This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/YPEYiO-xErz-wj2vMYvzayrdL9Y.roa File: YPEYiO-xErz-wj2vMYvzayrdL9Y.roa (raw, json) Hash identifier: w7sLefZh4hgWkFyZlWPnhqHxiVNTxURw7e8RwM0l+5Q= Subject key identifier: 60:F1:18:88:EF:B1:12:BC:FE:C2:3D:AF:31:8B:F3:6B:2A:DD:2F:D6 Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc Certificate serial: 019BFE543259B481D7C51515DA6ED24A799E Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/YPEYiO-xErz-wj2vMYvzayrdL9Y.roa Signing time: Tue 27 Jan 2026 07:21:29 +0000 ROA not before: Tue 27 Jan 2026 07:21:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24589 IP address blocks: 31.42.80.0/20 maxlen: 20 83.243.88.0/21 maxlen: 21 84.38.136.0/21 maxlen: 21 87.99.64.0/19 maxlen: 19 87.99.64.0/24 maxlen: 24 87.99.65.0/24 maxlen: 24 87.99.66.0/24 maxlen: 24 87.99.67.0/24 maxlen: 24 87.99.95.0/24 maxlen: 24 88.135.128.0/19 maxlen: 19 88.135.128.0/20 maxlen: 20 88.135.144.0/21 maxlen: 21 88.135.156.0/22 maxlen: 22 91.90.224.0/19 maxlen: 29 91.90.225.0/24 maxlen: 24 91.90.230.0/24 maxlen: 24 91.90.231.0/24 maxlen: 24 91.90.236.0/24 maxlen: 24 91.90.237.0/25 maxlen: 25 91.90.238.0/24 maxlen: 24 91.90.252.64/29 maxlen: 29 91.90.255.0/24 maxlen: 24 91.233.214.0/23 maxlen: 23 109.197.208.0/21 maxlen: 21 109.197.208.0/24 maxlen: 24 109.229.192.0/20 maxlen: 20 109.229.208.0/21 maxlen: 21 171.25.218.0/23 maxlen: 23 176.103.176.0/22 maxlen: 22 176.103.184.0/24 maxlen: 24 176.106.48.0/20 maxlen: 20 176.106.100.0/23 maxlen: 23 176.106.160.0/20 maxlen: 20 176.106.176.0/21 maxlen: 21 185.47.10.0/24 maxlen: 24 185.47.11.0/24 maxlen: 24 193.111.244.0/22 maxlen: 22 193.238.212.0/22 maxlen: 22 193.238.212.128/25 maxlen: 25 193.238.216.0/21 maxlen: 21 194.9.212.0/22 maxlen: 22 194.9.212.0/24 maxlen: 24 195.69.88.0/22 maxlen: 22 213.110.64.0/23 maxlen: 23 213.110.76.0/22 maxlen: 22 213.110.80.0/20 maxlen: 20 2a01:8ca0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 29 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fe:54:32:59:b4:81:d7:c5:15:15:da:6e:d2:4a:79:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc Validity Not Before: Jan 27 07:21:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=60f11888efb112bcfec23daf318bf36b2add2fd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:c9:cd:b9:aa:a5:97:b9:f2:b6:14:14:ef:1c: bb:cc:e2:97:f2:30:3f:35:c6:4b:8e:18:80:6b:dd: c9:84:0f:18:45:16:de:e9:7f:2f:93:ef:77:6c:21: 3e:b4:5b:ef:98:da:97:45:fa:84:37:46:df:d8:2b: 7f:cf:b7:8f:15:f5:80:f1:31:87:e1:c6:c8:e4:87: c4:fc:4e:33:22:1c:f2:48:af:a6:c5:74:52:b7:26: 74:98:fe:b5:52:d8:8d:cf:fb:cf:ed:b3:37:8a:75: 71:f6:30:64:66:d0:c1:b6:4f:3b:b3:a7:ba:87:9b: b0:35:83:73:d3:f5:f7:5e:e8:fd:82:76:9b:d1:6b: e7:a6:96:a0:5e:1d:6a:b8:27:f9:64:66:9a:c2:d8: d9:29:8c:b8:01:43:b9:8d:b9:4d:af:42:03:06:96: e9:10:ff:25:2d:93:e1:9f:00:35:81:30:99:f3:04: fa:12:90:eb:70:d0:53:01:69:0d:67:62:12:ee:0e: 4a:bd:6c:68:0f:62:46:7f:dc:dc:db:a7:10:a6:47: eb:c1:a0:ea:43:cf:59:1d:6e:cf:7f:a5:5a:89:01: 08:2e:98:c1:80:59:a7:4d:d0:8f:de:fb:ec:bb:e2: 89:6e:c9:fa:f0:ac:b9:06:72:6a:0d:a3:30:7e:8b: 98:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:F1:18:88:EF:B1:12:BC:FE:C2:3D:AF:31:8B:F3:6B:2A:DD:2F:D6 X509v3 Authority Key Identifier: keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/YPEYiO-xErz-wj2vMYvzayrdL9Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.42.80.0/20 83.243.88.0/21 84.38.136.0/21 87.99.64.0/19 88.135.128.0/19 91.90.224.0/19 91.233.214.0/23 109.197.208.0/21 109.229.192.0-109.229.215.255 171.25.218.0/23 176.103.176.0/22 176.103.184.0/24 176.106.48.0/20 176.106.100.0/23 176.106.160.0-176.106.183.255 185.47.10.0/23 193.111.244.0/22 193.238.212.0-193.238.223.255 194.9.212.0/22 195.69.88.0/22 213.110.64.0/23 213.110.76.0-213.110.95.255 IPv6: 2a01:8ca0::/32 Signature Algorithm: sha256WithRSAEncryption 81:7a:5d:53:3d:f5:11:13:98:ae:8f:0e:eb:2a:b5:f6:55:1a: 05:cd:7f:c8:84:10:08:7f:c1:71:a6:eb:d0:26:bd:19:c8:68: eb:68:ba:3e:81:ae:9e:61:89:1b:f7:60:e2:a8:b3:3d:c7:4e: 08:d2:17:92:74:52:03:95:70:8c:93:aa:05:31:ec:bd:71:87: f5:68:55:3d:7d:85:b1:c2:14:de:0b:e7:b9:22:16:5f:63:7c: 2c:28:44:e8:b4:8c:1a:19:9d:9f:21:8e:06:4f:6c:6b:34:70: 33:4c:6e:b8:fc:94:fb:a2:2c:69:2f:84:51:ab:09:68:6a:7b: b4:68:50:eb:b8:b6:01:5a:be:c9:9c:54:ab:76:1d:75:c2:3c: 33:0a:f8:78:ff:b1:ff:22:91:83:f7:1c:94:9c:98:55:97:3c: db:53:bd:0f:e6:f0:6e:e9:6c:54:5f:88:49:ac:11:0d:ee:ec: 58:e6:3e:7a:80:17:42:61:43:44:0e:f9:72:0d:69:0f:79:30: 52:a9:10:6d:d3:76:7a:b0:e1:83:a4:e4:b9:21:8d:f4:49:bf: a1:ff:dd:14:25:4b:27:e3:3c:47:71:fe:6b:8d:35:33:90:3f: 50:79:42:7c:74:c0:ac:f7:5d:e1:c1:0a:07:ad:3f:97:14:25: f2:b7:64:68 -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZv+VDJZtIHXxRUV2m7SSnmeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4YWRkOWI2NzFmN2EzNmViMjM2N2UzNGZlZTRiY2IxM2I4 ZjY2Y2MwHhcNMjYwMTI3MDcyMTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MGYxMTg4OGVmYjExMmJjZmVjMjNkYWYzMThiZjM2YjJhZGQyZmQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA48nNuaqll7nythQU7xy7zOKX8jA/ NcZLjhiAa93JhA8YRRbe6X8vk+93bCE+tFvvmNqXRfqEN0bf2Ct/z7ePFfWA8TGH 4cbI5IfE/E4zIhzySK+mxXRStyZ0mP61UtiNz/vP7bM3inVx9jBkZtDBtk87s6e6 h5uwNYNz0/X3Xuj9gnab0WvnppagXh1quCf5ZGaawtjZKYy4AUO5jblNr0IDBpbp EP8lLZPhnwA1gTCZ8wT6EpDrcNBTAWkNZ2IS7g5KvWxoD2JGf9zc26cQpkfrwaDq Q89ZHW7Pf6VaiQEILpjBgFmnTdCP3vvsu+KJbsn68Ky5BnJqDaMwfouY3wIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFGDxGIjvsRK8/sI9rzGL82sq3S/WMB8GA1UdIwQY MBaAFIit2bZx96NusjZ+NP7kvLE7j2bMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEt YTFiOTZiOWI3MGY4LzEvWVBFWWlPLXhFcnotd2oydk1ZdnpheXJkTDlZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEtYTFiOTZiOWI3MGY4 LzEvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHQBggrBgEFBQcBBwEB/wSBwDCBvTCBqwQCAAEwgaQDBAQf KlADBANT81gDBANUJogDBAVXY0ADBAVYh4ADBAVbWuADBAFb6dYDBANtxdAwDAME Bm3lwAMEA23l0AMEAasZ2gMEArBnsAMEALBnuAMEBLBqMAMEAbBqZDAMAwQFsGqg AwQDsGqwAwQBuS8KAwQCwW/0MAwDBALB7tQDBAXB7sADBALCCdQDBALDRVgDBAHV bkAwDAMEAtVuTAMEBdVuQDANBAIAAjAHAwUAKgGMoDANBgkqhkiG9w0BAQsFAAOC AQEAgXpdUz31EROYro8O6yq19lUaBc1/yIQQCH/Bcabr0Ca9Gcho62i6PoGunmGJ G/dg4qizPcdOCNIXknRSA5VwjJOqBTHsvXGH9WhVPX2FscIU3gvnuSIWX2N8LChE 6LSMGhmdnyGOBk9sazRwM0xuuPyU+6IsaS+EUasJaGp7tGhQ67i2AVq+yZxUq3Yd dcI8Mwr4eP+x/yKRg/cclJyYVZc821O9D+bwbulsVF+ISawRDe7sWOY+eoAXQmFD RA75cg1pD3kwUqkQbdN2erDhg6TkuSGN9Em/of/dFCVLJ+M8R3H+a401M5A/UHlC fHTArPdd4cEKB60/lxQl8rdkaA== -----END CERTIFICATE-----Generated at Wed Jan 28 07:26:30 2026 by rpki-client