This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/YGyJEvwnW0WQ_NWAEj7vFCxCxWA.roa File: YGyJEvwnW0WQ_NWAEj7vFCxCxWA.roa (raw, json) Hash identifier: 2C2bEc32YpX5NyOiU/D+IWaEQi+cpjyPUf9gHuyinOg= Subject key identifier: 60:6C:89:12:FC:27:5B:45:90:FC:D5:80:12:3E:EF:14:2C:42:C5:60 Certificate issuer: /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664 Certificate serial: 019B7A5B30724A16057EBFC98C86FBC466B7 Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/YGyJEvwnW0WQ_NWAEj7vFCxCxWA.roa Signing time: Thu 01 Jan 2026 16:19:15 +0000 ROA not before: Thu 01 Jan 2026 16:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49223 IP address blocks: 5.181.54.0/24 maxlen: 24 37.140.240.0/24 maxlen: 24 46.18.106.0/24 maxlen: 24 62.204.33.0/24 maxlen: 24 83.138.49.0/24 maxlen: 24 89.248.64.0/24 maxlen: 24 91.247.186.0/24 maxlen: 24 95.130.228.0/24 maxlen: 24 146.19.41.0/24 maxlen: 24 146.19.186.0/24 maxlen: 24 176.126.126.0/24 maxlen: 24 185.145.232.0/24 maxlen: 24 185.201.253.0/24 maxlen: 24 188.244.118.0/24 maxlen: 24 193.104.183.0/24 maxlen: 24 193.163.124.0/24 maxlen: 24 193.228.228.0/24 maxlen: 24 194.32.105.0/24 maxlen: 24 194.156.78.0/24 maxlen: 24 212.52.8.0/24 maxlen: 24 213.109.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:30:72:4a:16:05:7e:bf:c9:8c:86:fb:c4:66:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664 Validity Not Before: Jan 1 16:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=606c8912fc275b4590fcd580123eef142c42c560 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:cd:e2:56:34:45:69:cb:48:76:b7:f4:2e:79: 76:28:27:b5:65:dd:2c:70:05:a6:99:18:b0:59:b3: d8:10:75:98:6b:97:4f:8b:e3:25:7d:b9:8c:26:59: a1:89:65:1d:de:e7:d9:bc:fe:9b:31:85:c4:66:c5: c0:e5:f5:eb:4e:8f:8e:14:b4:a7:64:93:9c:8b:f5: 36:b1:cf:54:a4:3a:6a:ae:f6:ec:25:ba:9e:a5:08: 5f:da:6d:d6:89:ac:23:f3:1b:ea:07:d0:67:e0:fa: 9b:72:b2:b4:26:a8:a2:89:68:03:e0:e9:ec:32:b3: f2:17:7c:57:8c:ae:8c:94:f3:d6:d5:05:12:9d:7d: 13:e2:6d:52:54:95:d1:eb:b8:f7:8f:6c:7a:cc:2d: f5:bf:26:1f:a1:4d:c4:05:72:a1:de:81:a3:46:e5: 9e:43:5c:c3:31:40:f1:34:9f:b2:52:43:35:fb:c4: d6:5b:16:4b:8d:25:c1:c7:65:93:56:d9:15:bd:23: 83:7b:8b:2f:09:c3:1a:65:08:30:7a:02:f2:da:35: a7:2e:71:2d:9d:dd:09:4b:85:c7:5e:cb:32:28:17: 48:a3:0c:e9:34:81:f5:56:c5:47:10:23:21:04:f7: ef:2d:4c:c4:4c:d2:71:22:db:a7:05:7a:e8:51:56: df:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:6C:89:12:FC:27:5B:45:90:FC:D5:80:12:3E:EF:14:2C:42:C5:60 X509v3 Authority Key Identifier: keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/YGyJEvwnW0WQ_NWAEj7vFCxCxWA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.181.54.0/24 37.140.240.0/24 46.18.106.0/24 62.204.33.0/24 83.138.49.0/24 89.248.64.0/24 91.247.186.0/24 95.130.228.0/24 146.19.41.0/24 146.19.186.0/24 176.126.126.0/24 185.145.232.0/24 185.201.253.0/24 188.244.118.0/24 193.104.183.0/24 193.163.124.0/24 193.228.228.0/24 194.32.105.0/24 194.156.78.0/24 212.52.8.0/24 213.109.158.