This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/k_Yqfb61yxFVsUAlfMaFEyavSv4.roa File: k_Yqfb61yxFVsUAlfMaFEyavSv4.roa (raw, json) Hash identifier: zO6a703k+u6Hm7KUfbGiT3ypzSzlcRhCCpgBjvvWhs4= Subject key identifier: 93:F6:2A:7D:BE:B5:CB:11:55:B1:40:25:7C:C6:85:13:26:AF:4A:FE Certificate issuer: /CN=708612e8703a660889ca0f457cf1b4d8a0d53b4d Certificate serial: 019B7D5BB7D6F603E68172F4E932233027B6 Authority key identifier: 70:86:12:E8:70:3A:66:08:89:CA:0F:45:7C:F1:B4:D8:A0:D5:3B:4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cIYS6HA6ZgiJyg9FfPG02KDVO00.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/k_Yqfb61yxFVsUAlfMaFEyavSv4.roa Signing time: Fri 02 Jan 2026 06:18:41 +0000 ROA not before: Fri 02 Jan 2026 06:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8211 IP address blocks: 145.72.94.0/23 maxlen: 23 145.72.94.0/24 maxlen: 24 145.72.95.0/24 maxlen: 24 145.72.96.0/22 maxlen: 22 145.72.96.0/23 maxlen: 23 145.72.98.0/23 maxlen: 23 145.72.100.0/22 maxlen: 22 145.72.108.0/22 maxlen: 22 145.72.108.0/23 maxlen: 23 145.72.110.0/23 maxlen: 23 145.72.120.0/21 maxlen: 21 145.72.120.0/22 maxlen: 22 145.72.124.0/22 maxlen: 22 2a02:cc4:210::/44 maxlen: 44 2a02:cc4:2f0::/44 maxlen: 44 2a02:cc4:2f0::/45 maxlen: 45 2a02:cc4:2f8::/45 maxlen: 45 2a02:cc4:2100::/41 maxlen: 41 2a02:cc4:2f00::/41 maxlen: 41 2a02:cc4:2f00::/42 maxlen: 42 2a02:cc4:2f40::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.crl rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.mft rsync://rpki.ripe.net/repository/DEFAULT/cIYS6HA6ZgiJyg9FfPG02KDVO00.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:b7:d6:f6:03:e6:81:72:f4:e9:32:23:30:27:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=708612e8703a660889ca0f457cf1b4d8a0d53b4d Validity Not Before: Jan 2 06:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=93f62a7dbeb5cb1155b140257cc6851326af4afe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:d4:c5:14:3c:a5:cf:39:86:27:5e:b9:bb:68: b4:7d:24:f7:6c:02:11:4d:7e:fe:ef:1d:cf:d5:f9: 72:8d:27:39:62:89:b9:6d:a2:89:20:4a:04:3f:76: ee:45:bc:47:cf:8e:be:1f:8a:5b:cd:85:84:31:8b: 02:0c:d0:52:a6:1c:96:b4:f6:9b:21:1e:f1:53:64: a2:4a:b0:bd:4a:b6:b4:a2:b5:e1:8f:81:b8:2b:f5: a5:40:7c:74:85:59:ed:97:81:7a:77:89:4a:d2:f1: 00:00:e5:d5:87:9d:f6:7d:93:4f:e3:58:99:c2:34: 8c:47:99:ae:bd:c0:a9:ab:b3:8e:0e:ee:5d:bc:54: da:e4:94:88:c6:63:c4:25:cf:38:de:54:f9:0d:4b: 86:f3:67:27:4e:cf:3d:2b:5a:31:fc:4c:e3:e8:72: 66:46:77:ae:75:6d:a7:34:91:3d:d8:6e:d3:5c:57: 02:e1:4e:87:6d:76:50:66:a7:13:76:eb:e8:86:93: cf:19:34:45:0b:a2:b6:30:04:ce:31:dc:f1:51:3a: 3f:0a:04:8b:63:fb:af:90:09:02:7a:ab:a3:92:f9: c5:cc:09:be:65:a4:34:a4:89:f8:a1:7d:f0:de:8a: bd:af:b6:74:3c:12:1e:79:e3:50:37:f6:bb:95:7d: a5:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:F6:2A:7D:BE:B5:CB:11:55:B1:40:25:7C:C6:85:13:26:AF:4A:FE X509v3 Authority Key Identifier: keyid:70:86:12:E8:70:3A:66:08:89:CA:0F:45:7C:F1:B4:D8:A0:D5:3B:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIYS6HA6ZgiJyg9FfPG02KDVO00.