This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/Ms-Y5UsbEsVSN0wKl84Iqm04agc.roa File: Ms-Y5UsbEsVSN0wKl84Iqm04agc.roa (raw, json) Hash identifier: 6F933y3s8qpnKO+0W42o75dsCOaDH4zwy7APnRRHfo4= Subject key identifier: 32:CF:98:E5:4B:1B:12:C5:52:37:4C:0A:97:CE:08:AA:6D:38:6A:07 Certificate issuer: /CN=62d190b238d97af7900bdcbd02304b782ffcaf2a Certificate serial: 019C0470F97CE35E058A499F700F68EAC618 Authority key identifier: 62:D1:90:B2:38:D9:7A:F7:90:0B:DC:BD:02:30:4B:78:2F:FC:AF:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YtGQsjjZeveQC9y9AjBLeC_8ryo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/Ms-Y5UsbEsVSN0wKl84Iqm04agc.roa Signing time: Wed 28 Jan 2026 11:50:38 +0000 ROA not before: Wed 28 Jan 2026 11:50:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25577 IP address blocks: 31.3.208.0/24 maxlen: 24 31.3.211.0/24 maxlen: 24 31.3.212.0/23 maxlen: 23 31.3.221.0/24 maxlen: 24 31.3.223.0/24 maxlen: 24 81.27.64.0/24 maxlen: 24 81.27.66.0/23 maxlen: 23 81.27.72.0/23 maxlen: 23 81.27.75.0/24 maxlen: 24 81.27.76.0/24 maxlen: 24 81.27.80.0/22 maxlen: 22 81.27.87.0/24 maxlen: 24 81.27.88.0/22 maxlen: 22 81.27.92.0/24 maxlen: 24 81.27.94.0/24 maxlen: 24 81.27.95.0/24 maxlen: 24 82.197.72.0/24 maxlen: 24 2001:9d8::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/YtGQsjjZeveQC9y9AjBLeC_8ryo.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/YtGQsjjZeveQC9y9AjBLeC_8ryo.mft rsync://rpki.ripe.net/repository/DEFAULT/YtGQsjjZeveQC9y9AjBLeC_8ryo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Feb 2026 08:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:04:70:f9:7c:e3:5e:05:8a:49:9f:70:0f:68:ea:c6:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62d190b238d97af7900bdcbd02304b782ffcaf2a Validity Not Before: Jan 28 11:50:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=32cf98e54b1b12c552374c0a97ce08aa6d386a07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:c1:2f:ae:ef:c3:17:8d:49:ac:c6:91:88:87: 3b:20:0c:e1:b4:60:31:4d:fe:2b:f3:ac:e2:21:46: 52:2e:09:2a:3a:6a:76:85:0f:25:70:2c:70:98:b6: 5d:66:83:3a:51:f0:3c:8c:49:b1:f7:34:b2:a5:0d: 3d:05:0e:28:32:35:a3:fb:eb:27:95:66:4e:91:66: d3:c7:96:cd:a6:8d:e5:0e:fe:f5:3d:4a:39:44:37: ac:d2:0b:f7:e4:33:33:6f:0b:5f:69:5e:fe:84:8f: 2f:aa:32:56:1c:72:e8:9a:c7:6c:11:73:a1:c8:90: 51:c9:1b:52:86:01:52:09:1f:62:bb:35:1e:3f:e7: a5:c1:f3:2b:0d:32:be:4a:1d:ea:af:41:12:ba:c8: e3:8f:e2:99:c9:02:f9:c2:0e:c7:7c:2b:6f:df:f9: 10:0f:0f:77:d2:03:5a:fb:3e:f4:e2:ce:01:41:de: 16:21:18:48:0c:44:de:7d:73:bc:c7:ae:f2:7c:da: 26:e5:79:df:5b:38:81:10:11:ab:69:81:cb:fa:f4: ee:c3:c0:7a:1d:9f:d8:ad:ef:29:97:35:08:40:5c: 9d:e8:bd:ae:9d:96:46:f4:ed:21:f7:86:1c:e2:93: c1:19:7c:0d:cd:9b:27:78:a8:60:e3:71:15:82:06: bb:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:CF:98:E5:4B:1B:12:C5:52:37:4C:0A:97:CE:08:AA:6D:38:6A:07 X509v3 Authority Key Identifier: keyid:62:D1:90:B2:38:D9:7A:F7:90:0B:DC:BD:02:30:4B:78:2F:FC:AF:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YtGQsjjZeveQC9y9AjBLeC_8ryo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/Ms-Y5UsbEsVSN0wKl84Iqm04agc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/YtGQsjjZeveQC9y9AjBLeC_8ryo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.3.208.0/24 