This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/YJCLPuiKOD06azvgbHCfZVXS54Y.roa File: YJCLPuiKOD06azvgbHCfZVXS54Y.roa (raw, json) Hash identifier: mfC+l3Zuf7tuNPp3zdqrT5igLpftRpXuMkhUhcPle9M= Subject key identifier: 60:90:8B:3E:E8:8A:38:3D:3A:6B:3B:E0:6C:70:9F:65:55:D2:E7:86 Certificate issuer: /CN=65bdcff77bf060d5da12de45e2072e1cff4560a7 Certificate serial: 019B7CECE27E976585A647390B02B82A18BD Authority key identifier: 65:BD:CF:F7:7B:F0:60:D5:DA:12:DE:45:E2:07:2E:1C:FF:45:60:A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/YJCLPuiKOD06azvgbHCfZVXS54Y.roa Signing time: Fri 02 Jan 2026 04:17:37 +0000 ROA not before: Fri 02 Jan 2026 04:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50304 IP address blocks: 31.169.48.0/21 maxlen: 32 37.202.56.0/21 maxlen: 24 45.152.48.0/22 maxlen: 22 45.152.48.0/23 maxlen: 23 91.90.40.0/21 maxlen: 24 91.199.193.0/24 maxlen: 24 91.205.184.0/22 maxlen: 22 91.227.248.0/22 maxlen: 24 94.124.74.0/24 maxlen: 24 134.90.144.0/21 maxlen: 32 134.90.148.0/24 maxlen: 24 176.125.232.0/22 maxlen: 22 178.255.144.0/21 maxlen: 32 185.12.56.0/22 maxlen: 24 185.35.200.0/22 maxlen: 24 185.35.200.0/24 maxlen: 24 185.41.240.0/22 maxlen: 24 185.152.32.0/22 maxlen: 24 185.152.32.0/23 maxlen: 23 193.27.45.0/24 maxlen: 24 193.28.1.0/24 maxlen: 24 193.28.4.0/24 maxlen: 24 193.28.7.0/24 maxlen: 24 193.138.6.0/23 maxlen: 24 194.35.228.0/22 maxlen: 24 194.99.40.0/22 maxlen: 24 194.127.198.0/23 maxlen: 23 194.127.199.0/24 maxlen: 24 195.64.118.0/24 maxlen: 24 213.163.240.0/23 maxlen: 23 217.197.164.0/22 maxlen: 24 217.197.164.0/24 maxlen: 24 2a02:20c8::/32 maxlen: 48 2a02:ed00::/29 maxlen: 32 2a02:ed00::/32 maxlen: 32 2a02:ed01::/32 maxlen: 32 2a02:ed03::/32 maxlen: 32 2a02:ed04:100::/44 maxlen: 44 2a02:ed04:3400::/44 maxlen: 44 2a02:ed04:3580::/44 maxlen: 44 2a02:ed04:4400::/44 maxlen: 44 2a02:ed04:4500::/44 maxlen: 44 2a02:ed04:4600::/44 maxlen: 44 2a02:ed04:4700::/44 maxlen: 44 2a02:ed05::/32 maxlen: 32 2a02:ed06::/32 maxlen: 32 2a04:8d40::/29 maxlen: 32 2a07:7d80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 13:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:e2:7e:97:65:85:a6:47:39:0b:02:b8:2a:18:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65bdcff77bf060d5da12de45e2072e1cff4560a7 