This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/ff1078-d196-46a5-a741-ed31e43f1e08/1/ywVzjPA1JlKTUm2ojiiIqywQkjA.roa File: ywVzjPA1JlKTUm2ojiiIqywQkjA.roa (raw, json) Hash identifier: Efr8yAzRIBUZFz+Fjffxu8b2LYG9UYl0V4c7dQtT9tU= Subject key identifier: CB:05:73:8C:F0:35:26:52:93:52:6D:A8:8E:28:88:AB:2C:10:92:30 Certificate issuer: /CN=0cdc07fda6f4d55b7c8182c929a3c4ac3c0a82fd Certificate serial: 019B7CEDE45E7D2FF6DA93BC4BD16F4C8968 Authority key identifier: 0C:DC:07:FD:A6:F4:D5:5B:7C:81:82:C9:29:A3:C4:AC:3C:0A:82:FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNwH_ab01Vt8gYLJKaPErDwKgv0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/ff1078-d196-46a5-a741-ed31e43f1e08/1/ywVzjPA1JlKTUm2ojiiIqywQkjA.roa Signing time: Fri 02 Jan 2026 04:18:43 +0000 ROA not before: Fri 02 Jan 2026 04:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199666 IP address blocks: 146.247.64.0/22 maxlen: 22 146.247.64.0/24 maxlen: 24 146.247.65.0/24 maxlen: 24 146.247.66.0/24 maxlen: 24 146.247.67.0/24 maxlen: 24 146.247.68.0/23 maxlen: 23 146.247.68.0/24 maxlen: 24 146.247.69.0/24 maxlen: 24 146.247.70.0/23 maxlen: 23 146.247.70.0/24 maxlen: 24 185.127.220.0/23 maxlen: 23 185.127.222.0/23 maxlen: 23 2a05:9dc0::/48 maxlen: 48 2a05:9dc0:400::/48 maxlen: 48 2a05:9dc0:410::/48 maxlen: 48 2a05:9dc0:420::/48 maxlen: 48 2a05:9dc0:ffff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/ff1078-d196-46a5-a741-ed31e43f1e08/1/DNwH_ab01Vt8gYLJKaPErDwKgv0.crl rsync://rpki.ripe.net/repository/DEFAULT/75/ff1078-d196-46a5-a741-ed31e43f1e08/1/DNwH_ab01Vt8gYLJKaPErDwKgv0.mft rsync://rpki.ripe.net/repository/DEFAULT/DNwH_ab01Vt8gYLJKaPErDwKgv0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:e4:5e:7d:2f:f6:da:93:bc:4b:d1:6f:4c:89:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0cdc07fda6f4d55b7c8182c929a3c4ac3c0a82fd Validity Not Before: Jan 2 04:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cb05738cf035265293526da88e2888ab2c109230 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:8f:45:46:b4:17:6f:23:fc:54:cb:74:ba:07: f4:fc:ce:72:e3:07:fd:02:f7:44:a2:56:0f:b3:e7: 4a:22:6a:21:83:29:12:2d:a1:f4:71:49:4f:77:13: f3:72:72:a4:74:f6:34:6f:f6:b5:9a:f0:3c:a3:37: 40:d0:a1:3d:98:7b:61:70:13:39:98:37:1f:c5:2f: 5d:68:1c:b4:8f:7c:f4:a6:6a:c9:d8:20:fe:25:77: 20:2e:73:e9:4c:4b:8e:44:ef:eb:81:20:24:8a:b3: f6:d7:95:3a:f2:8e:53:a2:16:37:5e:a4:96:d1:3d: 79:19:52:d5:d1:44:d8:0a:e4:c5:4b:ba:a4:1f:3c: a1:1c:c5:01:a3:8a:59:ee:dd:b7:14:0d:a7:9f:01: c2:04:d1:e0:52:29:db:08:d4:b8:57:76:9b:c8:bc: a4:1d:1b:6f:c8:f9:45:d0:ee:de:92:e2:9f:29:4e: c3:e7:af:08:7e:f3:48:50:3f:b4:a2:b2:d7:34:22: 8d:2e:ef:1f:7c:88:54:ac:d5:e8:44:e0:71:c5:aa: