This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/wyt5ptFXgbMrupCNzfQ3MMlFH4M.roa File: wyt5ptFXgbMrupCNzfQ3MMlFH4M.roa (raw, json) Hash identifier: wsSbFZeuuJRkMGSymeRGA6zSq6ntn49Ubzt9NPIc7xY= Subject key identifier: C3:2B:79:A6:D1:57:81:B3:2B:BA:90:8D:CD:F4:37:30:C9:45:1F:83 Certificate issuer: /CN=5134d1320645644e2eaf3685879d693f72522c76 Certificate serial: 019B78A2FE008FE6C21B85F02FA449865A43 Authority key identifier: 51:34:D1:32:06:45:64:4E:2E:AF:36:85:87:9D:69:3F:72:52:2C:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UTTRMgZFZE4urzaFh51pP3JSLHY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/wyt5ptFXgbMrupCNzfQ3MMlFH4M.roa Signing time: Thu 01 Jan 2026 08:18:26 +0000 ROA not before: Thu 01 Jan 2026 08:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 91.194.25.0/24 maxlen: 24 91.194.104.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/UTTRMgZFZE4urzaFh51pP3JSLHY.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/UTTRMgZFZE4urzaFh51pP3JSLHY.mft rsync://rpki.ripe.net/repository/DEFAULT/UTTRMgZFZE4urzaFh51pP3JSLHY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:fe:00:8f:e6:c2:1b:85:f0:2f:a4:49:86:5a:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5134d1320645644e2eaf3685879d693f72522c76 Validity Not Before: Jan 1 08:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c32b79a6d15781b32bba908dcdf43730c9451f83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:52:99:b5:76:fd:47:d0:21:1c:b9:04:13:58: b3:ec:22:a2:61:b9:a8:7d:9d:38:0e:9a:ee:2e:3e: 98:b9:61:5c:90:41:c4:19:f2:d7:26:b6:d0:dd:1a: fe:e8:d3:fc:f0:2a:9f:a1:2e:e4:5a:01:b4:de:ba: cb:c3:07:85:0e:68:fb:f7:2e:22:1f:ee:76:c7:0a: fb:8d:bd:06:92:a8:e0:74:f6:09:f2:6d:07:ce:0a: bf:76:07:08:a0:8b:c6:fc:1b:06:76:34:91:d3:7a: 3f:1c:f7:6e:b2:ed:39:8b:58:4e:7f:82:84:69:12: b5:db:11:b6:c7:c8:67:84:f3:59:13:cb:a9:b3:be: 79:79:4a:ec:a3:2c:33:6c:a7:25:63:9f:0d:47:a0: 86:e6:3d:60:fc:a8:ba:12:2b:71:be:4f:25:43:aa: c7:71:5b:20:59:d1:76:99:95:26:f7:f8:4b:b2:3f: 0d:f8:34:f6:2b:e7:2b:82:cf:a9:1f:11:32:17:66: 21:aa:71:18:84:e5:ef:34:64:9a:5c:ad:3e:dc:7d: 65:a5:8a:ed:08:b8:7e:9d:06:25:a3:54:70:91:c0: 1a:e1:96:91:52:14:54:ad:c1:64:db:3f:dd:18:a6: d3:ca:b7:69:a0:aa:b4:67:4a:0a:89:63:2f:1b:b9: ae:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:2B:79:A6:D1:57:81:B3:2B:BA:90:8D:CD:F4:37:30:C9:45:1F:83 X509v3 Authority Key Identifier: keyid:51:34:D1:32:06:45:64:4E:2E:AF:36:85:87:9D:69:3F:72:52:2C:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UTTRMgZFZE4urzaFh51pP3JSLHY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/wyt5ptFXgbMrupCNzfQ3MMlFH4M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/UTTRMgZFZE4urzaFh51pP3JSLHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.194.25.0/24 