f:17:ca:62:bc: d2:83:36:5f:17:11:ea:5e:03:9b:5e:0f:2f:66:71:6c:0c:75: b7:d7:69:b2 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8f4TYz7ksksbslFZid+c0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OGU5OWEzMWYzNTgyNDAwYWI1ZGZhNzc3YzYwZDE2YWNh ZWRkYjMwHhcNMjYwMTAyMDIxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OTA4ZTVmNzY0NTZkMjM3NDE0ZWEzMzQ4NWE3NDI1NTYwMGM1Y2ZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+DRf4BBL61QBD/vbE6ErOsQ5674 Gp28vtHZ2OYZNgd8r3SltZtNB9G2DJlxWtIE1PZM5FFUqvu6mPpV0lyZ71ywFUQb rfvdlaYXKVLEzNtSectR0bwvnKUYqvupBkApqAmgXmTPURv9/IBekCcwmGtC1Fks BCXhCRVBsrDHowLlZMa6CLP3zBUbTZ58pe8k+qltF+tPylGb0pf/5P69ZLVZDTRT ox7wgCgc7NNKSF52AGq0xoLUV17l0KwHXx2Pg5gK8qb+XyAmVOIZuzBWASNwEHkb pa7x3b93Wx2SdMpdDxlLg3v2tkLddVT2YQsRPI2I3GVaxkA7cBHiImIijQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFFkI5fdkVtI3QU6jNIWnQlVgDFz/MB8GA1UdIwQY MBaAFHSOmaMfNYJACrXfp3fGDRasrt2zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEk2Wm94ODFna0FLdGQtbmQ4WU5GcXl1M2JNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC80MzdhZTUtYzJhYi00YzcxLTlkMDYt ZmVjNmMyNzAxZWRhLzEvV1FqbDkyUlcwamRCVHFNMGhhZENWV0FNWFA4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC80MzdhZTUtYzJhYi00YzcxLTlkMDYtZmVjNmMyNzAxZWRh LzEvZEk2Wm94ODFna0FLdGQtbmQ4WU5GcXl1M2JNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuVQ0MA0E AgACMAcDBQMqBaFAMA0GCSqGSIb3DQEBCwUAA4IBAQAguf6PjHbPu5JoQuMXdAco /CxVpiVg1zhQAeqWeOGLZyFpcEgl+WSG9TCWtgN14pzB89W3mSVTvsvZm5CRhY7t 70TegBvTv9xMdvQXlN9XnBmYyCkzct6vqwFnSnddIe/Bns0chQbtsIBggSieeJiz gXH3Ae5MBl1zwBjPaxhGmyGuU+BwXeQaOvIFrYksUp9Bjo7rRI2I5m3PI62ZRxiS JwjxgVfiYWcpZcc9TeBBCjxYSwnEbw63ZJARKIlx1e1ck7QJJTJ2LxCEBxKDYjOx EC0HZbtAA0az1e9ZxK8uoLun4k+4DxfKYrzSgzZfFxHqXgObXg8vZnFsDHW312my -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:16 2026 by rpki-client