This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/2d7f4c-c3d5-4557-93c4-78bfd24cf107/1/WIUAFonkV2sfv2obw7wp_H-MGvU.roa File: WIUAFonkV2sfv2obw7wp_H-MGvU.roa (raw, json) Hash identifier: GtKF8czJWl3ExfCMW9FZWgpdCqhRe9QAiKNJnvpNNSc= Subject key identifier: 58:85:00:16:89:E4:57:6B:1F:BF:6A:1B:C3:BC:29:FC:7F:8C:1A:F5 Certificate issuer: /CN=098643201a2aa24a0b877a3adfca7a892047dbfc Certificate serial: 019B7EA46838568B4C8A1B4B73AC7531ED64 Authority key identifier: 09:86:43:20:1A:2A:A2:4A:0B:87:7A:3A:DF:CA:7A:89:20:47:DB:FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CYZDIBoqokoLh3o638p6iSBH2_w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/2d7f4c-c3d5-4557-93c4-78bfd24cf107/1/WIUAFonkV2sfv2obw7wp_H-MGvU.roa Signing time: Fri 02 Jan 2026 12:17:42 +0000 ROA not before: Fri 02 Jan 2026 12:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58243 IP address blocks: 45.14.96.0/22 maxlen: 22 185.84.120.0/22 maxlen: 22 193.163.169.0/24 maxlen: 24 2a03:70e0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/2d7f4c-c3d5-4557-93c4-78bfd24cf107/1/CYZDIBoqokoLh3o638p6iSBH2_w.crl rsync://rpki.ripe.net/repository/DEFAULT/13/2d7f4c-c3d5-4557-93c4-78bfd24cf107/1/CYZDIBoqokoLh3o638p6iSBH2_w.mft rsync://rpki.ripe.net/repository/DEFAULT/CYZDIBoqokoLh3o638p6iSBH2_w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:68:38:56:8b:4c:8a:1b:4b:73:ac:75:31:ed:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=098643201a2aa24a0b877a3adfca7a892047dbfc Validity Not Before: Jan 2 12:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5885001689e4576b1fbf6a1bc3bc29fc7f8c1af5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b2:0f:d6:23:78:42:6b:6f:02:83:be:54:6c: e9:59:3f:90:c8:eb:98:53:bb:fe:eb:c3:c9:92:c7: d4:cd:60:01:5b:a4:a2:4e:a1:2c:de:d0:81:fe:8e: 25:e1:a7:e9:0c:1a:ef:7f:72:4f:18:35:6e:bc:41: a9:41:33:a4:e1:e3:b6:33:1f:17:6d:14:64:5c:a7: f9:bc:a3:95:1a:12:2f:44:28:68:92:38:b5:50:f3: b3:e8:3e:4e:25:1b:6a:23:d2:4f:81:38:f3:71:ba: 1b:28:4e:80:4e:92:b9:17:24:5d:c0:07:19:c4:90: 27:81:63:57:dd:ac:52:f0:a6:6d:bb:38:ad:ad:60: 04:6e:e1:17:e6:c9:b6:bf:90:ad:8b:28:7e:67:9e: 54:50:b2:9e:c7:5e:42:62:26:ca:d2:dd:41:8f:01: f3:e0:d9:e1:32:9a:69:12:c3:85:0d:24:1c:6d:35: 79:3a:30:30:c9:29:02:6b:b8:b1:9a:ec:c4:f9:49: 44:1f:69:b3:8f:2c:fa:9b:12:38:6c:cd:92:86:df: f5:72:ff:55:5f:9e:94:dc:cb:c0:a7:c6:21:1e:f1: 3f:9b:12:c8:e3:77:5c:2a:63:91:f4:8e:64:ba:ff: 58:cb:bb:bd:f0:83:9b:cc:38:db:85:94:68:8f:35: db:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:85:00:16:89:E4:57:6B:1F:BF:6A:1B:C3:BC:29:FC:7F:8C:1A:F5 X509v3 Authority Key Identifier: keyid:09:86:43:20:1A:2A:A2:4A:0B:87:7A:3A:DF:CA:7A:89:20:47:DB:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CYZDIBoqokoLh3o638p6iSBH2_w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/2d7f4c-c3d5-4557-93c4-78bfd24cf107/1/WIUAFonkV2sfv2obw7wp_H-MGvU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/2d7f4c-c3d5-4557-93c4-78bfd24cf107/1/CYZDIBoqokoLh3o638p6iSBH2_w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.14.96.0/22 