This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/WWEiiRclZJiJc4Yp9PYYvoQpmSA.roa File: WWEiiRclZJiJc4Yp9PYYvoQpmSA.roa (raw, json) Hash identifier: hrQ5qgVNUSC0WxamoxJ9EGRyxZYAj1wkc81Qc600uiM= Subject key identifier: 59:61:22:89:17:25:64:98:89:73:86:29:F4:F6:18:BE:84:29:99:20 Certificate issuer: /CN=4126ac4afafd269881c10ad2eca2f4def8edbd21 Certificate serial: 019B76EB9633B20ECA632A48AAC6A5802257 Authority key identifier: 41:26:AC:4A:FA:FD:26:98:81:C1:0A:D2:EC:A2:F4:DE:F8:ED:BD:21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSasSvr9JpiBwQrS7KL03vjtvSE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/WWEiiRclZJiJc4Yp9PYYvoQpmSA.roa Signing time: Thu 01 Jan 2026 00:18:29 +0000 ROA not before: Thu 01 Jan 2026 00:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9121 IP address blocks: 85.209.164.0/24 maxlen: 24 85.209.165.0/24 maxlen: 24 85.209.166.0/24 maxlen: 24 85.209.167.0/24 maxlen: 24 91.208.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.crl rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.mft rsync://rpki.ripe.net/repository/DEFAULT/QSasSvr9JpiBwQrS7KL03vjtvSE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 06:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:96:33:b2:0e:ca:63:2a:48:aa:c6:a5:80:22:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4126ac4afafd269881c10ad2eca2f4def8edbd21 Validity Not Before: Jan 1 00:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=596122891725649889738629f4f618be84299920 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:8d:56:26:1c:3c:43:4c:d8:63:d1:1f:4b:fa: 75:dc:64:dd:90:aa:64:88:4d:91:c0:d5:66:a7:bf: bb:2c:95:0f:d7:80:dd:c6:1c:29:10:6e:12:bd:6f: 69:18:16:17:1a:08:7d:99:84:ed:6c:4d:c6:6b:a2: 88:6b:c1:57:66:33:9b:14:56:2f:74:01:b7:d0:57: 33:86:e1:1d:40:63:9c:09:d1:bd:1b:55:fd:1e:44: b8:42:b8:da:16:c8:c2:4c:7b:b4:79:82:bc:30:80: 23:24:cf:40:71:a1:37:2b:50:d3:02:87:8c:df:fd: ba:a4:2e:52:fa:bf:05:7f:8f:7a:ca:2e:85:f0:58: 7f:98:05:18:90:59:22:7c:79:59:71:32:c0:e5:55: 95:c7:48:a9:9f:b3:ea:66:9f:01:68:5c:e4:34:ce: f1:6b:9b:b9:2b:16:89:f0:56:d0:96:c0:a1:58:4a: d7:64:b7:42:a6:ae:9b:8e:48:6c:c6:aa:c8:00:94: 07:a8:c0:2c:02:b4:3a:49:39:82:1d:f6:5f:6b:3e: 80:dd:bf:36:10:10:ad:74:4c:da:93:ef:6a:7c:30: 13:d3:e3:89:ac:7b:cb:e3:25:28:e7:f1:a6:e5:c1: 9b:17:68:47:e3:93:48:4b:50:3f:0e:09:25:6f:23: 80:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:61:22:89:17:25:64:98:89:73:86:29:F4:F6:18:BE:84:29:99:20 X509v3 Authority Key Identifier: keyid:41:26:AC:4A:FA:FD:26:98:81:C1:0A:D2:EC:A2:F4:DE:F8:ED:BD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSasSvr9JpiBwQrS7KL03vjtvSE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/WWEiiRclZJiJc4Yp9PYYvoQpmSA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.209.164.0/22 