This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/PWFCC016ViMQwsbajGFaPsVXWpU.roa File: PWFCC016ViMQwsbajGFaPsVXWpU.roa (raw, json) Hash identifier: XU7EaVjH4kPpzpd1I6Ws6W/k6BLYUdpZHPYkfznROSU= Subject key identifier: 3D:61:42:0B:4D:7A:56:23:10:C2:C6:DA:8C:61:5A:3E:C5:57:5A:95 Certificate issuer: /CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab Certificate serial: 019B7E38894B7E4D35B03DED6D526CCD8C19 Authority key identifier: 2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/PWFCC016ViMQwsbajGFaPsVXWpU.roa Signing time: Fri 02 Jan 2026 10:19:52 +0000 ROA not before: Fri 02 Jan 2026 10:19:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61250 IP address blocks: 89.43.14.0/23 maxlen: 23 89.43.14.0/24 maxlen: 24 89.43.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:89:4b:7e:4d:35:b0:3d:ed:6d:52:6c:cd:8c:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab Validity Not Before: Jan 2 10:19:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3d61420b4d7a562310c2c6da8c615a3ec5575a95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:3f:a7:ee:b1:54:41:78:1c:15:43:98:63:e8: 85:f2:48:04:66:41:a2:9e:f1:89:e6:8b:89:f6:1d: 3d:21:d6:51:4c:8b:9d:d9:22:b6:61:4f:44:20:4b: e9:c3:bc:38:17:34:30:03:7c:c3:36:e1:ee:3f:e1: 82:db:e5:b4:62:5e:b8:c5:28:58:31:f4:3a:80:f0: 58:71:3f:07:49:a0:5c:8f:0f:ae:73:17:39:8f:4f: 41:7a:9a:8b:8f:f7:e4:fd:01:58:6d:de:cf:6a:0c: 75:31:f3:fc:05:b8:18:2c:60:2e:35:0e:ad:c3:39: e3:f3:b7:c6:83:d3:32:99:2f:51:e3:56:4a:72:2e: 91:02:d9:1a:2f:d7:20:6e:d7:25:4c:3b:59:25:85: 22:0c:d8:17:8f:52:3c:8f:ba:66:14:3b:ed:88:71: 40:9e:c5:58:dd:e4:f6:da:33:ad:4a:30:c8:b2:ac: 57:eb:1d:d2:53:16:90:3f:82:d9:15:38:2b:8e:0f: 81:22:74:2d:4a:42:e5:a7:46:1e:63:2b:0c:18:07: 7e:cb:80:50:68:20:76:41:f5:50:a6:c7:21:ea:d6: 17:77:49:98:53:67:c1:bb:73:65:85:80:da:02:13: 19:fa:f8:9d:ac:6b:99:c5:10:e9:ce:30:85:39:9d: e4:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:61:42:0B:4D:7A:56:23:10:C2:C6:DA:8C:61:5A:3E:C5:57:5A:95 X509v3 Authority Key Identifier: keyid:2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/PWFCC016ViMQwsbajGFaPsVXWpU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.43.14.0/23 Signature Algorithm: sha256WithRSAEncryption 1a:88:c6:6b:54:5b:6a:0b:8d:12:13:fb:8a:76:c1:b9:33:9d: 33:53:72:ac:4f:de:a2:14:3d:4b:63:b0:84:27:f5:78:4c:e9: f8:d5:1b:17:e4:59:be:05:1d:fb:e2:3b:dd:9d:f3:d8:35:d5: c1:8b:e5:4e:c8:e5:29:7b:7a:02:b0:16:42:ab:12:ec:e2:72: 87:5c:83:e6:ab:c1:f8:1a:4c:df:8f:17:41:ca:3f:0c:37:06: 5b:b6:39:7f:fa:62:d2:f8:60:30:03:3a:74:f7:71:3b:36:7e: 9b:16:a7:cc:b2:82:5c:c8:fc:12:1c:f5:d6:27:85:3e:58:56: e9:23:ca:4a:30:89:26:14:31:bb:31:fe:db:0c:2f:9e:0a:ab: b4:ef:6a:e5:82:ff:9c:51:27:8c:c1:f3:26:41:3e:ff:be:cb: b1:0b:c5:78:66:ca:0e:fa:35:6f:da:ec:40:cc:91:25:a7:b4: 66:5d:9c:1c:86:f3:ae:45:64:86:a6:8e:5d:8e:86:75:1d:7a: 66:56:45:94:b6:9f:6c:1a:e8:d6:38:40:92:12:de:fc:d5:dd: 98:e0:1d:24:cf:c4:9f:61:ad:81:06:a5:d3:5e:e2:de:a8:79: 35:32:8b:58:3c:d7:2c:66:97:38:5f:cf:93:fb:1b:ec:fc:02: 2e:f7:28:bc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OIlLfk01sD3tbVJszYwZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmNmE0MzRjNGI1ZDIzOWM0ZTZlNDFiN2U1ODVjOGQ1OGY4 OTk1YWIwHhcNMjYwMTAyMTAxOTUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZDYxNDIwYjRkN2E1NjIzMTBjMmM2ZGE4YzYxNWEzZWM1NTc1YTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApz+n7rFUQXgcFUOYY+iF8kgEZkGi nvGJ5ouJ9h09IdZRTIud2SK2YU9EIEvpw7w4FzQwA3zDNuHuP+GC2+W0Yl64xShY MfQ6gPBYcT8HSaBcjw+ucxc5j09BepqLj/fk/QFYbd7Pagx1MfP8BbgYLGAuNQ6t wznj87fGg9MymS9R41ZKci6RAtkaL9cgbtclTDtZJYUiDNgXj1I8j7pmFDvtiHFA nsVY3eT22jOtSjDIsqxX6x3SUxaQP4LZFTgrjg+BInQtSkLlp0YeYysMGAd+y4BQ aCB2QfVQpsch6tYXd0mYU2fBu3NlhYDaAhMZ+vidrGuZxRDpzjCFOZ3kfQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD1hQgtNelYjEMLG2oxhWj7FV1qVMB8GA1UdIwQY MBaAFC9qQ0xLXSOcTm5Bt+WFyNWPiZWrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDJwRFRFdGRJNXhPYmtHMzVZWEkxWS1KbGFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS85OGFiZTUtYmQwMS00NjRmLTk2YWIt NDBiNmQ2N2ZjZDk0LzEvUFdGQ0MwMTZWaU1Rd3NiYWpHRmFQc1ZYV3BVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS85OGFiZTUtYmQwMS00NjRmLTk2YWItNDBiNmQ2N2ZjZDk0 LzEvTDJwRFRFdGRJNXhPYmtHMzVZWEkxWS1KbGFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBWSsOMA0G CSqGSIb3DQEBCwUAA4IBAQAaiMZrVFtqC40SE/uKdsG5M50zU3KsT96iFD1LY7CE J/V4TOn41RsX5Fm+BR374jvdnfPYNdXBi+VOyOUpe3oCsBZCqxLs4nKHXIPmq8H4 GkzfjxdByj8MNwZbtjl/+mLS+GAwAzp093E7Nn6bFqfMsoJcyPwSHPXWJ4U+WFbp I8pKMIkmFDG7Mf7bDC+eCqu072rlgv+cUSeMwfMmQT7/vsuxC8V4ZsoO+jVv2uxA zJElp7RmXZwchvOuRWSGpo5djoZ1HXpmVkWUtp9sGujWOECSEt781d2Y4B0kz8Sf Ya2BBqXTXuLeqHk1MotYPNcsZpc4X8+T+xvs/AIu9yi8 -----END CERTIFICATE-----Generated at Mon Jan 26 08:37:46 2026 by rpki-client