This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/yoRWGr63LZS4NFibY0vQGrb1i1Q.roa File: yoRWGr63LZS4NFibY0vQGrb1i1Q.roa (raw, json) Hash identifier: dM5EWkSHjvnBovpe7LFnvTbnghQX5jEUBmy6xNXmzXU= Subject key identifier: CA:84:56:1A:BE:B7:2D:94:B8:34:58:9B:63:4B:D0:1A:B6:F5:8B:54 Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Certificate serial: 019B978A4614AB633FBC90972B02BA566A40 Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/yoRWGr63LZS4NFibY0vQGrb1i1Q.roa Signing time: Wed 07 Jan 2026 08:19:40 +0000 ROA not before: Wed 07 Jan 2026 08:19:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2914 IP address blocks: 62.84.16.0/20 maxlen: 20 79.135.141.0/24 maxlen: 24 80.81.47.0/24 maxlen: 24 83.223.131.0/24 maxlen: 24 83.223.138.0/24 maxlen: 24 83.223.140.0/24 maxlen: 24 83.223.152.0/24 maxlen: 24 83.223.156.0/24 maxlen: 24 83.223.158.0/24 maxlen: 24 85.254.41.0/24 maxlen: 24 85.254.46.0/24 maxlen: 24 85.254.63.0/24 maxlen: 24 85.254.117.0/24 maxlen: 24 85.254.118.0/23 maxlen: 23 91.190.37.0/24 maxlen: 24 159.148.143.0/24 maxlen: 24 185.176.116.0/24 maxlen: 24 185.176.119.0/24 maxlen: 24 217.24.64.0/20 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:97:8a:46:14:ab:63:3f:bc:90:97:2b:02:ba:56:6a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Validity Not Before: Jan 7 08:19:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ca84561abeb72d94b834589b634bd01ab6f58b54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:25:73:aa:da:86:ca:1b:d6:54:14:1d:4a:b9: 0a:44:30:19:50:8b:fd:64:cf:34:9f:94:80:c2:51: 83:42:45:19:00:76:a3:05:7f:06:df:f5:67:26:95: df:08:3c:54:b0:37:25:ef:1e:f2:bd:4e:88:d1:d9: e4:a7:38:07:4a:86:b4:8a:0b:61:82:fb:9d:0b:95: 5f:bb:6e:13:86:f3:d7:a2:c8:42:ae:2d:88:34:c9: d4:58:ba:9c:39:b8:e6:e6:ae:5e:3e:a7:0a:bf:6f: 3a:1d:14:22:eb:bc:34:ca:a3:01:da:44:07:ca:1c: 21:d0:1b:0a:5f:66:ec:99:f7:85:63:3e:08:55:2c: f4:b5:a1:40:e9:0e:69:25:5a:f5:28:dd:f9:5c:d6: 71:85:6e:7d:f9:18:c5:b0:20:0d:3f:4f:b8:fd:2e: 03:d1:e4:c2:9b:de:4c:f3:84:fa:38:7e:cb:6b:5c: 15:a5:63:50:e7:97:d4:09:ec:1e:68:44:37:77:9a: 8b:13:65:4f:80:95:3f:5f:da:7a:b9:09:7f:a6:4a: 69:f6:4a:04:36:f5:e4:d9:85:e9:85:fc:59:a1:5b: 94:6c:b8:7f:fb:75:ae:6c:90:30:48:33:d1:90:77: 92:20:32:48:e9:59:68:89:3f:f8:c8:ae:35:a3:09: c2:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:84:56:1A:BE:B7:2D:94:B8:34:58:9B:63:4B:D0:1A:B6:F5:8B:54 X509v3 Authority Key Identifier: keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/yoRWGr63LZS4NFibY0vQGrb1i1Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.84.16.0/20 79.135.141.0/24 80.81.47.0/24 83.223.131.0/24 83.223.138.0/24 83.223.140.0/24 83.223.152.0/24 83.223.156.0/24 83.223.158.0/24 