91.208.199.0/24 Signature Algorithm: sha256WithRSAEncryption 68:b9:02:a7:51:57:e9:5b:c1:b5:84:2b:21:4a:55:a2:93:c3: 31:44:db:cd:e5:56:d4:82:15:8b:bf:a9:5d:6a:20:5d:ff:04: 27:f0:a4:f9:bf:ce:70:d2:81:35:32:1a:01:2d:29:c8:6d:c9: 12:b2:5b:09:02:10:23:fa:4f:cb:9d:6a:ce:81:dc:d5:44:b4: 8d:48:01:a7:4b:43:8b:b1:7d:6d:17:db:65:1c:52:97:44:00: f9:65:d6:45:a8:fd:81:6e:ca:af:72:7e:19:2c:34:41:8c:f3: 34:3a:0a:6d:cc:4b:51:ce:f6:d0:64:18:f2:06:bd:d5:1e:d6: f3:5b:f6:ba:c8:d0:f5:25:2b:be:0a:c0:2f:cc:f3:fc:4e:63: 33:f5:63:9f:cf:fd:94:67:11:e3:1a:61:8a:a1:46:2e:de:d3: 8b:05:ae:2a:76:5b:95:ac:2b:96:0c:c2:33:c6:5e:22:76:aa: df:1d:f8:e6:19:47:9a:7c:d7:93:d7:a6:89:68:40:32:b5:e8: a9:5d:fb:f0:ad:fd:9c:80:2f:37:3d:44:9d:18:05:02:bb:9f: ae:f4:c3:b1:cf:c1:98:12:2f:0f:3f:08:11:ab:62:c0:b8:8d: 61:45:da:cc:79:7a:e1:37:fa:bc:9d:29:87:10:9d:63:8f:4a: 8f:86:bc:af -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt265Yzsg7KYypIqsalgCJXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxMjZhYzRhZmFmZDI2OTg4MWMxMGFkMmVjYTJmNGRlZjhl ZGJkMjEwHhcNMjYwMTAxMDAxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OTYxMjI4OTE3MjU2NDk4ODk3Mzg2MjlmNGY2MThiZTg0Mjk5OTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwI1WJhw8Q0zYY9EfS/p13GTdkKpk iE2RwNVmp7+7LJUP14DdxhwpEG4SvW9pGBYXGgh9mYTtbE3Ga6KIa8FXZjObFFYv dAG30FczhuEdQGOcCdG9G1X9HkS4QrjaFsjCTHu0eYK8MIAjJM9AcaE3K1DTAoeM 3/26pC5S+r8Ff496yi6F8Fh/mAUYkFkifHlZcTLA5VWVx0ipn7PqZp8BaFzkNM7x a5u5KxaJ8FbQlsChWErXZLdCpq6bjkhsxqrIAJQHqMAsArQ6STmCHfZfaz6A3b82 EBCtdEzak+9qfDAT0+OJrHvL4yUo5/Gm5cGbF2hH45NIS1A/DgklbyOAyQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFlhIokXJWSYiXOGKfT2GL6EKZkgMB8GA1UdIwQY MBaAFEEmrEr6/SaYgcEK0uyi9N747b0hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVNhc1N2cjlKcGlCd1FyUzdLTDAzdmp0dlNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi85NGRkMmEtNTA0Ni00ODgzLTkxZGEt YzM5OWJlMDMxYjRhLzEvV1dFaWlSY2xaSmlKYzRZcDlQWVl2b1FwbVNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi85NGRkMmEtNTA0Ni00ODgzLTkxZGEtYzM5OWJlMDMxYjRh LzEvUVNhc1N2cjlKcGlCd1FyUzdLTDAzdmp0dlNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCVdGkAwQA W9DHMA0GCSqGSIb3DQEBCwUAA4IBAQBouQKnUVfpW8G1hCshSlWik8MxRNvN5VbU ghWLv6ldaiBd/wQn8KT5v85w0oE1MhoBLSnIbckSslsJAhAj+k/LnWrOgdzVRLSN SAGnS0OLsX1tF9tlHFKXRAD5ZdZFqP2Bbsqvcn4ZLDRBjPM0OgptzEtRzvbQZBjy Br3VHtbzW/a6yND1JSu+CsAvzPP8TmMz9WOfz/2UZxHjGmGKoUYu3tOLBa4qdluV rCuWDMIzxl4idqrfHfjmGUeafNeT16aJaEAyteipXfvwrf2cgC83PUSdGAUCu5+u 9MOxz8GYEi8PPwgRq2LAuI1hRdrMeXrhN/q8nSmHEJ1jj0qPhryv -----END CERTIFICATE-----Generated at Wed Jan 21 13:16:53 2026 by rpki-client