This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/60c724-a005-46d7-8452-16ce339016a0/1/wyIJp-MtwD9wUV37AIQAnQ5KD5g.roa File: wyIJp-MtwD9wUV37AIQAnQ5KD5g.roa (raw, json) Hash identifier: 27rqphnZqec6wo9U62eKve93o5VP/+kmAfxs2ybJPtU= Subject key identifier: C3:22:09:A7:E3:2D:C0:3F:70:51:5D:FB:00:84:00:9D:0E:4A:0F:98 Certificate issuer: /CN=283624007f44dcaf568c370e7f71f950cb1940ef Certificate serial: 019B76EB38DD150D2F9A705EDA501188F962 Authority key identifier: 28:36:24:00:7F:44:DC:AF:56:8C:37:0E:7F:71:F9:50:CB:19:40:EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KDYkAH9E3K9WjDcOf3H5UMsZQO8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/60c724-a005-46d7-8452-16ce339016a0/1/wyIJp-MtwD9wUV37AIQAnQ5KD5g.roa Signing time: Thu 01 Jan 2026 00:18:05 +0000 ROA not before: Thu 01 Jan 2026 00:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198118 IP address blocks: 92.42.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/60c724-a005-46d7-8452-16ce339016a0/1/KDYkAH9E3K9WjDcOf3H5UMsZQO8.crl rsync://rpki.ripe.net/repository/DEFAULT/21/60c724-a005-46d7-8452-16ce339016a0/1/KDYkAH9E3K9WjDcOf3H5UMsZQO8.mft rsync://rpki.ripe.net/repository/DEFAULT/KDYkAH9E3K9WjDcOf3H5UMsZQO8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:38:dd:15:0d:2f:9a:70:5e:da:50:11:88:f9:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=283624007f44dcaf568c370e7f71f950cb1940ef Validity Not Before: Jan 1 00:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c32209a7e32dc03f70515dfb0084009d0e4a0f98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f6:9d:72:c9:f6:7a:f2:24:fd:75:33:8c:e9: ed:62:30:d8:26:a9:62:17:1b:a2:b2:49:bc:fc:91: ba:ce:5b:f3:4b:8d:19:fa:d5:b7:ed:44:a9:14:84: 3a:3e:92:ef:fb:eb:56:89:78:64:d2:b2:21:fd:55: be:c1:a0:46:d6:15:51:2e:42:d8:9c:9a:48:e0:e4: 9b:74:99:00:95:8b:a6:49:b3:bb:e4:d6:b1:4d:c3: a3:5e:8a:0b:83:bc:9d:c5:d4:01:5b:5d:f2:ab:62: 0c:4a:7b:b6:0c:8d:9b:da:ad:b0:52:8e:f8:73:ca: da:65:a5:13:4f:99:8a:42:c0:e7:21:15:e4:5f:f9: 5c:62:71:eb:a6:de:15:fa:03:7e:30:ee:d3:c2:99: 73:13:e0:4b:b9:5d:7a:1b:54:ce:f5:b2:eb:7c:e6: 75:06:6b:c5:13:8f:ba:19:43:0e:5f:e6:3d:a2:36: 1d:48:23:01:70:60:6c:74:87:f1:31:1a:de:17:31: da:84:f4:1c:7b:5f:fc:bf:a5:6d:bd:bf:52:0b:80: 04:07:d7:06:80:11:f9:13:4c:0f:0a:cd:41:b4:48: e6:28:29:a7:58:ae:e8:21:bd:f6:c0:dd:8c:83:56: 8e:97:61:ac:7b:f8:b6:11:62:ae:f4:56:b1:15:c9: 63:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:22:09:A7:E3:2D:C0:3F:70:51:5D:FB:00:84:00:9D:0E:4A:0F:98 X509v3 Authority Key Identifier: keyid:28:36:24:00:7F:44:DC:AF:56:8C:37:0E:7F:71:F9:50:CB:19:40:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KDYkAH9E3K9WjDcOf3H5UMsZQO8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/60c724-a005-46d7-8452-16ce339016a0/1/wyIJp-MtwD9wUV37AIQAnQ5KD5g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/60c724-a005-46d7-8452-16ce339016a0/1/KDYkAH9E3K9WjDcOf3H5UMsZQO8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.42.7.