This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/iqYL2zzMQPfhGjIacD_NfVTPKkM.roa File: iqYL2zzMQPfhGjIacD_NfVTPKkM.roa (raw, json) Hash identifier: pEX/xfc3zY65a6Nx0y4zpndnGzkl2oE2LxlOjkNAcy8= Subject key identifier: 8A:A6:0B:DB:3C:CC:40:F7:E1:1A:32:1A:70:3F:CD:7D:54:CF:2A:43 Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c Certificate serial: 019B7AC79984DA1081EB0E3B011998ACEB3E Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/iqYL2zzMQPfhGjIacD_NfVTPKkM.roa Signing time: Thu 01 Jan 2026 18:17:39 +0000 ROA not before: Thu 01 Jan 2026 18:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62240 IP address blocks: 31.41.38.0/24 maxlen: 24 31.41.39.0/24 maxlen: 24 45.11.25.0/24 maxlen: 24 45.133.219.0/24 maxlen: 24 45.137.52.0/24 maxlen: 24 45.137.55.0/24 maxlen: 24 45.137.191.0/24 maxlen: 24 45.139.28.0/24 maxlen: 24 45.139.31.0/24 maxlen: 24 45.140.171.0/24 maxlen: 24 45.145.2.0/24 maxlen: 24 45.145.90.0/24 maxlen: 24 45.145.161.0/24 maxlen: 24 45.149.80.0/24 maxlen: 24 45.149.81.0/24 maxlen: 24 45.149.82.0/24 maxlen: 24 45.149.134.0/24 maxlen: 24 45.150.62.0/24 maxlen: 24 45.150.63.0/24 maxlen: 24 45.152.227.0/24 maxlen: 24 77.83.4.0/24 maxlen: 24 77.83.5.0/24 maxlen: 24 77.83.6.0/24 maxlen: 24 77.83.7.0/24 maxlen: 24 185.179.198.0/24 maxlen: 24 194.156.95.0/24 maxlen: 24 195.245.111.0/24 maxlen: 24 213.139.192.0/24 maxlen: 24 213.139.193.0/24 maxlen: 24 213.139.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:99:84:da:10:81:eb:0e:3b:01:19:98:ac:eb:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c Validity Not Before: Jan 1 18:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8aa60bdb3ccc40f7e11a321a703fcd7d54cf2a43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:3a:da:82:8f:5c:fb:b9:9b:e7:98:56:d9:f8: 19:d0:ad:a1:d3:1c:1c:96:b9:2c:87:a2:85:e2:32: 20:0a:fa:d4:d5:35:cd:8b:fa:09:27:be:f2:08:0a: 84:e8:cf:93:d5:05:f8:3c:bc:fb:f5:10:4c:44:aa: d5:ac:78:e1:78:6f:31:a9:49:20:aa:93:ee:89:15: 96:9a:a2:e7:19:17:1a:4e:45:61:71:5b:93:a8:01: 96:6f:ce:fa:b6:41:2e:30:92:2c:0d:9d:6f:e7:a4: 52:4b:71:09:6e:70:a2:ac:cb:56:33:37:e4:f2:4a: 91:e5:ad:23:44:1f:5f:74:38:0b:37:22:55:36:c1: 72:fe:f2:4f:06:a9:3f:72:ad:f9:19:35:45:26:2a: c3:50:45:3b:07:b4:74:d1:03:4e:43:09:39:1f:8d: f8:95:9b:33:7b:f3:cc:7c:a2:09:2f:1a:c2:d3:1a: 80:1c:c5:f8:b3:11:01:45:9e:27:19:b3:71:ce:1a: a7:e0:5c:22:72:0e:a1:a2:9b:39:bc:7b:66:02:7c: 01:b9:54:9e:a3:86:40:6b:70:af:9f:c8:3c:0b:04: ca:78:5b:93:de:f1:b0:43:47:ad:e6:ac:8b:f2:fb: 11:97:6a:bc:92:ea:f9:2d:3c:03:94:17:eb:0f:91: 86:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:A6:0B:DB:3C:CC:40:F7:E1:1A:32:1A:70:3F:CD:7D:54:CF:2A:43 X509v3 Authority Key Identifier: keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/iqYL2zzMQPfhGjIacD_NfVTPKkM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.41.38.0/23 45.11.25.0/24 45.133.219.0/24 45.137.52.0/24 