This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/y8Mk9G0ckqMOPNnqxSPhxqB7ArE.roa File: y8Mk9G0ckqMOPNnqxSPhxqB7ArE.roa (raw, json) Hash identifier: UASBBAcdeW+YrEECEQ+reXvBv8RJBSB9XC6gew0DW4E= Subject key identifier: CB:C3:24:F4:6D:1C:92:A3:0E:3C:D9:EA:C5:23:E1:C6:A0:7B:02:B1 Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722 Certificate serial: 019B7B355AC5DF2F4D01079BE2065C118519 Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/y8Mk9G0ckqMOPNnqxSPhxqB7ArE.roa Signing time: Thu 01 Jan 2026 20:17:32 +0000 ROA not before: Thu 01 Jan 2026 20:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9009 IP address blocks: 80.96.38.0/24 maxlen: 24 80.96.39.0/24 maxlen: 24 80.96.44.0/23 maxlen: 24 80.96.54.0/23 maxlen: 24 80.96.89.0/24 maxlen: 24 80.96.90.0/23 maxlen: 23 80.96.102.0/23 maxlen: 24 80.96.156.0/22 maxlen: 24 80.96.236.0/23 maxlen: 23 80.97.40.0/21 maxlen: 24 80.97.96.0/23 maxlen: 24 81.180.36.0/24 maxlen: 24 81.180.94.0/23 maxlen: 23 81.180.98.0/23 maxlen: 24 81.180.139.0/24 maxlen: 24 81.180.172.0/24 maxlen: 24 81.180.174.0/23 maxlen: 24 81.180.204.0/24 maxlen: 24 81.180.228.0/23 maxlen: 24 81.180.254.0/23 maxlen: 24 81.181.14.0/23 maxlen: 24 81.181.26.0/23 maxlen: 24 81.181.68.0/23 maxlen: 24 81.181.72.0/23 maxlen: 24 81.181.104.0/21 maxlen: 24 85.120.44.0/24 maxlen: 24 85.120.84.0/23 maxlen: 24 85.120.184.0/24 maxlen: 24 85.121.48.0/21 maxlen: 24 85.121.120.0/21 maxlen: 24 85.121.168.0/22 maxlen: 24 85.121.232.0/21 maxlen: 24 85.121.244.0/24 maxlen: 24 85.122.84.0/24 maxlen: 24 85.122.85.0/24 maxlen: 24 85.122.124.0/22 maxlen: 24 85.122.231.0/24 maxlen: 24 193.226.76.0/22 maxlen: 24 194.102.36.0/22 maxlen: 24 194.102.148.0/23 maxlen: 24 194.102.160.0/23 maxlen: 24 194.102.174.0/23 maxlen: 24 194.102.180.0/22 maxlen: 24 194.102.224.0/22 maxlen: 24 194.105.12.0/22 maxlen: 24 194.153.225.0/24 maxlen: 24 194.153.230.0/23 maxlen: 24 194.153.244.0/23 maxlen: 24 217.156.16.0/23 maxlen: 24 217.156.48.0/22 maxlen: 24 217.156.94.