Validity Not Before: Jan 2 04:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=60908b3ee88a383d3a6b3be06c709f6555d2e786 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f1:42:91:de:ed:8b:bc:8c:00:42:9a:04:58: 9b:82:49:d0:d0:2f:73:19:a2:bc:e2:25:1b:15:0f: 93:83:cf:e1:12:4b:7d:c0:de:ac:89:df:b9:9d:de: 5d:40:95:0f:73:87:69:2b:79:e1:c6:5f:e5:96:86: 59:b3:a5:4c:c3:64:e6:ec:b6:46:bb:5d:6c:21:83: e4:10:77:19:ce:cf:3b:46:2d:6d:c5:04:22:2a:b4: 84:21:80:a6:b3:f4:0a:40:28:af:70:2b:41:96:6d: 7c:2e:7e:a2:59:16:91:0b:78:de:e1:e1:36:13:1a: 73:f6:7f:1d:17:47:76:8a:5c:34:e5:f8:52:7a:3e: ee:cb:de:38:07:95:3f:5e:a2:a3:13:10:68:7d:18: f2:20:ff:76:4a:f1:3c:87:d6:2f:03:25:22:22:ba: 80:e8:67:2d:a2:aa:d9:92:ab:37:90:c5:20:18:4a: 59:2b:57:24:ec:94:81:df:b2:5f:d8:25:9f:40:b7: 4d:28:79:af:6a:8c:4e:98:a8:0f:c2:99:d9:1f:d2: 6e:ca:e5:cd:16:28:44:71:2f:ea:40:c5:33:24:54: 12:3e:af:3a:21:04:0a:a7:0b:a3:98:7a:42:c4:89: 28:4a:07:d0:1c:b4:58:82:d4:ee:d1:34:9f:b1:ad: 9d:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:90:8B:3E:E8:8A:38:3D:3A:6B:3B:E0:6C:70:9F:65:55:D2:E7:86 X509v3 Authority Key Identifier: keyid:65:BD:CF:F7:7B:F0:60:D5:DA:12:DE:45:E2:07:2E:1C:FF:45:60:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/YJCLPuiKOD06azvgbHCfZVXS54Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.169.48.0/21 37.202.56.0/21 45.152.48.0/22 91.90.40.0/21 91.199.193.0/24 91.205.184.0/22 91.227.248.0/22 94.124.74.0/24 134.90.144.0/21 176.125.232.0/22 178.255.144.0/21 185.12.56.0/22 185.35.200.0/22 185.41.240.0/22 185.152.32.0/22 193.27.45.0/24 193.28.1.0/24 193.28.4.0/24 193.28.7.0/24 193.138.6.0/23 194.35.228.0/22 194.99.40.0/22 194.127.198.0/23 195.64.118.0/24 213.163.240.0/23 217.197.164.0/22 IPv6: 2a02:20c8::/32 2a02:ed00::/29 2a04:8d40::/29 2a07:7d80::/29 Signature Algorithm: sha256WithRSAEncryption 05:90:62:88:60:c9:8f:a3:4e:12:56:0e:99:ac:cd:56:b0:4f: aa:a4:23:54:a8:5e:fd:27:b6:da:4e:5b:b3:c2:af:56:b0:c6: 16:4b:dc:52:d9:46:7b:a2:4d:3a:5d:c7:d9:24:3c:e6:4f:b5: 13:1b:3a:25:28:d6:e2:db:eb:1e:3a:2b:53:2f:64:f5:fe:94: f8:fa:87:12:71:70:4c:fc:ac:68:e5:ea:ee:fb:48:b1:cc:cb: 1a:8e:44:fa:92:16:cb:d8:94:60:3e:84:d5:55:1b:f0:4f:01: 11:0c:16:85:ee:c9:a2:90:48:c7:46:28:fd:07:f5:d3:f8:ae: 