45.137.55.0/24 45.137.191.0/24 45.139.28.0/24 45.139.31.0/24 45.140.171.0/24 45.145.2.0/24 45.145.90.0/24 45.145.161.0/24 45.149.80.0-45.149.82.255 45.149.134.0/24 45.150.62.0/23 45.152.227.0/24 77.83.4.0/22 185.179.198.0/24 194.156.95.0/24 195.245.111.0/24 213.139.192.0/23 213.139.195.0/24 Signature Algorithm: sha256WithRSAEncryption 55:dc:c6:62:c4:07:29:13:bd:6b:7f:14:86:20:79:58:8a:fd: ec:e9:8c:5c:02:97:e5:8c:6a:87:54:aa:18:fe:2b:61:31:3f: b2:f5:0e:16:ed:9c:6b:9d:a5:1f:e2:83:75:21:03:91:9e:67: ed:a9:79:37:5c:50:06:33:f4:84:f4:2f:df:bf:6c:d9:df:e5: ed:06:0f:4a:e5:ff:d0:99:5c:ed:be:6f:1c:bc:0a:40:39:4f: a2:cf:71:49:0c:c6:3b:87:b0:c2:dc:b0:ef:39:44:6c:7c:81: 8f:90:c6:2a:b3:29:bf:bf:0b:ce:98:3b:8a:0d:d4:33:3f:40: 7e:d1:75:1b:cf:39:93:ac:1f:1f:2c:81:e4:1f:88:c4:4d:65: 85:a3:ae:22:e8:8f:18:db:fc:56:6a:b6:2d:89:37:e7:06:e9: ad:e9:e2:ab:d9:d8:89:3b:d0:98:34:96:de:ae:2d:b9:45:43: 7f:15:dd:0b:f0:8a:9c:b2:f8:60:8e:ef:d2:86:bf:6a:9a:4a: 00:bb:65:7b:dd:5f:30:29:0c:dc:63:68:7a:2d:02:af:06:4f: c5:53:3e:0c:39:08:0e:b3:db:d5:0c:76:a4:86:5a:89:fd:59: 08:85:d9:6e:55:9d:65:62:d5:b5:12:63:c9:46:0b:85:8e:c0: 46:73:a3:78 -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgISAZt6x5mE2hCB6w47ARmYrOs+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyMjJlMWMyYTUzMTUzMzRiNjZkODBmNzhkNWI1MGI0MmU0 ODBiOWMwHhcNMjYwMTAxMTgxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YWE2MGJkYjNjY2M0MGY3ZTExYTMyMWE3MDNmY2Q3ZDU0Y2YyYTQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDrago9c+7mb55hW2fgZ0K2h0xwc lrksh6KF4jIgCvrU1TXNi/oJJ77yCAqE6M+T1QX4PLz79RBMRKrVrHjheG8xqUkg qpPuiRWWmqLnGRcaTkVhcVuTqAGWb876tkEuMJIsDZ1v56RSS3EJbnCirMtWMzfk 8kqR5a0jRB9fdDgLNyJVNsFy/vJPBqk/cq35GTVFJirDUEU7B7R00QNOQwk5H434 lZsze/PMfKIJLxrC0xqAHMX4sxEBRZ4nGbNxzhqn4Fwicg6hops5vHtmAnwBuVSe o4ZAa3Cvn8g8CwTKeFuT3vGwQ0et5qyL8vsRl2q8kur5LTwDlBfrD5GGsQIDAQAB o4IClDCCApAwHQYDVR0OBBYEFIqmC9s8zED34RoyGnA/zX1UzypDMB8GA1UdIwQY MBaAFGIi4cKlMVM0tm2A941bULQuSAucMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEt NTczNzAxYzg0ODMzLzEvaXFZTDJ6ek1RUGZoR2pJYWNEX05mVlRQS2tNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEtNTczNzAxYzg0ODMz LzEvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGpBggrBgEFBQcBBwEB/wSBmTCBljCBkwQCAAEwgYwDBAEf KSYDBAAtCxkDBAAthdsDBAAtiTQDBAAtiTcDBAAtib8DBAAtixwDBAAtix8DBAAt jKsDBAAtkQIDBAAtkVoDBAAtkaEwDAMEBC2VUAMEAC2VUgMEAC2VhgMEAS2WPgME AC2Y4wMEAk1TBAMEALmzxgMEAMKcXwMEAMP1bwMEAdWLwAMEANWLwzANBgkqhkiG 9w0BAQsFAAOCAQEAVdzGYsQHKRO9a38UhiB5WIr97OmMXAKX5Yxqh1SqGP4rYTE/ svUOFu2ca52lH+KDdSEDkZ5n7al5N1xQBjP0hPQv379s2d/l7QYPSuX/0Jlc7b5v HLwKQDlPos9xSQzGO4ewwtyw7zlEbHyBj5DGKrMpv78Lzpg7ig3UMz9AftF1G885 k6wfHyyB5B+IxE1lhaOuIuiPGNv8Vmq2LYk35wbpreniq9nYiTvQmDSW3q4tuUVD fxXdC/CKnLL4YI7v0oa/appKALtle91fMCkM3GNoei0CrwZPxVM+DDkIDrPb1Qx2 pIZaif1ZCIXZblWdZWLVtRJjyUYLhY7ARnOjeA== -----END CERTIFICATE-----Generated at Mon Jan 19 20:34:56 2026 by rpki-client