This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/WSoyFsUkPtTH5GPtVnmww05vFh0.roa File: WSoyFsUkPtTH5GPtVnmww05vFh0.roa (raw, json) Hash identifier: xtuU58lDieJuv/Yy7w3S0c+KdkmwGfK0iLB0R2OEp6Y= Subject key identifier: 59:2A:32:16:C5:24:3E:D4:C7:E4:63:ED:56:79:B0:C3:4E:6F:16:1D Certificate issuer: /CN=896d5866c35093352e7b9e0762c591e08e50f967 Certificate serial: 019B7FF208B5CBD3837AA43C0827F8B09125 Authority key identifier: 89:6D:58:66:C3:50:93:35:2E:7B:9E:07:62:C5:91:E0:8E:50:F9:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iW1YZsNQkzUue54HYsWR4I5Q-Wc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/WSoyFsUkPtTH5GPtVnmww05vFh0.roa Signing time: Fri 02 Jan 2026 18:22:06 +0000 ROA not before: Fri 02 Jan 2026 18:22:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60092 IP address blocks: 91.195.24.0/23 maxlen: 23 91.195.24.0/24 maxlen: 24 91.195.25.0/24 maxlen: 24 193.151.20.0/22 maxlen: 22 193.151.20.0/24 maxlen: 24 193.151.21.0/24 maxlen: 24 193.151.22.0/24 maxlen: 24 193.151.23.0/24 maxlen: 24 2001:67c:2c88::/47 maxlen: 47 2001:67c:2c88::/48 maxlen: 48 2001:67c:2c89::/48 maxlen: 48 2001:67c:2c90::/46 maxlen: 46 2001:67c:2c90::/48 maxlen: 48 2001:67c:2c91::/48 maxlen: 48 2001:67c:2c92::/48 maxlen: 48 2001:67c:2c93::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/iW1YZsNQkzUue54HYsWR4I5Q-Wc.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/iW1YZsNQkzUue54HYsWR4I5Q-Wc.mft rsync://rpki.ripe.net/repository/DEFAULT/iW1YZsNQkzUue54HYsWR4I5Q-Wc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:08:b5:cb:d3:83:7a:a4:3c:08:27:f8:b0:91:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=896d5866c35093352e7b9e0762c591e08e50f967 Validity Not Before: Jan 2 18:22:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=592a3216c5243ed4c7e463ed5679b0c34e6f161d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:4f:15:e0:0d:3e:d6:56:eb:e7:6d:42:9c:c3: 0e:e3:07:8b:33:4f:0b:e4:0d:cc:d0:8a:5f:5f:07: 03:a3:c9:42:2b:3e:36:a4:e2:28:32:01:5b:63:ef: be:f5:8d:6b:e4:6f:83:10:77:1c:e3:0d:2d:5c:8e: 6e:d9:7a:36:59:e5:cc:78:0f:25:3f:21:1a:1d:0b: 5e:79:ed:91:18:c4:e8:76:1c:33:51:06:22:a5:2a: 67:64:3c:0c:6e:c5:55:70:0d:d0:34:ac:cc:54:d6: d9:15:1a:97:86:5d:d3:4a:65:b0:e4:af:f8:6b:e6: f2:c8:11:f8:20:f7:30:95:6e:d5:48:5d:64:ff:29: 9d:ff:7d:fc:a4:ea:e0:bc:f2:dd:5d:a5:20:9a:c7: 67:0c:3d:5f:a2:c8:51:6d:ca:14:f4:43:01:ea:0c: e3:cd:5b:e5:0d:86:84:2a:72:39:d9:92:c2:31:d4: e9:03:26:78:16:72:a0:b9:fa:c5:ff:9d:3f:bc:49: 37:16:dd:15:dd:f6:62:fa:07:76:cb:7a:f3:d2:47: 56:28:b3:2a:f8:7d:8c:bf:0e:21:d8:eb:6a:91:0b: 0c:84:8b:13:c1:2b:d4:90:2b:6f:75:39:b7:01:28: fa:b4:e9:bc:1c:7c:a9:eb:d8:b5:b2:f0:45:e5:b0: f4:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:2A:32:16:C5:24:3E:D4:C7:E4:63:ED:56:79:B0:C3:4E:6F:16:1D X509v3 Authority Key Identifier: keyid:89:6D:58:66:C3:50:93:35:2E:7B:9E:07:62:C5:91:E0:8E:50:F9:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iW1YZsNQkzUue54HYsWR4I5Q-Wc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/WSoyFsUkPtTH5GPtVnmww05vFh0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/iW1YZsNQkzUue54HYsWR4I5Q-Wc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.195.24.0/23 193.151.20.0/22 IPv6: 2001:67c:2c88::/47 2001:67c:2c90::/46 Signature Algorithm: sha256WithRSAEncryption 29:14:b5:02:14:46:7a:2e:c6:ff:85:c1:cf:6b:1c:7e:7e:cf: bb:e3:b0:e9:7e:ab:80:c6:3c:29:e2:f9:25:f7:c5:30:56:89: d9:b8:ef:e5:d0:74:b1:25:fd:b2:b2:82:00:1b:91:f0:63:69: da:c1:a5:7a:53:fa:cb:41:db:5f:3a:b7:32:2e:ff:12:d8:85: 82:5d:32:9a:85:a6:0b:ad:cf:1e:47:7c:44:af:89:9a:7d:33: 23:7c:f9:eb:40:e9:61:ef:ac:77:11:ee:a0:5a:cb:fc:4a:83: 09:a3:48:23:02:9e:30:22:ad:69:dc:62:81:4e:a1:a0:e4:6b: fa:e7:2e:aa:f6:3b:f4:65:d8:5c:63:44:23:6a:f2:94:92:42: 9f:36:4f:38:80:f3:1d:7f:8a:d7:db:6d:5e:c3:fa:cd:b0:7f: 92:cb:5d:a9:ba:4b:be:e5:fd:5a:d7:54:ce:49:42:7e:d7:59: 93:f3:11:c5:e5:6c:8d:98:81:19:90:33:af:d9:15:79:0b:01: fa:70:02:b8:d4:ce:6f:34:ac:e4:8a:72:03:92:07:d9:f5:6a: 91:66:d3:1a:8c:3f:70:02:92:52:e3:4e:2d:17:f8:cc:12:b5: 3b:c6:ca:02:c8:d7:01:90:1e:89:d8:c8:08:f9:3b:a1:8d:a9: fa:94:53:ab -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZt/8gi1y9ODeqQ8CCf4sJElMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5NmQ1ODY2YzM1MDkzMzUyZTdiOWUwNzYyYzU5MWUwOGU1 MGY5NjcwHhcNMjYwMTAyMTgyMjA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OTJhMzIxNmM1MjQzZWQ0YzdlNDYzZWQ1Njc5YjBjMzRlNmYxNjFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw08V4A0+1lbr521CnMMO4weLM08L 5A3M0IpfXwcDo8lCKz42pOIoMgFbY+++9Y1r5G+DEHcc4w0tXI5u2Xo2WeXMeA8l PyEaHQteee2RGMTodhwzUQYipSpnZDwMbsVVcA3QNKzMVNbZFRqXhl3TSmWw5K/4 a+byyBH4IPcwlW7VSF1k/ymd/338pOrgvPLdXaUgmsdnDD1foshRbcoU9EMB6gzj zVvlDYaEKnI52ZLCMdTpAyZ4FnKgufrF/50/vEk3Ft0V3fZi+gd2y3rz0kdWKLMq +H2Mvw4h2OtqkQsMhIsTwSvUkCtvdTm3ASj6tOm8HHyp69i1svBF5bD08wIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFFkqMhbFJD7Ux+Rj7VZ5sMNObxYdMB8GA1UdIwQY MBaAFIltWGbDUJM1LnueB2LFkeCOUPlnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVcxWVpzTlFrelV1ZTU0SFlzV1I0STVRLVdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi85ZDhmMjEtYjI3Zi00MzVkLWE3YjUt Nzg0NjI0YTdiNDdlLzEvV1NveUZzVWtQdFRINUdQdFZubXd3MDV2RmgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi85ZDhmMjEtYjI3Zi00MzVkLWE3YjUtNzg0NjI0YTdiNDdl LzEvaVcxWVpzTlFrelV1ZTU0SFlzV1I0STVRLVdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjASBAIAATAMAwQBW8MYAwQC wZcUMBgEAgACMBIDBwEgAQZ8LIgDBwIgAQZ8LJAwDQYJKoZIhvcNAQELBQADggEB ACkUtQIURnouxv+Fwc9rHH5+z7vjsOl+q4DGPCni+SX3xTBWidm47+XQdLEl/bKy ggAbkfBjadrBpXpT+stB2186tzIu/xLYhYJdMpqFpgutzx5HfESviZp9MyN8+etA 6WHvrHcR7qBay/xKgwmjSCMCnjAirWncYoFOoaDka/rnLqr2O/Rl2FxjRCNq8pSS Qp82TziA8x1/itfbbV7D+s2wf5LLXam6S77l/VrXVM5JQn7XWZPzEcXlbI2YgRmQ M6/ZFXkLAfpwArjUzm80rOSKcgOSB9n1apFm0xqMP3ACklLjTi0X+MwStTvGygLI 1wGQHonYyAj5O6GNqfqUU6s= -----END CERTIFICATE-----Generated at Tue Feb 10 00:28:48 2026 by rpki-client