This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/wYvIMqVJD5kGsVB7Odk1zqw9PLE.roa File: wYvIMqVJD5kGsVB7Odk1zqw9PLE.roa (raw, json) Hash identifier: lv2FW5IzYlo7gJNIKly5LsLWJkSxo+G8ybKR+UJH+Vg= Subject key identifier: C1:8B:C8:32:A5:49:0F:99:06:B1:50:7B:39:D9:35:CE:AC:3D:3C:B1 Certificate issuer: /CN=5f7da568ad027b9e249c13e223d322769881a29f Certificate serial: 019B77595D70EBA0D90C0608BD0454BC5D14 Authority key identifier: 5F:7D:A5:68:AD:02:7B:9E:24:9C:13:E2:23:D3:22:76:98:81:A2:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/wYvIMqVJD5kGsVB7Odk1zqw9PLE.roa Signing time: Thu 01 Jan 2026 02:18:23 +0000 ROA not before: Thu 01 Jan 2026 02:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204962 IP address blocks: 185.233.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.mft rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:5d:70:eb:a0:d9:0c:06:08:bd:04:54:bc:5d:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f7da568ad027b9e249c13e223d322769881a29f Validity Not Before: Jan 1 02:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c18bc832a5490f9906b1507b39d935ceac3d3cb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:9c:51:b7:49:8c:60:99:fc:15:45:a7:36:08: 5c:ee:3c:dc:58:db:9e:1c:ec:d0:5a:d2:18:86:95: f9:b2:47:8d:ea:28:aa:61:f4:18:21:8f:92:57:f2: 59:38:b2:2d:c9:54:0d:67:73:aa:37:89:f5:af:74: fa:7e:30:b8:a7:1e:4e:9b:bc:3e:3c:72:ef:7c:7a: 1f:9a:99:99:e7:1c:0e:98:f2:c8:ed:44:d2:c9:df: 39:d3:00:a2:f2:fb:26:05:a7:7f:41:4d:bd:e1:00: b4:62:11:5c:e3:3a:e5:64:8d:f7:4c:74:ce:a7:75: d4:4b:b1:c5:21:57:65:9f:fc:82:62:51:39:02:9f: 48:b7:e2:1f:0c:09:8a:cc:56:17:7e:8e:0c:5a:18: 53:70:52:0c:be:0e:37:76:5a:1a:1f:c4:7c:60:50: cb:fb:ae:a6:2e:12:b8:84:bb:67:a1:b9:aa:3c:e8: 7b:66:e8:47:24:f9:65:d8:40:47:06:55:5f:c7:b6: 78:42:66:13:1b:6f:5e:f1:c1:22:39:a2:a2:cf:9f: 57:bb:c2:d7:81:4f:83:df:fc:97:f2:db:9d:4f:90: da:31:76:0f:cc:cd:de:a6:3f:a0:21:15:eb:b5:78: 2d:98:35:b1:20:86:df:8c:53:0d:0d:a2:59:18:74: d9:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:8B:C8:32:A5:49:0F:99:06:B1:50:7B:39:D9:35:CE:AC:3D:3C:B1 X509v3 Authority Key Identifier: keyid:5F:7D:A5:68:AD:02:7B:9E:24:9C:13:E2:23:D3:22:76:98:81:A2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/wYvIMqVJD5kGsVB7Odk1zqw9PLE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.233.156.0/22 Signature Algorithm: sha256WithRSAEncryption 20:4e:71:11:a7:e4:86:10:fe:d8:28:92:f9:c5:ca:3d:28:9d: 