This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/793e7c-7139-4da6-b802-d4bc772a92bd/1/wyy3rlzUUMeQq8PIhXfkhcAt_40.roa File: wyy3rlzUUMeQq8PIhXfkhcAt_40.roa (raw, json) Hash identifier: gHG1HjkTZWK4eYCE7NI/fkalfX+p2e1lN/BRfBXmaKQ= Subject key identifier: C3:2C:B7:AE:5C:D4:50:C7:90:AB:C3:C8:85:77:E4:85:C0:2D:FF:8D Certificate issuer: /CN=02f56262c9e8c7d1344df2b0f8c25da13abd6222 Certificate serial: 019BDBE4C52498952019055167F97D2A325F Authority key identifier: 02:F5:62:62:C9:E8:C7:D1:34:4D:F2:B0:F8:C2:5D:A1:3A:BD:62:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AvViYsnox9E0TfKw-MJdoTq9YiI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/793e7c-7139-4da6-b802-d4bc772a92bd/1/wyy3rlzUUMeQq8PIhXfkhcAt_40.roa Signing time: Tue 20 Jan 2026 14:52:41 +0000 ROA not before: Tue 20 Jan 2026 14:52:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207620 IP address blocks: 84.38.241.0/24 maxlen: 24 91.224.170.0/24 maxlen: 24 95.133.238.0/24 maxlen: 24 95.133.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/793e7c-7139-4da6-b802-d4bc772a92bd/1/AvViYsnox9E0TfKw-MJdoTq9YiI.crl rsync://rpki.ripe.net/repository/DEFAULT/18/793e7c-7139-4da6-b802-d4bc772a92bd/1/AvViYsnox9E0TfKw-MJdoTq9YiI.mft rsync://rpki.ripe.net/repository/DEFAULT/AvViYsnox9E0TfKw-MJdoTq9YiI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:db:e4:c5:24:98:95:20:19:05:51:67:f9:7d:2a:32:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02f56262c9e8c7d1344df2b0f8c25da13abd6222 Validity Not Before: Jan 20 14:52:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c32cb7ae5cd450c790abc3c88577e485c02dff8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:20:03:b1:f8:b3:3c:ff:94:6c:9a:44:56:2b: 8e:5e:97:1f:e3:e2:9f:56:ef:db:db:41:14:11:3b: cf:b9:03:00:d3:ff:f8:97:d3:97:db:19:6f:50:53: 7a:76:e4:a6:a2:4d:f9:eb:53:b6:7d:f1:44:b1:2b: 0b:17:db:25:36:35:f7:46:ce:b2:23:21:67:36:c1: af:fe:cd:47:07:b8:d4:7e:b5:26:57:4d:7f:fc:d3: 35:47:a1:25:2f:b7:56:d3:62:0c:c1:15:06:aa:d9: cf:03:f3:0b:3b:aa:8a:cc:02:21:b3:55:68:3c:7f: 26:91:44:c5:c5:91:06:9b:55:e4:59:95:78:b8:54: f4:af:dd:48:57:d9:c1:9d:25:df:bb:18:d1:41:d2: b1:9b:3f:20:28:82:ba:66:e8:b4:64:94:ef:e3:40: 65:bc:e2:4f:dc:f2:15:94:d4:1c:13:a4:49:b8:89: ae:48:24:c9:b9:41:2d:13:db:aa:61:64:f8:f0:fa: 08:46:1f:c9:7a:94:35:2a:3a:3c:1b:d1:a8:71:11: c6:58:1e:94:21:13:99:72:c2:86:2c:56:cd:ad:87: 30:35:35:ae:65:ef:65:a0:cf:ce:62:23:7b:2c:2c: e2:a4:fc:51:db:5f:7e:34:29:7b:d8:bd:51:25:28: 79:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:2C:B7:AE:5C:D4:50:C7:90:AB:C3:C8:85:77:E4:85:C0:2D:FF:8D X509v3 Authority Key Identifier: keyid:02:F5:62:62:C9:E8:C7:D1:34:4D:F2:B0:F8:C2:5D:A1:3A:BD:62:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AvViYsnox9E0TfKw-MJdoTq9YiI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/793e7c-7139-4da6-b802-d4bc772a92bd/1/wyy3rlzUUMeQq8PIhXfkhcAt_40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/793e7c-7139-4da6-b802-d4bc772a92bd/1/AvViYsnox9E0TfKw-MJdoTq9YiI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.38.241.0/24 