This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/WyTm_eJfZ7VlhcGNoC8I2JaRSVM.roa File: WyTm_eJfZ7VlhcGNoC8I2JaRSVM.roa (raw, json) Hash identifier: Jt9TIbYL/Z9jHpWt1d3MolC1bQfPTU2gsdP4BqnQXsE= Subject key identifier: 5B:24:E6:FD:E2:5F:67:B5:65:85:C1:8D:A0:2F:08:D8:96:91:49:53 Certificate issuer: /CN=797000d67c8deb6262e009a9aff422a1038f4489 Certificate serial: 019B36E891A0AF289F6DD129FF1ECB368509 Authority key identifier: 79:70:00:D6:7C:8D:EB:62:62:E0:09:A9:AF:F4:22:A1:03:8F:44:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXAA1nyN62Ji4Ampr_QioQOPRIk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/WyTm_eJfZ7VlhcGNoC8I2JaRSVM.roa Signing time: Fri 19 Dec 2025 13:59:29 +0000 ROA not before: Fri 19 Dec 2025 13:59:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 20647 IP address blocks: 2.57.160.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.crl rsync://rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.mft rsync://rpki.ripe.net/repository/DEFAULT/eXAA1nyN62Ji4Ampr_QioQOPRIk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:e8:91:a0:af:28:9f:6d:d1:29:ff:1e:cb:36:85:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=797000d67c8deb6262e009a9aff422a1038f4489 Validity Not Before: Dec 19 13:59:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5b24e6fde25f67b56585c18da02f08d896914953 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:df:e0:e9:a8:71:15:d1:8f:8a:ce:22:9e:b9: 36:5e:ab:1f:58:39:1e:d1:29:d8:dd:aa:21:51:b3: 4b:6b:37:12:8e:3d:49:ae:e9:ab:4f:fe:70:66:73: f7:31:41:31:0e:44:a5:59:f7:42:27:50:c2:f8:92: 4d:cb:64:dd:51:3c:ac:d0:b8:15:00:3d:7d:22:e4: 82:75:81:f1:93:5b:ff:a0:54:c1:06:42:62:66:15: e0:1b:f8:97:dc:27:76:64:de:58:c9:01:31:9d:78: b6:18:31:5f:e1:c9:64:03:64:68:18:06:f9:16:c9: 72:9d:bc:0b:af:3d:17:49:cc:38:a5:99:d5:e0:b2: 9d:89:b1:60:ef:f0:1b:c1:37:6a:30:d8:7e:eb:e3: 87:39:c8:b1:ea:59:52:a9:82:23:06:73:ea:bd:a8: 6b:44:77:aa:28:96:bf:fa:b9:af:5a:b0:c1:e6:41: db:df:42:ef:b2:d6:70:9d:ea:22:08:e5:09:71:74: 4d:73:90:58:bb:5c:8b:4b:e9:35:4d:db:c1:2f:e0: 8c:29:e6:69:0b:68:34:cc:59:37:34:1f:ab:61:86: f0:47:da:e4:c4:66:2b:55:5e:08:f4:df:de:ba:b5: d2:46:ae:c5:78:5f:e8:13:6d:1c:8c:ef:8c:08:91: b5:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:24:E6:FD:E2:5F:67:B5:65:85:C1:8D:A0:2F:08:D8:96:91:49:53 X509v3 Authority Key Identifier: keyid:79:70:00:D6:7C:8D:EB:62:62:E0:09:A9:AF:F4:22:A1:03:8F:44:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXAA1nyN62Ji4Ampr_QioQOPRIk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/WyTm_eJfZ7VlhcGNoC8I2JaRSVM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.57.160.0/22 