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/k_Yqfb61yxFVsUAlfMaFEyavSv4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 145.72.94.0-145.72.103.255 145.72.108.0/22 145.72.120.0/21 IPv6: 2a02:cc4:210::/44 2a02:cc4:2f0::/44 2a02:cc4:2100::/41 2a02:cc4:2f00::/41 Signature Algorithm: sha256WithRSAEncryption 55:d1:8e:7c:99:be:99:8a:e1:c0:69:d3:38:d5:40:f5:50:b0: 2d:32:fc:6f:ee:37:8e:f8:e9:1c:80:21:b3:b2:4f:25:eb:04: 6c:2d:43:5f:d4:1f:59:26:85:79:27:11:18:1f:b2:a4:0b:2e: 7c:93:82:8c:54:5c:cf:51:25:05:5e:6c:c9:61:8c:02:d7:2f: e8:b2:2e:56:94:e4:e1:7c:32:5e:34:9c:2f:a5:28:11:16:81: f7:1e:d9:4a:07:a4:4c:0d:f2:0b:6a:2f:35:9f:c3:08:3c:e8: 37:de:65:a6:ed:aa:e3:12:e9:23:08:49:cf:06:7f:16:41:55: e9:b7:7c:e7:eb:c3:9f:29:8b:61:6c:e0:5d:bc:66:42:01:dd: 59:39:fe:fe:92:3b:ef:ec:4d:67:bd:16:5f:28:90:62:7f:9b: 73:e1:47:5a:bf:91:34:7a:bc:22:70:5a:97:52:d2:1b:04:41: 7c:2e:1b:34:21:d6:9a:0e:01:88:a4:a7:6e:3c:a9:aa:92:77: f9:86:7f:67:4a:65:78:e9:c2:71:ad:82:79:f7:25:02:01:64: ed:de:69:f8:13:c5:7c:d0:02:dd:c3:11:7e:dd:48:5d:8f:c9: 30:86:6e:e6:fe:dd:54:6e:59:15:87:0c:92:8f:9f:65:ce:f1: 2c:32:14:7b -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgISAZt9W7fW9gPmgXL06TIjMCe2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwODYxMmU4NzAzYTY2MDg4OWNhMGY0NTdjZjFiNGQ4YTBk NTNiNGQwHhcNMjYwMTAyMDYxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5M2Y2MmE3ZGJlYjVjYjExNTViMTQwMjU3Y2M2ODUxMzI2YWY0YWZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktTFFDylzzmGJ165u2i0fST3bAIR TX7+7x3P1flyjSc5Yom5baKJIEoEP3buRbxHz46+H4pbzYWEMYsCDNBSphyWtPab IR7xU2SiSrC9Sra0orXhj4G4K/WlQHx0hVntl4F6d4lK0vEAAOXVh532fZNP41iZ wjSMR5muvcCpq7OODu5dvFTa5JSIxmPEJc843lT5DUuG82cnTs89K1ox/Ezj6HJm RneudW2nNJE92G7TXFcC4U6HbXZQZqcTduvohpPPGTRFC6K2MATOMdzxUTo/CgSL Y/uvkAkCequjkvnFzAm+ZaQ0pIn4oX3w3oq9r7Z0PBIeeeNQN/a7lX2lowIDAQAB o4ICSTCCAkUwHQYDVR0OBBYEFJP2Kn2+tcsRVbFAJXzGhRMmr0r+MB8GA1UdIwQY MBaAFHCGEuhwOmYIicoPRXzxtNig1TtNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0lZUzZIQTZaZ2lKeWc5RmZQRzAyS0RWTzAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8yMmIwZmUtOWRjOC00YmVmLWEyOTkt MzAwOTdhMjQ2YTljLzEva19ZcWZiNjF5eEZWc1VBbGZNYUZFeWF2U3Y0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8yMmIwZmUtOWRjOC00YmVmLWEyOTktMzAwOTdhMjQ2YTlj LzEvY0lZUzZIQTZaZ2lKeWc5RmZQRzAyS0RWTzAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMF8GCCsGAQUFBwEHAQH/BFAwTjAgBAIAATAaMAwDBAGRSF4D BAORSGADBAKRSGwDBAORSHgwKgQCAAIwJAMHBCoCDMQCEAMHBCoCDMQC8AMHByoC DMQhAAMHByoCDMQvADANBgkqhkiG9w0BAQsFAAOCAQEAVdGOfJm+mYrhwGnTONVA 9VCwLTL8b+43jvjpHIAhs7JPJesEbC1DX9QfWSaFeScRGB+ypAsufJOCjFRcz1El BV5syWGMAtcv6LIuVpTk4XwyXjScL6UoERaB9x7ZSgekTA3yC2ovNZ/DCDzoN95l pu2q4xLpIwhJzwZ/FkFV6bd85+vDnymLYWzgXbxmQgHdWTn+/pI77+xNZ70WXyiQ Yn+bc+FHWr+RNHq8InBal1LSGwRBfC4bNCHWmg4BiKSnbjypqpJ3+YZ/Z0pleOnC ca2CefclAgFk7d5p+BPFfNAC3cMRft1IXY/JMIZu5v7dVG5ZFYcMko+fZc7xLDIU ew== -----END CERTIFICATE-----Generated at Mon Feb 9 23:54:33 2026 by rpki-client