This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/WiY8Q6iW3QYsT-jcDWbVZoxBD98.roa File: WiY8Q6iW3QYsT-jcDWbVZoxBD98.roa (raw, json) Hash identifier: PQnRN4tcdL81dJ2nw2tisyXhDWdu4HIpAqk7AjL30ZY= Subject key identifier: 5A:26:3C:43:A8:96:DD:06:2C:4F:E8:DC:0D:66:D5:66:8C:41:0F:DF Certificate issuer: /CN=4ee4057f9ea0140cef7ce4789369c5cf01f7c68e Certificate serial: 019B7A5B18A691673CFEE4BA7BD3AA3FB1C6 Authority key identifier: 4E:E4:05:7F:9E:A0:14:0C:EF:7C:E4:78:93:69:C5:CF:01:F7:C6:8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuQFf56gFAzvfOR4k2nFzwH3xo4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/WiY8Q6iW3QYsT-jcDWbVZoxBD98.roa Signing time: Thu 01 Jan 2026 16:19:08 +0000 ROA not before: Thu 01 Jan 2026 16:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202757 IP address blocks: 37.221.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.mft rsync://rpki.ripe.net/repository/DEFAULT/TuQFf56gFAzvfOR4k2nFzwH3xo4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:18:a6:91:67:3c:fe:e4:ba:7b:d3:aa:3f:b1:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ee4057f9ea0140cef7ce4789369c5cf01f7c68e Validity Not Before: Jan 1 16:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5a263c43a896dd062c4fe8dc0d66d5668c410fdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f1:69:b3:b1:c1:48:39:c8:51:cd:28:1c:8c: 44:46:e6:60:40:27:05:5a:67:81:c6:30:60:97:bd: 00:ef:d2:6a:c1:b3:c7:ba:54:0d:4b:d9:1b:d7:fb: 1e:b6:37:b7:1a:aa:54:2f:cb:91:e8:62:f7:37:ac: 9c:74:9b:8f:63:3b:f8:d7:fc:92:27:37:ba:63:31: cd:fc:af:af:62:30:cc:d8:ed:be:72:e4:cc:6c:28: fa:77:a1:b8:6f:b8:84:c5:93:43:55:1b:1f:b8:04: cc:27:3f:4e:06:67:78:45:e7:3a:f4:cd:ae:fb:aa: 82:f0:d8:b8:0f:bb:77:7f:fc:df:0e:d9:bf:5b:c5: bf:db:8f:ff:91:b9:e2:f6:ab:e1:de:77:14:59:c9: 4d:cc:1c:9e:48:99:6e:e1:46:d1:93:a9:dd:ec:3e: 03:ac:10:44:c2:9f:ea:8a:d3:c6:16:a4:48:68:2f: 86:90:4c:22:75:d8:7d:81:b6:72:bf:3b:e9:49:ff: f5:b2:0f:89:94:75:56:ca:37:a6:cc:94:48:40:4a: 2d:80:87:f4:67:db:eb:0b:eb:c1:07:6d:3b:ff:21: e1:5a:ec:de:6f:42:7c:d1:e2:41:eb:4c:19:f5:ce: b6:06:ad:b6:ef:bb:9b:57:8c:ce:40:5a:6c:60:c8: 8f:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:26:3C:43:A8:96:DD:06:2C:4F:E8:DC:0D:66:D5:66:8C:41:0F:DF X509v3 Authority Key Identifier: keyid:4E:E4:05:7F:9E:A0:14:0C:EF:7C:E4:78:93:69:C5:CF:01:F7:C6:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuQFf56gFAzvfOR4k2nFzwH3xo4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/WiY8Q6iW3QYsT-jcDWbVZoxBD98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.221.87.0/24 