This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/wYZK_Wy3MKznm7YhZ7I4uynw0us.roa File: wYZK_Wy3MKznm7YhZ7I4uynw0us.roa (raw, json) Hash identifier: WAKcd6xIHnq5uvyKJ3Z0qcpHOOGNGSZAHs44HwFAzKA= Subject key identifier: C1:86:4A:FD:6C:B7:30:AC:E7:9B:B6:21:67:B2:38:BB:29:F0:D2:EB Certificate issuer: /CN=f82554a856a422b061ae64c577630f91d408cd4a Certificate serial: 019B7F150D8C9276DD160969B2EB5C7A8140 Authority key identifier: F8:25:54:A8:56:A4:22:B0:61:AE:64:C5:77:63:0F:91:D4:08:CD:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/wYZK_Wy3MKznm7YhZ7I4uynw0us.roa Signing time: Fri 02 Jan 2026 14:20:44 +0000 ROA not before: Fri 02 Jan 2026 14:20:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39421 IP address blocks: 89.234.190.0/24 maxlen: 24 2a00:5880:1800::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:0d:8c:92:76:dd:16:09:69:b2:eb:5c:7a:81:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f82554a856a422b061ae64c577630f91d408cd4a Validity Not Before: Jan 2 14:20:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c1864afd6cb730ace79bb62167b238bb29f0d2eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b3:04:9b:79:5d:b1:4c:1d:30:9a:1b:49:ac: 34:e7:fa:85:3d:3d:b7:ab:96:db:6a:6e:4f:39:28: 4a:9f:22:20:fc:a8:12:1f:0c:d2:8b:e8:f4:e4:50: fa:81:8f:fe:b7:54:64:ad:a4:db:b8:54:d3:f1:4c: e6:bc:62:b5:54:cc:26:ed:e4:a5:39:60:c5:9b:3e: 87:d5:fc:95:d1:d1:ed:84:7e:d8:e7:55:bb:3e:26: dc:93:dd:7a:c3:bd:da:fa:66:ea:13:41:ad:5a:bb: 02:a0:5b:eb:80:cc:43:8e:77:c6:a9:c5:0f:3b:a8: 77:26:d2:98:2a:4e:0f:6f:25:35:99:15:36:38:ff: 24:ab:4e:3b:23:37:87:85:d4:0e:76:ec:52:56:18: b1:26:5b:bf:73:be:9e:2b:b6:af:a9:7d:af:9e:62: 59:ef:02:52:64:14:90:7f:2c:ca:06:09:56:c1:b4: 33:c2:f0:f0:4f:e5:dd:37:09:97:e8:21:e6:17:81: 82:98:9b:17:8f:62:91:48:7f:9e:be:7c:c0:b9:5c: 6f:1d:b3:3f:c9:4e:71:a1:b0:45:88:78:92:de:a7: b5:fa:03:eb:2f:31:8d:9e:aa:62:d1:46:4c:7a:b9: 74:d2:36:78:bb:0b:fa:1d:0a:d0:81:be:2a:36:dd: 41:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:86:4A:FD:6C:B7:30:AC:E7:9B:B6:21:67:B2:38:BB:29:F0:D2:EB X509v3 Authority Key Identifier: keyid:F8:25:54:A8:56:A4:22:B0:61:AE:64:C5:77:63:0F:91:D4:08:CD:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/wYZK_Wy3MKznm7YhZ7I4uynw0us.