This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/yAfSs3t-avJ35nOve-CJuiZ7-ho.roa File: yAfSs3t-avJ35nOve-CJuiZ7-ho.roa (raw, json) Hash identifier: gipYf09Mg+lZZ79yPz1ymuBTYnjsvP1+FOOgVHdC5z8= Subject key identifier: C8:07:D2:B3:7B:7E:6A:F2:77:E6:73:AF:7B:E0:89:BA:26:7B:FA:1A Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa Certificate serial: 019B7E379EE0DEF02D56FEA5076657F8FD41 Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/yAfSs3t-avJ35nOve-CJuiZ7-ho.roa Signing time: Fri 02 Jan 2026 10:18:52 +0000 ROA not before: Fri 02 Jan 2026 10:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 137409 IP address blocks: 31.135.4.0/23 maxlen: 23 31.135.4.0/24 maxlen: 24 31.135.5.0/24 maxlen: 24 46.173.240.0/24 maxlen: 24 46.173.241.0/24 maxlen: 24 46.173.242.0/24 maxlen: 24 46.173.243.0/24 maxlen: 24 46.173.244.0/24 maxlen: 24 46.173.245.0/24 maxlen: 24 46.173.252.0/24 maxlen: 24 46.173.253.0/24 maxlen: 24 77.36.112.0/24 maxlen: 24 77.36.113.0/24 maxlen: 24 77.36.114.0/24 maxlen: 24 77.36.115.0/24 maxlen: 24 91.193.28.0/24 maxlen: 24 91.193.29.0/24 maxlen: 24 91.200.133.0/24 maxlen: 24 91.232.226.0/24 maxlen: 24 91.232.227.0/24 maxlen: 24 91.233.0.0/24 maxlen: 24 91.233.1.0/24 maxlen: 24 91.238.39.0/24 maxlen: 24 91.246.176.0/24 maxlen: 24 91.246.177.0/24 maxlen: 24 91.246.178.0/24 maxlen: 24 91.246.179.0/24 maxlen: 24 109.207.136.0/24 maxlen: 24 109.207.137.0/24 maxlen: 24 109.207.138.0/24 maxlen: 24 109.207.139.0/24 maxlen: 24 176.96.95.0/24 maxlen: 24 176.110.216.0/24 maxlen: 24 176.110.217.0/24 maxlen: 24 176.110.218.0/24 maxlen: 24 176.110.219.0/24 maxlen: 24 176.110.220.0/24 maxlen: 24 176.110.221.0/24 maxlen: 24 176.110.222.0/24 maxlen: 24 176.110.223.0/24 maxlen: 24 176.112.80.0/22 maxlen: 24 193.36.220.0/24 maxlen: 24 193.36.221.0/24 maxlen: 24 193.36.222.0/24 maxlen: 24 193.36.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 07:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:9e:e0:de:f0:2d:56:fe:a5:07:66:57:f8:fd:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa Validity Not Before: Jan 2 10:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c807d2b37b7e6af277e673af7be089ba267bfa1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:87:e1:3f:fe:5d:b8:a9:13:db:6b:26:be:47: b0:29:a0:c5:01:e3:11:e3:7f:6f:ef:3d:58:10:4d: e1:25:08:00:9c:66:64:b3:a4:47:da:6e:cc:36:e6: 12:52:f1:4d:f2:dc:78:b2:98:44:d1:e9:2c:ef:05: e9:07:1a:94:f1:54:dd:86:8b:fa:cf:d4:7b:93:8e: 15:db:06:c5:3c:5b:66:f1:e4:b0:35:cd:0c:81:b5: 0e:d5:07:fe:92:f6:e1:b4:e8:da:99:58:58:2a:0c: bf:2e:5b:c3:90:1a:59:5d:78:c9:e2:d0:42:55:98: 7a:f4:e1:3d:6d:97:f9:21:1e:29:96:82:9f:f3:8b: 0a:ac:cd:f4:01:53:04:50:cf:61:0d:a8:36:3f:d6: ef:b7:de:f6:6c:60:68:90:09:42:41:62:07:56:0a: 76:22:d3:3e:88:13:26:86:27:b2:d5:7a:67:df:9a: 8c:f0:aa:a6:e0:f8:f1:7d:29:99:fb:13:cf:04:e1: 08:b9:92:12:8b:28:21:2e:96:6f:06:60:3a:c2:73: 79:c6:e3:ef:1c:aa:6b:fd:df:d7:66:3d:33:a9:5a: 04:0b:64:23:c0:0d:0e:12:45:b6:20:66:d3:56:90: ae:cf:7c:e4:10:58:b5:8f:df:d3:55:02:b2:d1:03: 8f:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:07:D2:B3:7B:7E:6A:F2:77:E6:73:AF:7B:E0:89:BA:26:7B:FA:1A X509v3 Authority Key Identifier: keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/yAfSs3t-avJ35nOve-CJuiZ7-ho.