91.194.104.0/23 Signature Algorithm: sha256WithRSAEncryption 1d:3f:f8:30:48:6e:71:03:3b:77:56:05:2e:c4:f5:7b:3a:ee: 78:fe:33:4d:51:ed:a9:b7:81:7f:d1:5e:55:0f:10:1c:a6:ab: 01:51:24:be:2a:81:8d:7b:a7:69:e9:7f:a1:21:99:81:31:af: b2:1a:ed:0c:09:4f:e4:00:0b:e8:9a:d4:98:b2:70:6f:e4:ee: 9e:7c:51:32:d4:6b:82:ff:fb:68:12:74:d9:79:b7:c0:42:ec: 28:a8:99:63:a7:e5:d0:3a:1d:0b:24:7a:b0:f4:27:54:68:12: ff:46:65:95:1f:8f:7d:e4:34:cd:9e:08:4a:6f:b0:93:31:67: 1b:43:cf:0a:f3:19:a1:54:66:9a:76:e6:ac:16:42:ae:b1:47: 8d:0c:bb:19:eb:64:52:4f:66:73:3d:59:9c:af:ce:db:5b:f4: 1a:d6:f9:c3:7d:5e:79:7b:bb:51:29:2f:15:45:10:b7:77:00: 00:ba:00:a3:04:9a:89:2f:34:a8:0f:f1:68:1c:9f:07:7e:80: 3d:bc:ba:e0:2d:6f:5b:1b:46:af:43:d7:7d:22:dc:10:ec:ad: b5:4b:5c:7e:73:41:85:23:27:d5:72:16:8d:bd:6f:cb:bc:ed: b5:83:07:be:62:f7:f9:6a:97:6b:bc:00:da:e6:ee:7d:dc:02: 91:50:0f:0e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4ov4Aj+bCG4XwL6RJhlpDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxMzRkMTMyMDY0NTY0NGUyZWFmMzY4NTg3OWQ2OTNmNzI1 MjJjNzYwHhcNMjYwMTAxMDgxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMzJiNzlhNmQxNTc4MWIzMmJiYTkwOGRjZGY0MzczMGM5NDUxZjgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1KZtXb9R9AhHLkEE1iz7CKiYbmo fZ04DpruLj6YuWFckEHEGfLXJrbQ3Rr+6NP88CqfoS7kWgG03rrLwweFDmj79y4i H+52xwr7jb0GkqjgdPYJ8m0Hzgq/dgcIoIvG/BsGdjSR03o/HPdusu05i1hOf4KE aRK12xG2x8hnhPNZE8ups755eUrsoywzbKclY58NR6CG5j1g/Ki6Eitxvk8lQ6rH cVsgWdF2mZUm9/hLsj8N+DT2K+crgs+pHxEyF2YhqnEYhOXvNGSaXK0+3H1lpYrt CLh+nQYlo1RwkcAa4ZaRUhRUrcFk2z/dGKbTyrdpoKq0Z0oKiWMvG7muCQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMMreabRV4GzK7qQjc30NzDJRR+DMB8GA1UdIwQY MBaAFFE00TIGRWROLq82hYedaT9yUix2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVRUUk1nWkZaRTR1cnphRmg1MXBQM0pTTEhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS85ZmIxZDctODQyNC00Yzg0LWIwY2It MmY1MWVjZDFhYTBlLzEvd3l0NXB0RlhnYk1ydXBDTnpmUTNNTWxGSDRNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS85ZmIxZDctODQyNC00Yzg0LWIwY2ItMmY1MWVjZDFhYTBl LzEvVVRUUk1nWkZaRTR1cnphRmg1MXBQM0pTTEhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW8IZAwQB W8JoMA0GCSqGSIb3DQEBCwUAA4IBAQAdP/gwSG5xAzt3VgUuxPV7Ou54/jNNUe2p t4F/0V5VDxAcpqsBUSS+KoGNe6dp6X+hIZmBMa+yGu0MCU/kAAvomtSYsnBv5O6e fFEy1GuC//toEnTZebfAQuwoqJljp+XQOh0LJHqw9CdUaBL/RmWVH4995DTNnghK b7CTMWcbQ88K8xmhVGaaduasFkKusUeNDLsZ62RST2ZzPVmcr87bW/Qa1vnDfV55 e7tRKS8VRRC3dwAAugCjBJqJLzSoD/FoHJ8HfoA9vLrgLW9bG0avQ9d9ItwQ7K21 S1x+c0GFIyfVchaNvW/LvO21gwe+Yvf5apdrvADa5u593AKRUA8O -----END CERTIFICATE-----Generated at Fri Jan 2 09:29:41 2026 by rpki-client