This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/WIU1DNwsNS-OzQbytB3duNhBVS8.roa File: WIU1DNwsNS-OzQbytB3duNhBVS8.roa (raw, json) Hash identifier: jns1KbD6SF+GKkZuJNb7baqbvW129y8zO9MgU0XvJhw= Subject key identifier: 58:85:35:0C:DC:2C:35:2F:8E:CD:06:F2:B4:1D:DD:B8:D8:41:55:2F Certificate issuer: /CN=d0baab9bd8c69d07b6501147543df74270a33a21 Certificate serial: 019B081506FA24A6CCB9B355BEF431F3E279 Authority key identifier: D0:BA:AB:9B:D8:C6:9D:07:B6:50:11:47:54:3D:F7:42:70:A3:3A:21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Lqrm9jGnQe2UBFHVD33QnCjOiE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/WIU1DNwsNS-OzQbytB3duNhBVS8.roa Signing time: Wed 10 Dec 2025 11:45:54 +0000 ROA not before: Wed 10 Dec 2025 11:45:54 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 43211 IP address blocks: 185.188.104.0/22 maxlen: 24 185.188.104.0/24 maxlen: 24 185.188.105.0/24 maxlen: 24 185.188.106.0/24 maxlen: 24 185.188.107.0/24 maxlen: 24 2a0b:be80::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.mft rsync://rpki.ripe.net/repository/DEFAULT/0Lqrm9jGnQe2UBFHVD33QnCjOiE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:08:15:06:fa:24:a6:cc:b9:b3:55:be:f4:31:f3:e2:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0baab9bd8c69d07b6501147543df74270a33a21 Validity Not Before: Dec 10 11:45:54 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5885350cdc2c352f8ecd06f2b41dddb8d841552f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:27:87:64:96:f6:95:89:2f:eb:15:d9:1e:eb: 32:2c:f6:69:86:63:5c:69:6a:15:1c:f0:81:d3:1b: 76:92:f0:9e:83:e1:01:8a:8a:22:65:8a:b9:6f:fb: 75:22:28:3d:61:51:ad:59:37:b8:91:ce:6b:93:72: 5d:a7:c5:62:64:16:1a:6a:83:69:45:0a:8b:c9:67: 3e:83:cc:1b:d3:a1:db:2b:71:6c:9b:5a:87:55:6e: 56:53:83:b2:a2:61:91:1b:f3:57:d1:70:77:df:d1: f2:9c:08:d2:94:73:8c:77:65:b6:e3:90:43:60:95: 29:78:3c:8d:62:1c:8e:b4:64:69:28:3a:3c:4e:f5: 80:43:c6:5b:3e:18:c4:80:8a:ca:7c:28:6b:89:8e: de:81:bc:2f:e7:de:47:84:0c:ac:89:a3:5f:a5:6b: 7d:64:48:19:e7:e0:52:7a:b9:41:b5:2f:9e:c4:af: 2c:36:ff:ed:af:0a:a2:53:95:57:b3:fe:ce:0d:e2: b0:74:14:6a:5b:a7:ba:37:3f:3f:99:c2:66:73:1d: a3:18:2d:4a:8c:0d:aa:67:11:a4:aa:ec:3c:b1:85: 17:5e:9b:87:ad:f4:87:83:6e:3f:48:d0:c1:e4:48: f7:29:8d:7e:57:9f:bb:40:da:1e:77:8d:fb:bf:8a: 4c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:85:35:0C:DC:2C:35:2F:8E:CD:06:F2:B4:1D:DD:B8:D8:41:55:2F X509v3 Authority Key Identifier: keyid:D0:BA:AB:9B:D8:C6:9D:07:B6:50:11:47:54:3D:F7:42:70:A3:3A:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Lqrm9jGnQe2UBFHVD33QnCjOiE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/WIU1DNwsNS-OzQbytB3duNhBVS8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.188.104.0/22 