This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/P1a-wy-41SGB2vgjhP8VvtqZ32c.roa File: P1a-wy-41SGB2vgjhP8VvtqZ32c.roa (raw, json) Hash identifier: 8eDEG1cF3oj7ePCmIr7bInU5XFHVVJIT2TT9CuFv1Es= Subject key identifier: 3F:56:BE:C3:2F:B8:D5:21:81:DA:F8:23:84:FF:15:BE:DA:99:DF:67 Certificate issuer: /CN=00e6e65ed74f06c223a9a49c3ea6d3eeecb23850 Certificate serial: 019B77C6F7988D3D95AEDC33F471AB14FB56 Authority key identifier: 00:E6:E6:5E:D7:4F:06:C2:23:A9:A4:9C:3E:A6:D3:EE:EC:B2:38:50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AObmXtdPBsIjqaScPqbT7uyyOFA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/P1a-wy-41SGB2vgjhP8VvtqZ32c.roa Signing time: Thu 01 Jan 2026 04:18:06 +0000 ROA not before: Thu 01 Jan 2026 04:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 680 IP address blocks: 192.108.32.0/24 maxlen: 24 193.25.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/AObmXtdPBsIjqaScPqbT7uyyOFA.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/AObmXtdPBsIjqaScPqbT7uyyOFA.mft rsync://rpki.ripe.net/repository/DEFAULT/AObmXtdPBsIjqaScPqbT7uyyOFA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:f7:98:8d:3d:95:ae:dc:33:f4:71:ab:14:fb:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00e6e65ed74f06c223a9a49c3ea6d3eeecb23850 Validity Not Before: Jan 1 04:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3f56bec32fb8d52181daf82384ff15beda99df67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:72:0f:0c:70:cc:96:29:92:f4:3e:35:0d:86: 90:ae:28:9a:72:4d:98:c4:0f:35:df:92:47:23:f8: c7:bf:0c:7a:8a:8b:84:22:34:06:f6:ae:e0:28:a3: b6:21:6b:21:1e:06:77:6a:05:4a:b9:f3:9e:18:eb: 0b:19:cb:41:1a:30:80:5a:0d:1f:c6:c8:9a:01:ed: cd:fa:c7:a9:9a:00:95:db:58:73:0f:69:93:91:9c: 06:60:43:fc:e3:ab:2f:26:f4:53:64:41:6d:bf:da: 6b:6a:92:ea:84:f1:9b:d5:3d:a9:5a:23:3f:a5:9c: df:8e:c3:3d:f1:bf:95:99:19:20:87:8b:f4:16:0a: 9c:e5:d0:c6:d8:6d:cf:b2:f4:4d:3a:b7:52:73:33: dc:c3:62:ff:d0:72:f3:d3:49:73:08:4f:b4:6d:1f: 1b:10:cd:b8:eb:fe:7d:da:52:29:2f:c0:16:d4:9f: 82:e6:34:d1:0d:d1:06:1f:3f:b8:9a:40:b9:66:82: f1:f0:aa:13:f8:fe:d4:da:46:09:d4:a5:78:43:48: de:e0:7a:bc:99:1b:60:37:57:8a:c6:8f:6c:a9:07: d7:ce:e2:68:71:32:97:0d:08:e8:ec:ff:a3:22:b8: 1b:ff:51:1a:65:53:27:fb:ef:d7:86:6d:d6:80:8e: 28:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:56:BE:C3:2F:B8:D5:21:81:DA:F8:23:84:FF:15:BE:DA:99:DF:67 X509v3 Authority Key Identifier: keyid:00:E6:E6:5E:D7:4F:06:C2:23:A9:A4:9C:3E:A6:D3:EE:EC:B2:38:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AObmXtdPBsIjqaScPqbT7uyyOFA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/P1a-wy-41SGB2vgjhP8VvtqZ32c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/AObmXtdPBsIjqaScPqbT7uyyOFA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.108.32.0/24 