This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/YvO8XpjqdR123-pki8Y2K83Kr8I.roa File: YvO8XpjqdR123-pki8Y2K83Kr8I.roa (raw, json) Hash identifier: VnHtYU8K0lWWvKwLKXL5UAluzd841pXdLH1T2y3y24I= Subject key identifier: 62:F3:BC:5E:98:EA:75:1D:76:DF:EA:64:8B:C6:36:2B:CD:CA:AF:C2 Certificate issuer: /CN=21021b252222997bfe33b7e4b315ac8d5e067954 Certificate serial: 019C0975563477367C4C06F32EFF88EE61DB Authority key identifier: 21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/YvO8XpjqdR123-pki8Y2K83Kr8I.roa Signing time: Thu 29 Jan 2026 11:13:30 +0000 ROA not before: Thu 29 Jan 2026 11:13:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212238 IP address blocks: 45.117.53.0/24 maxlen: 24 45.123.145.0/24 maxlen: 24 203.78.166.0/23 maxlen: 23 205.188.4.0/23 maxlen: 23 205.188.12.0/22 maxlen: 22 205.188.24.0/22 maxlen: 22 205.188.28.0/22 maxlen: 22 205.188.32.0/22 maxlen: 22 205.188.36.0/22 maxlen: 22 205.188.40.0/22 maxlen: 22 205.188.48.0/22 maxlen: 22 205.188.56.0/22 maxlen: 22 205.188.64.0/22 maxlen: 22 205.188.68.0/22 maxlen: 22 205.188.72.0/22 maxlen: 22 205.188.76.0/23 maxlen: 23 205.188.84.0/22 maxlen: 22 205.188.88.0/22 maxlen: 22 205.188.240.0/22 maxlen: 22 205.188.252.0/22 maxlen: 22 2a0d:3900::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 04 Feb 2026 15:22:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:09:75:56:34:77:36:7c:4c:06:f3:2e:ff:88:ee:61:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21021b252222997bfe33b7e4b315ac8d5e067954 Validity Not Before: Jan 29 11:13:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=62f3bc5e98ea751d76dfea648bc6362bcdcaafc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:9a:38:a9:b8:09:3f:78:a9:20:94:26:d2:3b: e7:51:ad:02:28:af:bd:54:93:dc:43:bc:f7:d1:77: 83:5b:1e:5f:7c:12:94:ec:9d:48:40:46:10:80:06: 4a:46:87:9e:30:16:0e:c1:07:8c:60:21:39:3e:c5: cc:81:42:22:c6:94:5a:91:fa:e9:fd:e3:85:94:c2: 94:28:32:7c:7b:d8:dc:05:45:fe:a7:c8:5e:d1:28: d6:10:d3:49:51:32:28:d4:ff:ef:7e:bf:23:00:a5: 81:01:2c:3f:57:8c:96:71:44:b2:78:81:99:64:32: 4d:3d:54:31:c4:3c:2d:39:60:14:c9:e0:89:88:58: 34:9c:67:67:49:b8:47:dc:6e:c7:ee:c0:28:d3:9b: 7c:7c:5d:c9:38:4c:d9:4e:ba:79:f7:0b:0e:6a:ee: 82:b2:3a:f7:10:eb:a0:4a:b4:1d:b6:43:3f:14:08: 3d:63:14:4f:7d:2a:3b:37:65:8b:e2:9e:01:fe:65: b2:4d:fa:ba:d7:b8:b6:ef:f8:24:b5:04:c1:58:bd: a5:a0:2c:81:cb:50:c2:6e:30:aa:88:14:ad:bb:31: b1:ec:d4:d3:dc:35:95:01:e9:bb:ed:77:de:8d:84: ac:a1:ba:73:2b:c3:3c:12:08:2b:3b:49:d1:74:8b: 79:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:F3:BC:5E:98:EA:75:1D:76:DF:EA:64:8B:C6:36:2B:CD:CA:AF:C2 X509v3 Authority Key Identifier: keyid:21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/YvO8XpjqdR123-pki8Y2K83Kr8I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.117.53.0/24 45.123.145.0/24 