91.224.170.0/24 95.133.238.0/23 Signature Algorithm: sha256WithRSAEncryption 59:cb:8b:fd:2c:94:91:5b:0a:38:c6:f4:36:26:1a:0a:37:8e: b4:02:ac:55:ce:a4:e9:13:57:74:1f:17:d2:2b:9e:02:70:ae: 10:23:17:eb:3f:53:dc:7e:82:6b:98:85:9d:05:ea:23:c5:16: 3f:86:f2:3d:7f:5b:5e:9f:56:c3:d4:e0:ae:a8:9e:2f:fa:c1: 7d:7a:1f:57:6d:5b:c6:30:49:16:44:69:15:f2:31:cb:23:7c: 2c:c6:7e:4d:a1:1e:10:a4:0a:e9:5f:a1:6f:26:6c:35:3b:3b: 08:24:2f:14:c5:9a:48:4a:45:9a:b4:d5:c3:4d:be:ad:bc:69: d6:46:4e:81:d1:93:c3:1c:13:f6:7e:13:e8:32:52:f6:c3:66: 5a:a7:62:49:31:34:ab:dc:6b:94:da:03:d7:16:1e:f8:9a:3d: fc:1e:7e:86:76:93:02:e0:d2:a5:d4:3f:e5:51:0b:81:3c:6c: 4d:c0:49:71:72:1c:f9:52:35:43:3c:08:65:fd:7f:99:88:06: 05:03:ca:6c:88:51:e1:a9:5d:ff:d0:d9:dd:4c:35:fd:d0:1f: 3f:59:40:e6:d9:70:82:3b:52:e9:2f:48:17:2a:78:9d:92:b5: d6:b7:5b:98:83:af:ea:7b:a7:47:b4:40:a5:5d:a4:e9:49:9a: 28:27:81:b4 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZvb5MUkmJUgGQVRZ/l9KjJfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyZjU2MjYyYzllOGM3ZDEzNDRkZjJiMGY4YzI1ZGExM2Fi ZDYyMjIwHhcNMjYwMTIwMTQ1MjQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMzJjYjdhZTVjZDQ1MGM3OTBhYmMzYzg4NTc3ZTQ4NWMwMmRmZjhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1CADsfizPP+UbJpEViuOXpcf4+Kf Vu/b20EUETvPuQMA0//4l9OX2xlvUFN6duSmok3561O2ffFEsSsLF9slNjX3Rs6y IyFnNsGv/s1HB7jUfrUmV01//NM1R6ElL7dW02IMwRUGqtnPA/MLO6qKzAIhs1Vo PH8mkUTFxZEGm1XkWZV4uFT0r91IV9nBnSXfuxjRQdKxmz8gKIK6Zui0ZJTv40Bl vOJP3PIVlNQcE6RJuImuSCTJuUEtE9uqYWT48PoIRh/JepQ1Kjo8G9GocRHGWB6U IROZcsKGLFbNrYcwNTWuZe9loM/OYiN7LCzipPxR219+NCl72L1RJSh5pwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFMMst65c1FDHkKvDyIV35IXALf+NMB8GA1UdIwQY MBaAFAL1YmLJ6MfRNE3ysPjCXaE6vWIiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXZWaVlzbm94OUUwVGZLdy1NSmRvVHE5WWlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC83OTNlN2MtNzEzOS00ZGE2LWI4MDIt ZDRiYzc3MmE5MmJkLzEvd3l5M3JselVVTWVRcThQSWhYZmtoY0F0XzQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC83OTNlN2MtNzEzOS00ZGE2LWI4MDItZDRiYzc3MmE5MmJk LzEvQXZWaVlzbm94OUUwVGZLdy1NSmRvVHE5WWlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAVCbxAwQA W+CqAwQBX4XuMA0GCSqGSIb3DQEBCwUAA4IBAQBZy4v9LJSRWwo4xvQ2JhoKN460 AqxVzqTpE1d0HxfSK54CcK4QIxfrP1PcfoJrmIWdBeojxRY/hvI9f1ten1bD1OCu qJ4v+sF9eh9XbVvGMEkWRGkV8jHLI3wsxn5NoR4QpArpX6FvJmw1OzsIJC8UxZpI SkWatNXDTb6tvGnWRk6B0ZPDHBP2fhPoMlL2w2Zap2JJMTSr3GuU2gPXFh74mj38 Hn6GdpMC4NKl1D/lUQuBPGxNwElxchz5UjVDPAhl/X+ZiAYFA8psiFHhqV3/0Nnd TDX90B8/WUDm2XCCO1LpL0gXKnidkrXWt1uYg6/qe6dHtEClXaTpSZooJ4G0 -----END CERTIFICATE-----Generated at Tue Feb 10 01:13:02 2026 by rpki-client