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.234.190.0/24 IPv6: 2a00:5880:1800::/44 Signature Algorithm: sha256WithRSAEncryption 5a:5b:0b:ef:3a:f5:a2:fe:43:d7:db:62:af:75:2d:44:5a:8e: 69:a4:98:96:7a:8d:58:b1:92:bf:cf:25:a7:ce:f3:e1:47:1e: 34:84:44:09:d4:10:c1:25:59:ef:59:a8:d6:1c:3f:fb:ca:53: d5:97:7b:11:88:e7:a0:0c:dd:f1:eb:b4:bf:ef:5b:36:ef:15: 48:c1:d9:66:68:5a:ea:7b:ed:ce:ca:fe:ea:0b:3b:c6:24:42: fa:5f:75:67:29:1d:7e:e4:b3:f9:fd:9d:b8:3b:26:ee:7a:e9: 19:63:90:65:c0:90:75:8e:ff:5a:9e:ee:15:53:6c:be:2d:88: 52:18:e6:da:c7:f9:0f:54:fe:6b:8a:dd:14:96:72:eb:c9:0e: 34:06:49:0e:c6:b9:33:a0:d9:7c:ca:11:c4:91:4b:b1:91:35: 66:14:8e:44:6d:bc:a3:fb:cf:20:21:e7:9d:49:ef:bd:f9:7b: b3:9a:d1:5d:cd:c9:3a:7c:32:26:bd:10:54:bd:ca:35:07:d5: fe:9d:6e:4c:d9:71:82:5c:b5:84:15:67:91:e9:ab:24:0b:bc: 0c:c7:42:90:f0:80:97:bf:12:22:a2:e9:db:74:b2:a6:18:b5: 46:c9:d3:89:72:c6:6b:35:b2:81:ed:03:e4:4d:fd:33:82:f0: 8a:8f:82:b3 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgISAZt/FQ2MknbdFglpsutceoFAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4MjU1NGE4NTZhNDIyYjA2MWFlNjRjNTc3NjMwZjkxZDQw OGNkNGEwHhcNMjYwMTAyMTQyMDQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMTg2NGFmZDZjYjczMGFjZTc5YmI2MjE2N2IyMzhiYjI5ZjBkMmViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubMEm3ldsUwdMJobSaw05/qFPT23 q5bbam5POShKnyIg/KgSHwzSi+j05FD6gY/+t1RkraTbuFTT8UzmvGK1VMwm7eSl OWDFmz6H1fyV0dHthH7Y51W7Pibck916w73a+mbqE0GtWrsCoFvrgMxDjnfGqcUP O6h3JtKYKk4PbyU1mRU2OP8kq047IzeHhdQOduxSVhixJlu/c76eK7avqX2vnmJZ 7wJSZBSQfyzKBglWwbQzwvDwT+XdNwmX6CHmF4GCmJsXj2KRSH+evnzAuVxvHbM/ yU5xobBFiHiS3qe1+gPrLzGNnqpi0UZMerl00jZ4uwv6HQrQgb4qNt1B2QIDAQAB o4ICHDCCAhgwHQYDVR0OBBYEFMGGSv1stzCs55u2IWeyOLsp8NLrMB8GA1UdIwQY MBaAFPglVKhWpCKwYa5kxXdjD5HUCM1KMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1DVlVxRmFrSXJCaHJtVEZkMk1Qa2RRSXpVby5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGYvOTQzN2EyLTA3ZTYtNGU2YS1hYTNm LTk2NWQ2ZDYwM2JmYS8xL3dZWktfV3kzTUt6bm03WWhaN0k0dXludzB1cy5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNGYvOTQzN2EyLTA3ZTYtNGU2YS1hYTNmLTk2NWQ2ZDYwM2Jm YS8xLzEtQ1ZVcUZha0lyQmhybVRGZDJNUGtkUUl6VW8uY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBABZ6r4w DwQCAAIwCQMHBCoAWIAYADANBgkqhkiG9w0BAQsFAAOCAQEAWlsL7zr1ov5D19ti r3UtRFqOaaSYlnqNWLGSv88lp87z4UceNIRECdQQwSVZ71mo1hw/+8pT1Zd7EYjn oAzd8eu0v+9bNu8VSMHZZmha6nvtzsr+6gs7xiRC+l91ZykdfuSz+f2duDsm7nrp GWOQZcCQdY7/Wp7uFVNsvi2IUhjm2sf5D1T+a4rdFJZy68kONAZJDsa5M6DZfMoR xJFLsZE1ZhSORG28o/vPICHnnUnvvfl7s5rRXc3JOnwyJr0QVL3KNQfV/p1uTNlx gly1hBVnkemrJAu8DMdCkPCAl78SIqLp23Syphi1RsnTiXLGazWyge0D5E39M4Lw io+Csw== -----END CERTIFICATE-----Generated at Mon Jan 26 03:06:11 2026 by rpki-client