203.78.166.0/23 205.188.4.0/23 205.188.12.0/22 205.188.24.0-205.188.43.255 205.188.48.0/22 205.188.56.0/22 205.188.64.0-205.188.77.255 205.188.84.0-205.188.91.255 205.188.240.0/22 205.188.252.0/22 IPv6: 2a0d:3900::/29 Signature Algorithm: sha256WithRSAEncryption 05:e9:f4:d4:9e:81:32:e6:be:72:cc:ed:3e:5f:6c:d1:5a:8c: c8:3d:41:30:21:42:43:cd:4e:90:74:24:8c:15:31:c4:70:31: 8c:2f:92:4d:4d:58:f1:41:5f:da:7a:65:55:b4:a3:e0:8d:c0: c0:28:0a:36:61:4a:b8:be:a2:46:d7:b1:17:2b:b4:26:f0:df: 83:a4:8e:84:5b:50:68:50:3f:cd:b1:22:6c:26:36:fd:0e:94: 43:25:66:ae:03:5f:ca:66:43:dc:4b:79:4f:1c:09:38:50:df: 31:b5:18:25:00:f6:2b:b9:d4:83:0d:70:01:aa:66:ed:75:86: c7:b1:64:79:a6:46:e2:bc:5b:f3:f9:6d:9c:26:ff:0d:2d:c5: 46:81:5d:e0:46:28:72:e1:95:c2:a0:90:9a:e2:94:27:0c:18: d2:90:3b:24:43:20:b8:15:10:8b:1e:75:3d:5f:07:4f:52:17: 36:82:a5:32:b3:06:df:a3:f7:fe:e5:90:96:39:ae:1d:83:5c: 7d:ca:db:c2:3c:2d:63:1d:d1:6f:3d:eb:7c:a4:d0:61:7a:1d: 06:88:2a:36:a1:19:69:20:14:93:a4:8e:04:63:de:1a:8e:e0: a5:02:5a:99:92:ca:e7:92:2b:6a:60:4c:69:0f:8d:10:8e:88: 6c:04:d4:d8 -----BEGIN CERTIFICATE----- MIIFZzCCBE+gAwIBAgISAZwJdVY0dzZ8TAbzLv+I7mHbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMDIxYjI1MjIyMjk5N2JmZTMzYjdlNGIzMTVhYzhkNWUw Njc5NTQwHhcNMjYwMTI5MTExMzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MmYzYmM1ZTk4ZWE3NTFkNzZkZmVhNjQ4YmM2MzYyYmNkY2FhZmMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA95o4qbgJP3ipIJQm0jvnUa0CKK+9 VJPcQ7z30XeDWx5ffBKU7J1IQEYQgAZKRoeeMBYOwQeMYCE5PsXMgUIixpRakfrp /eOFlMKUKDJ8e9jcBUX+p8he0SjWENNJUTIo1P/vfr8jAKWBASw/V4yWcUSyeIGZ ZDJNPVQxxDwtOWAUyeCJiFg0nGdnSbhH3G7H7sAo05t8fF3JOEzZTrp59wsOau6C sjr3EOugSrQdtkM/FAg9YxRPfSo7N2WL4p4B/mWyTfq617i27/gktQTBWL2loCyB y1DCbjCqiBStuzGx7NTT3DWVAem77XfejYSsobpzK8M8EggrO0nRdIt59QIDAQAB o4ICczCCAm8wHQYDVR0OBBYEFGLzvF6Y6nUddt/qZIvGNivNyq/CMB8GA1UdIwQY MBaAFCECGyUiIpl7/jO35LMVrI1eBnlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC81OTI5NGMtMGYyNC00MGM1LWI1YzMt NmVhYzYyZTYwZGY3LzEvWXZPOFhwanFkUjEyMy1wa2k4WTJLODNLcjhJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC81OTI5NGMtMGYyNC00MGM1LWI1YzMtNmVhYzYyZTYwZGY3 LzEvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGIBggrBgEFBQcBBwEB/wR5MHcwZgQCAAEwYAMEAC11NQME AC17kQMEActOpgMEAc28BAMEAs28DDAMAwQDzbwYAwQCzbwoAwQCzbwwAwQCzbw4 MAwDBAbNvEADBAHNvEwwDAMEAs28VAMEAs28WAMEAs288AMEAs28/DANBAIAAjAH AwUDKg05ADANBgkqhkiG9w0BAQsFAAOCAQEABen01J6BMua+csztPl9s0VqMyD1B MCFCQ81OkHQkjBUxxHAxjC+STU1Y8UFf2nplVbSj4I3AwCgKNmFKuL6iRtexFyu0 JvDfg6SOhFtQaFA/zbEibCY2/Q6UQyVmrgNfymZD3Et5TxwJOFDfMbUYJQD2K7nU gw1wAapm7XWGx7FkeaZG4rxb8/ltnCb/DS3FRoFd4EYocuGVwqCQmuKUJwwY0pA7 JEMguBUQix51PV8HT1IXNoKlMrMG36P3/uWQljmuHYNcfcrbwjwtYx3Rbz3rfKTQ YXodBogqNqEZaSAUk6SOBGPeGo7gpQJamZLK55IramBMaQ+NEI6IbATU2A== -----END CERTIFICATE-----Generated at Wed Feb 4 00:30:30 2026 by rpki-client