This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/WYjaPZyXn9OqgdQ9oF2UyH6UZxY.roa File: WYjaPZyXn9OqgdQ9oF2UyH6UZxY.roa (raw, json) Hash identifier: EVCumPjXA28vp5ehPKHe+PCdpvR77Tfj3/cbydnM+o0= Subject key identifier: 59:88:DA:3D:9C:97:9F:D3:AA:81:D4:3D:A0:5D:94:C8:7E:94:67:16 Certificate issuer: /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697 Certificate serial: 019B7A5AB380097255A6A8A94A9C119C0422 Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/WYjaPZyXn9OqgdQ9oF2UyH6UZxY.roa Signing time: Thu 01 Jan 2026 16:18:43 +0000 ROA not before: Thu 01 Jan 2026 16:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20473 IP address blocks: 45.151.98.0/23 maxlen: 23 94.137.76.0/23 maxlen: 23 94.137.94.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 19:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:b3:80:09:72:55:a6:a8:a9:4a:9c:11:9c:04:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697 Validity Not Before: Jan 1 16:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5988da3d9c979fd3aa81d43da05d94c87e946716 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e9:c6:03:7e:1b:eb:9c:9a:93:7f:b6:75:af: d7:11:2a:ab:88:f5:67:37:80:96:1a:c3:f0:d0:5f: 83:cb:60:86:55:2f:d5:0b:9d:cd:7b:51:b5:e1:2a: ad:61:e2:46:f3:90:a1:2a:43:8e:35:25:eb:f8:49: fb:83:90:07:b9:0e:b0:16:ee:5f:f3:87:50:7e:25: f1:f9:1a:21:a6:bc:07:b6:33:2a:a8:b4:5d:39:87: 6b:bc:3c:5b:e6:0d:e3:0c:cd:eb:03:75:bb:bb:c9: 14:e3:09:85:61:be:04:7e:80:d5:7e:0f:31:49:b5: 87:8a:a2:3f:d0:22:b5:e8:63:2b:3d:fa:4c:7c:c7: 1b:f2:13:75:41:31:a4:cc:d5:fa:17:ce:e1:4a:e7: f0:53:c4:79:1e:a1:74:e4:54:43:c9:27:da:9b:8e: 46:7d:0b:8f:4f:9c:99:f8:31:ab:f5:f1:bf:66:f0: 06:31:f2:09:55:4d:ec:68:93:99:c7:78:f8:6d:f5: ff:b0:9f:d6:53:95:31:ac:c4:9e:11:cd:27:9b:9e: 6c:91:93:42:2f:80:bc:dc:bb:b1:6e:58:8f:90:b5: f8:1e:82:01:06:6b:bc:a2:4a:90:40:8d:38:f7:d3: 1f:79:64:ee:91:6b:f9:97:27:a8:59:51:24:c2:84: 82:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:88:DA:3D:9C:97:9F:D3:AA:81:D4:3D:A0:5D:94:C8:7E:94:67:16 X509v3 Authority Key Identifier: keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/WYjaPZyXn9OqgdQ9oF2UyH6UZxY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.151.98.0/23 94.137.76.0/23 94.137.94.0/23 Signature Algorithm: sha256WithRSAEncryption 2b:39:80:cc:25:70:60:a7:3e:fe:cc:69:94:eb:06:c0:31:73: 38:31:d3:7d:26:86:3a:53:d3:09:56:ae:66:65:4f:4c:7c:4a: 