This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/wyKENznEjqoTOu0kPDQ-ja6IOA0.roa File: wyKENznEjqoTOu0kPDQ-ja6IOA0.roa (raw, json) Hash identifier: XADEeG1QubSOLS5X6zAA6TQkPOdRj7Y6STFASKP2PIo= Subject key identifier: C3:22:84:37:39:C4:8E:AA:13:3A:ED:24:3C:34:3E:8D:AE:88:38:0D Certificate issuer: /CN=21021b252222997bfe33b7e4b315ac8d5e067954 Certificate serial: 019B7E392A894BF3907F042E07AD6AD38C3B Authority key identifier: 21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/wyKENznEjqoTOu0kPDQ-ja6IOA0.roa Signing time: Fri 02 Jan 2026 10:20:34 +0000 ROA not before: Fri 02 Jan 2026 10:20:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 395954 IP address blocks: 152.163.16.0/22 maxlen: 22 152.163.32.0/22 maxlen: 22 152.163.56.0/22 maxlen: 22 152.163.80.0/22 maxlen: 22 152.163.132.0/22 maxlen: 22 152.163.184.0/22 maxlen: 22 152.163.208.0/22 maxlen: 22 152.163.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:2a:89:4b:f3:90:7f:04:2e:07:ad:6a:d3:8c:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21021b252222997bfe33b7e4b315ac8d5e067954 Validity Not Before: Jan 2 10:20:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c322843739c48eaa133aed243c343e8dae88380d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:50:cd:5c:e0:c1:34:62:4c:a8:33:a7:08:49: 26:6e:97:a9:79:da:e9:8e:5a:71:6d:7d:2f:0c:db: e6:ff:35:97:5f:e8:b7:ad:00:3f:83:ab:53:f2:66: ae:a5:37:6d:6a:4c:e6:4c:d3:99:64:f9:4c:cd:c2: 7c:86:35:8c:6f:6b:b7:7d:e0:82:c1:33:9b:0c:9b: 77:cf:66:48:73:b1:ec:2a:fa:28:23:71:56:ff:1e: 8b:d0:98:ed:50:7c:62:57:f6:13:4a:0a:bb:4f:66: 08:d6:08:e6:d4:17:ad:56:ab:c3:42:a3:5e:25:97: 43:bd:ed:d2:92:c3:1b:e6:f8:de:56:59:07:db:46: 7d:0b:d5:9a:ee:7e:61:62:22:f4:40:4c:92:3f:73: bf:b3:f2:4e:d7:4f:ac:e4:66:04:34:30:fc:6c:4d: c6:51:bf:75:7d:94:27:5a:9e:d7:d6:07:13:f9:62: 1d:fb:a2:1c:08:3c:cf:a1:1c:80:9e:44:32:5f:c6: e7:c9:66:33:10:55:21:4d:c4:a7:01:dd:28:4d:bb: 95:0e:0a:d9:05:de:30:54:90:1d:73:29:1e:b7:d4: 6b:58:0b:a3:53:f9:9a:98:5f:4f:8a:2e:5b:af:ca: 0e:9f:d3:61:39:a5:1f:e1:75:0b:46:04:b5:6e:db: 53:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:22:84:37:39:C4:8E:AA:13:3A:ED:24:3C:34:3E:8D:AE:88:38:0D X509v3 Authority Key Identifier: keyid:21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/wyKENznEjqoTOu0kPDQ-ja6IOA0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.163.16.0/22 152.163.32.0/22 152.163.56.0/22 152.163.80.0/22 152.163.132.0/22 152.163.184.0/22 152.163.208.0/22 152.163.236.0/22 