This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/WOZGN68ORC_fjS0NcqSjNDVXKaY.roa File: WOZGN68ORC_fjS0NcqSjNDVXKaY.roa (raw, json) Hash identifier: AjRBGSZk8zOXbmkuoK7ZV4c6kcxCjWb+oPTXu10gwFM= Subject key identifier: 58:E6:46:37:AF:0E:44:2F:DF:8D:2D:0D:72:A4:A3:34:35:57:29:A6 Certificate issuer: /CN=949ff40831ca66f996c76ea466af49476fecd1ff Certificate serial: 019B791121FF3829C75F484A8FB080CFF166 Authority key identifier: 94:9F:F4:08:31:CA:66:F9:96:C7:6E:A4:66:AF:49:47:6F:EC:D1:FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJ_0CDHKZvmWx26kZq9JR2_s0f8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/WOZGN68ORC_fjS0NcqSjNDVXKaY.roa Signing time: Thu 01 Jan 2026 10:18:44 +0000 ROA not before: Thu 01 Jan 2026 10:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48131 IP address blocks: 37.221.116.0/24 maxlen: 24 193.33.140.0/24 maxlen: 24 2a09:500::/32 maxlen: 32 2a0f:ae80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.crl rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft rsync://rpki.ripe.net/repository/DEFAULT/lJ_0CDHKZvmWx26kZq9JR2_s0f8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:21:ff:38:29:c7:5f:48:4a:8f:b0:80:cf:f1:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=949ff40831ca66f996c76ea466af49476fecd1ff Validity Not Before: Jan 1 10:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=58e64637af0e442fdf8d2d0d72a4a334355729a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:d4:5b:d2:7d:52:43:db:64:25:08:54:25:3d: 32:21:cb:1e:cb:bd:ea:44:36:2b:4e:2e:f2:8c:5f: 30:67:f4:77:a8:65:1f:53:68:c0:eb:d7:7a:7d:3f: 43:58:52:bf:84:57:77:f3:41:73:1d:37:7c:9c:b1: 8b:63:84:3f:91:db:20:59:91:49:5b:c7:ed:4a:e9: ab:a1:5f:10:c2:60:1b:94:36:34:c9:bd:10:45:b8: 2c:47:bd:06:2d:c8:6f:2f:aa:7d:46:fc:1e:0c:75: 20:62:83:7b:05:81:8e:42:76:3c:ab:3b:34:37:45: 4c:c5:2f:34:7a:43:6a:d7:f1:b9:96:9c:cb:e4:5b: e3:65:6d:db:e3:aa:58:00:ef:c3:12:68:a5:a7:92: 13:71:b4:12:6d:e3:cf:f3:d9:71:b6:5e:a5:5b:74: 35:f0:13:96:be:7c:58:59:a6:b8:99:c9:56:ae:51: 8a:60:d8:85:3b:19:b4:8f:5e:20:95:56:78:47:64: cf:5c:67:68:71:0b:84:63:5b:68:87:77:4d:e0:82: b5:ef:10:29:95:21:67:39:30:ab:2f:1d:52:56:6b: 0f:14:fc:e6:83:5f:4a:3a:41:1e:8b:7f:6a:11:e1: 8f:0c:e6:9f:d7:34:e8:65:e6:b2:88:f5:ad:fe:d0: 38:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:E6:46:37:AF:0E:44:2F:DF:8D:2D:0D:72:A4:A3:34:35:57:29:A6 X509v3 Authority Key Identifier: keyid:94:9F:F4:08:31:CA:66:F9:96:C7:6E:A4:66:AF:49:47:6F:EC:D1:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJ_0CDHKZvmWx26kZq9JR2_s0f8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/WOZGN68ORC_fjS0NcqSjNDVXKaY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.221.116.0/24 