This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/WUC07XZuvgMvRW-Sx2fZoP6-CjU.roa File: WUC07XZuvgMvRW-Sx2fZoP6-CjU.roa (raw, json) Hash identifier: ZcAUp9v0XPN3BoH8z8iyj/DOVW5j2fPdL4/OuuBKEow= Subject key identifier: 59:40:B4:ED:76:6E:BE:03:2F:45:6F:92:C7:67:D9:A0:FE:BE:0A:35 Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c Certificate serial: 019B7F1447BD8D9D35690298A32A96613206 Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/WUC07XZuvgMvRW-Sx2fZoP6-CjU.roa Signing time: Fri 02 Jan 2026 14:19:54 +0000 ROA not before: Fri 02 Jan 2026 14:19:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43444 IP address blocks: 193.233.128.0/22 maxlen: 22 193.233.208.0/23 maxlen: 23 193.233.216.0/22 maxlen: 22 193.233.220.0/23 maxlen: 23 193.233.222.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:47:bd:8d:9d:35:69:02:98:a3:2a:96:61:32:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c Validity Not Before: Jan 2 14:19:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5940b4ed766ebe032f456f92c767d9a0febe0a35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:55:bf:22:4f:7d:7c:07:61:e6:f1:2e:29:0d: 8b:43:9b:4b:2b:e6:c9:06:b5:51:79:c1:85:a1:2d: 34:fb:14:50:19:27:ce:54:a8:90:60:a2:59:06:4f: 2c:10:8f:95:70:d8:56:e9:e0:0a:57:86:8b:60:b9: 97:3a:9c:08:8f:1a:68:4b:8b:aa:6c:90:31:26:31: 6b:84:c8:d0:a5:fc:d6:30:0d:be:c1:f3:26:e8:40: fa:53:48:71:88:93:e7:da:44:1d:4c:4b:b6:7c:f6: 92:9b:1f:72:34:75:89:4d:d4:71:54:59:25:7f:8b: 91:8f:ca:e3:81:9d:15:db:fa:99:50:17:45:41:76: 86:08:86:0e:33:d6:eb:d6:3d:4e:b7:ab:87:a2:70: ad:5d:31:d7:09:e8:7c:49:1a:1c:cf:bf:f0:1e:a8: d4:f4:dd:30:a2:23:fd:54:7c:6a:58:f9:b8:ee:3a: cd:a6:a3:88:48:eb:5e:da:cf:7c:ef:58:17:58:a1: 30:66:fc:d8:76:cc:de:09:7f:b3:a4:99:21:72:d7: 63:ab:ce:21:ff:43:ef:74:d5:06:a5:99:59:59:d5: e6:92:7a:86:34:10:94:56:c4:18:dd:55:9d:39:6c: 59:ba:43:a5:f7:1f:52:2e:0b:20:dd:73:31:d9:b1: 9c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:40:B4:ED:76:6E:BE:03:2F:45:6F:92:C7:67:D9:A0:FE:BE:0A:35 X509v3 Authority Key Identifier: keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/WUC07XZuvgMvRW-Sx2fZoP6-CjU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.233.128.0/22 193.233.208.0/23 193.233.216.0/21 Signature Algorithm: sha256WithRSAEncryption 5a:02:79:d2:2b:8e:a3:48:1a:b3:4f:03:e5:15:83:4a:cd:2f: c7:b0:42:12:de:4b:35:24:6e:58:cb:80:fe:1a:cf:e5:a4:e8: 0e:b9:b1:61:65:4e:bf:5f:16:2e:15:64:99:fa:0c:2d:86:37: 52:42:c3:1c:1c:63:d4:01:60:b3:6e:43:9f:5b:1d:b7:39:08: 4f:8c:be:a6:95:ad:30:8e:6e:a7:70:04:c7:25:86:28:c8:bc: 27:e1:52:14:12:81:33:6d:54:2c:2a:06:a8:9a:42:e9:e9:ee: 07:52:e8:2e:3c:c0:6d:d7:c3:18:02:c1:24:0c:b2:c4:a7:73: be:3a:e7:20:17:fd:ae:ce:ad:b6:ad:23:df:7d:6f:2b:e5:1e: 90:26:86:e6:74:63:1a:21:31:95:17:bf:1b:6f:a0:96:f3:df: 46:f5:4f:72:f8:d7:b3:8f:fe:af:2e:05:53:9b:14:e0:78:9e: 16:7b:d8:42:b0:3b:03:a7:7c:c0:98:e3:de:cd:ef:cf:57:4d: 7c:c0:d3:70:ac:9f:59:12:7b:5f:42:01:8f:27:4b:10:dd:cb: 3d:44:fe:3d:5f:4b:a3:e4:31:c7:8e:59:4b:90:a5:3e:8e:78: 34:1a:5f:c2:fb:16:04:01:8e:32:a8:4d:15:06:59:49:6d:df: 98:a1:32:16 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/FEe9jZ01aQKYoyqWYTIGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4 Mjg3M2MwHhcNMjYwMTAyMTQxOTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OTQwYjRlZDc2NmViZTAzMmY0NTZmOTJjNzY3ZDlhMGZlYmUwYTM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1VW/Ik99fAdh5vEuKQ2LQ5tLK+bJ BrVRecGFoS00+xRQGSfOVKiQYKJZBk8sEI+VcNhW6eAKV4aLYLmXOpwIjxpoS4uq bJAxJjFrhMjQpfzWMA2+wfMm6ED6U0hxiJPn2kQdTEu2fPaSmx9yNHWJTdRxVFkl f4uRj8rjgZ0V2/qZUBdFQXaGCIYOM9br1j1Ot6uHonCtXTHXCeh8SRocz7/wHqjU 9N0woiP9VHxqWPm47jrNpqOISOte2s9871gXWKEwZvzYdszeCX+zpJkhctdjq84h /0PvdNUGpZlZWdXmknqGNBCUVsQY3VWdOWxZukOl9x9SLgsg3XMx2bGcQwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFFlAtO12br4DL0Vvksdn2aD+vgo1MB8GA1UdIwQY MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt NGRlYzRkYWZlZTQ5LzEvV1VDMDdYWnV2Z012UlctU3gyZlpvUDYtQ2pVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5 LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCwemAAwQB wenQAwQDwenYMA0GCSqGSIb3DQEBCwUAA4IBAQBaAnnSK46jSBqzTwPlFYNKzS/H sEIS3ks1JG5Yy4D+Gs/lpOgOubFhZU6/XxYuFWSZ+gwthjdSQsMcHGPUAWCzbkOf Wx23OQhPjL6mla0wjm6ncATHJYYoyLwn4VIUEoEzbVQsKgaomkLp6e4HUuguPMBt 18MYAsEkDLLEp3O+OucgF/2uzq22rSPffW8r5R6QJobmdGMaITGVF78bb6CW899G 9U9y+Nezj/6vLgVTmxTgeJ4We9hCsDsDp3zAmOPeze/PV018wNNwrJ9ZEntfQgGP J0sQ3cs9RP49X0uj5DHHjllLkKU+jng0Gl/C+xYEAY4yqE0VBllJbd+YoTIW -----END CERTIFICATE-----Generated at Tue Jan 20 11:09:50 2026 by rpki-client