This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/wyPD1FfvZSgN54YMSxhg6oBiVDQ.roa File: wyPD1FfvZSgN54YMSxhg6oBiVDQ.roa (raw, json) Hash identifier: x43Z5uj7ACBLhAYU7mriWUpP8c6bdaVxKIh05vTvKqo= Subject key identifier: C3:23:C3:D4:57:EF:65:28:0D:E7:86:0C:4B:18:60:EA:80:62:54:34 Certificate issuer: /CN=0a7327805df20fb5c1d6f4e89074743caeb24af7 Certificate serial: 019B7E388F0E08FDE14053051F5B5397A474 Authority key identifier: 0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/wyPD1FfvZSgN54YMSxhg6oBiVDQ.roa Signing time: Fri 02 Jan 2026 10:19:54 +0000 ROA not before: Fri 02 Jan 2026 10:19:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214789 IP address blocks: 78.109.18.0/24 maxlen: 24 91.147.110.0/24 maxlen: 24 194.164.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:8f:0e:08:fd:e1:40:53:05:1f:5b:53:97:a4:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7327805df20fb5c1d6f4e89074743caeb24af7 Validity Not Before: Jan 2 10:19:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c323c3d457ef65280de7860c4b1860ea80625434 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:76:6b:cc:de:2d:83:f1:5d:9f:0e:3b:12:5e: 18:58:45:a6:89:8a:0a:7d:69:72:93:59:88:e8:d1: 0a:b1:ca:89:c6:e6:55:d7:09:60:01:41:a7:91:99: 0b:90:74:f1:81:38:b8:7c:44:a0:19:0b:df:5b:3c: 14:9b:79:5d:41:e3:86:14:48:b6:1f:5a:79:c6:21: 70:d4:86:52:ae:7c:8c:e4:92:44:af:6c:79:78:d5: d3:0a:87:b0:9f:b9:ef:9e:4d:f3:bb:bc:65:aa:11: a9:4c:fd:62:fb:2f:87:c2:b8:e8:87:c9:fc:07:dc: 1c:2e:86:9b:d5:bb:83:46:fb:33:48:fd:02:4c:6a: dc:18:1c:e5:5b:2d:00:f7:fd:e9:3d:ba:12:44:96: af:60:ce:17:86:30:56:b9:51:c1:f7:9a:78:35:07: a7:25:b2:32:55:6f:ef:29:28:41:59:27:4f:67:43: 3f:1c:f7:4b:1f:4c:b7:72:e5:09:f6:78:d4:d2:bf: 18:3c:7c:c0:bb:29:b6:db:7b:b5:ee:15:a8:91:a2: cc:c3:40:b4:e9:d6:46:a3:32:52:3a:54:4d:93:7e: ca:5f:49:59:8a:83:66:fe:bc:6a:32:c2:b9:07:21: b5:2a:b2:74:db:6a:46:ba:3b:0e:d0:63:2c:d6:9e: c3:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:23:C3:D4:57:EF:65:28:0D:E7:86:0C:4B:18:60:EA:80:62:54:34 X509v3 Authority Key Identifier: keyid:0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/wyPD1FfvZSgN54YMSxhg6oBiVDQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.109.18.0/24 91.147.110.0/24 194.164.115.0/24 Signature Algorithm: sha256WithRSAEncryption bf:56:11:83:3d:a9:5b:ba:3c:37:87:3e:ec:e8:ef:92:b0:56: 79:78:e5:58:62:83:b2:e0:3e:c5:b2:f2:54:ee:61:77:e9:41: ab:d7:18:91:14:52:79:eb:7f:bd:31:a6:cf:89:a6:9b:c9:0b: dc:3d:d7:df:28:8b:f4:8f:39:d5:73:7d:4a:26:66:51:9e:46: 3f:c0:dc:8d:6d:a9:92:db:b1:ad:c7:c8:ac:a8:48:01:b9:8f: 1f:b1:b1:ac:41:2e:1d:37:83:46:e3:1c:0e:2c:0b:13:c1:70: b1:6b:a6:5f:b8:7f:eb:f3:2b:19:87:b8:b2:86:80:d3:61:ec: da:03:33:1a:77:f8:d0:65:7f:af:fb:b7:65:d3:2c:1f:3e:cc: ac:97:dc:24:3c:27:71:f8:8d:39:7e:5d:72:d2:a7:59:9b:fb: e1:17:a2:57:13:78:27:70:47:93:e3:b6:3c:53:93:21:4d:ac: 60:8a:f8:2f:db:01:6f:68:4a:48:2f:33:4f:26:d9:00:3f:0e: f5:dd:a2:35:5a:7b:9a:82:fa:52:42:43:87:49:06:db:69:ac: 83:44:5a:42:05:6f:f0:cc:81:c0:4e:91:a3:41:3a:10:ec:f1: ee:9c:51:76:4f:c2:03:c4:37:d6:a8:35:51:84:d5:21:ce:0a: 53:08:38:25 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+OI8OCP3hQFMFH1tTl6R0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhNzMyNzgwNWRmMjBmYjVjMWQ2ZjRlODkwNzQ3NDNjYWVi MjRhZjcwHhcNMjYwMTAyMTAxOTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMzIzYzNkNDU3ZWY2NTI4MGRlNzg2MGM0YjE4NjBlYTgwNjI1NDM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3ZrzN4tg/Fdnw47El4YWEWmiYoK fWlyk1mI6NEKscqJxuZV1wlgAUGnkZkLkHTxgTi4fESgGQvfWzwUm3ldQeOGFEi2 H1p5xiFw1IZSrnyM5JJEr2x5eNXTCoewn7nvnk3zu7xlqhGpTP1i+y+Hwrjoh8n8 B9wcLoab1buDRvszSP0CTGrcGBzlWy0A9/3pPboSRJavYM4XhjBWuVHB95p4NQen JbIyVW/vKShBWSdPZ0M/HPdLH0y3cuUJ9njU0r8YPHzAuym223u17hWokaLMw0C0 6dZGozJSOlRNk37KX0lZioNm/rxqMsK5ByG1KrJ022pGujsO0GMs1p7DIQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFMMjw9RX72UoDeeGDEsYYOqAYlQ0MB8GA1UdIwQY MBaAFApzJ4Bd8g+1wdb06JB0dDyuskr3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ25NbmdGM3lEN1hCMXZUb2tIUjBQSzZ5U3ZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS84YjFmYWMtNWEyMS00ODQ4LWE2NmEt MTBiYjQ1NzlkNTI4LzEvd3lQRDFGZnZaU2dONTRZTVN4aGc2b0JpVkRRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS84YjFmYWMtNWEyMS00ODQ4LWE2NmEtMTBiYjQ1NzlkNTI4 LzEvQ25NbmdGM3lEN1hCMXZUb2tIUjBQSzZ5U3ZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQATm0SAwQA W5NuAwQAwqRzMA0GCSqGSIb3DQEBCwUAA4IBAQC/VhGDPalbujw3hz7s6O+SsFZ5 eOVYYoOy4D7FsvJU7mF36UGr1xiRFFJ563+9MabPiaabyQvcPdffKIv0jznVc31K JmZRnkY/wNyNbamS27Gtx8isqEgBuY8fsbGsQS4dN4NG4xwOLAsTwXCxa6ZfuH/r 8ysZh7iyhoDTYezaAzMad/jQZX+v+7dl0ywfPsysl9wkPCdx+I05fl1y0qdZm/vh F6JXE3gncEeT47Y8U5MhTaxgivgv2wFvaEpILzNPJtkAPw713aI1WnuagvpSQkOH SQbbaayDRFpCBW/wzIHATpGjQToQ7PHunFF2T8IDxDfWqDVRhNUhzgpTCDgl -----END CERTIFICATE-----Generated at Mon Jan 26 05:43:50 2026 by rpki-client