This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/Wye5gSaWAnRJTla5BqJmEtnG-9Y.roa File: Wye5gSaWAnRJTla5BqJmEtnG-9Y.roa (raw, json) Hash identifier: HTH9ljB4Mkcyd/kw3T48aCpD4TpnuCOzGCXLkvMzc3E= Subject key identifier: 5B:27:B9:81:26:96:02:74:49:4E:56:B9:06:A2:66:12:D9:C6:FB:D6 Certificate issuer: /CN=87d990131467b77d11162b79fbe3b06ca8ab2d39 Certificate serial: 019AFEA5F0F065E544D29D4D3011F1BF0C07 Authority key identifier: 87:D9:90:13:14:67:B7:7D:11:16:2B:79:FB:E3:B0:6C:A8:AB:2D:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h9mQExRnt30RFit5--OwbKirLTk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/Wye5gSaWAnRJTla5BqJmEtnG-9Y.roa Signing time: Mon 08 Dec 2025 15:47:59 +0000 ROA not before: Mon 08 Dec 2025 15:47:59 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 16347 IP address blocks: 2.59.144.0/22 maxlen: 22 5.10.128.0/21 maxlen: 21 5.183.248.0/22 maxlen: 22 23.90.192.0/18 maxlen: 18 31.204.80.0/21 maxlen: 21 45.80.252.0/22 maxlen: 22 45.86.96.0/22 maxlen: 22 45.89.76.0/22 maxlen: 22 45.92.180.0/22 maxlen: 22 45.129.216.0/24 maxlen: 24 45.129.217.0/24 maxlen: 24 45.129.218.0/24 maxlen: 24 45.133.68.0/22 maxlen: 22 45.142.108.0/22 maxlen: 22 45.152.16.0/22 maxlen: 22 46.18.120.0/22 maxlen: 22 46.18.124.0/24 maxlen: 24 46.18.125.0/24 maxlen: 24 46.18.126.0/23 maxlen: 23 62.192.156.0/22 maxlen: 22 79.99.160.0/21 maxlen: 21 88.86.224.0/19 maxlen: 19 88.218.12.0/22 maxlen: 22 92.119.232.0/22 maxlen: 22 94.154.4.0/24 maxlen: 24 94.187.128.0/19 maxlen: 19 168.220.128.0/19 maxlen: 19 185.20.16.0/22 maxlen: 22 185.48.252.0/22 maxlen: 22 185.86.88.0/22 maxlen: 22 185.87.100.0/22 maxlen: 22 185.98.116.0/22 maxlen: 22 185.132.64.0/22 maxlen: 22 185.133.80.0/22 maxlen: 22 185.134.156.0/22 maxlen: 22 185.135.176.0/22 maxlen: 22 185.138.116.0/22 maxlen: 22 185.163.136.0/22 maxlen: 22 185.163.212.0/22 maxlen: 22 185.163.220.0/22 maxlen: 22 185.163.228.0/22 maxlen: 22 185.169.156.0/22 maxlen: 22 185.186.88.0/22 maxlen: 22 185.191.36.0/22 maxlen: 22 185.197.108.0/22 maxlen: 22 185.241.140.0/22 maxlen: 22 185.254.8.0/22 maxlen: 22 192.214.192.0/19 maxlen: 19 195.216.140.0/22 maxlen: 22 212.122.96.0/19 maxlen: 24 2a00:41e0::/29 maxlen: 29 2a00:6780::/29 maxlen: 32 2a00:6780::/32 maxlen: 32 2a01:648::/29 maxlen: 29 2a05:b780::/29 maxlen: 29 2a05:c100::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.crl rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.mft rsync://rpki.ripe.net/repository/DEFAULT/h9mQExRnt30RFit5--OwbKirLTk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 09:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fe:a5:f0:f0:65:e5:44:d2:9d:4d:30:11:f1:bf:0c:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87d990131467b77d11162b79fbe3b06ca8ab2d39 