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.135.4.0/23 46.173.240.0-46.173.245.255 46.173.252.0/23 77.36.112.0/22 91.193.28.0/23 91.200.133.0/24 91.232.226.0/23 91.233.0.0/23 91.238.39.0/24 91.246.176.0/22 109.207.136.0/22 176.96.95.0/24 176.110.216.0/21 176.112.80.0/22 193.36.220.0/22 Signature Algorithm: sha256WithRSAEncryption 0e:0b:e4:b9:1f:b8:20:93:9f:c1:72:75:55:57:0d:96:69:c8: 8c:58:ba:11:c4:85:56:57:25:0d:e8:a9:0f:46:0e:e3:e1:f5: 2a:9f:76:ac:f6:74:02:1f:3e:8e:0b:ed:f4:50:33:3a:d3:a6: 65:1f:d5:77:12:ff:6a:65:af:9d:2c:13:07:92:74:b1:59:da: f4:eb:cf:83:08:0f:bb:37:1c:88:42:b6:0e:cd:fe:d5:8f:f7: ac:37:b2:67:8a:9a:f5:d4:47:a7:ee:f8:65:6e:aa:d6:f3:09: 62:f4:e7:e1:7a:20:42:e4:14:ea:ac:05:0f:29:2b:6f:99:a2: f8:04:57:7c:ed:a5:e9:a4:9b:29:03:94:49:27:e5:4c:89:7b: c3:1b:4b:fd:c4:39:13:8d:7e:e7:d3:31:f8:9f:9c:54:5c:41: 92:5c:7e:6d:db:4d:e3:a6:20:23:02:b0:aa:64:fc:1b:a9:e3: e6:7d:17:dd:d2:70:e2:0e:88:83:df:3e:c8:d1:5d:c2:06:e5: 58:e3:b7:06:da:65:4e:e3:6a:20:6d:8b:16:e1:f3:11:80:cb: da:a6:f5:eb:ab:f3:fd:de:cc:b9:89:29:6e:2a:2c:98:1e:d8: 5d:54:82:3b:e4:96:41:6f:09:2c:a0:8a:09:f7:5b:4a:03:ea: 33:f7:2f:c5 -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgISAZt+N57g3vAtVv6lB2ZX+P1BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0OWNiYmQ1YzJjZjQxOTVjYzZlYzdmMjFmNjA3NTgxYTAy MjRkYWEwHhcNMjYwMTAyMTAxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjODA3ZDJiMzdiN2U2YWYyNzdlNjczYWY3YmUwODliYTI2N2JmYTFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA34fhP/5duKkT22smvkewKaDFAeMR 439v7z1YEE3hJQgAnGZks6RH2m7MNuYSUvFN8tx4sphE0eks7wXpBxqU8VTdhov6 z9R7k44V2wbFPFtm8eSwNc0MgbUO1Qf+kvbhtOjamVhYKgy/LlvDkBpZXXjJ4tBC VZh69OE9bZf5IR4ploKf84sKrM30AVMEUM9hDag2P9bvt972bGBokAlCQWIHVgp2 ItM+iBMmhiey1Xpn35qM8Kqm4PjxfSmZ+xPPBOEIuZISiyghLpZvBmA6wnN5xuPv HKpr/d/XZj0zqVoEC2QjwA0OEkW2IGbTVpCuz3zkEFi1j9/TVQKy0QOPcwIDAQAB o4ICZTCCAmEwHQYDVR0OBBYEFMgH0rN7fmryd+Zzr3vgibome/oaMB8GA1UdIwQY MBaAFDScu9XCz0GVzG7H8h9gdYGgIk2qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUt ZGMwNmRkODA1OTYwLzEveUFmU3MzdC1hdkozNW5PdmUtQ0p1aVo3LWhvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUtZGMwNmRkODA1OTYw LzEvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHsGCCsGAQUFBwEHAQH/BGwwajBoBAIAATBiAwQBH4cEMAwD BAQurfADBAEurfQDBAEurfwDBAJNJHADBAFbwRwDBABbyIUDBAFb6OIDBAFb6QAD BABb7icDBAJb9rADBAJtz4gDBACwYF8DBAOwbtgDBAKwcFADBALBJNwwDQYJKoZI hvcNAQELBQADggEBAA4L5LkfuCCTn8FydVVXDZZpyIxYuhHEhVZXJQ3oqQ9GDuPh 9Sqfdqz2dAIfPo4L7fRQMzrTpmUf1XcS/2plr50sEweSdLFZ2vTrz4MID7s3HIhC tg7N/tWP96w3smeKmvXUR6fu+GVuqtbzCWL05+F6IELkFOqsBQ8pK2+ZovgEV3zt pemkmykDlEkn5UyJe8MbS/3EORONfufTMfifnFRcQZJcfm3bTeOmICMCsKpk/Bup 4+Z9F93ScOIOiIPfPsjRXcIG5VjjtwbaZU7jaiBtixbh8xGAy9qm9eur8/3ezLmJ KW4qLJge2F1UgjvklkFvCSygign3W0oD6jP3L8U= -----END CERTIFICATE-----Generated at Mon Jan 19 16:53:31 2026 by rpki-client