This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/wYBwHchRXOAvWZPtbsPNPlhRmJY.roa File: wYBwHchRXOAvWZPtbsPNPlhRmJY.roa (raw, json) Hash identifier: Q9GL7M1SGHS5xuW/bdwYRZJ3RvV1nnUsjO/77GjvUkk= Subject key identifier: C1:80:70:1D:C8:51:5C:E0:2F:59:93:ED:6E:C3:CD:3E:58:51:98:96 Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926 Certificate serial: 019B7BA5482A3532E94EC57CA39B5649A5FD Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/wYBwHchRXOAvWZPtbsPNPlhRmJY.roa Signing time: Thu 01 Jan 2026 22:19:47 +0000 ROA not before: Thu 01 Jan 2026 22:19:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25151 IP address blocks: 45.134.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:48:2a:35:32:e9:4e:c5:7c:a3:9b:56:49:a5:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926 Validity Not Before: Jan 1 22:19:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c180701dc8515ce02f5993ed6ec3cd3e58519896 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b0:30:29:8a:8e:4f:66:c7:07:90:c4:ae:d9: ce:c8:4a:54:0a:dd:10:a7:f4:fe:fe:0d:3b:03:7a: b9:0e:98:d0:a9:d7:de:c9:12:ad:45:55:3b:5f:22: 4e:70:d8:85:d1:fb:34:ac:d6:05:7c:45:53:ca:90: da:c8:42:1b:f1:85:2f:2e:4a:9d:65:8c:fb:6a:16: b1:af:3d:72:fd:59:9c:b6:08:1a:d5:d3:98:ba:3c: 98:fc:b4:96:b3:c4:63:29:ec:31:2c:88:3e:e4:40: 6e:7d:31:48:b6:31:af:67:0d:de:54:11:77:91:f7: b9:5c:41:81:e7:98:aa:10:e4:0d:0d:87:37:d1:34: 15:08:31:b3:82:fe:5f:3f:a1:51:5b:ac:a0:9a:91: bc:4b:21:6a:c1:a9:10:f0:12:c6:75:35:23:6f:17: 89:63:10:7c:d4:cf:97:b5:7b:86:32:f7:2d:54:bc: a7:20:35:fc:9c:7b:65:0d:d6:7a:06:9f:64:17:38: 8b:99:14:49:a4:8b:96:b1:61:b4:67:fa:45:11:78: 57:d0:2e:75:87:95:f4:0c:37:d3:e9:cc:cd:ed:93: 48:38:d0:03:1f:d6:f7:fc:71:9e:49:11:73:4c:4c: c1:38:05:33:4e:09:2c:58:bf:62:13:93:14:f4:e2: 63:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:80:70:1D:C8:51:5C:E0:2F:59:93:ED:6E:C3:CD:3E:58:51:98:96 X509v3 Authority Key Identifier: keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/wYBwHchRXOAvWZPtbsPNPlhRmJY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.134.223.0/24 Signature Algorithm: sha256WithRSAEncryption 89:96:28:e9:3a:46:07:cf:4d:66:79:85:c3:31:14:3a:9d:b0: 19:d2:9c:a0:ea:fa:cc:a4:c0:2b:19:fa:b6:90:59:86:68:fc: 62:33:3c:44:84:fe:5d:79:a2:6d:01:53:53:cd:32:65:2e:be: d2:65:bc:a5:86:c3:bf:3b:67:7c:6e:d8:91:af:31:ac:21:1a: f0:bc:a7:86:35:cb:87:f7:78:26:44:68:df:74:7e:70:03:72: db:a3:54:0a:68:a0:08:7b:96:d4:0c:85:76:a1:2b:45:79:a1: 08:fb:d8:0f:27:a1:df:8c:ab:1c:d3:53:c8:e2:ec:7c:4c:30: 41:38:28:f6:67:1a:81:0e:ec:5c:08:e9:ff:71:ef:ca:2d:7e: dc:49:25:89:58:50:21:9a:33:80:cc:10:78:1e:a6:f6:28:c1: 2f:26:df:29:5a:49:4e:84:b6:6f:c8:5c:2b:ce:e1:6c:ce:33: 22:f9:24:74:10:ff:de:f7:ef:49:8f:5d:0c:7f:60:91:7d:7b: 2f:81:35:9e:d8:52:56:17:57:fe:d8:9f:5e:86:bc:6a:ff:d9: 0d:cd:16:65:43:ff:9f:ad:14:27:b4:88:c4:80:02:02:4a:73: c0:54:88:e7:64:f6:49:ea:cd:d9:b1:6f:38:22:02:81:5c:07: bb:55:79:c1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pUgqNTLpTsV8o5tWSaX9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNTUwMDljM2RlNDIxY2M0ZTY3YjlhOWFlNDIzYmIzNWRl MGI5MjYwHhcNMjYwMTAxMjIxOTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMTgwNzAxZGM4NTE1Y2UwMmY1OTkzZWQ2ZWMzY2QzZTU4NTE5ODk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7AwKYqOT2bHB5DErtnOyEpUCt0Q p/T+/g07A3q5DpjQqdfeyRKtRVU7XyJOcNiF0fs0rNYFfEVTypDayEIb8YUvLkqd ZYz7ahaxrz1y/Vmctgga1dOYujyY/LSWs8RjKewxLIg+5EBufTFItjGvZw3eVBF3 kfe5XEGB55iqEOQNDYc30TQVCDGzgv5fP6FRW6ygmpG8SyFqwakQ8BLGdTUjbxeJ YxB81M+XtXuGMvctVLynIDX8nHtlDdZ6Bp9kFziLmRRJpIuWsWG0Z/pFEXhX0C51 h5X0DDfT6czN7ZNIONADH9b3/HGeSRFzTEzBOAUzTgksWL9iE5MU9OJjqQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMGAcB3IUVzgL1mT7W7DzT5YUZiWMB8GA1UdIwQY MBaAFLFVAJw95CHMTme5qa5CO7Nd4LkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYt NzM4NTZhZjQ5ZjNlLzEvd1lCd0hjaFJYT0F2V1pQdGJzUE5QbGhSbUpZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYtNzM4NTZhZjQ5ZjNl LzEvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYbfMA0G CSqGSIb3DQEBCwUAA4IBAQCJlijpOkYHz01meYXDMRQ6nbAZ0pyg6vrMpMArGfq2 kFmGaPxiMzxEhP5deaJtAVNTzTJlLr7SZbylhsO/O2d8btiRrzGsIRrwvKeGNcuH 93gmRGjfdH5wA3Lbo1QKaKAIe5bUDIV2oStFeaEI+9gPJ6HfjKsc01PI4ux8TDBB OCj2ZxqBDuxcCOn/ce/KLX7cSSWJWFAhmjOAzBB4Hqb2KMEvJt8pWklOhLZvyFwr zuFszjMi+SR0EP/e9+9Jj10Mf2CRfXsvgTWe2FJWF1f+2J9ehrxq/9kNzRZlQ/+f rRQntIjEgAICSnPAVIjnZPZJ6s3ZsW84IgKBXAe7VXnB -----END CERTIFICATE-----Generated at Mon Jan 19 19:59:17 2026 by rpki-client