Validity Not Before: Dec 8 15:47:59 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5b27b98126960274494e56b906a26612d9c6fbd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:bb:04:56:3d:17:46:b1:00:d0:7f:32:06:65: d3:84:1f:02:c3:12:47:58:2c:8e:5a:0e:eb:e2:b3: ea:29:de:19:8c:c5:6b:e3:db:4c:c4:9c:c2:e0:4a: 3e:a2:cb:22:fc:73:ec:9c:57:01:d0:b8:e3:66:e2: 0f:2c:4c:54:3e:81:0b:d4:dd:05:52:98:2b:de:31: db:45:ac:19:95:b9:a3:e2:7f:18:e9:04:9b:27:61: 8c:70:6d:22:1f:6a:7a:d0:45:de:6c:2a:42:69:2c: 0c:1b:f1:92:51:0b:21:7d:8d:f7:8a:aa:a5:f5:64: 61:8c:89:5a:1d:48:c4:61:7d:7e:15:a5:75:a5:31: 91:27:42:a1:52:a5:70:dd:48:50:70:98:63:36:63: a2:b2:29:45:4e:a5:fb:48:d1:02:79:19:3f:d0:69: fb:87:99:d6:da:32:b2:72:c6:3b:fd:9b:47:ba:47: 1a:26:5f:c9:61:49:b9:2b:72:d9:fc:12:8c:59:15: cc:96:bc:b2:98:08:c4:fc:15:4d:42:9f:ac:51:64: 2d:7a:11:bb:7b:04:57:e9:d4:bf:7b:65:ba:93:5e: e8:74:f3:29:f9:74:38:49:06:9b:44:54:e8:f8:c0: d0:f4:10:53:88:d6:1c:c8:24:62:5f:9c:b3:ea:97: 07:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:27:B9:81:26:96:02:74:49:4E:56:B9:06:A2:66:12:D9:C6:FB:D6 X509v3 Authority Key Identifier: keyid:87:D9:90:13:14:67:B7:7D:11:16:2B:79:FB:E3:B0:6C:A8:AB:2D:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9mQExRnt30RFit5--OwbKirLTk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/Wye5gSaWAnRJTla5BqJmEtnG-9Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.59.144.0/22 5.10.128.0/21 5.183.248.0/22 23.90.192.0/18 31.204.80.0/21 45.80.252.0/22 45.86.96.0/22 45.89.76.0/22 45.92.180.0/22 45.129.216.0-45.129.218.255 45.133.68.0/22 45.142.108.0/22 45.152.16.0/22 46.18.120.0/21 62.192.156.0/22 79.99.160.0/21 88.86.224.0/19 88.218.12.0/22 92.119.232.0/22 94.154.4.0/24 94.187.128.0/19 168.220.128.0/19 185.20.16.0/22 185.48.252.0/22 185.86.88.0/22 185.87.100.0/22 185.98.116.0/22 185.132.64.0/22 185.133.80.0/22 185.134.156.0/22 185.135.176.0/22 185.138.116.0/22 185.163.136.0/22 185.163.212.0/22 185.163.220.0/22 185.163.228.0/22 185.169.156.0/22 185.186.88.0/22 185.191.36.0/22 185.197.108.0/22 185.241.140.0/22 185.254.8.0/22 192.214.192.0/19 195.216.140.0/22 212.122.96.0/19 IPv6: 2a00:41e0::/29 2a00:6780::/29 2a01:648::/29 2a05:b780::/29 2a05:c100::/29 Signature Algorithm: sha256WithRSAEncryption 52:37:31:ed:7b:ff:2f:b6:e6:5c:9b:5f:51:60:ff:ad:7e:0f: e7:26:8b:0f:33:34:49:67:4f:9f:ea:13:5d:5c:26:1e:cf:8c: 81:52:6f:66:19:39:3d:21:51:ac:2d:27:ce:c8:f4:aa:5a:21: 46:fa:25:7d:52:16:06:3a:24:8f:12:f6:cd:46:58:17:23:c7: a7:de:f7:e5:c1:d2:db:51:61:2c:1a:b7:e6:1d:52:ef:84:cc: 0a:c2:ac:46:24:7d:02:d0:2b:a2:fe:7a:7a:05:a3:ca:24:1f: dd:1b:36:6c:a7:fe:6a:7d:e4:5d:54:a8:ff:b0:98:04:46:de: 1f:84:60:2e:60:39:82:e8:43:d8:20:3e:8e:d6:09:34:a1:46: 46:0d:f9:48:4f:ba:5b:b9:2e:44:4b:f1:ac:f3:f1:96:d8:d8: be:0e:0b:78:46:46:8c:45:d6:fa:b6:d4:35:ec:8f:ce:ed:96: 66:17:a9:0c:8b:20:c8:88:36:c4:46:5e:59:07:55:23:84:3e: 8c:71:da:ce:28:79:91:86:f2:64:b9:2a:7a:56:d7:97:0c:73: fb:89:15:61:70:48:86:0a:4c:f9:60:b9:8c:14:77:cc:45:b4: 7b:01:f0:8d:e6:f5:70:6d:81:1b:c3:7c:fd:d6:f2:56:d5:00: 87:53:ae:b7 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgISAZr+pfDwZeVE0p1NMBHxvwwHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3ZDk5MDEzMTQ2N2I3N2QxMTE2MmI3OWZiZTNiMDZjYThh YjJkMzkwHhcNMjUxMjA4MTU0NzU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YjI3Yjk4MTI2OTYwMjc0NDk0ZTU2YjkwNmEyNjYxMmQ5YzZmYmQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4bsEVj0XRrEA0H8yBmXThB8CwxJH WCyOWg7r4rPqKd4ZjMVr49tMxJzC4Eo+ossi/HPsnFcB0LjjZuIPLExUPoEL1N0F Upgr3jHbRawZlbmj4n8Y6QSbJ2GMcG0iH2p60EXebCpCaSwMG/GSUQshfY33iqql 9WRhjIlaHUjEYX1+FaV1pTGRJ0KhUqVw3UhQcJhjNmOisilFTqX7SNECeRk/0Gn7 h5nW2jKycsY7/ZtHukcaJl/JYUm5K3LZ/BKMWRXMlryymAjE/BVNQp+sUWQtehG7 ewRX6dS/e2W6k17odPMp+XQ4SQabRFTo+MDQ9BBTiNYcyCRiX5yz6pcH7wIDAQAB o4IDTjCCA0owHQYDVR0OBBYEFFsnuYEmlgJ0SU5WuQaiZhLZxvvWMB8GA1UdIwQY MBaAFIfZkBMUZ7d9ERYrefvjsGyoqy05MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDltUUV4Um50MzBSRml0NS0tT3diS2lyTFRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni81ZGVhOTctN2VmNy00ZGIwLTk0YmMt YjhlOGIzNGRiMjkwLzEvV3llNWdTYVdBblJKVGxhNUJxSm1FdG5HLTlZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni81ZGVhOTctN2VmNy00ZGIwLTk0YmMtYjhlOGIzNGRiMjkw LzEvaDltUUV4Um50MzBSRml0NS0tT3diS2lyTFRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBYgYIKwYBBQUHAQcBAf8EggFRMIIBTTCCAR4EAgABMIIB FgMEAgI7kAMEAwUKgAMEAgW3+AMEBhdawAMEAx/MUAMEAi1Q/AMEAi1WYAMEAi1Z TAMEAi1ctDAMAwQDLYHYAwQALYHaAwQCLYVEAwQCLY5sAwQCLZgQAwQDLhJ4AwQC PsCcAwQDT2OgAwQFWFbgAwQCWNoMAwQCXHfoAwQAXpoEAwQFXruAAwQFqNyAAwQC uRQQAwQCuTD8AwQCuVZYAwQCuVdkAwQCuWJ0AwQCuYRAAwQCuYVQAwQCuYacAwQC uYewAwQCuYp0AwQCuaOIAwQCuaPUAwQCuaPcAwQCuaPkAwQCuamcAwQCubpYAwQC ub8kAwQCucVsAwQCufGMAwQCuf4IAwQFwNbAAwQCw9iMAwQF1HpgMCkEAgACMCMD BQMqAEHgAwUDKgBngAMFAyoBBkgDBQMqBbeAAwUDKgXBADANBgkqhkiG9w0BAQsF AAOCAQEAUjcx7Xv/L7bmXJtfUWD/rX4P5yaLDzM0SWdPn+oTXVwmHs+MgVJvZhk5 PSFRrC0nzsj0qlohRvolfVIWBjokjxL2zUZYFyPHp9735cHS21FhLBq35h1S74TM CsKsRiR9AtArov56egWjyiQf3Rs2bKf+an3kXVSo/7CYBEbeH4RgLmA5guhD2CA+ jtYJNKFGRg35SE+6W7kuREvxrPPxltjYvg4LeEZGjEXW+rbUNeyPzu2WZhepDIsg yIg2xEZeWQdVI4Q+jHHazih5kYbyZLkqelbXlwxz+4kVYXBIhgpM+WC5jBR3zEW0 ewHwjeb1cG2BG8N8/dbyVtUAh1Outw== -----END CERTIFICATE-----Generated at Thu Dec 18 17:49:29 2025 by rpki-client