This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/f04885-7b2f-4117-bed8-6cfeb5eebf31/1/wyahKTWLv3_u7o5ht_dHJGWwgoQ.roa File: wyahKTWLv3_u7o5ht_dHJGWwgoQ.roa (raw, json) Hash identifier: bo1//V2c2BRIWtHQ+gSfAYSKk+LbrrkMoVqs03yAcwE= Subject key identifier: C3:26:A1:29:35:8B:BF:7F:EE:EE:8E:61:B7:F7:47:24:65:B0:82:84 Certificate issuer: /CN=55d25170750c4dbc2717b0c1771c8d8e45472318 Certificate serial: 019BBBE685B56FBC85DE8641A6658E227208 Authority key identifier: 55:D2:51:70:75:0C:4D:BC:27:17:B0:C1:77:1C:8D:8E:45:47:23:18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VdJRcHUMTbwnF7DBdxyNjkVHIxg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/f04885-7b2f-4117-bed8-6cfeb5eebf31/1/wyahKTWLv3_u7o5ht_dHJGWwgoQ.roa Signing time: Wed 14 Jan 2026 09:46:45 +0000 ROA not before: Wed 14 Jan 2026 09:46:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215172 IP address blocks: 2001:678:11a4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/f04885-7b2f-4117-bed8-6cfeb5eebf31/1/VdJRcHUMTbwnF7DBdxyNjkVHIxg.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/f04885-7b2f-4117-bed8-6cfeb5eebf31/1/VdJRcHUMTbwnF7DBdxyNjkVHIxg.mft rsync://rpki.ripe.net/repository/DEFAULT/VdJRcHUMTbwnF7DBdxyNjkVHIxg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:bb:e6:85:b5:6f:bc:85:de:86:41:a6:65:8e:22:72:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55d25170750c4dbc2717b0c1771c8d8e45472318 Validity Not Before: Jan 14 09:46:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c326a129358bbf7feeee8e61b7f7472465b08284 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ef:fb:ad:87:88:87:d0:68:3d:f2:20:54:0e: e6:c6:25:49:29:c1:ef:a7:9c:2a:3c:1e:ba:9f:b4: 88:90:ff:10:23:d3:f5:53:d9:38:7d:16:95:a3:ac: 26:c2:5f:1a:63:7e:e4:68:60:38:85:dd:93:6f:d5: 2e:30:0a:b4:ca:be:a8:1d:03:b6:24:20:54:b3:31: 88:a8:66:b2:05:b1:97:db:ed:9e:76:18:8b:bd:78: eb:db:e5:28:0d:17:37:98:50:88:01:52:c9:dc:b5: e6:22:07:3c:47:b6:d3:0e:25:25:c8:0a:d3:a6:75: cd:55:28:b6:14:b7:e5:92:51:ee:3c:2b:aa:75:3d: b3:45:1c:49:1d:e2:5a:f7:8e:a3:65:99:35:3d:c9: cf:4f:d9:6b:12:f5:32:fd:1c:74:52:2c:e9:be:c4: 72:48:dd:ee:40:df:12:5e:22:a4:14:f7:ed:2f:4c: 5a:12:c1:73:dc:04:86:54:2f:8f:cc:ad:a8:4b:97: 4c:5b:9e:3f:c4:e9:1c:5b:ef:55:1e:38:9a:4c:d0: 2d:bc:e5:20:ab:2c:de:9d:64:66:3e:10:3b:3a:b8: 42:77:ac:ae:34:52:42:fb:0d:dc:ee:ec:0e:c2:30: eb:ac:18:f7:0b:22:2f:09:8e:ea:5a:3e:f1:d1:93: 07:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:26:A1:29:35:8B:BF:7F:EE:EE:8E:61:B7:F7:47:24:65:B0:82:84 X509v3 Authority Key Identifier: keyid:55:D2:51:70:75:0C:4D:BC:27:17:B0:C1:77:1C:8D:8E:45:47:23:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VdJRcHUMTbwnF7DBdxyNjkVHIxg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f04885-7b2f-4117-bed8-6cfeb5eebf31/1/wyahKTWLv3_u7o5ht_dHJGWwgoQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f04885-7b2f-4117-bed8-6cfeb5eebf31/1/VdJRcHUMTbwnF7DBdxyNjkVHIxg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:11a4::/48 