This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/wyv5vBa47PAsnMwdHNximNKw3Uk.roa File: wyv5vBa47PAsnMwdHNximNKw3Uk.roa (raw, json) Hash identifier: 7tiep6Gb67cUku8Kl/ICbKHtHb5PWFafeqQ40Zk2Vqw= Subject key identifier: C3:2B:F9:BC:16:B8:EC:F0:2C:9C:CC:1D:1C:DC:62:98:D2:B0:DD:49 Certificate issuer: /CN=20ccf6dfa709573a821b63c4cb695605fd26680b Certificate serial: 019B797EFCD13DE33F2819397D0B1343002E Authority key identifier: 20:CC:F6:DF:A7:09:57:3A:82:1B:63:C4:CB:69:56:05:FD:26:68:0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMz236cJVzqCG2PEy2lWBf0maAs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/wyv5vBa47PAsnMwdHNximNKw3Uk.roa Signing time: Thu 01 Jan 2026 12:18:43 +0000 ROA not before: Thu 01 Jan 2026 12:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58282 IP address blocks: 185.128.228.0/22 maxlen: 22 185.153.152.0/22 maxlen: 22 185.153.152.0/23 maxlen: 23 185.153.154.0/23 maxlen: 23 188.64.152.0/21 maxlen: 21 188.64.152.0/22 maxlen: 22 188.64.156.0/22 maxlen: 22 194.182.109.0/24 maxlen: 24 194.182.156.0/22 maxlen: 22 194.182.156.0/23 maxlen: 23 194.182.156.0/24 maxlen: 24 194.182.157.0/24 maxlen: 24 194.182.159.0/24 maxlen: 24 2a03:1500::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/IMz236cJVzqCG2PEy2lWBf0maAs.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/IMz236cJVzqCG2PEy2lWBf0maAs.mft rsync://rpki.ripe.net/repository/DEFAULT/IMz236cJVzqCG2PEy2lWBf0maAs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:fc:d1:3d:e3:3f:28:19:39:7d:0b:13:43:00:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20ccf6dfa709573a821b63c4cb695605fd26680b Validity Not Before: Jan 1 12:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c32bf9bc16b8ecf02c9ccc1d1cdc6298d2b0dd49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:64:c2:0e:68:c9:78:29:85:14:a1:a1:fe:1c: 47:10:f6:f2:bc:7d:a8:1d:1f:8b:e0:80:3a:9e:dd: 6e:c4:61:79:ec:21:e4:e2:b9:9c:d5:87:1b:8f:9f: 8d:14:f5:36:27:9d:e5:f4:23:cb:7f:65:66:6d:d7: 1c:70:96:1c:88:83:1c:47:8f:bd:71:a6:13:10:77: 5b:70:2e:f4:3a:01:d5:a9:87:53:03:8a:ca:2f:80: 17:2b:7c:bd:83:56:19:84:f7:24:64:4c:1e:56:68: 8a:27:e8:42:e8:bb:cc:2d:53:86:dd:d9:95:e4:67: f7:3f:5f:a7:a0:1f:d0:61:fd:71:d9:1f:33:0b:52: 04:71:4e:e5:5e:af:96:5c:9c:3a:50:d9:80:3d:77: f5:2f:be:73:a7:a8:81:0d:83:53:d1:b3:64:45:16: 14:7e:c6:9e:11:b5:49:0a:e6:ac:e5:27:00:b4:49: 54:1e:f2:e6:cd:96:5d:21:49:fa:2e:8f:b6:4a:89: 92:78:3a:b5:33:95:8f:3b:51:20:ec:46:cf:59:50: f1:6c:af:f6:1a:53:77:cc:68:34:76:a5:60:9e:bf: 64:4b:44:24:0c:90:d1:1d:32:de:72:ab:d8:05:7d: fe:00:a8:52:ce:f0:6f:bc:0e:82:c2:f9:70:bc:4a: 2a:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:2B:F9:BC:16:B8:EC:F0:2C:9C:CC:1D:1C:DC:62:98:D2:B0:DD:49 X509v3 Authority Key Identifier: keyid:20:CC:F6:DF:A7:09:57:3A:82:1B:63:C4:CB:69:56:05:FD:26:68:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMz236cJVzqCG2PEy2lWBf0maAs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/wyv5vBa47PAsnMwdHNximNKw3Uk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/IMz236cJVzqCG2PEy2lWBf0maAs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.128.228.0/22 185.153.152.0/22 188.64.152.0/21 194.182.109.0/24 194.182.156.0/22 IPv6: 2a03:1500::/32 Signature Algorithm: sha256WithRSAEncryption 07:53:19:ac:a1:14:fe:d2:6c:1f:b0:0c:6c:4b:59:6c:d7:ba: 26:27:ce:25:18:7c:3e:07:89:e4:0e:cd:42:62:a2:07:c0:80: 03:bc:7a:69:8a:93:f3:e1:79:f1:d1:57:fb:dd:66:4a:8a:d5: 3c:ec:bd:ea:85:91:d4:b9:44:17:28:35:2a:f0:ae:55:36:c7: 3b:2f:6e:84:6c:f3:74:0c:bf:be:ef:83:58:98:be:42:63:d4: 1f:4d:1b:e3:46:0a:b6:22:f0:3a:78:ec:f6:10:b0:93:96:cb: f0:10:6b:21:6a:8e:3f:96:b4:8c:df:a3:7e:03:3f:72:b2:63: d6:5e:2d:aa:f6:33:23:52:37:cd:0d:a2:ea:38:51:f4:c7:42: 22:ff:96:2c:b8:e8:48:47:20:d7:cd:2e:34:9a:c5:c0:75:bc: ad:d0:14:77:cc:48:ef:2d:35:d2:85:90:67:c6:d9:79:0b:10: 54:32:b2:37:e5:13:89:07:6e:3c:6a:7e:2e:61:c8:2d:01:27: ab:77:2e:b2:19:cf:27:13:16:7c:c7:74:dc:e2:3d:b5:9c:12: dd:21:c6:ce:b6:36:28:e0:f6:8c:a1:d9:21:0f:09:b1:4d:29: c2:ec:2d:d8:4e:aa:80:a8:25:9e:a3:43:33:80:cc:e8:a5:61: c0:70:b5:de -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt5fvzRPeM/KBk5fQsTQwAuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwY2NmNmRmYTcwOTU3M2E4MjFiNjNjNGNiNjk1NjA1ZmQy NjY4MGIwHhcNMjYwMTAxMTIxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMzJiZjliYzE2YjhlY2YwMmM5Y2NjMWQxY2RjNjI5OGQyYjBkZDQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWTCDmjJeCmFFKGh/hxHEPbyvH2o HR+L4IA6nt1uxGF57CHk4rmc1Ycbj5+NFPU2J53l9CPLf2VmbdcccJYciIMcR4+9 caYTEHdbcC70OgHVqYdTA4rKL4AXK3y9g1YZhPckZEweVmiKJ+hC6LvMLVOG3dmV 5Gf3P1+noB/QYf1x2R8zC1IEcU7lXq+WXJw6UNmAPXf1L75zp6iBDYNT0bNkRRYU fsaeEbVJCuas5ScAtElUHvLmzZZdIUn6Lo+2SomSeDq1M5WPO1Eg7EbPWVDxbK/2 GlN3zGg0dqVgnr9kS0QkDJDRHTLecqvYBX3+AKhSzvBvvA6CwvlwvEoqlwIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFMMr+bwWuOzwLJzMHRzcYpjSsN1JMB8GA1UdIwQY MBaAFCDM9t+nCVc6ghtjxMtpVgX9JmgLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSU16MjM2Y0pWenFDRzJQRXkybFdCZjBtYUFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8xOTI2OWMtOWQ1Yi00ZjA5LTk3ZWIt M2EyOGY4YTljNzA3LzEvd3l2NXZCYTQ3UEFzbk13ZEhOeGltTkt3M1VrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8xOTI2OWMtOWQ1Yi00ZjA5LTk3ZWItM2EyOGY4YTljNzA3 LzEvSU16MjM2Y0pWenFDRzJQRXkybFdCZjBtYUFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQCuYDkAwQC uZmYAwQDvECYAwQAwrZtAwQCwracMA0EAgACMAcDBQAqAxUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHUxmsoRT+0mwfsAxsS1ls17omJ84lGHw+B4nkDs1CYqIHwIADvHpp ipPz4Xnx0Vf73WZKitU87L3qhZHUuUQXKDUq8K5VNsc7L26EbPN0DL++74NYmL5C Y9QfTRvjRgq2IvA6eOz2ELCTlsvwEGshao4/lrSM36N+Az9ysmPWXi2q9jMjUjfN DaLqOFH0x0Ii/5YsuOhIRyDXzS40msXAdbyt0BR3zEjvLTXShZBnxtl5CxBUMrI3 5ROJB248an4uYcgtASerdy6yGc8nExZ8x3Tc4j21nBLdIcbOtjYo4PaModkhDwmx TSnC7C3YTqqAqCWeo0MzgMzopWHAcLXe -----END CERTIFICATE-----Generated at Mon Feb 9 20:55:22 2026 by rpki-client