44:07:9e:71:ac:1d:dc:34:a3:f4:fd:e9:05:3c:ac:18:72:05: bf:32:42:5a:21:7c:9c:93:4a:f0:85:89:a4:52:c4:9a:8c:30: 7c:c9:c2:eb:6e:f8:4b:cf:19:5c:a9:25:49:6b:59:c5:cf:01: 85:bd:60:2b:e9:aa:b0:99:22:77:37:94:42:5d:81:82:31:6b: 9b:ac:9e:56:d0:30:67:d2:a3:58:7c:62:8f:3d:a4:f3:3d:ee: aa:ca:ab:8c:b9:ca:41:5a:cc:69:9b:fc:76:9c:5c:ff:e4:35: 96:22:6b:c0:3c:70:1b:5a:0d:fa:b4:cb:22:84:21:54:2e:6e: fb:8f:03:a2:1d:75:37:09:cb:10:90:1f:85:8c:d2:85:7c:c6: 40:17:1b:09:ff:c0:11:b6:26:af:be:bc:3c:b3:18:f7:d1:c6: 3d:f1:04:4d:28:eb:ac:2c:8a:7d:31:28:4b:5e:45:d1:00:ea: 9f:a1:68:97:ca:3f:00:a3:c3:bb:d1:2e:95:e2:1d:ae:01:aa: 7c:31:d6:51:d3:ae:ed:50:ea:aa:9c:7e:3d:25:5a:b6:1d:7f: 60:79:2d:59:ab:b1:cc:01:a4:b9:e4:a3:cc:42:85:4b:48:ec: 12:7c:ae:c3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WV1w66DZDAYIvQRUvF0UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmN2RhNTY4YWQwMjdiOWUyNDljMTNlMjIzZDMyMjc2OTg4 MWEyOWYwHhcNMjYwMTAxMDIxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMThiYzgzMmE1NDkwZjk5MDZiMTUwN2IzOWQ5MzVjZWFjM2QzY2IxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpxRt0mMYJn8FUWnNghc7jzcWNue HOzQWtIYhpX5skeN6iiqYfQYIY+SV/JZOLItyVQNZ3OqN4n1r3T6fjC4px5Om7w+ PHLvfHofmpmZ5xwOmPLI7UTSyd850wCi8vsmBad/QU294QC0YhFc4zrlZI33THTO p3XUS7HFIVdln/yCYlE5Ap9It+IfDAmKzFYXfo4MWhhTcFIMvg43dloaH8R8YFDL +66mLhK4hLtnobmqPOh7ZuhHJPll2EBHBlVfx7Z4QmYTG29e8cEiOaKiz59Xu8LX gU+D3/yX8tudT5DaMXYPzM3epj+gIRXrtXgtmDWxIIbfjFMNDaJZGHTZsQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMGLyDKlSQ+ZBrFQeznZNc6sPTyxMB8GA1UdIwQY MBaAFF99pWitAnueJJwT4iPTInaYgaKfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDMybGFLMENlNTRrbkJQaUk5TWlkcGlCb3A4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8wNTQ4OGYtZjRlMC00ZTZjLTk0ZjUt Mzc1NzUzOWMyYWM5LzEvd1l2SU1xVkpENWtHc1ZCN09kazF6cXc5UExFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS8wNTQ4OGYtZjRlMC00ZTZjLTk0ZjUtMzc1NzUzOWMyYWM5 LzEvWDMybGFLMENlNTRrbkJQaUk5TWlkcGlCb3A4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuemcMA0G CSqGSIb3DQEBCwUAA4IBAQAgTnERp+SGEP7YKJL5xco9KJ1EB55xrB3cNKP0/ekF PKwYcgW/MkJaIXyck0rwhYmkUsSajDB8ycLrbvhLzxlcqSVJa1nFzwGFvWAr6aqw mSJ3N5RCXYGCMWubrJ5W0DBn0qNYfGKPPaTzPe6qyquMucpBWsxpm/x2nFz/5DWW ImvAPHAbWg36tMsihCFULm77jwOiHXU3CcsQkB+FjNKFfMZAFxsJ/8ARtiavvrw8 sxj30cY98QRNKOusLIp9MShLXkXRAOqfoWiXyj8Ao8O70S6V4h2uAap8MdZR067t UOqqnH49JVq2HX9geS1Zq7HMAaS55KPMQoVLSOwSfK7D -----END CERTIFICATE-----Generated at Mon Jan 26 11:04:30 2026 by rpki-client