This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/YYKw3x6EWZGa2jyHhDavku-Kw18.roa File: YYKw3x6EWZGa2jyHhDavku-Kw18.roa (raw, json) Hash identifier: W0F4Q+xZjk8qbviZ3yeUjXppvJZu2RsmtzHXEWysO7Q= Subject key identifier: 61:82:B0:DF:1E:84:59:91:9A:DA:3C:87:84:36:AF:92:EF:8A:C3:5F Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16 Certificate serial: 019C0EFCBE78A59727E9A9CC33B46F03085E Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/YYKw3x6EWZGa2jyHhDavku-Kw18.roa Signing time: Fri 30 Jan 2026 12:59:30 +0000 ROA not before: Fri 30 Jan 2026 12:59:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9125 IP address blocks: 5.172.34.0/23 maxlen: 23 5.172.34.0/24 maxlen: 24 5.172.39.0/24 maxlen: 24 89.23.65.0/24 maxlen: 24 89.23.67.0/24 maxlen: 24 89.23.68.0/23 maxlen: 23 89.23.70.0/24 maxlen: 24 89.23.71.0/24 maxlen: 24 89.23.74.0/24 maxlen: 24 89.23.75.0/24 maxlen: 24 89.23.77.0/24 maxlen: 24 89.23.78.0/24 maxlen: 24 89.23.79.0/24 maxlen: 24 89.23.83.0/24 maxlen: 24 89.23.84.0/24 maxlen: 24 89.23.86.0/24 maxlen: 24 89.23.88.0/24 maxlen: 24 89.23.90.0/24 maxlen: 24 92.42.248.0/22 maxlen: 22 92.42.252.0/24 maxlen: 24 92.42.253.0/24 maxlen: 24 92.42.254.0/24 maxlen: 24 92.42.255.0/24 maxlen: 24 93.93.192.0/21 maxlen: 21 95.140.112.0/22 maxlen: 22 95.140.115.0/24 maxlen: 24 95.140.116.0/22 maxlen: 22 95.140.120.0/23 maxlen: 23 95.140.124.0/22 maxlen: 22 95.140.125.0/24 maxlen: 24 109.111.224.0/24 maxlen: 24 109.111.225.0/24 maxlen: 24 109.111.226.0/24 maxlen: 24 109.111.227.0/24 maxlen: 24 109.111.228.0/24 maxlen: 24 109.111.229.0/24 maxlen: 24 109.111.230.0/23 maxlen: 23 109.111.232.0/22 maxlen: 22 109.111.236.0/22 maxlen: 22 109.111.240.0/24 maxlen: 24 109.111.243.0/24 maxlen: 24 109.111.244.0/24 maxlen: 24 109.111.245.0/24 maxlen: 24 109.111.246.0/24 maxlen: 24 109.111.247.0/24 maxlen: 24 109.111.248.0/24 maxlen: 24 109.111.249.0/24 maxlen: 24 109.111.250.0/24 maxlen: 24 109.111.252.0/23 maxlen: 23 109.111.254.0/24 maxlen: 24 178.254.128.0/21 maxlen: 21 178.254.133.0/24 maxlen: 24 178.254.136.0/22 maxlen: 22 178.254.140.0/22 maxlen: 22 178.254.144.0/24 maxlen: 24 178.254.145.0/24 maxlen: 24 178.254.146.0/24 maxlen: 24 178.254.148.0/24 maxlen: 24 178.254.149.0/24 maxlen: 24 178.254.151.0/24 maxlen: 24 178.254.152.0/24 maxlen: 24 178.254.153.0/24 maxlen: 24 178.254.154.0/24 maxlen: 24 178.254.155.0/24 maxlen: 24 178.254.156.0/24 maxlen: 24 178.254.157.0/24 maxlen: 24 178.254.158.0/24 maxlen: 24 178.254.159.0/24 maxlen: 24 178.254.163.0/24 maxlen: 24 178.254.165.0/24 maxlen: 24 178.254.169.0/24 maxlen: 24 178.254.172.0/24 maxlen: 24 178.254.175.0/24 maxlen: 24 178.254.183.0/24 maxlen: 24 178.254.184.0/24 