40:23:16:85:4d:87:52:5b:3b:e7:0b:f7:ec:46:df:9c:01:ba: 61:ea:c2:8c:3d:29:43:6c:50:cc:85:5d:70:04:35:84:24:bd: 18:bd:b7:d7:de:ed:5e:e7:af:ab:1e:b9:28:a3:bf:be:03:a3: 6b:76:04:82:2b:a5:4b:1c:e5:57:85:bd:5e:3d:2c:3d:0c:5c: d9:4f:c9:d4:32:84:88:80:4c:53:d2:a7:a1:5e:90:7e:9e:86: e7:69:66:f3:bb:3f:34:49:13:c6:2a:f2:41:2a:41:2a:d4:83: e2:a7:9c:9d:f3:6a:2c:b2:01:86:c5:91:b2:1e:42:c8:1e:c1: 5b:e3:b3:e6:97:b0:4d:56:aa:3d:9d:68:41:d9:05:32:b2:f2: aa:e8:d2:f5:a6:84:be:df:87:24:19:aa:52:8f:ab:95:b3:d5: 48:dd:f5:1b:02:46:56:6f:69:01:cc:50:04:fe:cc:87:b6:d5: a3:71:39:1d:95:5b:b2:88:6c:fb:22:64:ea:8e:3a:0c:e2:c5: e7:35:cc:e4:14:b6:2d:13:26:98:2f:f7:2a:48:11:99:9a:f9: 74:ac:ba:9a -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt6WrOACXJVpqipSpwRnAQiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5YWMwYWNiZmRiN2EyNzRlZjM2YzE2ZjU4NjBhZGEyYTI0 NzA2OTcwHhcNMjYwMTAxMTYxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OTg4ZGEzZDljOTc5ZmQzYWE4MWQ0M2RhMDVkOTRjODdlOTQ2NzE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqenGA34b65yak3+2da/XESqriPVn N4CWGsPw0F+Dy2CGVS/VC53Ne1G14SqtYeJG85ChKkOONSXr+En7g5AHuQ6wFu5f 84dQfiXx+RohprwHtjMqqLRdOYdrvDxb5g3jDM3rA3W7u8kU4wmFYb4EfoDVfg8x SbWHiqI/0CK16GMrPfpMfMcb8hN1QTGkzNX6F87hSufwU8R5HqF05FRDySfam45G fQuPT5yZ+DGr9fG/ZvAGMfIJVU3saJOZx3j4bfX/sJ/WU5UxrMSeEc0nm55skZNC L4C83LuxbliPkLX4HoIBBmu8okqQQI0499MfeWTukWv5lyeoWVEkwoSC4QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFFmI2j2cl5/TqoHUPaBdlMh+lGcWMB8GA1UdIwQY MBaAFImsCsv9t6J07zbBb1hgraKiRwaXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWF3S3lfMjNvblR2TnNGdldHQ3RvcUpIQnBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS85M2E3NjgtMjY3Ny00OGQ2LTkxNGMt ZDRkYmY3MDY2ZmQzLzEvV1lqYVBaeVhuOU9xZ2RROW9GMlV5SDZVWnhZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS85M2E3NjgtMjY3Ny00OGQ2LTkxNGMtZDRkYmY3MDY2ZmQz LzEvaWF3S3lfMjNvblR2TnNGdldHQ3RvcUpIQnBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBLZdiAwQB XolMAwQBXoleMA0GCSqGSIb3DQEBCwUAA4IBAQArOYDMJXBgpz7+zGmU6wbAMXM4 MdN9JoY6U9MJVq5mZU9MfEpAIxaFTYdSWzvnC/fsRt+cAbph6sKMPSlDbFDMhV1w BDWEJL0YvbfX3u1e56+rHrkoo7++A6NrdgSCK6VLHOVXhb1ePSw9DFzZT8nUMoSI gExT0qehXpB+nobnaWbzuz80SRPGKvJBKkEq1IPip5yd82ossgGGxZGyHkLIHsFb 47Pml7BNVqo9nWhB2QUysvKq6NL1poS+34ckGapSj6uVs9VI3fUbAkZWb2kBzFAE /syHttWjcTkdlVuyiGz7ImTqjjoM4sXnNczkFLYtEyaYL/cqSBGZmvl0rLqa -----END CERTIFICATE-----Generated at Tue Jan 27 02:50:47 2026 by rpki-client