This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/yZepWYso39Ktfsnpae8Nahf1b8I.roa File: yZepWYso39Ktfsnpae8Nahf1b8I.roa (raw, json) Hash identifier: Yiho9bvazJTbyZ+iL2xK6Eorgx+qR/zGpVpEPxoE5ho= Subject key identifier: C9:97:A9:59:8B:28:DF:D2:AD:7E:C9:E9:69:EF:0D:6A:17:F5:6F:C2 Certificate issuer: /CN=117f8c9a7fc7f13658d62afbeb6f39882da511cc Certificate serial: 019B7CED8C25BB04CCB89D87584D148ACF8F Authority key identifier: 11:7F:8C:9A:7F:C7:F1:36:58:D6:2A:FB:EB:6F:39:88:2D:A5:11:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EX-Mmn_H8TZY1ir76285iC2lEcw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/yZepWYso39Ktfsnpae8Nahf1b8I.roa Signing time: Fri 02 Jan 2026 04:18:21 +0000 ROA not before: Fri 02 Jan 2026 04:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59432 IP address blocks: 5.134.112.0/21 maxlen: 21 5.134.112.0/24 maxlen: 24 5.134.113.0/24 maxlen: 24 5.134.114.0/24 maxlen: 24 5.134.115.0/24 maxlen: 24 5.134.116.0/24 maxlen: 24 5.134.117.0/24 maxlen: 24 5.134.118.0/24 maxlen: 24 5.134.119.0/24 maxlen: 24 185.47.128.0/22 maxlen: 22 185.47.128.0/24 maxlen: 24 185.47.129.0/24 maxlen: 24 185.47.130.0/24 maxlen: 24 185.47.131.0/24 maxlen: 24 188.213.4.0/22 maxlen: 22 188.213.4.0/24 maxlen: 24 188.213.5.0/24 maxlen: 24 188.213.6.0/24 maxlen: 24 188.213.7.0/24 maxlen: 24 2a03:c7c0::/32 maxlen: 32 2a03:c7c1::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/EX-Mmn_H8TZY1ir76285iC2lEcw.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/EX-Mmn_H8TZY1ir76285iC2lEcw.mft rsync://rpki.ripe.net/repository/DEFAULT/EX-Mmn_H8TZY1ir76285iC2lEcw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:8c:25:bb:04:cc:b8:9d:87:58:4d:14:8a:cf:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=117f8c9a7fc7f13658d62afbeb6f39882da511cc Validity Not Before: Jan 2 04:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c997a9598b28dfd2ad7ec9e969ef0d6a17f56fc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:c1:82:38:b5:99:82:2c:32:20:d8:c7:ae:ae: 01:95:c5:70:e1:01:5d:46:f2:8e:c0:d6:aa:52:4d: af:a0:1c:80:59:bb:b1:81:34:bb:34:dc:40:04:fd: bc:f5:a4:85:d5:37:11:60:dc:92:fc:eb:01:df:6d: 30:34:5c:6e:b2:5d:14:f2:56:73:0a:27:e0:0d:28: 71:28:f0:3c:0c:5d:0c:d8:71:84:ef:14:c9:d6:82: cd:e2:a2:ac:9d:d6:ab:69:78:56:d9:2a:d0:00:d1: 1d:a5:a3:ab:1d:96:04:7c:0d:5c:e7:1d:45:cb:73: c8:fb:71:13:16:1f:aa:9e:0e:f2:92:57:7f:ff:a5: 46:96:41:95:04:e3:70:58:56:a0:7e:44:3d:0e:16: 21:0a:d8:2c:e2:52:08:b1:36:aa:6e:f0:6e:1d:23: 50:02:aa:81:b0:15:fb:d6:36:fb:5d:22:c8:fc:35: b3:1a:69:0c:06:61:a0:6a:10:d0:fd:0c:d2:33:d6: 9c:fe:07:8f:5f:66:96:f6:09:eb:3d:08:05:63:fb: be:32:2c:48:49:12:ef:9a:11:8c:f8:e9:21:3e:4e: 34:43:d0:b5:36:a3:e8:74:8b:c8:4a:d6:95:8e:1c: fa:18:ea:28:7b:da:30:4e:6c:5b:6c:97:97:34:98: b0:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:97:A9:59:8B:28:DF:D2:AD:7E:C9:E9:69:EF:0D:6A:17:F5:6F:C2 X509v3 Authority Key Identifier: keyid:11:7F:8C:9A:7F:C7:F1:36:58:D6:2A:FB:EB:6F:39:88:2D:A5:11:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-Mmn_H8TZY1ir76285iC2lEcw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/yZepWYso39Ktfsnpae8Nahf1b8I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/EX-Mmn_H8TZY1ir76285iC2lEcw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.134.112.0/21 185.47.128.0/22 188.213.4.0/22 IPv6: 2a03:c7c0::/31 Signature Algorithm: sha256WithRSAEncryption 7d:fb:28:53:28:2c:e8:4c:14:21:6b:8b:26:4c:fa:de:07:95: d5:ff:5f:d7:7c:96:7f:37:68:13:77:db:71:0e:ef:d3:aa:6e: 65:59:c5:ad:26:58:b1:6f:8b:40:aa:cb:4d:20:e4:88:7e:c0: 84:3f:09:6c:30:05:69:51:aa:31:a2:43:e2:7d:a1:e6:a5:58: 73:ff:df:5f:7b:ba:ff:09:55:dc:5d:87:2b:3b:ee:13:87:61: fa:08:0e:31:1c:5e:93:18:f8:6b:6e:36:e7:bc:d0:cf:d4:c0: d4:f1:2d:2c:b4:3e:ee:22:51:31:00:1e:2e:38:a1:60:a3:04: fb:99:da:94:39:40:f6:f6:85:ad:a4:3d:b9:07:bc:62:b8:f6: 7a:4b:0d:62:58:6f:37:28:2a:05:a1:71:0a:5c:51:95:0d:54: 14:e0:7f:f7:a0:52:25:b5:31:aa:c0:e1:c9:9e:bf:07:7f:1c: 81:4f:f3:b0:02:ae:52:e6:73:c1:95:59:64:82:6e:e7:c9:61: c5:f5:0f:17:31:5a:6b:24:bb:a9:d9:fe:b3:f5:e8:3b:ba:1b: 28:61:c0:cd:5b:65:6b:db:fc:5a:2a:b2:b7:30:4d:53:49:93: db:56:9b:2a:8b:7c:43:9a:bf:7f:e9:1d:5f:92:95:a1:06:d7: 9c:46:74:31 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt87YwluwTMuJ2HWE0Uis+PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExN2Y4YzlhN2ZjN2YxMzY1OGQ2MmFmYmViNmYzOTg4MmRh NTExY2MwHhcNMjYwMTAyMDQxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOTk3YTk1OThiMjhkZmQyYWQ3ZWM5ZTk2OWVmMGQ2YTE3ZjU2ZmMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAisGCOLWZgiwyINjHrq4BlcVw4QFd RvKOwNaqUk2voByAWbuxgTS7NNxABP289aSF1TcRYNyS/OsB320wNFxusl0U8lZz CifgDShxKPA8DF0M2HGE7xTJ1oLN4qKsndaraXhW2SrQANEdpaOrHZYEfA1c5x1F y3PI+3ETFh+qng7ykld//6VGlkGVBONwWFagfkQ9DhYhCtgs4lIIsTaqbvBuHSNQ AqqBsBX71jb7XSLI/DWzGmkMBmGgahDQ/QzSM9ac/gePX2aW9gnrPQgFY/u+MixI SRLvmhGM+OkhPk40Q9C1NqPodIvIStaVjhz6GOooe9owTmxbbJeXNJiwaQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFMmXqVmLKN/SrX7J6WnvDWoX9W/CMB8GA1UdIwQY MBaAFBF/jJp/x/E2WNYq++tvOYgtpRHMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVgtTW1uX0g4VFpZMWlyNzYyODVpQzJsRWN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8xMjJiMmQtNWQ4Ny00NzhjLTg1MjIt ODlkNjZhYzcyZTAyLzEveVplcFdZc28zOUt0ZnNucGFlOE5haGYxYjhJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy8xMjJiMmQtNWQ4Ny00NzhjLTg1MjItODlkNjZhYzcyZTAy LzEvRVgtTW1uX0g4VFpZMWlyNzYyODVpQzJsRWN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDBYZwAwQC uS+AAwQCvNUEMA0EAgACMAcDBQEqA8fAMA0GCSqGSIb3DQEBCwUAA4IBAQB9+yhT KCzoTBQha4smTPreB5XV/1/XfJZ/N2gTd9txDu/Tqm5lWcWtJlixb4tAqstNIOSI fsCEPwlsMAVpUaoxokPifaHmpVhz/99fe7r/CVXcXYcrO+4Th2H6CA4xHF6TGPhr bjbnvNDP1MDU8S0stD7uIlExAB4uOKFgowT7mdqUOUD29oWtpD25B7xiuPZ6Sw1i WG83KCoFoXEKXFGVDVQU4H/3oFIltTGqwOHJnr8HfxyBT/OwAq5S5nPBlVlkgm7n yWHF9Q8XMVprJLup2f6z9eg7uhsoYcDNW2Vr2/xaKrK3ME1TSZPbVpsqi3xDmr9/ 6R1fkpWhBtecRnQx -----END CERTIFICATE-----Generated at Mon Jan 19 23:22:04 2026 by rpki-client