Signature Algorithm: sha256WithRSAEncryption 3b:39:01:6c:3f:f8:8b:08:1c:26:9e:a5:6f:30:39:83:b7:14: 9c:d3:b2:bd:ce:6c:f1:f8:37:a4:78:e7:8f:21:1c:6f:95:0b: 33:d1:25:3f:4d:fd:18:3c:6d:ff:3d:cc:ea:48:cf:a0:b9:c8: 9a:30:52:75:51:ea:bd:9e:b0:12:ec:19:48:45:2e:b6:e7:bc: ef:f3:b6:e8:64:5c:53:5c:3e:72:f5:53:d6:d9:bf:87:08:4b: 8a:47:65:10:1f:6e:f4:65:7e:b4:1e:78:88:df:0c:a4:2e:bd: 79:26:11:6a:1c:e5:79:07:33:bd:78:61:d9:33:78:c0:33:41: 8c:c3:42:1b:8c:8c:c8:5e:3b:77:fe:7c:ef:3b:00:cc:89:21: 61:a3:b3:1b:c8:ef:a7:92:cf:de:95:5a:f8:f1:57:2a:89:f9: 72:73:d0:37:e1:25:20:09:e4:3e:99:c8:f1:78:88:89:c5:a1: 73:8b:98:8e:21:3f:81:5d:3e:69:24:79:15:be:db:57:49:08: fe:83:6a:8a:6d:e9:a1:d7:0b:3f:3c:26:b8:b0:67:f5:bb:1a: 81:ca:e6:1b:fe:4d:a3:69:0d:c9:80:0e:9e:65:76:fd:49:d5: f8:8f:5f:a5:5d:44:c0:45:73:90:3c:b5:dd:a4:24:45:23:8a: 77:4a:de:b6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZs26JGgryifbdEp/x7LNoUJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5NzAwMGQ2N2M4ZGViNjI2MmUwMDlhOWFmZjQyMmExMDM4 ZjQ0ODkwHhcNMjUxMjE5MTM1OTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YjI0ZTZmZGUyNWY2N2I1NjU4NWMxOGRhMDJmMDhkODk2OTE0OTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqN/g6ahxFdGPis4inrk2XqsfWDke 0SnY3aohUbNLazcSjj1JrumrT/5wZnP3MUExDkSlWfdCJ1DC+JJNy2TdUTys0LgV AD19IuSCdYHxk1v/oFTBBkJiZhXgG/iX3Cd2ZN5YyQExnXi2GDFf4clkA2RoGAb5 FslynbwLrz0XScw4pZnV4LKdibFg7/AbwTdqMNh+6+OHOcix6llSqYIjBnPqvahr RHeqKJa/+rmvWrDB5kHb30LvstZwneoiCOUJcXRNc5BYu1yLS+k1TdvBL+CMKeZp C2g0zFk3NB+rYYbwR9rkxGYrVV4I9N/eurXSRq7FeF/oE20cjO+MCJG15wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFsk5v3iX2e1ZYXBjaAvCNiWkUlTMB8GA1UdIwQY MBaAFHlwANZ8jetiYuAJqa/0IqEDj0SJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVhBQTFueU42MkppNEFtcHJfUWlvUU9QUklrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9lMmNkYWMtODkwMS00MDUyLTk1NTQt YmFlOWQyYjI5NjAxLzEvV3lUbV9lSmZaN1ZsaGNHTm9DOEkySmFSU1ZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni9lMmNkYWMtODkwMS00MDUyLTk1NTQtYmFlOWQyYjI5NjAx LzEvZVhBQTFueU42MkppNEFtcHJfUWlvUU9QUklrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCAjmgMA0G CSqGSIb3DQEBCwUAA4IBAQA7OQFsP/iLCBwmnqVvMDmDtxSc07K9zmzx+DekeOeP IRxvlQsz0SU/Tf0YPG3/PczqSM+guciaMFJ1Ueq9nrAS7BlIRS6257zv87boZFxT XD5y9VPW2b+HCEuKR2UQH270ZX60HniI3wykLr15JhFqHOV5BzO9eGHZM3jAM0GM w0IbjIzIXjt3/nzvOwDMiSFho7MbyO+nks/elVr48Vcqiflyc9A34SUgCeQ+mcjx eIiJxaFzi5iOIT+BXT5pJHkVvttXSQj+g2qKbemh1ws/PCa4sGf1uxqByuYb/k2j aQ3JgA6eZXb9SdX4j1+lXUTARXOQPLXdpCRFI4p3St62 -----END CERTIFICATE-----Generated at Sun Dec 21 16:41:05 2025 by rpki-client