This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/wyfjlnYky-rnBOXT5ZHjb0J-F9I.roa File: wyfjlnYky-rnBOXT5ZHjb0J-F9I.roa (raw, json) Hash identifier: XfYB9CaI2N46qtcZ6v9uIjhl1/e0d3UrGQvPezeGBLw= Subject key identifier: C3:27:E3:96:76:24:CB:EA:E7:04:E5:D3:E5:91:E3:6F:42:7E:17:D2 Certificate issuer: /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1 Certificate serial: 019B7C7EF66BDB2ED1DD4CAA3FF1A6733085 Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/wyfjlnYky-rnBOXT5ZHjb0J-F9I.roa Signing time: Fri 02 Jan 2026 02:17:33 +0000 ROA not before: Fri 02 Jan 2026 02:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 834 IP address blocks: 94.124.160.0/24 maxlen: 24 193.160.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7e:f6:6b:db:2e:d1:dd:4c:aa:3f:f1:a6:73:30:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1 Validity Not Before: Jan 2 02:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c327e3967624cbeae704e5d3e591e36f427e17d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:e7:f3:6c:8b:21:26:c6:66:ba:27:f4:99:ba: 4c:d1:15:c6:75:c5:d8:59:26:cf:f4:11:08:d8:26: a1:a2:13:ae:92:1d:d9:4d:b6:54:83:cf:d7:ef:c5: 1a:fb:2c:98:96:de:d8:90:38:3e:bc:0b:ea:48:fc: 15:36:5c:c2:f6:4c:3b:5f:71:a8:2d:fa:b7:1e:47: 8b:a2:46:46:eb:a4:bd:8f:73:99:eb:8b:9e:46:fa: 0e:35:4a:70:5e:44:48:af:6c:6f:45:47:63:9a:82: 97:9e:a6:2c:4f:02:34:7b:76:68:cb:13:a6:29:f1: 36:f4:0a:b2:a3:b7:d4:22:fa:47:d0:bb:e3:8b:70: a9:5a:d6:a6:13:3e:63:f4:7c:e7:22:c5:82:fb:ed: a2:72:d4:ac:7b:b8:9a:02:c2:eb:d0:e9:74:11:93: 0c:95:89:06:e2:d3:4a:d5:95:2b:03:a4:4b:60:47: f0:b3:a7:b1:44:45:b7:94:95:d2:d6:f2:42:a9:bd: 89:d2:c0:fa:2f:15:eb:a4:fa:08:42:b4:2a:32:53: eb:d2:96:23:09:e9:08:f8:62:d4:b0:9e:c0:8b:cd: 62:03:b3:c5:b7:f0:2d:c3:4b:a3:54:33:37:a9:5c: ae:25:ab:c4:18:57:75:af:fb:ff:86:51:12:22:d1: f3:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:27:E3:96:76:24:CB:EA:E7:04:E5:D3:E5:91:E3:6F:42:7E:17:D2 X509v3 Authority Key Identifier: keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/wyfjlnYky-rnBOXT5ZHjb0J-F9I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.124.160.0/24 193.160.8.0/24 Signature Algorithm: sha256WithRSAEncryption 34:39:75:63:ec:d8:ce:75:b4:7a:de:26:55:51:f2:2f:8c:31: bb:51:0f:5d:62:a4:0c:6e:17:d5:ba:93:91:ff:e2:33:9d:36: 0e:64:3e:fb:22:0f:57:81:55:19:7d:a7:3a:da:b7:90:63:4f: 85:00:61:b6:14:67:8c:61:db:b7:5c:ed:d9:cf:c2:8d:70:10: b2:b6:68:b3:ba:a5:82:8a:0a:bd:ac:2d:5b:f4:28:77:23:2c: b9:ef:65:3b:37:8d:62:b2:3a:22:6c:c5:51:e6:d2:49:f6:c5: 48:28:af:99:ad:22:08:aa:b2:f7:fe:9c:26:31:8f:04:4d:f0: 76:68:89:32:7f:0e:cc:7d:7a:e6:c0:37:7d:d9:e3:06:f2:6d: 5f:1f:7e:32:36:2e:43:b9:37:4e:8a:f7:b2:74:d5:93:5d:8c: 65:a6:4e:64:83:62:34:d2:ca:22:b4:ec:c3:b0:7a:0e:1d:89: 8d:bb:6d:43:86:23:01:68:89:8b:e6:25:bf:29:e6:eb:3b:ae: 29:b9:f9:23:c2:2f:07:b3:4d:a3:09:76:4e:42:6d:cd:5b:d9: e8:21:47:d6:a3:bf:35:46:e1:08:ba:92:76:d6:a4:1e:da:4d: bb:61:f1:79:87:5b:a9:5d:a8:08:14:2f:22:12:c6:ba:00:76: 87:4e:a1:d8 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8fvZr2y7R3UyqP/GmczCFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ZDA4YTFlMWNiYzkwOTI1NGU5ZTZiOWM5MzlmZDg1YTI2 OGIxZTEwHhcNMjYwMTAyMDIxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMzI3ZTM5Njc2MjRjYmVhZTcwNGU1ZDNlNTkxZTM2ZjQyN2UxN2QyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3OfzbIshJsZmuif0mbpM0RXGdcXY WSbP9BEI2CahohOukh3ZTbZUg8/X78Ua+yyYlt7YkDg+vAvqSPwVNlzC9kw7X3Go Lfq3HkeLokZG66S9j3OZ64ueRvoONUpwXkRIr2xvRUdjmoKXnqYsTwI0e3ZoyxOm KfE29Aqyo7fUIvpH0Lvji3CpWtamEz5j9HznIsWC++2ictSse7iaAsLr0Ol0EZMM lYkG4tNK1ZUrA6RLYEfws6exREW3lJXS1vJCqb2J0sD6LxXrpPoIQrQqMlPr0pYj CekI+GLUsJ7Ai81iA7PFt/Atw0ujVDM3qVyuJavEGFd1r/v/hlESItHzzwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMMn45Z2JMvq5wTl0+WR429CfhfSMB8GA1UdIwQY MBaAFPTQih4cvJCSVOnmuck5/YWiaLHhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2Ut ZGNlOTQ3ZTI5NGI2LzEvd3lmamxuWWt5LXJuQk9YVDVaSGpiMEotRjlJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2UtZGNlOTQ3ZTI5NGI2 LzEvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXnygAwQA waAIMA0GCSqGSIb3DQEBCwUAA4IBAQA0OXVj7NjOdbR63iZVUfIvjDG7UQ9dYqQM bhfVupOR/+IznTYOZD77Ig9XgVUZfac62reQY0+FAGG2FGeMYdu3XO3Zz8KNcBCy tmizuqWCigq9rC1b9Ch3Iyy572U7N41isjoibMVR5tJJ9sVIKK+ZrSIIqrL3/pwm MY8ETfB2aIkyfw7MfXrmwDd92eMG8m1fH34yNi5DuTdOiveydNWTXYxlpk5kg2I0 0soitOzDsHoOHYmNu21DhiMBaImL5iW/KebrO64pufkjwi8Hs02jCXZOQm3NW9no IUfWo781RuEIupJ21qQe2k27YfF5h1upXagIFC8iEsa6AHaHTqHY -----END CERTIFICATE-----Generated at Sun Jan 25 16:12:34 2026 by rpki-client