This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/wy1wZp39xU3XBPJ3K0EhNcoXjTA.roa File: wy1wZp39xU3XBPJ3K0EhNcoXjTA.roa (raw, json) Hash identifier: IhH2G4+OhK1Si4t3EFqEN7hnBN9CkM6Lsj/Ztzhv5bU= Subject key identifier: C3:2D:70:66:9D:FD:C5:4D:D7:04:F2:77:2B:41:21:35:CA:17:8D:30 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B7A5AE54E89F8F54585E99AA2324B6623 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/wy1wZp39xU3XBPJ3K0EhNcoXjTA.roa Signing time: Thu 01 Jan 2026 16:18:55 +0000 ROA not before: Thu 01 Jan 2026 16:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216043 IP address blocks: 109.176.254.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:e5:4e:89:f8:f5:45:85:e9:9a:a2:32:4b:66:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 1 16:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c32d70669dfdc54dd704f2772b412135ca178d30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f9:a2:0f:ed:85:71:70:4c:71:6f:65:58:a3: df:c2:f2:34:f2:a6:cd:ce:3a:4a:69:a7:ff:1c:f6: 9f:37:49:ba:f4:35:46:e5:f5:9c:81:14:78:b2:3a: ea:4b:cc:8c:c5:87:29:f0:6c:b8:82:1d:7d:69:e0: 07:ca:65:f0:de:42:e8:5a:4d:50:8c:c6:c5:da:9e: d2:2f:fe:0d:5f:22:27:cc:42:5e:26:bf:fc:4f:c6: fa:47:a9:c7:61:84:ab:db:50:ee:21:bb:86:ec:a2: 64:f6:05:70:37:cb:78:57:b3:e5:9e:ea:c7:46:a2: 01:11:30:2b:e2:a6:1e:66:8c:54:d8:f8:7f:61:db: 5c:64:6a:cb:88:64:04:6f:91:dc:2d:fe:99:9e:95: 70:7e:9b:e3:8a:16:1e:73:26:84:55:6c:42:ff:5b: a7:e3:13:a5:4c:e6:49:ba:d5:22:fa:ce:e3:7b:e8: ad:bd:3d:23:44:e5:0b:f4:87:71:9d:d1:1d:6e:e5: 71:82:1e:a2:d7:eb:d3:92:b2:20:b3:8a:0b:15:bd: c7:55:09:b9:da:1c:ef:0e:b6:85:e0:fd:72:bb:35: 7c:a6:78:7e:b9:98:e6:bb:af:fb:b1:37:cb:35:24: 8c:c4:11:f0:5b:69:9e:eb:d8:1b:65:fa:3d:d6:91: 30:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:2D:70:66:9D:FD:C5:4D:D7:04:F2:77:2B:41:21:35:CA:17:8D:30 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/wy1wZp39xU3XBPJ3K0EhNcoXjTA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.176.254.0/23 Signature Algorithm: sha256WithRSAEncryption 6e:36:00:9a:79:a1:a4:fa:20:fe:15:a3:96:4e:e6:d9:90:dc: 41:d0:6d:27:52:63:f0:ee:78:44:97:2c:09:d6:53:37:70:d3: 0c:a2:c2:18:ea:f0:2b:e0:a6:95:05:77:6b:c1:7c:b2:bc:5b: 4c:5f:b0:35:c9:cc:b6:a5:ab:6b:42:37:60:5d:b4:91:b9:0c: dc:24:5d:b3:05:9f:a6:e2:83:9e:de:b3:89:54:86:96:f9:7b: 8d:01:68:b2:7c:17:7c:cf:7a:42:ed:4f:3f:cb:3e:35:5c:eb: 10:67:05:c0:2c:5d:d1:46:82:28:01:d3:54:2f:a2:da:1c:62: 4e:47:72:61:54:7c:e5:91:74:92:77:5f:37:bf:43:32:2e:b0: f7:30:a3:cc:ab:d9:2f:41:0d:f3:68:56:64:a5:ea:5e:70:57: b3:52:ef:16:35:80:11:af:cc:99:98:a6:fd:c9:5f:c1:46:eb: 63:c3:c2:98:da:64:41:da:70:3c:d6:68:17:78:fd:51:13:71: 10:0d:f3:d2:d0:7b:e0:f0:35:a9:8f:17:b9:25:3d:af:f5:52: 58:3d:98:d3:8d:50:8c:32:37:ef:5d:e6:f8:c1:4f:0a:ad:96: de:20:f5:48:45:f8:cc:59:43:68:84:1c:69:de:ef:9b:d4:8b: 13:33:96:c3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WuVOifj1RYXpmqIyS2YjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTAxMTYxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMzJkNzA2NjlkZmRjNTRkZDcwNGYyNzcyYjQxMjEzNWNhMTc4ZDMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/miD+2FcXBMcW9lWKPfwvI08qbN zjpKaaf/HPafN0m69DVG5fWcgRR4sjrqS8yMxYcp8Gy4gh19aeAHymXw3kLoWk1Q jMbF2p7SL/4NXyInzEJeJr/8T8b6R6nHYYSr21DuIbuG7KJk9gVwN8t4V7PlnurH RqIBETAr4qYeZoxU2Ph/YdtcZGrLiGQEb5HcLf6ZnpVwfpvjihYecyaEVWxC/1un 4xOlTOZJutUi+s7je+itvT0jROUL9IdxndEdbuVxgh6i1+vTkrIgs4oLFb3HVQm5 2hzvDraF4P1yuzV8pnh+uZjmu6/7sTfLNSSMxBHwW2me69gbZfo91pEwuQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMMtcGad/cVN1wTydytBITXKF40wMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvd3kxd1pwMzl4VTNYQlBKM0swRWhOY29YalRBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBbbD+MA0G CSqGSIb3DQEBCwUAA4IBAQBuNgCaeaGk+iD+FaOWTubZkNxB0G0nUmPw7nhElywJ 1lM3cNMMosIY6vAr4KaVBXdrwXyyvFtMX7A1ycy2patrQjdgXbSRuQzcJF2zBZ+m 4oOe3rOJVIaW+XuNAWiyfBd8z3pC7U8/yz41XOsQZwXALF3RRoIoAdNUL6LaHGJO R3JhVHzlkXSSd183v0MyLrD3MKPMq9kvQQ3zaFZkpepecFezUu8WNYARr8yZmKb9 yV/BRutjw8KY2mRB2nA81mgXeP1RE3EQDfPS0Hvg8DWpjxe5JT2v9VJYPZjTjVCM MjfvXeb4wU8KrZbeIPVIRfjMWUNohBxp3u+b1IsTM5bD -----END CERTIFICATE-----Generated at Sun Jan 25 08:52:13 2026 by rpki-client