maxlen: 24 178.254.187.0/24 maxlen: 24 178.254.188.0/22 maxlen: 24 185.157.44.0/24 maxlen: 24 193.104.68.0/24 maxlen: 24 217.169.208.0/20 maxlen: 20 217.169.208.0/22 maxlen: 22 217.169.212.0/22 maxlen: 22 217.169.216.0/22 maxlen: 22 217.169.219.0/24 maxlen: 24 217.169.220.0/22 maxlen: 22 2a02:b58::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 04 Feb 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:0e:fc:be:78:a5:97:27:e9:a9:cc:33:b4:6f:03:08:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16 Validity Not Before: Jan 30 12:59:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6182b0df1e8459919ada3c878436af92ef8ac35f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1d:ab:9a:83:d2:a7:3a:66:86:9d:09:e4:2e: 52:35:b8:27:36:bd:42:50:8f:0e:89:b6:cb:74:95: 8c:4f:f0:6a:80:e7:37:c0:20:14:ff:9d:a3:03:ae: 4d:ec:fe:69:ec:60:55:af:cb:8e:32:e8:03:b2:21: 5b:6e:a8:b4:96:ef:cc:c5:bd:eb:d3:27:bc:b5:38: 1d:e7:74:34:d2:78:7f:8b:09:5b:f7:c6:14:ae:53: 7d:8c:bd:3e:73:75:80:6c:e9:2c:86:dc:ab:b7:8d: e5:8d:43:3c:fa:59:36:2d:71:dd:c9:ad:4c:b0:a5: 90:11:c4:f4:54:30:62:9c:c3:26:d0:01:a4:38:9c: 7e:40:3d:7f:c1:07:67:81:f6:aa:bb:d9:47:82:87: b4:af:e8:55:cf:96:dd:31:15:56:82:a5:c0:21:81: 62:c2:33:ee:b0:00:c7:87:73:d8:2a:c7:81:a2:b0: 9d:00:aa:e1:6a:4a:3f:18:44:14:af:00:cd:ed:d4: be:cf:45:71:84:f3:47:50:9e:bc:e8:38:1f:6f:85: 74:0e:f6:20:dd:9b:92:7f:fc:5a:e0:df:7c:3a:16: 3d:14:0c:23:12:c7:8f:d5:1c:99:c9:12:aa:84:5a: ac:d3:ee:52:a8:ea:cd:03:2f:46:e1:e2:aa:c5:b0: 45:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:82:B0:DF:1E:84:59:91:9A:DA:3C:87:84:36:AF:92:EF:8A:C3:5F X509v3 Authority Key Identifier: keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/YYKw3x6EWZGa2jyHhDavku-Kw18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.172.34.0/23 5.172.39.0/24 89.23.65.0/24 89.23.67.0-89.23.71.255 89.23.74.0/23 89.23.77.0-89.23.79.255 89.23.83.0-89.23.84.255 89.23.86.0/24 89.23.88.0/24 89.23.90.0/24 92.42.248.0/21 93.93.192.0/21 95.140.112.0-95.140.121.255 95.140.124.0/22 109.111.224.0-109.111.240.255 109.111.243.0-109.111.250.255 109.111.252.0-109.111.254.255 178.254.128.0-178.254.146.255 178.254.148.0/23 178.254.151.0-178.254.159.255 178.254.163.0/24 178.254.165.0/24 178.254.169.0/24 178.254.172.0/24 178.254.175.0/24 178.254.183.0-178.254.184.255 178.254.187.0-178.254.191.255 185.157.44.0/24 193.104.68.0/24 217.169.208.0/20 IPv6: 2a02:b58::/32 Signature Algorithm: sha256WithRSAEncryption 83:79:24:2d:54:9b:9e:75:05:e9:a1:02:88:b8:d4:57:6e:ed: 66:fd:a6:59:f2:bd:55:a4:dc:d2:a3:25:70:7e:50:f5:30:e7: 0d:50:5e:8d:3a:a9:29:0d:fa:c8:c8:b7:0e:ef:16:da:e1:2f: dc:d1:9c:52:71:e2:77:73:3c:8a:b9:b3:34:9b:b5:2f:5b:e3: 