IPv6: 2a0b:be80::/29 Signature Algorithm: sha256WithRSAEncryption 83:3b:f9:1c:90:3d:f7:0a:32:5b:f6:c3:be:f9:3a:ca:89:7c: f4:13:e2:28:af:24:16:f3:a8:d0:d3:a9:24:46:d1:c0:a1:43: 0d:01:88:a1:c1:00:c1:ea:e1:92:fe:5f:f8:74:7b:26:f8:19: 8e:18:32:2d:70:67:62:52:11:4d:10:a3:4a:a8:ed:4a:d8:1c: f1:70:55:01:6d:36:cf:b4:03:fb:c5:f4:c2:15:32:48:87:cb: 6d:55:d0:07:ee:5b:ac:ee:3a:63:0d:08:f1:5e:c1:51:3b:b7: b1:8c:81:57:3f:16:6f:48:b7:10:69:31:e5:a8:83:d0:09:16: 0e:02:12:f1:f2:c2:42:71:87:97:3e:14:b6:22:da:cf:a3:12: 7e:d1:8b:ba:dd:5d:86:6f:d0:01:f8:cf:64:db:b1:b6:e8:d8: 9d:f0:36:88:fd:ee:6f:88:bc:ff:e6:64:d1:7f:c2:69:80:02: b9:85:2b:d3:21:c1:e8:7e:62:bd:78:8a:71:c7:2a:2a:fa:eb: 85:93:9b:7d:16:18:d2:fd:e1:71:4b:a2:aa:cf:d5:44:1d:33: 2c:03:bd:a8:74:d9:3f:9d:af:ce:15:80:85:be:af:ac:33:69: d8:37:20:db:83:18:70:e8:8e:bf:55:b7:fb:0a:00:18:cd:11: c4:f4:54:84 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZsIFQb6JKbMubNVvvQx8+J5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwYmFhYjliZDhjNjlkMDdiNjUwMTE0NzU0M2RmNzQyNzBh MzNhMjEwHhcNMjUxMjEwMTE0NTU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ODg1MzUwY2RjMmMzNTJmOGVjZDA2ZjJiNDFkZGRiOGQ4NDE1NTJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1yeHZJb2lYkv6xXZHusyLPZphmNc aWoVHPCB0xt2kvCeg+EBiooiZYq5b/t1Iig9YVGtWTe4kc5rk3Jdp8ViZBYaaoNp RQqLyWc+g8wb06HbK3Fsm1qHVW5WU4OyomGRG/NX0XB339HynAjSlHOMd2W245BD YJUpeDyNYhyOtGRpKDo8TvWAQ8ZbPhjEgIrKfChriY7egbwv595HhAysiaNfpWt9 ZEgZ5+BSerlBtS+exK8sNv/trwqiU5VXs/7ODeKwdBRqW6e6Nz8/mcJmcx2jGC1K jA2qZxGkquw8sYUXXpuHrfSHg24/SNDB5Ej3KY1+V5+7QNoed437v4pMFQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFFiFNQzcLDUvjs0G8rQd3bjYQVUvMB8GA1UdIwQY MBaAFNC6q5vYxp0HtlARR1Q990JwozohMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMExxcm05akduUWUyVUJGSFZEMzNRbkNqT2lFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi85MTk5ZWItZThlYi00MDRkLTg5NTUt OWJkNWQ1MTM4MDU5LzEvV0lVMUROd3NOUy1PelFieXRCM2R1TmhCVlM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi85MTk5ZWItZThlYi00MDRkLTg5NTUtOWJkNWQ1MTM4MDU5 LzEvMExxcm05akduUWUyVUJGSFZEMzNRbkNqT2lFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCubxoMA0E AgACMAcDBQMqC76AMA0GCSqGSIb3DQEBCwUAA4IBAQCDO/kckD33CjJb9sO++TrK iXz0E+IoryQW86jQ06kkRtHAoUMNAYihwQDB6uGS/l/4dHsm+BmOGDItcGdiUhFN EKNKqO1K2BzxcFUBbTbPtAP7xfTCFTJIh8ttVdAH7lus7jpjDQjxXsFRO7exjIFX PxZvSLcQaTHlqIPQCRYOAhLx8sJCcYeXPhS2ItrPoxJ+0Yu63V2Gb9AB+M9k27G2 6Nid8DaI/e5viLz/5mTRf8JpgAK5hSvTIcHofmK9eIpxxyoq+uuFk5t9FhjS/eFx S6Kqz9VEHTMsA72odNk/na/OFYCFvq+sM2nYNyDbgxhw6I6/Vbf7CgAYzRHE9FSE -----END CERTIFICATE-----Generated at Fri Dec 19 07:14:36 2025 by rpki-client