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:c4:be:23:d4:69:5e:49:f1:09:4e:cb:1d:9c:0f:69:40:f4: 79:72:5c:4e:3b:bd:5d:98:90:4e:aa:a2:81:9a:c7:95:a2:88: 37:7c:f6:c3:05:eb:43:55:22:3c:c2:ff:bd:7d:d9:c6:79:bd: 8b:f2:cb:ff:ed:87:be:52:db:61:a8:1d:ab:b8:e8:96:86:18: d4:0e:d2:1c:ab:8a:75:48:29:a3:93:63:45:70:9a:f3:aa:9d: af:43:4c:e2:5a:3f:f7:f6:3f:2b:0f:2a:dd:c2:19:e0:f7:0b: cf:50:19:7d:ca:d0:a5:76:07:18:82:05:71:8c:fa:47:1f:0c: 60:4f:e7:14:60:63:a9:94:f1:50:30:bc:f7:22:59:04:c4:47: 6d:73:f8:9f:e7:66:db:80:84:f3:5f:ec:41:d2:66:25:e4:94: eb:e3:15:7f:76:51:8b:7c:e2:eb:43:59:a4:3e:c2:01:ba:1e: f2:7f:1d:9d:d1:db:53:25:1a:7b:6f:55:f2:76:cb:e7:f9:76: 86:a6:68:38:21:f2:13:7d:c2:41:11:51:4a:fe:08:89:de:e5: 07:47:22:a2:f6:ad:cd:02:a4:d2:44:a2:d4:a5:2e:4f:1e:54: 8f:f1:6f:f6:38:1e:6d:3d:04:04:16:19:fa:77:25:b5:9a:f2: 82:fb:61:7c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26zjdFQ0vmnBe2lARiPliMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4MzYyNDAwN2Y0NGRjYWY1NjhjMzcwZTdmNzFmOTUwY2Ix OTQwZWYwHhcNMjYwMTAxMDAxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMzIyMDlhN2UzMmRjMDNmNzA1MTVkZmIwMDg0MDA5ZDBlNGEwZjk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Padcsn2evIk/XUzjOntYjDYJqli Fxuiskm8/JG6zlvzS40Z+tW37USpFIQ6PpLv++tWiXhk0rIh/VW+waBG1hVRLkLY nJpI4OSbdJkAlYumSbO75NaxTcOjXooLg7ydxdQBW13yq2IMSnu2DI2b2q2wUo74 c8raZaUTT5mKQsDnIRXkX/lcYnHrpt4V+gN+MO7TwplzE+BLuV16G1TO9bLrfOZ1 BmvFE4+6GUMOX+Y9ojYdSCMBcGBsdIfxMRreFzHahPQce1/8v6Vtvb9SC4AEB9cG gBH5E0wPCs1BtEjmKCmnWK7oIb32wN2Mg1aOl2Gse/i2EWKu9FaxFcljrwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMMiCafjLcA/cFFd+wCEAJ0OSg+YMB8GA1UdIwQY MBaAFCg2JAB/RNyvVow3Dn9x+VDLGUDvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0RZa0FIOUUzSzlXakRjT2YzSDVVTXNaUU84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS82MGM3MjQtYTAwNS00NmQ3LTg0NTIt MTZjZTMzOTAxNmEwLzEvd3lJSnAtTXR3RDl3VVYzN0FJUUFuUTVLRDVnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS82MGM3MjQtYTAwNS00NmQ3LTg0NTItMTZjZTMzOTAxNmEw LzEvS0RZa0FIOUUzSzlXakRjT2YzSDVVTXNaUU84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXCoHMA0G CSqGSIb3DQEBCwUAA4IBAQB+xL4j1GleSfEJTssdnA9pQPR5clxOO71dmJBOqqKB mseVoog3fPbDBetDVSI8wv+9fdnGeb2L8sv/7Ye+UtthqB2ruOiWhhjUDtIcq4p1 SCmjk2NFcJrzqp2vQ0ziWj/39j8rDyrdwhng9wvPUBl9ytCldgcYggVxjPpHHwxg T+cUYGOplPFQMLz3IlkExEdtc/if52bbgITzX+xB0mYl5JTr4xV/dlGLfOLrQ1mk PsIBuh7yfx2d0dtTJRp7b1Xydsvn+XaGpmg4IfITfcJBEVFK/giJ3uUHRyKi9q3N AqTSRKLUpS5PHlSP8W/2OB5tPQQEFhn6dyW1mvKC+2F8 -----END CERTIFICATE-----Generated at Mon Jan 12 02:31:27 2026 by rpki-client