This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/wyhOc8BV6DixC-L9K67ypKQYJYw.roa File: wyhOc8BV6DixC-L9K67ypKQYJYw.roa (raw, json) Hash identifier: NyVHxYdckCso9DiAL9JCKlRVZXYf/PeSNDktKDq2tIQ= Subject key identifier: C3:28:4E:73:C0:55:E8:38:B1:0B:E2:FD:2B:AE:F2:A4:A4:18:25:8C Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003 Certificate serial: 019C20239D85798D9959E0D3CCA8E52B0530 Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/wyhOc8BV6DixC-L9K67ypKQYJYw.roa Signing time: Mon 02 Feb 2026 20:55:30 +0000 ROA not before: Mon 02 Feb 2026 20:55:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6939 IP address blocks: 64.188.108.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:20:23:9d:85:79:8d:99:59:e0:d3:cc:a8:e5:2b:05:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003 Validity Not Before: Feb 2 20:55:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c3284e73c055e838b10be2fd2baef2a4a418258c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:93:85:3b:27:90:93:12:d7:79:f6:3d:1a:dc: 1a:72:76:8b:cf:38:aa:81:db:16:fa:23:d3:dd:ed: 73:5c:79:cf:89:70:70:26:01:70:52:7e:e9:62:ac: 5d:1d:03:2d:28:f4:11:02:7f:53:40:a3:69:bc:38: 79:a1:3a:bf:1e:33:25:2d:44:65:9f:77:5e:73:3b: e6:26:5a:df:45:01:3f:8c:c2:9b:aa:2c:3d:f6:2c: 5a:0e:bb:50:80:5d:8b:00:68:ae:c3:1f:05:5c:f4: f0:73:fd:ae:6e:65:1f:bd:2e:c7:3d:7f:d2:c3:95: 8a:85:c7:95:a3:e3:b9:43:0e:58:e8:6c:18:ee:0e: 92:42:d4:e7:14:4f:ee:1d:a1:b6:9c:96:79:8f:87: b4:ba:7e:ce:3f:7a:79:7a:81:2d:65:b4:40:3d:5d: aa:71:b9:da:da:ff:89:cc:b9:8e:7e:9b:f1:8a:be: 78:fc:d0:59:3b:3c:c4:a2:da:ad:ce:39:d3:05:65: 8c:f3:52:e3:58:bc:d4:3b:c9:e9:23:b6:21:2c:55: ee:7c:f6:db:73:ff:44:40:51:a7:47:c3:36:ed:f4: dd:2c:da:9c:a7:a8:be:b4:8b:2f:1f:e9:b2:ea:87: 36:95:77:43:4d:e9:44:94:f4:07:90:10:dd:26:0e: f6:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:28:4E:73:C0:55:E8:38:B1:0B:E2:FD:2B:AE:F2:A4:A4:18:25:8C X509v3 Authority Key Identifier: keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/wyhOc8BV6DixC-L9K67ypKQYJYw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.188.108.0/22 Signature Algorithm: sha256WithRSAEncryption 9d:d0:82:d4:56:ea:33:ce:c1:91:64:1a:9c:8b:0e:4c:b3:fc: 11:aa:a0:50:37:dc:67:f7:94:65:95:12:59:a6:fa:a7:af:83: e7:70:d9:5c:34:5c:49:6d:4f:84:c4:53:cd:52:a7:ea:2f:c4: d9:c6:c0:d4:5f:f7:2c:bd:dd:a1:21:1b:e2:d8:ad:4a:2d:96: 71:09:74:3b:0b:ad:ff:85:68:74:aa:69:2b:f4:39:05:dd:4b: d9:6d:8c:32:b6:48:21:8d:bf:f3:57:a2:c8:94:ab:0c:ec:fe: 86:12:45:d5:f0:55:93:ca:d0:d8:36:32:08:91:17:06:90:be: 8b:89:83:d8:d8:86:74:fc:51:90:b1:0f:76:f1:a6:05:bb:86: 4f:9e:2a:f1:19:6c:b9:2a:76:7a:6f:e5:83:cf:c4:38:10:56: ea:cf:3a:a3:96:8d:57:ef:28:75:45:0a:f5:4a:48:21:29:fc: 3e:23:06:55:a7:4e:f7:80:d8:e3:16:c1:ba:5e:54:53:cf:00: 76:f6:2f:cb:a0:0b:ae:7a:80:e1:4a:8f:47:06:77:15:87:24: 79:28:b8:56:8e:95:63:c0:35:96:ca:d3:04:7a:e7:6a:b9:cd: 36:29:dc:8b:89:78:da:3c:ad:bb:03:a5:76:6f:6d:2d:9a:16: 0e:bc:a5:13 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZwgI52FeY2ZWeDTzKjlKwUwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4 NDAwMDMwHhcNMjYwMjAyMjA1NTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMzI4NGU3M2MwNTVlODM4YjEwYmUyZmQyYmFlZjJhNGE0MTgyNThjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZOFOyeQkxLXefY9GtwacnaLzziq gdsW+iPT3e1zXHnPiXBwJgFwUn7pYqxdHQMtKPQRAn9TQKNpvDh5oTq/HjMlLURl n3deczvmJlrfRQE/jMKbqiw99ixaDrtQgF2LAGiuwx8FXPTwc/2ubmUfvS7HPX/S w5WKhceVo+O5Qw5Y6GwY7g6SQtTnFE/uHaG2nJZ5j4e0un7OP3p5eoEtZbRAPV2q cbna2v+JzLmOfpvxir54/NBZOzzEotqtzjnTBWWM81LjWLzUO8npI7YhLFXufPbb c/9EQFGnR8M27fTdLNqcp6i+tIsvH+my6oc2lXdDTelElPQHkBDdJg72XQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMMoTnPAVeg4sQvi/Suu8qSkGCWMMB8GA1UdIwQY MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt MTQzOTY3YThmZTA4LzEvd3loT2M4QlY2RGl4Qy1MOUs2N3lwS1FZSll3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4 LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQLxsMA0G CSqGSIb3DQEBCwUAA4IBAQCd0ILUVuozzsGRZBqciw5Ms/wRqqBQN9xn95RllRJZ pvqnr4PncNlcNFxJbU+ExFPNUqfqL8TZxsDUX/csvd2hIRvi2K1KLZZxCXQ7C63/ hWh0qmkr9DkF3UvZbYwytkghjb/zV6LIlKsM7P6GEkXV8FWTytDYNjIIkRcGkL6L iYPY2IZ0/FGQsQ928aYFu4ZPnirxGWy5KnZ6b+WDz8Q4EFbqzzqjlo1X7yh1RQr1 SkghKfw+IwZVp073gNjjFsG6XlRTzwB29i/LoAuueoDhSo9HBncVhyR5KLhWjpVj wDWWytMEeudquc02KdyLiXjaPK27A6V2b20tmhYOvKUT -----END CERTIFICATE-----Generated at Wed Feb 4 10:03:37 2026 by rpki-client