193.33.140.0/24 IPv6: 2a09:500::/32 2a0f:ae80::/32 Signature Algorithm: sha256WithRSAEncryption 1f:10:f3:ff:5d:1f:e9:2e:90:e1:61:4a:00:85:71:9f:5c:6d: c8:4d:48:ee:cb:0c:87:e4:5d:28:04:8a:7b:35:22:18:37:b4: 5d:81:23:92:48:e8:04:33:63:18:10:97:db:7b:5e:99:a8:1c: 70:88:fd:ba:03:04:17:03:c8:cf:f7:4e:d2:f2:4a:c0:df:84: fa:97:85:8d:20:77:4f:5c:c0:ba:c6:88:76:e9:c2:cf:4c:d6: 39:c0:19:a0:3d:a7:8f:bb:55:0d:3a:18:2e:99:b3:f8:d1:89: 0b:df:65:9d:c3:20:3f:ef:c5:5c:ab:35:a8:70:db:3d:ff:f2: a3:bf:8d:1f:da:9d:70:da:88:71:04:e4:c9:5d:d0:a4:6d:47: 6d:44:c4:78:be:88:03:68:b8:e4:eb:d8:2e:87:84:01:69:bd: a2:91:89:40:29:58:dc:9e:a5:fd:72:ec:9b:49:c3:46:14:ba: 0b:ef:e2:7b:62:e7:17:cd:7c:04:32:82:ad:86:93:38:9d:f9: 7b:37:75:cf:55:3a:1e:c4:05:5a:8e:97:32:88:09:84:a2:55: 32:6e:7f:d7:f9:00:87:d8:a1:d7:64:a8:97:93:a2:07:be:4b: 4a:98:53:66:6a:cf:da:9d:9b:ff:c4:b7:33:89:d5:3a:3c:6b: b6:c2:bc:6b -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt5ESH/OCnHX0hKj7CAz/FmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0OWZmNDA4MzFjYTY2Zjk5NmM3NmVhNDY2YWY0OTQ3NmZl Y2QxZmYwHhcNMjYwMTAxMTAxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OGU2NDYzN2FmMGU0NDJmZGY4ZDJkMGQ3MmE0YTMzNDM1NTcyOWE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4tRb0n1SQ9tkJQhUJT0yIcsey73q RDYrTi7yjF8wZ/R3qGUfU2jA69d6fT9DWFK/hFd380FzHTd8nLGLY4Q/kdsgWZFJ W8ftSumroV8QwmAblDY0yb0QRbgsR70GLchvL6p9RvweDHUgYoN7BYGOQnY8qzs0 N0VMxS80ekNq1/G5lpzL5FvjZW3b46pYAO/DEmilp5ITcbQSbePP89lxtl6lW3Q1 8BOWvnxYWaa4mclWrlGKYNiFOxm0j14glVZ4R2TPXGdocQuEY1toh3dN4IK17xAp lSFnOTCrLx1SVmsPFPzmg19KOkEei39qEeGPDOaf1zToZeayiPWt/tA4EwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFFjmRjevDkQv340tDXKkozQ1VymmMB8GA1UdIwQY MBaAFJSf9Agxymb5lsdupGavSUdv7NH/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEpfMENESEtadm1XeDI2a1pxOUpSMl9zMGY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS81NWQxMGQtYjQ0OC00YjQ3LWJhNTgt MTQ3YWRjOTBjYTBmLzEvV09aR042OE9SQ19malMwTmNxU2pORFZYS2FZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS81NWQxMGQtYjQ0OC00YjQ3LWJhNTgtMTQ3YWRjOTBjYTBm LzEvbEpfMENESEtadm1XeDI2a1pxOUpSMl9zMGY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjASBAIAATAMAwQAJd10AwQA wSGMMBQEAgACMA4DBQAqCQUAAwUAKg+ugDANBgkqhkiG9w0BAQsFAAOCAQEAHxDz /10f6S6Q4WFKAIVxn1xtyE1I7ssMh+RdKASKezUiGDe0XYEjkkjoBDNjGBCX23te magccIj9ugMEFwPIz/dO0vJKwN+E+peFjSB3T1zAusaIdunCz0zWOcAZoD2nj7tV DToYLpmz+NGJC99lncMgP+/FXKs1qHDbPf/yo7+NH9qdcNqIcQTkyV3QpG1HbUTE eL6IA2i45OvYLoeEAWm9opGJQClY3J6l/XLsm0nDRhS6C+/ie2LnF818BDKCrYaT OJ35ezd1z1U6HsQFWo6XMogJhKJVMm5/1/kAh9ih12Sol5OiB75LSphTZmrP2p2b /8S3M4nVOjxrtsK8aw== -----END CERTIFICATE-----Generated at Tue Feb 10 06:24:20 2026 by rpki-client