193.25.32.0/20 Signature Algorithm: sha256WithRSAEncryption c6:0b:fc:ae:cf:c9:b0:df:60:eb:51:46:c2:b7:06:25:a5:f9: 91:c1:02:a3:19:37:78:6c:34:d3:a2:98:d5:e2:c0:b0:16:08: 56:01:88:94:3b:34:86:16:56:3b:e5:4f:b9:18:f8:98:4a:ce: b2:10:9e:a3:3c:3d:85:e1:c1:db:26:0f:4a:72:87:d3:96:1f: cd:f0:91:e0:b0:d8:a7:59:ac:04:c9:ae:a2:33:6b:8a:c1:0f: e2:d3:aa:6f:c8:b3:d8:70:d2:df:60:2c:a0:7e:b2:ed:38:07: a9:61:3e:dc:99:70:0c:3f:69:06:41:59:89:5e:f9:02:0a:93: de:3f:14:e5:50:66:93:3d:72:79:3f:37:fc:9e:16:c5:6b:59: 2d:fc:c0:f2:86:da:48:79:7a:3c:42:01:77:bd:e1:63:ca:d6: 9f:92:51:10:b7:e2:29:8b:d8:f5:07:97:f0:88:11:19:47:b3: 6b:98:75:20:ad:b6:4e:60:a8:44:f9:85:b2:6c:ac:62:56:03: 4f:8e:25:66:45:62:20:73:f9:85:fc:9f:bf:93:d0:55:74:9d: 29:10:2f:d8:5a:d9:4a:81:81:26:79:31:a3:98:96:6c:34:5f: 76:38:17:fa:e0:01:9e:62:b4:86:97:b8:cf:67:56:00:40:f3: 56:49:ea:d5 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3xveYjT2Vrtwz9HGrFPtWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwZTZlNjVlZDc0ZjA2YzIyM2E5YTQ5YzNlYTZkM2VlZWNi MjM4NTAwHhcNMjYwMTAxMDQxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZjU2YmVjMzJmYjhkNTIxODFkYWY4MjM4NGZmMTViZWRhOTlkZjY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXIPDHDMlimS9D41DYaQriiack2Y xA8135JHI/jHvwx6iouEIjQG9q7gKKO2IWshHgZ3agVKufOeGOsLGctBGjCAWg0f xsiaAe3N+sepmgCV21hzD2mTkZwGYEP846svJvRTZEFtv9prapLqhPGb1T2pWiM/ pZzfjsM98b+VmRkgh4v0Fgqc5dDG2G3PsvRNOrdSczPcw2L/0HLz00lzCE+0bR8b EM246/592lIpL8AW1J+C5jTRDdEGHz+4mkC5ZoLx8KoT+P7U2kYJ1KV4Q0je4Hq8 mRtgN1eKxo9sqQfXzuJocTKXDQjo7P+jIrgb/1EaZVMn++/Xhm3WgI4o7wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFD9WvsMvuNUhgdr4I4T/Fb7amd9nMB8GA1UdIwQY MBaAFADm5l7XTwbCI6mknD6m0+7ssjhQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQU9ibVh0ZFBCc0lqcWFTY1BxYlQ3dXl5T0ZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC8yNGRhNmYtNTA1My00MTRlLTkzNzAt MTZiOWVhZmViNGVhLzEvUDFhLXd5LTQxU0dCMnZnamhQOFZ2dHFaMzJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC8yNGRhNmYtNTA1My00MTRlLTkzNzAtMTZiOWVhZmViNGVh LzEvQU9ibVh0ZFBCc0lqcWFTY1BxYlQ3dXl5T0ZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwGwgAwQE wRkgMA0GCSqGSIb3DQEBCwUAA4IBAQDGC/yuz8mw32DrUUbCtwYlpfmRwQKjGTd4 bDTTopjV4sCwFghWAYiUOzSGFlY75U+5GPiYSs6yEJ6jPD2F4cHbJg9KcofTlh/N 8JHgsNinWawEya6iM2uKwQ/i06pvyLPYcNLfYCygfrLtOAepYT7cmXAMP2kGQVmJ XvkCCpPePxTlUGaTPXJ5Pzf8nhbFa1kt/MDyhtpIeXo8QgF3veFjytafklEQt+Ip i9j1B5fwiBEZR7NrmHUgrbZOYKhE+YWybKxiVgNPjiVmRWIgc/mF/J+/k9BVdJ0p EC/YWtlKgYEmeTGjmJZsNF92OBf64AGeYrSGl7jPZ1YAQPNWSerV -----END CERTIFICATE-----Generated at Tue Jan 27 11:28:03 2026 by rpki-client