Signature Algorithm: sha256WithRSAEncryption 01:b3:9d:51:cd:c6:c4:00:f1:60:8f:29:c8:49:e4:cd:31:f7: 11:ec:01:db:a6:65:c8:4a:b7:eb:35:e3:10:73:7f:e0:e2:40: db:91:60:10:b3:67:68:df:77:7b:e2:0b:d9:39:d2:ad:d2:29: bd:40:97:e9:6f:1b:ad:17:1a:a3:a5:59:45:e3:66:4f:95:17: e9:fc:e0:67:77:37:d7:da:b1:13:5e:e7:d7:a7:b9:a1:08:89: 7a:a0:fc:97:f9:0e:0b:69:a7:7d:e2:49:48:d6:8f:b2:6d:3c: 13:62:09:87:3f:d8:de:f9:92:71:0c:9a:e3:50:54:91:71:e5: 02:b3:dd:75:89:c0:0d:b2:9b:28:6c:3b:cc:1f:89:54:8c:e8: 20:12:1f:ef:8c:77:d8:fc:4a:f4:b3:67:6b:8a:a3:d0:7a:71: 6a:d2:f8:7d:d6:c0:01:99:a6:f9:f2:d4:63:e5:bb:10:31:b7: 4b:8b:ac:e2:4e:0c:79:8d:f4:84:c2:0d:ab:62:6c:ed:2f:b2: 56:9a:b7:53:b0:d8:31:1d:a2:62:b2:71:89:c9:d8:4c:97:98: e0:7d:53:fb:73:b3:5b:19:54:05:27:cf:a1:a0:de:cf:59:87: 49:e9:1b:eb:b1:fe:50:cb:c8:2b:a2:97:b4:97:33:9f:6c:3b: 35:a4:06:33 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WximkWc8/uS6e9OqP7HGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlZTQwNTdmOWVhMDE0MGNlZjdjZTQ3ODkzNjljNWNmMDFm N2M2OGUwHhcNMjYwMTAxMTYxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YTI2M2M0M2E4OTZkZDA2MmM0ZmU4ZGMwZDY2ZDU2NjhjNDEwZmRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPFps7HBSDnIUc0oHIxERuZgQCcF WmeBxjBgl70A79JqwbPHulQNS9kb1/setje3GqpUL8uR6GL3N6ycdJuPYzv41/yS Jze6YzHN/K+vYjDM2O2+cuTMbCj6d6G4b7iExZNDVRsfuATMJz9OBmd4Rec69M2u +6qC8Ni4D7t3f/zfDtm/W8W/24//kbni9qvh3ncUWclNzByeSJlu4UbRk6nd7D4D rBBEwp/qitPGFqRIaC+GkEwiddh9gbZyvzvpSf/1sg+JlHVWyjemzJRIQEotgIf0 Z9vrC+vBB207/yHhWuzeb0J80eJB60wZ9c62Bq2277ubV4zOQFpsYMiPIQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFomPEOolt0GLE/o3A1m1WaMQQ/fMB8GA1UdIwQY MBaAFE7kBX+eoBQM73zkeJNpxc8B98aOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHVRRmY1NmdGQXp2Zk9SNGsybkZ6d0gzeG80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9jZjJlYmYtMmEwOS00M2QyLWEyMjUt YTE2NTM1OWE2MjExLzEvV2lZOFE2aVczUVlzVC1qY0RXYlZab3hCRDk4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi9jZjJlYmYtMmEwOS00M2QyLWEyMjUtYTE2NTM1OWE2MjEx LzEvVHVRRmY1NmdGQXp2Zk9SNGsybkZ6d0gzeG80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJd1XMA0G CSqGSIb3DQEBCwUAA4IBAQABs51RzcbEAPFgjynISeTNMfcR7AHbpmXISrfrNeMQ c3/g4kDbkWAQs2do33d74gvZOdKt0im9QJfpbxutFxqjpVlF42ZPlRfp/OBndzfX 2rETXufXp7mhCIl6oPyX+Q4Laad94klI1o+ybTwTYgmHP9je+ZJxDJrjUFSRceUC s911icANspsobDvMH4lUjOggEh/vjHfY/Er0s2driqPQenFq0vh91sABmab58tRj 5bsQMbdLi6ziTgx5jfSEwg2rYmztL7JWmrdTsNgxHaJisnGJydhMl5jgfVP7c7Nb GVQFJ8+hoN7PWYdJ6Rvrsf5Qy8grope0lzOfbDs1pAYz -----END CERTIFICATE-----Generated at Mon Jan 26 02:23:08 2026 by rpki-client