This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/WyhDt_oaTKQN4eZu64NsYbZl4yg.roa File: WyhDt_oaTKQN4eZu64NsYbZl4yg.roa (raw, json) Hash identifier: 6ciQpQA0xk5YF/RtEahhFIWkqj1pqFVjXnDAnpgxo9s= Subject key identifier: 5B:28:43:B7:FA:1A:4C:A4:0D:E1:E6:6E:EB:83:6C:61:B6:65:E3:28 Certificate issuer: /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba Certificate serial: 019B7E389892ECFE054FE9A6B7C56FBC6EC0 Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/WyhDt_oaTKQN4eZu64NsYbZl4yg.roa Signing time: Fri 02 Jan 2026 10:19:56 +0000 ROA not before: Fri 02 Jan 2026 10:19:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51906 IP address blocks: 82.197.132.0/23 maxlen: 23 2001:7f0:101::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:98:92:ec:fe:05:4f:e9:a6:b7:c5:6f:bc:6e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba Validity Not Before: Jan 2 10:19:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5b2843b7fa1a4ca40de1e66eeb836c61b665e328 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:17:8a:35:8b:42:67:32:e0:44:50:98:d6:56: 63:73:f4:ab:b1:ed:ad:73:ab:20:48:e6:11:a3:5c: 1c:55:5a:72:2d:28:97:22:8d:76:cf:44:f5:90:5a: ce:ab:2d:53:bb:93:74:d6:e5:05:d9:1e:d3:77:81: f6:46:12:0e:9d:0d:7d:18:e2:da:c4:e2:0b:a2:2e: bc:23:e3:48:1f:3a:f0:06:e2:bc:fd:96:fb:26:f7: 18:38:c5:c2:48:cd:3f:8d:eb:05:9b:2d:12:70:57: 2a:f7:d8:2f:9a:ac:84:dc:1a:fd:05:af:f9:f9:78: d7:0d:d7:ff:85:d8:89:b3:e2:78:4a:02:1d:29:74: bb:a3:44:b4:1f:8f:90:2a:2a:71:b0:88:7d:da:20: 55:c0:9d:8b:27:36:18:6a:5d:0f:b4:26:fc:6b:42: dc:81:bc:b5:1b:91:cd:f5:1c:f2:ad:f8:4e:4e:2d: e5:61:97:2f:a9:44:db:20:8f:a3:a5:cc:bd:75:bb: 5e:be:e4:67:b8:22:5e:4b:b8:39:26:df:b7:bb:23: 2d:a8:17:96:6c:b8:ee:b0:b9:7b:67:c6:ac:f0:2e: cd:a7:a4:b2:91:46:71:17:70:cf:9a:74:7c:47:18: 58:86:fb:d7:8b:e1:30:10:92:98:f1:4d:3d:58:d5: 16:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:28:43:B7:FA:1A:4C:A4:0D:E1:E6:6E:EB:83:6C:61:B6:65:E3:28 X509v3 Authority Key Identifier: keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/WyhDt_oaTKQN4eZu64NsYbZl4yg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.197.132.0/23 IPv6: 2001:7f0:101::/48 Signature Algorithm: sha256WithRSAEncryption 89:23:e9:f7:03:d0:76:54:eb:84:58:c6:71:1d:45:cf:7c:50: 42:e2:3f:32:aa:90:1b:16:72:c9:5c:5d:14:11:30:16:6b:c2: 55:55:20:1b:25:b7:f5:e4:e2:45:50:8b:34:ef:40:4b:a5:8f: 93:26:87:04:e3:98:2b:1a:fa:d7:01:56:cc:40:68:76:6f:cf: b4:72:67:1a:b4:21:3a:64:49:63:5c:c5:93:27:58:4d:49:77: 9f:6e:38:c9:a6:38:c8:e6:03:2c:5d:fa:ae:88:48:07:44:68: c1:5b:b2:c3:55:15:36:15:a9:b4:e1:75:0d:4b:8f:98:fe:4f: a1:5d:f1:34:fb:c0:87:ed:55:15:33:4b:f8:8f:be:1a:5a:b6: f8:06:a6:ec:2b:d0:e0:71:5d:f1:6d:44:8f:e1:73:4f:85:95: b5:6e:46:f7:96:57:01:a3:46:45:7f:32:2f:5c:a6:77:b3:65: c4:46:e0:59:65:80:0b:d6:50:92:d9:22:04:f2:5e:4a:21:cf: 82:98:da:6d:50:6e:ca:2d:b3:c6:68:17:b4:37:ff:fc:d7:b6: 57:1f:4c:71:3f:66:15:c9:48:41:83:e2:12:93:54:05:45:3b: a0:c8:3f:e0:eb:39:cd:c8:62:2b:1c:f4:18:17:a1:a9:d5:de: 98:dc:1b:37 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt+OJiS7P4FT+mmt8VvvG7AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmZTkwZmRlOTc4NGE5MWQ5M2E3YTJhZjU5ZDRkMDQzZjEx NzFmYmEwHhcNMjYwMTAyMTAxOTU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YjI4NDNiN2ZhMWE0Y2E0MGRlMWU2NmVlYjgzNmM2MWI2NjVlMzI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ReKNYtCZzLgRFCY1lZjc/Srse2t c6sgSOYRo1wcVVpyLSiXIo12z0T1kFrOqy1Tu5N01uUF2R7Td4H2RhIOnQ19GOLa xOILoi68I+NIHzrwBuK8/Zb7JvcYOMXCSM0/jesFmy0ScFcq99gvmqyE3Br9Ba/5 +XjXDdf/hdiJs+J4SgIdKXS7o0S0H4+QKipxsIh92iBVwJ2LJzYYal0PtCb8a0Lc gby1G5HN9RzyrfhOTi3lYZcvqUTbII+jpcy9dbtevuRnuCJeS7g5Jt+3uyMtqBeW bLjusLl7Z8as8C7Np6SykUZxF3DPmnR8RxhYhvvXi+EwEJKY8U09WNUWhQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFFsoQ7f6GkykDeHmbuuDbGG2ZeMoMB8GA1UdIwQY MBaAFB/pD96XhKkdk6eir1nU0EPxFx+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQt MjM3NzJlN2Y5MmUzLzEvV3loRHRfb2FUS1FONGVadTY0TnNZYlpsNHlnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQtMjM3NzJlN2Y5MmUz LzEvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBUsWEMA8E AgACMAkDBwAgAQfwAQEwDQYJKoZIhvcNAQELBQADggEBAIkj6fcD0HZU64RYxnEd Rc98UELiPzKqkBsWcslcXRQRMBZrwlVVIBslt/Xk4kVQizTvQEulj5MmhwTjmCsa +tcBVsxAaHZvz7RyZxq0ITpkSWNcxZMnWE1Jd59uOMmmOMjmAyxd+q6ISAdEaMFb ssNVFTYVqbThdQ1Lj5j+T6Fd8TT7wIftVRUzS/iPvhpatvgGpuwr0OBxXfFtRI/h c0+FlbVuRveWVwGjRkV/Mi9cpnezZcRG4FllgAvWUJLZIgTyXkohz4KY2m1Qbsot s8ZoF7Q3//zXtlcfTHE/ZhXJSEGD4hKTVAVFO6DIP+DrOc3IYisc9BgXoanV3pjc Gzc= -----END CERTIFICATE-----Generated at Mon Jan 26 10:24:17 2026 by rpki-client