This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/wYpMc3njcI8aYZhP5Vx0YCvhxuE.roa File: wYpMc3njcI8aYZhP5Vx0YCvhxuE.roa (raw, json) Hash identifier: VGQsQDGB5RifV/TxzkNx5BkHOcVUKguaU5IZPPqP/2o= Subject key identifier: C1:8A:4C:73:79:E3:70:8F:1A:61:98:4F:E5:5C:74:60:2B:E1:C6:E1 Certificate issuer: /CN=126c660b30f5692b2b16e289b24901c518fda520 Certificate serial: 019B78A29FB0AB42E6FCF204E5900963ABFF Authority key identifier: 12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/wYpMc3njcI8aYZhP5Vx0YCvhxuE.roa Signing time: Thu 01 Jan 2026 08:18:02 +0000 ROA not before: Thu 01 Jan 2026 08:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 10753 IP address blocks: 45.83.112.0/22 maxlen: 24 185.161.252.0/22 maxlen: 24 185.181.56.0/22 maxlen: 24 192.144.52.0/22 maxlen: 24 193.9.40.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.mft rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:9f:b0:ab:42:e6:fc:f2:04:e5:90:09:63:ab:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=126c660b30f5692b2b16e289b24901c518fda520 Validity Not Before: Jan 1 08:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c18a4c7379e3708f1a61984fe55c74602be1c6e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:6b:e2:d7:40:ea:90:cd:20:b3:09:8a:4a:c3: d0:58:a3:86:c0:27:92:84:c3:4a:06:f2:b1:f7:c2: 00:69:e8:57:e8:c3:1d:54:a1:cd:52:49:b6:45:c1: 1f:0e:bc:5b:0e:4b:2f:55:43:01:86:31:f9:26:d6: 07:44:d1:03:fb:87:d7:d6:63:ac:20:db:6d:0d:cd: c5:10:07:57:52:1e:c9:5d:26:06:db:8a:8c:e6:bd: 70:25:63:7b:57:fb:07:10:79:c3:17:1a:8d:1b:9c: b7:bf:b2:d4:32:ac:92:c9:80:84:18:bc:f8:68:31: 1e:55:97:3b:25:53:b1:81:53:8d:7b:8e:b2:83:bb: 1c:88:8c:25:88:6e:c1:df:e6:39:92:15:56:1e:71: ae:c8:aa:16:02:34:44:5e:27:1c:7c:e7:ba:b9:01: 88:db:ec:5e:23:86:98:f8:5e:c0:45:ed:8d:bf:cf: 92:c0:25:94:d4:ec:50:ea:81:24:6a:45:bf:48:52: 9d:ec:e9:7d:6c:4d:4c:8b:54:99:bb:29:ad:9b:90: 7e:d4:32:73:88:63:dd:27:c4:09:53:b7:30:4d:ad: 18:e1:b5:cd:d2:b1:76:ac:24:fd:03:cb:75:01:33: d8:33:31:00:03:c8:59:54:fe:52:87:c1:67:27:4e: c9:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:8A:4C:73:79:E3:70:8F:1A:61:98:4F:E5:5C:74:60:2B:E1:C6:E1 X509v3 Authority Key Identifier: keyid:12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/wYpMc3njcI8aYZhP5Vx0YCvhxuE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.83.112.0/22 185.161.252.0/22 185.181.56.0/22 192.144.52.0/22 193.9.40.0/22 Signature Algorithm: sha256WithRSAEncryption 48:44:a6:92:93:b4:23:99:29:64:d3:26:d3:c9:13:f0:5a:4a: 