31.3.211.0-31.3.213.255 31.3.221.0/24 31.3.223.0/24 81.27.64.0/24 81.27.66.0/23 81.27.72.0/23 81.27.75.0-81.27.76.255 81.27.80.0/22 81.27.87.0-81.27.92.255 81.27.94.0/23 82.197.72.0/24 IPv6: 2001:9d8::/32 Signature Algorithm: sha256WithRSAEncryption 56:ff:69:96:49:a4:bd:49:18:37:41:72:15:af:af:d9:60:1d: 9f:e1:ae:3d:55:eb:9e:51:d8:52:10:e0:79:f5:95:72:ef:55: 29:2e:28:16:ac:bb:a9:45:9f:c6:5e:ca:97:04:9e:f8:43:25: d5:cb:b6:a3:14:3c:b6:23:95:89:d5:27:dc:48:cb:f3:b5:b6: ea:eb:f5:c8:35:ca:38:fd:36:42:80:da:8c:42:45:be:63:00: c4:30:dd:ed:1e:47:12:40:b6:9f:04:c1:e7:90:10:03:41:c8: 3b:9d:9c:75:06:48:d3:1c:ee:3c:14:2e:70:20:c6:0a:b4:90: 80:2c:c2:aa:69:c2:e9:a5:f5:64:d0:36:29:9f:6a:eb:d6:7d: 98:bc:24:48:46:04:29:f5:11:ae:09:60:7a:23:3b:65:1d:4d: 44:2d:92:ef:c0:d5:db:47:21:34:a4:87:be:b1:51:84:03:43: 9a:66:c5:47:b9:09:39:1c:8e:df:f4:45:b4:5b:b9:3d:8b:3f: d0:b7:e7:06:af:e8:68:f0:f2:63:f0:a0:ea:eb:7a:2a:be:6e: 35:4b:69:dc:33:7f:8e:b6:4b:f3:1e:0c:1a:50:24:cc:c8:b1: 5c:96:9e:d6:a2:00:76:cb:93:4d:24:92:21:0f:19:bb:8b:a4: 8d:53:ef:32 -----BEGIN CERTIFICATE----- MIIFZzCCBE+gAwIBAgISAZwEcPl8414FikmfcA9o6sYYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZDE5MGIyMzhkOTdhZjc5MDBiZGNiZDAyMzA0Yjc4MmZm Y2FmMmEwHhcNMjYwMTI4MTE1MDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMmNmOThlNTRiMWIxMmM1NTIzNzRjMGE5N2NlMDhhYTZkMzg2YTA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5sEvru/DF41JrMaRiIc7IAzhtGAx Tf4r86ziIUZSLgkqOmp2hQ8lcCxwmLZdZoM6UfA8jEmx9zSypQ09BQ4oMjWj++sn lWZOkWbTx5bNpo3lDv71PUo5RDes0gv35DMzbwtfaV7+hI8vqjJWHHLomsdsEXOh yJBRyRtShgFSCR9iuzUeP+elwfMrDTK+Sh3qr0ESusjjj+KZyQL5wg7HfCtv3/kQ Dw930gNa+z704s4BQd4WIRhIDETefXO8x67yfNom5XnfWziBEBGraYHL+vTuw8B6 HZ/Yre8plzUIQFyd6L2unZZG9O0h94Yc4pPBGXwNzZsneKhg43EVgga7iQIDAQAB o4ICczCCAm8wHQYDVR0OBBYEFDLPmOVLGxLFUjdMCpfOCKptOGoHMB8GA1UdIwQY MBaAFGLRkLI42Xr3kAvcvQIwS3gv/K8qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXRHUXNqalpldmVRQzl5OUFqQkxlQ184cnlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi81YTMzN2YtYzg0My00NWY0LThkOTkt MTYzZmI3MDAzZTVkLzEvTXMtWTVVc2JFc1ZTTjB3S2w4NElxbTA0YWdjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi81YTMzN2YtYzg0My00NWY0LThkOTktMTYzZmI3MDAzZTVk LzEvWXRHUXNqalpldmVRQzl5OUFqQkxlQ184cnlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGIBggrBgEFBQcBBwEB/wR5MHcwZgQCAAEwYAMEAB8D0DAM AwQAHwPTAwQBHwPUAwQAHwPdAwQAHwPfAwQAURtAAwQBURtCAwQBURtIMAwDBABR G0sDBABRG0wDBAJRG1AwDAMEAFEbVwMEAFEbXAMEAVEbXgMEAFLFSDANBAIAAjAH AwUAIAEJ2DANBgkqhkiG9w0BAQsFAAOCAQEAVv9plkmkvUkYN0FyFa+v2WAdn+Gu PVXrnlHYUhDgefWVcu9VKS4oFqy7qUWfxl7KlwSe+EMl1cu2oxQ8tiOVidUn3EjL 87W26uv1yDXKOP02QoDajEJFvmMAxDDd7R5HEkC2nwTB55AQA0HIO52cdQZI0xzu PBQucCDGCrSQgCzCqmnC6aX1ZNA2KZ9q69Z9mLwkSEYEKfURrglgeiM7ZR1NRC2S 78DV20chNKSHvrFRhANDmmbFR7kJORyO3/RFtFu5PYs/0LfnBq/oaPDyY/Cg6ut6 Kr5uNUtp3DN/jrZL8x4MGlAkzMixXJae1qIAdsuTTSSSIQ8Zu4ukjVPvMg== -----END CERTIFICATE-----Generated at Thu Feb 5 13:55:01 2026 by rpki-client