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 01:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:5a:c5:df:2f:4d:01:07:9b:e2:06:5c:11:85:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722 Validity Not Before: Jan 1 20:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cbc324f46d1c92a30e3cd9eac523e1c6a07b02b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:34:bd:85:c0:29:7e:01:05:dc:0e:00:f1:57: d2:15:9a:72:9e:b9:91:e9:1a:bc:4d:92:1c:17:d8: cf:bf:2a:e1:85:7c:5b:26:5b:be:eb:21:76:f0:90: ec:ab:88:6f:5a:5e:70:f1:68:d2:66:55:32:63:44: 9b:46:12:d6:07:9c:1d:cf:62:86:ae:b9:50:21:20: a5:f6:3a:cc:98:ba:63:74:34:66:e9:e4:d0:33:d3: 69:19:0c:42:5f:4b:51:8a:69:e4:7b:6e:b2:a8:2e: f0:60:70:3f:6d:fd:43:5e:5e:0c:21:fb:72:4d:22: 88:01:3b:10:4e:cf:cc:8b:53:c3:ca:82:97:dd:c4: 51:4d:16:62:a6:65:f5:31:cc:9c:13:e1:20:df:32: 90:05:d6:43:ca:0f:86:bc:f8:28:b8:5f:51:bb:08: 1c:69:1b:ee:9f:6f:52:3c:a1:60:ce:7a:9f:d9:1f: 98:72:0d:d1:b2:d4:28:e4:a7:6f:0f:c0:8f:ce:2c: ae:c7:7b:27:cd:c2:e5:d5:cf:3c:9b:e9:57:13:ca: a4:13:46:46:6a:5c:3d:34:4e:d4:10:1d:19:81:7a: 47:1c:66:73:86:48:66:1e:72:40:4d:84:d9:ca:9e: 33:8b:c5:07:c4:64:db:a0:b9:a8:6d:03:42:5a:6f: 08:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:C3:24:F4:6D:1C:92:A3:0E:3C:D9:EA:C5:23:E1:C6:A0:7B:02:B1 X509v3 Authority Key Identifier: keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/y8Mk9G0ckqMOPNnqxSPhxqB7ArE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.96.38.0/23 80.96.44.0/23 80.96.54.0/23 80.96.89.0-80.96.91.255 80.96.102.0/23 80.96.156.0/22 80.96.236.0/23 80.97.40.0/21 80.97.96.0/23 81.180.36.0/24 81.180.94.0/23 81.180.98.0/23 81.180.139.0/24 81.180.172.0/24 81.180.174.0/23 81.180.204.0/24 81.180.228.0/23 81.180.254.0/23 81.181.14.0/23 81.181.26.0/23 81.181.68.0/23 81.181.72.0/23 81.181.104.0/21 85.120.44.0/24 85.120.84.0/23 85.120.184.0/24 85.121.48.0/21 85.121.120.0/21 85.121.168.0/22 85.121.232.0/21 85.121.244.0/24 85.122.84.0/23 85.122.124.0/22 85.122.231.0/24 193.226.76.0/22 194.102.36.0/22 194.102.148.0/23 194.102.160.0/23 194.102.174.0/23 194.102.180.0/22 194.102.224.0/22 194.105.12.0/22 194.153.225.0/24 194.153.230.0/23 194.153.244.0/23 217.156.16.0/23 217.156.48.0/22 217.156.94.0/23 Signature Algorithm: sha256WithRSAEncryption 5b:2e:38:17:ec:47:f4:12:a1:db:f8:a1:3b:d9:89:93:dc:e6: 4f:57:30:7f:92:bc:4e:d6:5e:76:a2:f3:b2:92:b3:52:51:1d: 4d:12:69:84:cb:86:ad:be:ea:f7:82:c5:66:3e:db:bf:7a:9a: 25:1f:41:da:d3:b5:da:2a:e5:e8:e6:06:58:a8:49:14:24:69: 2f:1b:06:20:3f:cc:05:02:66:37:12:3f:cc:ad:8b:81:e4:24: 40:d0:2b:2c:61:e6:80:97:cd:da:7a:f7:ca:22:03:38:9f:6b: a6:8e:1a:81:88:b8:da:f0:2e:50:c5:4c:17:07:ce:81:e5:32: d5:96:b6:d2:b2:24:3c:7b:aa:0f:ee:97:2b:91:bf:97:c6:d3: 20:82:3c:30:bf:b1:cc:8d:44:09:75:5f:ed:58:cb:cc:c3:e2: 4c:8b:9f:e0:f1:6e:e7:cc:64:21:ed:be:33:24:77:19:1b:0e: 07:b7:00:8d:ca:93:d2:e0:08:7a:c6:5d:7a:fe:c2:6f:ca:92: ce:c3:76:b2:30:ea:37:e7:ba:ec:87:67:53:6a:47:c3:50:88: a8:9d:b6:49:a9:48:52:59:a9:8c:59:e4:51:0f:16:86:a0:72: fb:f2:c9:18:d8:52:3c:ab:42:c0:a5:52:2b:85:a7:01:dd:89: 5a:65:80:d7 -----BEGIN CERTIFICATE----- MIIGKTCCBRGgAwIBAgISAZt7NVrF3y9NAQeb4gZcEYUZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh MTU3MjIwHhcNMjYwMTAxMjAxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYmMzMjRmNDZkMWM5MmEzMGUzY2Q5ZWFjNTIzZTFjNmEwN2IwMmIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjS9hcApfgEF3A4A8VfSFZpynrmR 6Rq8TZIcF9jPvyrhhXxbJlu+6yF28JDsq4hvWl5w8WjSZlUyY0SbRhLWB5wdz2KG rrlQISCl9jrMmLpjdDRm6eTQM9NpGQxCX0tRimnke26yqC7wYHA/bf1DXl4MIfty TSKIATsQTs/Mi1PDyoKX3cRRTRZipmX1McycE+Eg3zKQBdZDyg+GvPgouF9Ruwgc aRvun29SPKFgznqf2R+Ycg3RstQo5KdvD8CPziyux3snzcLl1c88m+lXE8qkE0ZG alw9NE7UEB0ZgXpHHGZzhkhmHnJATYTZyp4zi8UHxGTboLmobQNCWm8IfwIDAQAB o4IDNTCCAzEwHQYDVR0OBBYEFMvDJPRtHJKjDjzZ6sUj4cagewKxMB8GA1UdIwQY MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt ZjUyYzQ3YzIyNWRiLzEveThNazlHMGNrcU1PUE5ucXhTUGh4cUI3QXJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBSQYIKwYBBQUHAQcBAf8EggE4MIIBNDCCATAEAgABMIIB KAMEAVBgJgMEAVBgLAMEAVBgNjAMAwQAUGBZAwQCUGBYAwQBUGBmAwQCUGCcAwQB UGDsAwQDUGEoAwQBUGFgAwQAUbQkAwQBUbReAwQBUbRiAwQAUbSLAwQAUbSsAwQB UbSuAwQAUbTMAwQBUbTkAwQBUbT+AwQBUbUOAwQBUbUaAwQBUbVEAwQBUbVIAwQD UbVoAwQAVXgsAwQBVXhUAwQAVXi4AwQDVXkwAwQDVXl4AwQCVXmoAwQDVXnoAwQA VXn0AwQBVXpUAwQCVXp8AwQAVXrnAwQCweJMAwQCwmYkAwQBwmaUAwQBwmagAwQB wmauAwQCwma0AwQCwmbgAwQCwmkMAwQAwpnhAwQBwpnmAwQBwpn0AwQB2ZwQAwQC 2ZwwAwQB2ZxeMA0GCSqGSIb3DQEBCwUAA4IBAQBbLjgX7Ef0EqHb+KE72YmT3OZP VzB/krxO1l52ovOykrNSUR1NEmmEy4atvur3gsVmPtu/epolH0Ha07XaKuXo5gZY qEkUJGkvGwYgP8wFAmY3Ej/MrYuB5CRA0CssYeaAl83aevfKIgM4n2umjhqBiLja 8C5QxUwXB86B5TLVlrbSsiQ8e6oP7pcrkb+XxtMggjwwv7HMjUQJdV/tWMvMw+JM i5/g8W7nzGQh7b4zJHcZGw4HtwCNypPS4Ah6xl16/sJvypLOw3ayMOo357rsh2dT akfDUIionbZJqUhSWamMWeRRDxaGoHL78skY2FI8q0LApVIrhacB3YlaZYDX -----END CERTIFICATE-----Generated at Sun Jan 18 08:54:47 2026 by rpki-client