0d:f9:38:33:b8:47:74:55:9c:3f:4c:00:fb:22:68:8a:42:c0: 8b:52:06:ac:8f:a5:74:61:66:54:52:d6:cf:9b:f4:81:5c:19: 56:54:f7:f1:be:00:77:b0:1d:60:8c:84:95:5a:ab:6e:9a:d9: e6:64:0d:84:c0:09:b9:59:57:08:04:e8:1e:d4:06:c7:8a:d3: ee:90:35:4f:0b:1d:a0:ac:09:99:09:a6:6d:32:54:ca:83:10: f2:6e:cd:3b:19:9c:23:6e:c5:50:44:cf:e7:87:5a:ca:50:78: 01:04:2e:dc:57:6b:53:2d:f1:03:7c:a7:e6:28:ad:6f:68:65: 5a:04:85:6f:f4:8e:3d:fb:b2:78:f1:21:f6:e5:24:67:86:03: 2b:28:48:73:ab:ab:e5:e0:f0:46:dc:be:ca:9c:fb:66:9e:95: d8:66:cc:1e:7c:3c:62:25:1f:19:7c:b6:ec:10:40:fb:53:2e: 0e:91:23:f1:33:2d:85:89:14:a2:b8:9c:9e:ce:73:76:d4:46: af:1d:b1:a6:29:1b:c1:26:c9:54:86:05:7f:98:70:17:ae:f4: 7e:a3:e0:c1:3e:d9:7b:e4:15:4a:f7:bb:1f:24:5a:f3:d1:59: 59:7f:78:e8 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt4op+wq0Lm/PIE5ZAJY6v/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyNmM2NjBiMzBmNTY5MmIyYjE2ZTI4OWIyNDkwMWM1MThm ZGE1MjAwHhcNMjYwMTAxMDgxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMThhNGM3Mzc5ZTM3MDhmMWE2MTk4NGZlNTVjNzQ2MDJiZTFjNmUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Gvi10DqkM0gswmKSsPQWKOGwCeS hMNKBvKx98IAaehX6MMdVKHNUkm2RcEfDrxbDksvVUMBhjH5JtYHRNED+4fX1mOs INttDc3FEAdXUh7JXSYG24qM5r1wJWN7V/sHEHnDFxqNG5y3v7LUMqySyYCEGLz4 aDEeVZc7JVOxgVONe46yg7sciIwliG7B3+Y5khVWHnGuyKoWAjREXiccfOe6uQGI 2+xeI4aY+F7ARe2Nv8+SwCWU1OxQ6oEkakW/SFKd7Ol9bE1Mi1SZuymtm5B+1DJz iGPdJ8QJU7cwTa0Y4bXN0rF2rCT9A8t1ATPYMzEAA8hZVP5Sh8FnJ07J/QIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFMGKTHN543CPGmGYT+VcdGAr4cbhMB8GA1UdIwQY MBaAFBJsZgsw9WkrKxbiibJJAcUY/aUgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRW14bUN6RDFhU3NyRnVLSnNra0J4Umo5cFNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9kYjc4N2YtYzI3YS00ZjIzLTk5YjIt NDM4YWNiNzJmYzViLzEvd1lwTWMzbmpjSThhWVpoUDVWeDBZQ3ZoeHVFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi9kYjc4N2YtYzI3YS00ZjIzLTk5YjItNDM4YWNiNzJmYzVi LzEvRW14bUN6RDFhU3NyRnVLSnNra0J4Umo5cFNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCLVNwAwQC uaH8AwQCubU4AwQCwJA0AwQCwQkoMA0GCSqGSIb3DQEBCwUAA4IBAQBIRKaSk7Qj mSlk0ybTyRPwWkoN+TgzuEd0VZw/TAD7ImiKQsCLUgasj6V0YWZUUtbPm/SBXBlW VPfxvgB3sB1gjISVWqtumtnmZA2EwAm5WVcIBOge1AbHitPukDVPCx2grAmZCaZt MlTKgxDybs07GZwjbsVQRM/nh1rKUHgBBC7cV2tTLfEDfKfmKK1vaGVaBIVv9I49 +7J48SH25SRnhgMrKEhzq6vl4PBG3L7KnPtmnpXYZswefDxiJR8ZfLbsEED7Uy4O kSPxMy2FiRSiuJyeznN21EavHbGmKRvBJslUhgV/mHAXrvR+o+DBPtl75BVK97sf JFrz0VlZf3jo -----END CERTIFICATE-----Generated at Tue Jan 20 02:49:07 2026 by rpki-client