Signature Algorithm: sha256WithRSAEncryption 30:7e:34:0b:13:83:bc:64:c9:50:11:3d:cd:4c:13:ff:cd:31: f3:da:7b:6e:a1:84:8b:6a:f6:a6:32:55:66:c2:18:76:27:2f: 16:3b:93:7d:c6:d2:4a:52:de:f3:80:75:78:a9:1e:f1:de:4b: 6e:19:07:17:eb:fe:62:72:02:2b:24:78:43:e1:1e:1f:8b:fd: ef:3c:b6:1d:e5:88:e0:9c:e7:c4:32:5d:cf:07:d5:0f:79:a9: c7:ed:ea:de:f1:ca:a0:f7:81:6f:ba:a5:91:8d:71:e4:84:cb: ad:3c:62:fb:83:81:f1:46:f3:b8:96:59:ad:64:4f:24:2d:62: d1:b5:93:d3:f1:a2:f7:4e:08:a1:af:74:51:c9:18:c9:45:a2: 3e:d4:e4:46:59:05:84:fb:17:3c:1a:74:9f:21:3c:69:e3:cd: 10:cf:45:f4:c1:78:8a:f4:95:00:bc:b4:73:7f:ed:96:4b:04: af:a4:3e:35:ea:86:cc:15:d1:bd:f9:21:67:b2:14:de:28:09: 92:1b:e0:fe:95:64:60:2f:e5:f4:5d:c6:d9:ea:69:da:90:48: a9:c7:2d:d7:6d:33:39:7e:f9:91:22:ec:51:a0:31:b3:a0:b2: d0:c6:45:47:ce:c2:62:b6:51:c7:4d:76:25:31:e0:cd:0d:10: 59:52:c6:b4 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISAZt+OSqJS/OQfwQuB61q04w7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMDIxYjI1MjIyMjk5N2JmZTMzYjdlNGIzMTVhYzhkNWUw Njc5NTQwHhcNMjYwMTAyMTAyMDM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMzIyODQzNzM5YzQ4ZWFhMTMzYWVkMjQzYzM0M2U4ZGFlODgzODBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplDNXODBNGJMqDOnCEkmbpepedrp jlpxbX0vDNvm/zWXX+i3rQA/g6tT8maupTdtakzmTNOZZPlMzcJ8hjWMb2u3feCC wTObDJt3z2ZIc7HsKvooI3FW/x6L0JjtUHxiV/YTSgq7T2YI1gjm1BetVqvDQqNe JZdDve3SksMb5vjeVlkH20Z9C9Wa7n5hYiL0QEySP3O/s/JO10+s5GYENDD8bE3G Ub91fZQnWp7X1gcT+WId+6IcCDzPoRyAnkQyX8bnyWYzEFUhTcSnAd0oTbuVDgrZ Bd4wVJAdcyket9RrWAujU/mamF9Pii5br8oOn9NhOaUf4XULRgS1bttTuwIDAQAB o4ICMzCCAi8wHQYDVR0OBBYEFMMihDc5xI6qEzrtJDw0Po2uiDgNMB8GA1UdIwQY MBaAFCECGyUiIpl7/jO35LMVrI1eBnlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC81OTI5NGMtMGYyNC00MGM1LWI1YzMt NmVhYzYyZTYwZGY3LzEvd3lLRU56bkVqcW9UT3Uwa1BEUS1qYTZJT0EwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC81OTI5NGMtMGYyNC00MGM1LWI1YzMtNmVhYzYyZTYwZGY3 LzEvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQCmKMQAwQC mKMgAwQCmKM4AwQCmKNQAwQCmKOEAwQCmKO4AwQCmKPQAwQCmKPsMA0GCSqGSIb3 DQEBCwUAA4IBAQAwfjQLE4O8ZMlQET3NTBP/zTHz2ntuoYSLavamMlVmwhh2Jy8W O5N9xtJKUt7zgHV4qR7x3ktuGQcX6/5icgIrJHhD4R4fi/3vPLYd5YjgnOfEMl3P B9UPeanH7ere8cqg94FvuqWRjXHkhMutPGL7g4HxRvO4llmtZE8kLWLRtZPT8aL3 Tgihr3RRyRjJRaI+1ORGWQWE+xc8GnSfITxp480Qz0X0wXiK9JUAvLRzf+2WSwSv pD416obMFdG9+SFnshTeKAmSG+D+lWRgL+X0XcbZ6mnakEipxy3XbTM5fvmRIuxR oDGzoLLQxkVHzsJitlHHTXYlMeDNDRBZUsa0 -----END CERTIFICATE-----Generated at Sun Jan 25 17:35:55 2026 by rpki-client