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:cf:56:89:d2:6f:e4:da:b0:6e:95:64:db:e2:3c:da:26:c9: 4c:c5:9a:08:41:04:d1:8d:30:a7:e1:18:d4:06:a3:f2:f1:46: d3:06:7c:f6:82:d3:f0:27:b9:e9:7a:e2:55:c0:a4:3f:a7:d7: 09:f8:a7:55:d2:5f:c0:9f:e9:c6:6c:cd:61:0f:f4:02:d8:8b: 94:ab:a6:d8:9a:20:01:53:73:fa:89:bf:b8:9b:9c:0e:47:10: a2:34:5d:33:09:53:c6:ad:3c:8d:8f:a9:99:87:47:32:9e:3a: 16:cb:a0:17:08:a8:f4:1e:d1:a0:4f:77:dc:62:14:20:83:b2: 36:e3:cd:7a:87:ca:f9:50:60:c9:54:50:76:f2:e1:92:2b:16: fa:1c:9e:c1:6e:41:68:0b:43:77:35:6e:37:07:9b:b7:dc:63: f0:bd:51:09:4f:f0:90:b6:d5:ee:cb:2e:40:0b:72:08:a1:fb: 63:34:d3:e2:26:67:8f:86:63:84:fb:a7:5e:77:29:de:30:7c: 54:ae:d3:2d:d4:8f:d7:b2:a0:5e:6a:3e:31:67:08:8f:4e:0a: 0e:d9:d7:0c:9c:50:2d:fa:00:5f:e7:60:21:6f:e4:d4:3f:12: 17:17:b4:12:7d:0d:ca:1a:7f:b1:33:ed:5a:8c:67:69:7a:8a: c2:ef:bd:e4 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgISAZt6WzByShYFfr/JjIb7xGa3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkMjk5OTA0MmM1ZTIwMDZiZDVhZWI3YTA1ZGUxZTk2YTVl NzM2NjQwHhcNMjYwMTAxMTYxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MDZjODkxMmZjMjc1YjQ1OTBmY2Q1ODAxMjNlZWYxNDJjNDJjNTYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArM3iVjRFactIdrf0Lnl2KCe1Zd0s cAWmmRiwWbPYEHWYa5dPi+MlfbmMJlmhiWUd3ufZvP6bMYXEZsXA5fXrTo+OFLSn ZJOci/U2sc9UpDpqrvbsJbqepQhf2m3Wiawj8xvqB9Bn4PqbcrK0JqiiiWgD4Ons MrPyF3xXjK6MlPPW1QUSnX0T4m1SVJXR67j3j2x6zC31vyYfoU3EBXKh3oGjRuWe Q1zDMUDxNJ+yUkM1+8TWWxZLjSXBx2WTVtkVvSODe4svCcMaZQgwegLy2jWnLnEt nd0JS4XHXssyKBdIowzpNIH1VsVHECMhBPfvLUzETNJxItunBXroUVbf9wIDAQAB o4IChTCCAoEwHQYDVR0OBBYEFGBsiRL8J1tFkPzVgBI+7xQsQsVgMB8GA1UdIwQY MBaAFA0pmQQsXiAGvVrregXeHpal5zZkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yYzMzMTYtZWZjNy00OTUyLTllZmUt OGMxNTM5NjViYWM5LzEvWUd5SkV2d25XMFdRX05XQUVqN3ZGQ3hDeFdBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8yYzMzMTYtZWZjNy00OTUyLTllZmUtOGMxNTM5NjViYWM5 LzEvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGaBggrBgEFBQcBBwEB/wSBijCBhzCBhAQCAAEwfgMEAAW1 NgMEACWM8AMEAC4SagMEAD7MIQMEAFOKMQMEAFn4QAMEAFv3ugMEAF+C5AMEAJIT KQMEAJITugMEALB+fgMEALmR6AMEALnJ/QMEALz0dgMEAMFotwMEAMGjfAMEAMHk 5AMEAMIgaQMEAMKcTgMEANQ0CAMEANVtnjANBgkqhkiG9w0BAQsFAAOCAQEAHM9W idJv5NqwbpVk2+I82ibJTMWaCEEE0Y0wp+EY1Aaj8vFG0wZ89oLT8Ce56XriVcCk P6fXCfinVdJfwJ/pxmzNYQ/0AtiLlKum2JogAVNz+om/uJucDkcQojRdMwlTxq08 jY+pmYdHMp46FsugFwio9B7RoE933GIUIIOyNuPNeofK+VBgyVRQdvLhkisW+hye wW5BaAtDdzVuNwebt9xj8L1RCU/wkLbV7ssuQAtyCKH7YzTT4iZnj4ZjhPunXncp 3jB8VK7TLdSP17KgXmo+MWcIj04KDtnXDJxQLfoAX+dgIW/k1D8SFxe0En0Nyhp/ sTPtWoxnaXqKwu+95A== -----END CERTIFICATE-----Generated at Mon Jan 19 20:01:02 2026 by rpki-client