This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/fywMwjmkO0NKg9eCzKlhyg5Fwhc.roa File: fywMwjmkO0NKg9eCzKlhyg5Fwhc.roa (raw, json) Hash identifier: qtt6y46F7dQ/LXyOrYsp3ZoiOaJBIj1k3BaGS7nz0bE= Subject key identifier: 7F:2C:0C:C2:39:A4:3B:43:4A:83:D7:82:CC:A9:61:CA:0E:45:C2:17 Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da Certificate serial: 019B7E37CC48B47E0F18CAD6520BF03750B0 Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/fywMwjmkO0NKg9eCzKlhyg5Fwhc.roa Signing time: Fri 02 Jan 2026 10:19:04 +0000 ROA not before: Fri 02 Jan 2026 10:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213773 IP address blocks: 170.62.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 00:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:cc:48:b4:7e:0f:18:ca:d6:52:0b:f0:37:50:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da Validity Not Before: Jan 2 10:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7f2c0cc239a43b434a83d782cca961ca0e45c217 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:de:da:cf:f0:c5:6d:be:c1:81:6b:21:fd:07: 27:5f:a9:17:4f:08:f8:5e:ea:53:59:bc:89:bb:79: e5:ab:11:a7:f8:bc:39:34:85:ec:d8:b9:69:87:a0: ea:9e:ec:f5:01:75:50:2c:30:77:d9:12:5c:4c:d7: 74:ce:c2:bb:f8:61:15:94:38:32:e2:3a:46:52:13: e2:70:a2:5e:07:35:b4:24:e1:79:31:77:85:44:01: e4:97:4e:bd:21:94:3a:2a:8e:c6:02:3f:2f:15:27: f1:f7:e2:60:f0:1b:eb:c6:b1:ab:e9:2c:3a:63:e1: ad:3e:0c:57:32:7b:f7:90:4a:de:fc:94:de:60:20: f7:46:e7:ea:29:cc:d7:81:dc:2a:f7:c9:04:b9:5a: 13:a6:4f:2d:a5:25:78:7c:bb:e8:22:d4:dd:d3:ba: 55:77:db:cf:3a:c7:b4:d9:72:d6:18:5f:65:f5:35: e5:fd:8b:2a:46:d5:a2:8b:f7:56:f7:3d:24:e5:2e: f6:ab:65:b4:3c:b0:96:f0:ab:72:07:b3:5e:84:04: 37:ba:77:55:13:da:27:67:db:60:5f:80:76:2a:17: cc:19:a0:2a:c3:f7:76:ea:0e:5a:17:9b:ba:30:94: 55:45:a3:41:cd:f5:8c:00:25:e9:c7:bc:28:2d:4a: 6b:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:2C:0C:C2:39:A4:3B:43:4A:83:D7:82:CC:A9:61:CA:0E:45:C2:17 X509v3 Authority Key Identifier: keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/fywMwjmkO0NKg9eCzKlhyg5Fwhc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.62.203.0/24 Signature Algorithm: sha256WithRSAEncryption 25:41:c5:3e:6b:b0:20:ff:75:6a:df:43:38:ac:c4:df:d5:17: 89:92:9a:eb:06:33:eb:31:8c:e2:80:c3:e6:29:24:77:90:bb: 20:14:40:ee:3d:dc:86:95:0b:87:90:84:85:f1:19:85:f7:16: c1:48:68:b7:0e:9c:2a:73:e7:b1:d3:08:06:77:23:53:a3:98: db:91:75:74:f0:84:2d:5d:78:b9:75:b7:0e:09:89:9c:34:2e: 17:cf:9e:b0:4a:66:2b:77:06:a9:f1:a8:95:8f:bb:0f:51:62: 0b:0c:7d:3d:15:dc:bc:be:72:45:53:41:0f:e1:ee:78:fb:87: 06:fe:00:91:5f:33:a7:eb:96:a5:24:ed:de:93:58:30:17:9e: 00:96:55:64:3c:d3:3c:70:d9:bf:b6:c7:c6:85:9d:89:27:b3: 5e:4e:01:b3:0a:58:37:8a:69:49:b7:46:d1:46:08:7e:31:6c: 53:5a:29:15:1b:14:f7:e3:67:a2:0b:c6:8d:4c:1b:81:86:16: 13:f3:f2:26:f4:76:3b:76:fa:7e:39:53:6a:1f:a2:14:42:51: e9:dd:bb:85:35:e3:94:5f:fb:4d:41:95:47:8e:e4:95:3b:be: 52:36:b1:cc:40:50:3e:e7:55:fa:e8:9e:f8:2c:09:fa:f1:bc: 7f:0f:02:5f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N8xItH4PGMrWUgvwN1CwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNGE1ODA0N2YzN2JiYzA1Nzk0NGJiZjhjYWQ4NzQyODc5 NTkyZGEwHhcNMjYwMTAyMTAxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZjJjMGNjMjM5YTQzYjQzNGE4M2Q3ODJjY2E5NjFjYTBlNDVjMjE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsN7az/DFbb7BgWsh/QcnX6kXTwj4 XupTWbyJu3nlqxGn+Lw5NIXs2Llph6Dqnuz1AXVQLDB32RJcTNd0zsK7+GEVlDgy 4jpGUhPicKJeBzW0JOF5MXeFRAHkl069IZQ6Ko7GAj8vFSfx9+Jg8BvrxrGr6Sw6 Y+GtPgxXMnv3kEre/JTeYCD3RufqKczXgdwq98kEuVoTpk8tpSV4fLvoItTd07pV d9vPOse02XLWGF9l9TXl/YsqRtWii/dW9z0k5S72q2W0PLCW8KtyB7NehAQ3undV E9onZ9tgX4B2KhfMGaAqw/d26g5aF5u6MJRVRaNBzfWMACXpx7woLUprEwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH8sDMI5pDtDSoPXgsypYcoORcIXMB8GA1UdIwQY MBaAFPBKWAR/N7vAV5RLv4yth0KHlZLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYt ZjVmYjcxYjlhNTFmLzEvZnl3TXdqbWtPME5LZzllQ3pLbGh5ZzVGd2hjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYtZjVmYjcxYjlhNTFm LzEvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqj7LMA0G CSqGSIb3DQEBCwUAA4IBAQAlQcU+a7Ag/3Vq30M4rMTf1ReJkprrBjPrMYzigMPm KSR3kLsgFEDuPdyGlQuHkISF8RmF9xbBSGi3Dpwqc+ex0wgGdyNTo5jbkXV08IQt XXi5dbcOCYmcNC4Xz56wSmYrdwap8aiVj7sPUWILDH09Fdy8vnJFU0EP4e54+4cG /gCRXzOn65alJO3ek1gwF54AllVkPNM8cNm/tsfGhZ2JJ7NeTgGzClg3imlJt0bR Rgh+MWxTWikVGxT342eiC8aNTBuBhhYT8/Im9HY7dvp+OVNqH6IUQlHp3buFNeOU X/tNQZVHjuSVO75SNrHMQFA+51X66J74LAn68bx/DwJf -----END CERTIFICATE-----Generated at Fri Jan 23 04:39:20 2026 by rpki-client