This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/WVIppZ-adXM0RCbFNu2ZaCBfuZQ.roa File: WVIppZ-adXM0RCbFNu2ZaCBfuZQ.roa (raw, json) Hash identifier: hwZIh3ZVsKyRI6oFuWtqGMKZtqEO+xpper2aZGmlvQM= Subject key identifier: 59:52:29:A5:9F:9A:75:73:34:44:26:C5:36:ED:99:68:20:5F:B9:94 Certificate issuer: /CN=2b003e583bdb2511ff57ab7a32fce741334b343b Certificate serial: 019B76EB8C16DF71A004A7DBD1A34D4BD571 Authority key identifier: 2B:00:3E:58:3B:DB:25:11:FF:57:AB:7A:32:FC:E7:41:33:4B:34:3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KwA-WDvbJRH_V6t6MvznQTNLNDs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/WVIppZ-adXM0RCbFNu2ZaCBfuZQ.roa Signing time: Thu 01 Jan 2026 00:18:26 +0000 ROA not before: Thu 01 Jan 2026 00:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51349 IP address blocks: 185.83.4.0/22 maxlen: 22 185.83.4.0/24 maxlen: 24 195.43.86.0/23 maxlen: 23 2a00:c3a0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/KwA-WDvbJRH_V6t6MvznQTNLNDs.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/KwA-WDvbJRH_V6t6MvznQTNLNDs.mft rsync://rpki.ripe.net/repository/DEFAULT/KwA-WDvbJRH_V6t6MvznQTNLNDs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:8c:16:df:71:a0:04:a7:db:d1:a3:4d:4b:d5:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b003e583bdb2511ff57ab7a32fce741334b343b Validity Not Before: Jan 1 00:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=595229a59f9a7573344426c536ed9968205fb994 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:aa:cf:00:08:10:e2:2f:c2:7c:42:c6:35:16: 62:3d:44:da:7a:64:5c:e1:2f:cb:b1:3f:72:08:14: d0:37:99:3a:1c:7e:6e:57:df:91:c2:87:5c:2f:a7: e9:ae:8a:1d:95:b0:7c:3a:ea:2c:69:29:06:42:13: 20:d4:a0:02:80:70:a2:86:ee:47:58:27:76:be:f2: 61:c8:10:1e:62:c5:eb:85:8c:38:f6:9d:da:2a:0b: 5c:8a:61:31:ec:d1:52:0d:e7:79:ae:1f:b7:e4:79: e6:a7:d8:e2:35:95:65:3e:51:e6:f3:01:71:44:0e: 9a:e8:a3:65:c8:41:5a:43:eb:6a:fb:d2:a9:55:56: 04:d8:35:53:b9:24:f6:7a:7b:82:45:18:aa:be:a4: 60:be:60:98:35:6a:a2:fd:c5:ec:a1:06:e1:21:c7: 33:e4:be:4e:36:3d:6a:3a:49:d9:c3:f2:18:24:dd: e3:a6:57:0f:a7:37:a9:56:b3:bf:de:05:6f:ad:de: 25:01:a1:16:b1:8f:06:c6:f0:b2:5a:ac:c1:19:24: 1a:a3:df:c0:4f:b2:ea:9a:b1:84:21:b1:36:02:aa: ef:b7:02:67:96:32:14:4c:cb:c2:76:55:56:21:8f: 3d:c5:87:dd:61:bb:2a:01:57:43:09:0d:43:ee:b7: 0d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:52:29:A5:9F:9A:75:73:34:44:26:C5:36:ED:99:68:20:5F:B9:94 X509v3 Authority Key Identifier: keyid:2B:00:3E:58:3B:DB:25:11:FF:57:AB:7A:32:FC:E7:41:33:4B:34:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KwA-WDvbJRH_V6t6MvznQTNLNDs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/WVIppZ-adXM0RCbFNu2ZaCBfuZQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/KwA-WDvbJRH_V6t6MvznQTNLNDs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.83.4.0/22 