This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/Wuk47zfBRWYHE9njLU607JcfXpQ.roa File: Wuk47zfBRWYHE9njLU607JcfXpQ.roa (raw, json) Hash identifier: 6fNjTtf4wJd96VH0XZv0id/6m0zZsxBTSTknUykV/zs= Subject key identifier: 5A:E9:38:EF:37:C1:45:66:07:13:D9:E3:2D:4E:B4:EC:97:1F:5E:94 Certificate issuer: /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1 Certificate serial: 019B7BA39BD0357D70133ABE25EFC37F06E0 Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/Wuk47zfBRWYHE9njLU607JcfXpQ.roa Signing time: Thu 01 Jan 2026 22:17:58 +0000 ROA not before: Thu 01 Jan 2026 22:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51431 IP address blocks: 89.235.78.0/23 maxlen: 24 188.75.78.0/23 maxlen: 24 213.195.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:9b:d0:35:7d:70:13:3a:be:25:ef:c3:7f:06:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1 Validity Not Before: Jan 1 22:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5ae938ef37c145660713d9e32d4eb4ec971f5e94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:5b:0e:4a:05:2e:36:5d:29:d4:36:8f:0f:82: b6:1b:ad:5f:10:e1:97:d8:ac:ee:9d:6e:05:a2:22: e6:92:da:90:5e:d2:8d:86:fd:70:26:7c:c2:d2:00: ca:31:94:b7:02:f1:c6:8d:5a:c3:08:c6:b0:2c:4f: 8e:eb:0a:99:b8:98:84:46:01:c3:3a:e7:68:10:2c: dd:46:2c:8e:29:c8:25:db:d5:8c:9d:4f:c4:ca:d9: 25:dc:b1:89:98:4d:9e:c7:69:c9:64:27:1e:c3:72: e2:14:99:2c:d1:03:57:f2:e2:74:15:6e:40:71:4e: f2:ad:2c:cc:1e:1f:61:a0:76:21:4b:11:76:ce:da: 33:bb:b5:a5:8f:37:76:61:31:58:7b:72:fe:48:6c: 8e:2c:d0:64:d5:5b:0c:bc:ce:12:e8:af:be:66:2a: d1:b5:b2:66:4a:06:c0:b0:20:e6:f2:5c:63:fb:e4: 54:9f:a8:ef:1c:86:31:39:92:d9:8a:36:8c:20:39: 7a:a4:dc:dd:9f:95:db:fa:62:68:44:27:2e:18:28: 0c:a8:ae:ea:63:ff:86:70:e9:e7:c4:4c:73:5d:1f: 86:2f:b2:48:ce:27:e1:85:bc:36:a7:06:e9:98:a8: b5:d1:57:59:96:db:18:63:11:67:58:2b:58:52:a0: da:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:E9:38:EF:37:C1:45:66:07:13:D9:E3:2D:4E:B4:EC:97:1F:5E:94 X509v3 Authority Key Identifier: keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/Wuk47zfBRWYHE9njLU607JcfXpQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.235.78.0/23 188.75.78.0/23 213.195.22.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:26:7c:62:6a:1a:cc:09:dc:9d:38:88:f8:0d:5d:49:e9:ae: 21:12:7b:93:a0:94:2f:e4:bf:1e:82:e2:26:4f:c9:58:73:ba: 9f:51:c5:da:8d:95:71:c8:42:84:0d:fd:8c:5d:06:52:0a:99: e0:e0:74:21:37:72:19:ac:6e:ad:93:0e:ce:ab:70:84:d7:9c: b6:99:c3:02:c8:c9:98:38:bc:f6:e6:76:87:af:68:14:19:3d: 3d:25:94:b8:77:23:b4:aa:88:3a:f2:98:fb:13:1f:37:19:0f: 25:f2:83:0f:4d:80:84:16:0f:d6:20:9d:45:13:ae:dc:b8:8b: 9e:44:30:f3:a5:06:e5:8f:ea:60:0c:d1:7f:f2:e5:87:57:12: 7b:a4:df:65:03:e9:0d:e8:56:f0:15:c0:c9:6d:e6:24:39:cc: 72:7e:5e:91:0d:1b:ff:0d:60:ea:a0:09:69:68:5c:b9:67:6e: ba:60:06:ac:db:11:ea:2d:48:79:68:07:39:da:17:a3:96:f7: ce:af:85:5c:f5:14:4b:b8:50:95:8e:ce:dd:8c:4e:24:b2:b8: e8:03:8a:71:7c:b9:17:db:c4:ce:9d:2a:38:f6:80:c2:c2:e8: ce:b7:12:b2:78:c3:af:5a:7d:b6:6b:68:d4:ce:2f:34:1a:06: 7a:a3:87:78 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt7o5vQNX1wEzq+Je/DfwbgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViNjk4YzRiNjEyYWZlZTJjYmIxY2RkNTA5ZTRmMDI0NmZi YjgwZTEwHhcNMjYwMTAxMjIxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YWU5MzhlZjM3YzE0NTY2MDcxM2Q5ZTMyZDRlYjRlYzk3MWY1ZTk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFsOSgUuNl0p1DaPD4K2G61fEOGX 2KzunW4FoiLmktqQXtKNhv1wJnzC0gDKMZS3AvHGjVrDCMawLE+O6wqZuJiERgHD OudoECzdRiyOKcgl29WMnU/Eytkl3LGJmE2ex2nJZCcew3LiFJks0QNX8uJ0FW5A cU7yrSzMHh9hoHYhSxF2ztozu7Wljzd2YTFYe3L+SGyOLNBk1VsMvM4S6K++ZirR tbJmSgbAsCDm8lxj++RUn6jvHIYxOZLZijaMIDl6pNzdn5Xb+mJoRCcuGCgMqK7q Y/+GcOnnxExzXR+GL7JIzifhhbw2pwbpmKi10VdZltsYYxFnWCtYUqDavQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFFrpOO83wUVmBxPZ4y1OtOyXH16UMB8GA1UdIwQY MBaAFFtpjEthKv7iy7HN1Qnk8CRvu4DhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzJtTVMyRXFfdUxMc2MzVkNlVHdKRy03Z09FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9jMTZmNTUtYjQ0ZC00MGMzLTlkYWMt Y2MyZmFmZTNhOGI0LzEvV3VrNDd6ZkJSV1lIRTluakxVNjA3SmNmWHBRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS9jMTZmNTUtYjQ0ZC00MGMzLTlkYWMtY2MyZmFmZTNhOGI0 LzEvVzJtTVMyRXFfdUxMc2MzVkNlVHdKRy03Z09FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBWetOAwQB vEtOAwQA1cMWMA0GCSqGSIb3DQEBCwUAA4IBAQA8JnxiahrMCdydOIj4DV1J6a4h EnuToJQv5L8eguImT8lYc7qfUcXajZVxyEKEDf2MXQZSCpng4HQhN3IZrG6tkw7O q3CE15y2mcMCyMmYOLz25naHr2gUGT09JZS4dyO0qog68pj7Ex83GQ8l8oMPTYCE Fg/WIJ1FE67cuIueRDDzpQblj+pgDNF/8uWHVxJ7pN9lA+kN6FbwFcDJbeYkOcxy fl6RDRv/DWDqoAlpaFy5Z266YAas2xHqLUh5aAc52hejlvfOr4Vc9RRLuFCVjs7d jE4ksrjoA4pxfLkX28TOnSo49oDCwujOtxKyeMOvWn22a2jUzi80GgZ6o4d4 -----END CERTIFICATE-----Generated at Sun Jan 25 23:50:05 2026 by rpki-client