69:24:05:9f:05:cf:c1:27:3a:38:fc:b1:da:70:cd:a1:3a:c8: d5:af:df:c6:10:5e:39:ff:07:9f:9a:4e:29:45:db:b0:7d:8e: da:e1:6b:1b:0b:53:eb:e9:3b:f8:13:21:b2:85:5c:75:0b:ac: 71:18:11:f9:76:26:82:7c:8e:29:41:f5:f6:10:46:83:11:c1: 97:dd:9c:14:d5:2c:78:8c:25:c8:44:42:13:3c:63:50:0b:ae: c7:ff:b4:a6:e5:bb:88:f2:70:66:c3:66:45:81:58:dd:61:93: 92:a4:87:bb:bf:8e:8a:11:3e:55:13:d5:11:0c:90:f5:01:95: f0:f0:f5:55:43:f0:db:f1:17:fe:a5:22:ee:60:d2:de:91:c0: e0:3a:59:60:cc:74:e1:d7:7a:ce:9b:fe:39:08:01:ba:4a:b0: 27:15:11:7c:71:d2:61:7c:9d:9b:65:f8:5f:e0:de:44:f3:6e: ee:e1:6c:5d -----BEGIN CERTIFICATE----- MIIGHDCCBQSgAwIBAgISAZwO/L54pZcn6anMM7RvAwheMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5NzEzZWYyNTI3N2UxM2RkNzNmNDQxOTZmZGE1Y2VjMGZk OWNlMTYwHhcNMjYwMTMwMTI1OTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MTgyYjBkZjFlODQ1OTkxOWFkYTNjODc4NDM2YWY5MmVmOGFjMzVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxB2rmoPSpzpmhp0J5C5SNbgnNr1C UI8OibbLdJWMT/BqgOc3wCAU/52jA65N7P5p7GBVr8uOMugDsiFbbqi0lu/Mxb3r 0ye8tTgd53Q00nh/iwlb98YUrlN9jL0+c3WAbOkshtyrt43ljUM8+lk2LXHdya1M sKWQEcT0VDBinMMm0AGkOJx+QD1/wQdngfaqu9lHgoe0r+hVz5bdMRVWgqXAIYFi wjPusADHh3PYKseBorCdAKrhako/GEQUrwDN7dS+z0VxhPNHUJ686Dgfb4V0DvYg 3ZuSf/xa4N98OhY9FAwjEseP1RyZyRKqhFqs0+5SqOrNAy9G4eKqxbBF0QIDAQAB o4IDKDCCAyQwHQYDVR0OBBYEFGGCsN8ehFmRmto8h4Q2r5LvisNfMB8GA1UdIwQY MBaAFOlxPvJSd+E91z9EGW/aXOwP2c4WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlhFLThsSjM0VDNYUDBRWmI5cGM3QV9aemhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9lMTc2ZWItNTZmMi00ODA3LWIxMDEt MGY2NmMxODg3OTE2LzEvWVlLdzN4NkVXWkdhMmp5SGhEYXZrdS1LdzE4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9lMTc2ZWItNTZmMi00ODA3LWIxMDEtMGY2NmMxODg3OTE2 LzEvNlhFLThsSjM0VDNYUDBRWmI5cGM3QV9aemhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBPAYIKwYBBQUHAQcBAf8EggErMIIBJzCCARQEAgABMIIB DAMEAQWsIgMEAAWsJwMEAFkXQTAMAwQAWRdDAwQDWRdAAwQBWRdKMAwDBABZF00D BARZF0AwDAMEAFkXUwMEAFkXVAMEAFkXVgMEAFkXWAMEAFkXWgMEA1wq+AMEA11d wDAMAwQEX4xwAwQBX4x4AwQCX4x8MAwDBAVtb+ADBABtb/AwDAMEAG1v8wMEAG1v +jAMAwQCbW/8AwQAbW/+MAwDBAey/oADBACy/pIDBAGy/pQwDAMEALL+lwMEBbL+ gAMEALL+owMEALL+pQMEALL+qQMEALL+rAMEALL+rzAMAwQAsv63AwQAsv64MAwD BACy/rsDBAay/oADBAC5nSwDBADBaEQDBATZqdAwDQQCAAIwBwMFACoCC1gwDQYJ KoZIhvcNAQELBQADggEBAIN5JC1Um551BemhAoi41Fdu7Wb9plnyvVWk3NKjJXB+ UPUw5w1QXo06qSkN+sjItw7vFtrhL9zRnFJx4ndzPIq5szSbtS9b42kkBZ8Fz8En Ojj8sdpwzaE6yNWv38YQXjn/B5+aTilF27B9jtrhaxsLU+vpO/gTIbKFXHULrHEY Efl2JoJ8jilB9fYQRoMRwZfdnBTVLHiMJchEQhM8Y1ALrsf/tKblu4jycGbDZkWB WN1hk5Kkh7u/jooRPlUT1REMkPUBlfDw9VVD8NvxF/6lIu5g0t6RwOA6WWDMdOHX es6b/jkIAbpKsCcVEXxx0mF8nZtl+F/g3kTzbu7hbF0= -----END CERTIFICATE-----Generated at Tue Feb 3 09:35:25 2026 by rpki-client