Signature Algorithm: sha256WithRSAEncryption 2a:ad:e7:aa:03:22:bf:b1:c6:2f:55:8c:27:f5:65:ae:9b:32: 2d:00:57:24:15:83:49:bf:4c:f5:dd:4c:08:de:53:95:0e:27: 0e:1e:27:84:6d:59:89:80:7b:3a:f8:12:bc:07:9a:e6:98:a4: bf:87:ca:18:76:21:49:d5:fc:43:2d:d8:1c:9b:d9:f6:d5:ff: 9c:8e:3f:c8:14:a0:bd:2a:3f:7f:35:73:5b:ae:f4:41:b4:8e: 05:20:b2:19:74:ec:96:ab:e8:87:74:3b:94:47:9b:d0:ce:85: 99:39:74:3a:a2:af:63:5e:6b:95:e9:3b:32:c9:50:16:bd:59: 30:f7:97:e0:83:29:2d:7f:69:a5:1f:33:ef:00:c5:4f:c8:fd: 7b:f4:50:96:3f:c8:13:37:ed:98:4d:25:e4:bd:54:aa:dd:a6: f9:c7:e0:68:b7:e1:67:4c:92:4d:d3:01:55:4b:c7:3b:ec:c2: 55:6c:b7:7f:83:06:a6:d3:c3:70:31:3a:45:f5:fd:34:4e:65: e1:0e:16:ae:47:96:6c:72:4f:7a:73:81:c2:f7:9c:80:02:a9: 27:d6:bc:7c:dc:12:e8:de:c6:b2:72:56:f2:94:a2:ed:1b:ae: 0d:59:16:1d:8a:29:2d:54:3a:51:84:12:c5:a8:ea:c9:8b:06: 9d:a5:ce:0e -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZu75oW1b7yF3oZBpmWOInIIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1ZDI1MTcwNzUwYzRkYmMyNzE3YjBjMTc3MWM4ZDhlNDU0 NzIzMTgwHhcNMjYwMTE0MDk0NjQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMzI2YTEyOTM1OGJiZjdmZWVlZThlNjFiN2Y3NDcyNDY1YjA4Mjg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2u/7rYeIh9BoPfIgVA7mxiVJKcHv p5wqPB66n7SIkP8QI9P1U9k4fRaVo6wmwl8aY37kaGA4hd2Tb9UuMAq0yr6oHQO2 JCBUszGIqGayBbGX2+2edhiLvXjr2+UoDRc3mFCIAVLJ3LXmIgc8R7bTDiUlyArT pnXNVSi2FLflklHuPCuqdT2zRRxJHeJa946jZZk1PcnPT9lrEvUy/Rx0UizpvsRy SN3uQN8SXiKkFPftL0xaEsFz3ASGVC+PzK2oS5dMW54/xOkcW+9VHjiaTNAtvOUg qyzenWRmPhA7OrhCd6yuNFJC+w3c7uwOwjDrrBj3CyIvCY7qWj7x0ZMHxQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFMMmoSk1i79/7u6OYbf3RyRlsIKEMB8GA1UdIwQY MBaAFFXSUXB1DE28JxewwXccjY5FRyMYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmRKUmNIVU1UYnduRjdEQmR4eU5qa1ZISXhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9mMDQ4ODUtN2IyZi00MTE3LWJlZDgt NmNmZWI1ZWViZjMxLzEvd3lhaEtUV0x2M191N281aHRfZEhKR1d3Z29RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS9mMDQ4ODUtN2IyZi00MTE3LWJlZDgtNmNmZWI1ZWViZjMx LzEvVmRKUmNIVU1UYnduRjdEQmR4eU5qa1ZISXhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeBGk MA0GCSqGSIb3DQEBCwUAA4IBAQAqreeqAyK/scYvVYwn9WWumzItAFckFYNJv0z1 3UwI3lOVDicOHieEbVmJgHs6+BK8B5rmmKS/h8oYdiFJ1fxDLdgcm9n21f+cjj/I FKC9Kj9/NXNbrvRBtI4FILIZdOyWq+iHdDuUR5vQzoWZOXQ6oq9jXmuV6TsyyVAW vVkw95fggyktf2mlHzPvAMVPyP179FCWP8gTN+2YTSXkvVSq3ab5x+Bot+FnTJJN 0wFVS8c77MJVbLd/gwam08NwMTpF9f00TmXhDhauR5Zsck96c4HC95yAAqkn1rx8 3BLo3sayclbylKLtG64NWRYdiiktVDpRhBLFqOrJiwadpc4O -----END CERTIFICATE-----Generated at Sun Jan 25 22:28:56 2026 by rpki-client