20:a7:b3:52:7b:64:65:89:a7:28:36:f2:aa:1c:e8:ef:cb:4f: 86:11:90:0f:cd:55:ba:fb:66:1e:c0:4c:d9:46:3f:7c:a4:60: a5:33:06:b4:d8:b6:5a:b6:ba:af:c4:f5:08:a7:67:dc:9c:d2: f4:6a:c8:30:9c:de:e3:ab:57:36:45:b6:42:84:ec:c7:d3:c7: b6:6e:52:9c:86:78:22:16:55:5f:1d:c5:57:81:30:21:8a:cb: 4d:b1:05:cf:d3:21:43:02:ce:2d:1a:d2:39:dc:25:3d:cb:97: c3:0e:6c:20:e2:e0:fe:c3:86:fb:2c:97:b0:45:0c:d5:1e:8f: 82:81:5f:be -----BEGIN CERTIFICATE----- MIIFvDCCBKSgAwIBAgISAZt87OJ+l2WFpkc5CwK4Khi9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YmRjZmY3N2JmMDYwZDVkYTEyZGU0NWUyMDcyZTFjZmY0 NTYwYTcwHhcNMjYwMTAyMDQxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MDkwOGIzZWU4OGEzODNkM2E2YjNiZTA2YzcwOWY2NTU1ZDJlNzg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfFCkd7ti7yMAEKaBFibgknQ0C9z GaK84iUbFQ+Tg8/hEkt9wN6sid+5nd5dQJUPc4dpK3nhxl/lloZZs6VMw2Tm7LZG u11sIYPkEHcZzs87Ri1txQQiKrSEIYCms/QKQCivcCtBlm18Ln6iWRaRC3je4eE2 Expz9n8dF0d2ilw05fhSej7uy944B5U/XqKjExBofRjyIP92SvE8h9YvAyUiIrqA 6GctoqrZkqs3kMUgGEpZK1ck7JSB37Jf2CWfQLdNKHmvaoxOmKgPwpnZH9JuyuXN FihEcS/qQMUzJFQSPq86IQQKpwujmHpCxIkoSgfQHLRYgtTu0TSfsa2dMQIDAQAB o4ICyDCCAsQwHQYDVR0OBBYEFGCQiz7oijg9Oms74Gxwn2VV0ueGMB8GA1UdIwQY MBaAFGW9z/d78GDV2hLeReIHLhz/RWCnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8xOTVmM2QtYTg1MS00NTVhLTliMGYt ZDcwY2Q5N2Y0ODU3LzEvWUpDTFB1aUtPRDA2YXp2Z2JIQ2ZaVlhTNTRZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS8xOTVmM2QtYTg1MS00NTVhLTliMGYtZDcwY2Q5N2Y0ODU3 LzEvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHdBggrBgEFBQcBBwEB/wSBzTCByjCBowQCAAEwgZwDBAMf qTADBAMlyjgDBAItmDADBANbWigDBABbx8EDBAJbzbgDBAJb4/gDBABefEoDBAOG WpADBAKwfegDBAOy/5ADBAK5DDgDBAK5I8gDBAK5KfADBAK5mCADBADBGy0DBADB HAEDBADBHAQDBADBHAcDBAHBigYDBALCI+QDBALCYygDBAHCf8YDBADDQHYDBAHV o/ADBALZxaQwIgQCAAIwHAMFACoCIMgDBQMqAu0AAwUDKgSNQAMFAyoHfYAwDQYJ KoZIhvcNAQELBQADggEBAAWQYohgyY+jThJWDpmszVawT6qkI1SoXv0nttpOW7PC r1awxhZL3FLZRnuiTTpdx9kkPOZPtRMbOiUo1uLb6x46K1MvZPX+lPj6hxJxcEz8 rGjl6u77SLHMyxqORPqSFsvYlGA+hNVVG/BPAREMFoXuyaKQSMdGKP0H9dP4riCn s1J7ZGWJpyg28qoc6O/LT4YRkA/NVbr7Zh7ATNlGP3ykYKUzBrTYtlq2uq/E9Qin Z9yc0vRqyDCc3uOrVzZFtkKE7MfTx7ZuUpyGeCIWVV8dxVeBMCGKy02xBc/TIUMC zi0a0jncJT3Ll8MObCDi4P7Dhvssl7BFDNUej4KBX74= -----END CERTIFICATE-----Generated at Fri Jan 23 21:39:56 2026 by rpki-client