85.254.41.0/24 85.254.46.0/24 85.254.63.0/24 85.254.117.0-85.254.119.255 91.190.37.0/24 159.148.143.0/24 185.176.116.0/24 185.176.119.0/24 217.24.64.0/20 Signature Algorithm: sha256WithRSAEncryption 78:b5:3b:6e:be:b4:9b:6c:a4:ff:1e:01:51:53:f8:42:9c:57: 4d:5a:63:98:9e:3e:ef:00:8d:88:f4:d4:c9:ee:0d:37:47:30: 6f:73:cb:70:42:01:19:1e:a8:3c:cd:6b:dd:50:61:b0:23:50: 3b:3c:5a:2a:27:eb:3d:53:aa:c2:fd:a5:0b:6b:23:c9:b1:fd: 72:42:73:c0:9d:e1:e7:0d:87:64:75:db:e1:98:1e:87:42:23: 14:06:ef:03:ed:25:3c:e8:42:77:9e:76:c8:9b:9e:58:d1:f0: 1d:bb:21:52:6a:8e:fe:0d:75:34:9e:d2:a5:13:aa:9b:45:a6: 26:be:1d:f4:d8:ea:dd:05:1d:58:9b:5f:45:9c:50:71:25:a8: 3e:6d:c7:ac:ea:0a:d3:a6:ec:52:e3:6e:d1:29:9e:bf:5d:cd: d1:11:46:5f:1f:f6:fa:0a:75:f6:43:fb:ac:c0:07:b3:31:6d: 72:53:af:d3:10:f1:d9:24:bc:4a:fa:00:bf:4f:8a:ea:d4:43: 37:fa:07:0b:bd:5a:bc:03:37:ef:6a:e1:2f:34:df:89:0b:44: 05:ce:1a:0e:00:25:d8:63:e8:08:13:a7:58:6b:12:6c:a4:4f: cb:7d:92:14:20:7f:5f:fd:7a:b5:5f:57:ab:51:9f:1c:1c:34: d1:2d:6d:32 -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgISAZuXikYUq2M/vJCXKwK6VmpAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiMDk1MmM4YmE4ZGFkYjFkMzRkZTZjNmE5Mzg2NGE2MDlm YzQxZWMwHhcNMjYwMTA3MDgxOTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYTg0NTYxYWJlYjcyZDk0YjgzNDU4OWI2MzRiZDAxYWI2ZjU4YjU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCVzqtqGyhvWVBQdSrkKRDAZUIv9 ZM80n5SAwlGDQkUZAHajBX8G3/VnJpXfCDxUsDcl7x7yvU6I0dnkpzgHSoa0igth gvudC5Vfu24ThvPXoshCri2INMnUWLqcObjm5q5ePqcKv286HRQi67w0yqMB2kQH yhwh0BsKX2bsmfeFYz4IVSz0taFA6Q5pJVr1KN35XNZxhW59+RjFsCANP0+4/S4D 0eTCm95M84T6OH7La1wVpWNQ55fUCeweaEQ3d5qLE2VPgJU/X9p6uQl/pkpp9koE NvXk2YXphfxZoVuUbLh/+3WubJAwSDPRkHeSIDJI6VloiT/4yK41ownCaQIDAQAB o4ICeDCCAnQwHQYDVR0OBBYEFMqEVhq+ty2UuDRYm2NL0Bq29YtUMB8GA1UdIwQY MBaAFKsJUsi6ja2x003mxqk4ZKYJ/EHsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAt NTU1NGQ2ZTE2ODZmLzEveW9SV0dyNjNMWlM0TkZpYlkwdlFHcmIxaTFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAtNTU1NGQ2ZTE2ODZm LzEvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGNBggrBgEFBQcBBwEB/wR+MHwwegQCAAEwdAMEBD5UEAME AE+HjQMEAFBRLwMEAFPfgwMEAFPfigMEAFPfjAMEAFPfmAMEAFPfnAMEAFPfngME AFX+KQMEAFX+LgMEAFX+PzAMAwQAVf51AwQDVf5wAwQAW74lAwQAn5SPAwQAubB0 AwQAubB3AwQE2RhAMA0GCSqGSIb3DQEBCwUAA4IBAQB4tTtuvrSbbKT/HgFRU/hC nFdNWmOYnj7vAI2I9NTJ7g03RzBvc8twQgEZHqg8zWvdUGGwI1A7PFoqJ+s9U6rC /aULayPJsf1yQnPAneHnDYdkddvhmB6HQiMUBu8D7SU86EJ3nnbIm55Y0fAduyFS ao7+DXU0ntKlE6qbRaYmvh302OrdBR1Ym19FnFBxJag+bces6grTpuxS427RKZ6/ Xc3REUZfH/b6CnX2Q/uswAezMW1yU6/TEPHZJLxK+gC/T4rq1EM3+gcLvVq8Azfv auEvNN+JC0QFzhoOACXYY+gIE6dYaxJspE/LfZIUIH9f/Xq1X1erUZ8cHDTRLW0y -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:49 2026 by rpki-client