185.84.120.0/22 193.163.169.0/24 IPv6: 2a03:70e0::/32 Signature Algorithm: sha256WithRSAEncryption e9:9a:6d:08:a1:27:92:a5:0c:e7:06:ba:ed:e1:52:bf:95:81: c8:46:d0:1f:1b:8b:1e:90:75:2a:88:5a:92:28:c0:95:03:73: 74:60:a8:cd:5d:5c:65:ed:f2:d8:55:4f:51:ff:94:26:ed:f6: 6c:fe:d8:6b:5c:bc:3c:d6:ed:ca:28:74:7a:bf:0b:12:40:1f: 29:3d:9a:da:fe:2d:3e:20:c5:63:1f:85:6c:09:f0:75:65:56: df:88:84:9c:44:33:5b:1a:0c:e0:a4:8d:ec:54:39:4c:57:a2: 36:70:75:35:43:86:35:7b:52:12:b1:8a:01:ce:9b:d7:2f:d4: 5b:46:04:fc:7f:52:04:81:f3:d7:9a:f8:ab:23:3e:f3:c2:3b: cb:70:eb:59:d6:c4:a7:ae:30:31:60:dc:12:5d:1e:d9:63:be: 7f:c2:f2:81:54:ef:76:d9:0b:93:b9:47:da:df:3c:e9:fd:0a: 20:1b:7b:ee:13:a5:09:41:08:95:5d:95:54:96:c5:d3:bb:b8: fc:c2:30:96:d1:d3:23:06:ab:2f:54:fc:b9:fe:82:e3:6d:40: b9:49:67:0e:ed:29:a9:a2:6c:81:74:7b:56:8f:dd:71:70:a3: 7f:ba:6c:5c:f4:85:83:96:d5:a4:2a:73:31:d5:66:13:46:a1: 24:3f:21:c0 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt+pGg4VotMihtLc6x1Me1kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5ODY0MzIwMWEyYWEyNGEwYjg3N2EzYWRmY2E3YTg5MjA0 N2RiZmMwHhcNMjYwMTAyMTIxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ODg1MDAxNjg5ZTQ1NzZiMWZiZjZhMWJjM2JjMjlmYzdmOGMxYWY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7IP1iN4QmtvAoO+VGzpWT+QyOuY U7v+68PJksfUzWABW6SiTqEs3tCB/o4l4afpDBrvf3JPGDVuvEGpQTOk4eO2Mx8X bRRkXKf5vKOVGhIvRChokji1UPOz6D5OJRtqI9JPgTjzcbobKE6ATpK5FyRdwAcZ xJAngWNX3axS8KZtuzitrWAEbuEX5sm2v5Ctiyh+Z55UULKex15CYibK0t1BjwHz 4NnhMpppEsOFDSQcbTV5OjAwySkCa7ixmuzE+UlEH2mzjyz6mxI4bM2Sht/1cv9V X56U3MvAp8YhHvE/mxLI43dcKmOR9I5kuv9Yy7u98IObzDjbhZRojzXbCQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFFiFABaJ5FdrH79qG8O8Kfx/jBr1MB8GA1UdIwQY MBaAFAmGQyAaKqJKC4d6Ot/KeokgR9v8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1laRElCb3Fva29MaDNvNjM4cDZpU0JIMl93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8yZDdmNGMtYzNkNS00NTU3LTkzYzQt NzhiZmQyNGNmMTA3LzEvV0lVQUZvbmtWMnNmdjJvYnc3d3BfSC1NR3ZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy8yZDdmNGMtYzNkNS00NTU3LTkzYzQtNzhiZmQyNGNmMTA3 LzEvQ1laRElCb3Fva29MaDNvNjM4cDZpU0JIMl93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCLQ5gAwQC uVR4AwQAwaOpMA0EAgACMAcDBQAqA3DgMA0GCSqGSIb3DQEBCwUAA4IBAQDpmm0I oSeSpQznBrrt4VK/lYHIRtAfG4sekHUqiFqSKMCVA3N0YKjNXVxl7fLYVU9R/5Qm 7fZs/thrXLw81u3KKHR6vwsSQB8pPZra/i0+IMVjH4VsCfB1ZVbfiIScRDNbGgzg pI3sVDlMV6I2cHU1Q4Y1e1ISsYoBzpvXL9RbRgT8f1IEgfPXmvirIz7zwjvLcOtZ 1sSnrjAxYNwSXR7ZY75/wvKBVO922QuTuUfa3zzp/QogG3vuE6UJQQiVXZVUlsXT u7j8wjCW0dMjBqsvVPy5/oLjbUC5SWcO7SmpomyBdHtWj91xcKN/umxc9IWDltWk KnMx1WYTRqEkPyHA -----END CERTIFICATE-----Generated at Tue Feb 10 00:02:21 2026 by rpki-client