195.43.86.0/23 IPv6: 2a00:c3a0::/32 Signature Algorithm: sha256WithRSAEncryption bf:d0:59:6c:f7:c1:d2:ce:23:69:1e:ee:d0:ba:b8:8c:ed:b0: 58:46:2f:17:68:50:b3:85:10:35:ea:19:a8:6d:c6:1a:80:d9: 88:3f:66:be:ae:50:1d:b0:53:79:5c:82:82:f5:72:41:47:5b: b1:2b:9f:04:e8:7d:54:e5:9e:9b:d9:ed:5c:d1:27:de:ed:31: a6:ec:7f:13:4c:2c:d6:85:1a:b3:c4:b1:ba:a5:48:5f:75:6a: 63:e8:36:9d:c2:82:cc:b4:c8:0b:d2:d0:af:05:f9:ef:ba:d4: 2b:62:5b:c7:06:64:cc:79:53:42:85:1b:89:10:b5:e7:09:1d: 32:7d:43:09:40:6a:66:5d:c6:05:8d:f4:04:24:2d:46:44:59: 03:c6:d4:2a:7c:f2:e5:61:44:cb:0e:46:07:6a:ec:98:9d:ed: e7:e5:22:5e:c9:cb:f0:76:e7:46:58:b9:a6:11:12:03:67:51: 75:ee:36:4f:6e:3b:9c:36:f2:d8:93:7d:f7:6d:8c:01:d6:e5: 21:98:6a:02:1f:38:c6:88:5c:49:20:11:3f:e4:b1:34:ec:25: 13:b1:da:9f:c4:ac:77:9e:59:ad:1c:4c:1e:f7:81:9b:db:a4: 30:79:e8:c5:c3:f8:8d:cc:9b:f9:9b:9b:f9:de:10:dd:e0:f0: 81:0d:d3:89 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt264wW33GgBKfb0aNNS9VxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiMDAzZTU4M2JkYjI1MTFmZjU3YWI3YTMyZmNlNzQxMzM0 YjM0M2IwHhcNMjYwMTAxMDAxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OTUyMjlhNTlmOWE3NTczMzQ0NDI2YzUzNmVkOTk2ODIwNWZiOTk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqrPAAgQ4i/CfELGNRZiPUTaemRc 4S/LsT9yCBTQN5k6HH5uV9+RwodcL6fproodlbB8OuosaSkGQhMg1KACgHCihu5H WCd2vvJhyBAeYsXrhYw49p3aKgtcimEx7NFSDed5rh+35Hnmp9jiNZVlPlHm8wFx RA6a6KNlyEFaQ+tq+9KpVVYE2DVTuST2enuCRRiqvqRgvmCYNWqi/cXsoQbhIccz 5L5ONj1qOknZw/IYJN3jplcPpzepVrO/3gVvrd4lAaEWsY8GxvCyWqzBGSQao9/A T7LqmrGEIbE2AqrvtwJnljIUTMvCdlVWIY89xYfdYbsqAVdDCQ1D7rcN3QIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFFlSKaWfmnVzNEQmxTbtmWggX7mUMB8GA1UdIwQY MBaAFCsAPlg72yUR/1erejL850EzSzQ7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3dBLVdEdmJKUkhfVjZ0Nk12em5RVE5MTkRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC8xOTRmMjItODY4OS00ZmRiLTljNDEt MDU4YmJmOWQ1ZTI3LzEvV1ZJcHBaLWFkWE0wUkNiRk51MlphQ0JmdVpRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC8xOTRmMjItODY4OS00ZmRiLTljNDEtMDU4YmJmOWQ1ZTI3 LzEvS3dBLVdEdmJKUkhfVjZ0Nk12em5RVE5MTkRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuVMEAwQB wytWMA0EAgACMAcDBQAqAMOgMA0GCSqGSIb3DQEBCwUAA4IBAQC/0Fls98HSziNp Hu7QuriM7bBYRi8XaFCzhRA16hmobcYagNmIP2a+rlAdsFN5XIKC9XJBR1uxK58E 6H1U5Z6b2e1c0Sfe7TGm7H8TTCzWhRqzxLG6pUhfdWpj6DadwoLMtMgL0tCvBfnv utQrYlvHBmTMeVNChRuJELXnCR0yfUMJQGpmXcYFjfQEJC1GRFkDxtQqfPLlYUTL DkYHauyYne3n5SJeycvwdudGWLmmERIDZ1F17jZPbjucNvLYk333bYwB1uUhmGoC HzjGiFxJIBE/5LE07CUTsdqfxKx3nlmtHEwe94Gb26QweejFw/iNzJv5m5v53hDd 4PCBDdOJ -----END CERTIFICATE-----Generated at Sun Jan 25 17:20:10 2026 by rpki-client