b3:f8:06:3d:31:ea:f2:4a:2e:23:5b:27:24:9d:4a: f5:ad:bc:68:78:20:69:2f:83:2a:e9:22:94:2f:82: f9:ac:78:63:8d:0c:51:0b:fd:7b:f3:1a:9a:f4:24: 18:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:05:73:8C:F0:35:26:52:93:52:6D:A8:8E:28:88:AB:2C:10:92:30 X509v3 Authority Key Identifier: keyid:0C:DC:07:FD:A6:F4:D5:5B:7C:81:82:C9:29:A3:C4:AC:3C:0A:82:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNwH_ab01Vt8gYLJKaPErDwKgv0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/ff1078-d196-46a5-a741-ed31e43f1e08/1/ywVzjPA1JlKTUm2ojiiIqywQkjA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/ff1078-d196-46a5-a741-ed31e43f1e08/1/DNwH_ab01Vt8gYLJKaPErDwKgv0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.247.64.0/21 185.127.220.0/22 IPv6: 2a05:9dc0::/48 2a05:9dc0:400::/48 2a05:9dc0:410::/48 2a05:9dc0:420::/48 2a05:9dc0:ffff::/48 Signature Algorithm: sha256WithRSAEncryption 13:7c:b3:10:93:60:da:4a:a6:8c:36:ce:44:55:92:c5:85:f6: c2:95:a4:c4:5f:ab:af:7f:e6:83:0d:11:71:57:9f:45:e3:49: 7d:3f:2b:e2:35:f2:5d:db:f6:59:62:21:4b:d2:66:e6:43:8e: ab:a2:71:f5:fc:1d:cc:33:ba:21:a5:4d:07:b1:9d:db:ad:f2: a5:c1:1c:1c:f2:8b:13:97:f6:33:b4:96:bd:1b:d7:12:1a:f6: a5:fa:1e:f6:ea:ee:3b:d0:26:11:12:9f:6f:ca:51:e6:b5:c7: 25:e5:b5:a5:4f:00:85:c7:92:bb:57:14:1d:cd:a4:9b:34:f0: f0:40:a6:7e:ba:c8:dc:de:25:6d:68:63:8c:95:20:2c:d3:86: 0e:e1:0c:cd:a5:70:30:f2:f5:46:43:50:31:59:61:22:cf:7e: 40:77:7d:9e:16:ae:ba:1c:fe:93:a8:87:f8:a1:5e:d1:44:c8: 06:af:e5:12:a5:6a:a7:f3:32:97:c4:30:57:da:63:76:f5:59: 24:c4:ee:99:8f:fc:3f:d1:dc:29:01:58:af:72:9b:e0:1c:05: 6a:6f:15:99:f5:b7:04:9c:ab:70:44:94:4e:cb:fe:5b:42:89: 5a:83:97:b6:de:4f:e3:5b:11:03:46:ee:4e:da:20:be:3b:24: 3c:ee:9d:c0 -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgISAZt87eRefS/22pO8S9FvTIloMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZGMwN2ZkYTZmNGQ1NWI3YzgxODJjOTI5YTNjNGFjM2Mw YTgyZmQwHhcNMjYwMTAyMDQxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYjA1NzM4Y2YwMzUyNjUyOTM1MjZkYTg4ZTI4ODhhYjJjMTA5MjMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA049FRrQXbyP8VMt0ugf0/M5y4wf9 AvdEolYPs+dKImohgykSLaH0cUlPdxPzcnKkdPY0b/a1mvA8ozdA0KE9mHthcBM5 mDcfxS9daBy0j3z0pmrJ2CD+JXcgLnPpTEuORO/rgSAkirP215U68o5TohY3XqSW 0T15GVLV0UTYCuTFS7qkHzyhHMUBo4pZ7t23FA2nnwHCBNHgUinbCNS4V3abyLyk HRtvyPlF0O7ekuKfKU7D568IfvNIUD+0orLXNCKNLu8ffIhUrNXoROBxxaqz+AY9 MerySi4jWycknUr1rbxoeCBpL4Mq6SKUL4L5rHhjjQxRC/178xqa9CQYAQIDAQAB o4ICRDCCAkAwHQYDVR0OBBYEFMsFc4zwNSZSk1JtqI4oiKssEJIwMB8GA1UdIwQY MBaAFAzcB/2m9NVbfIGCySmjxKw8CoL9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE53SF9hYjAxVnQ4Z1lMSkthUEVyRHdLZ3YwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9mZjEwNzgtZDE5Ni00NmE1LWE3NDEt ZWQzMWU0M2YxZTA4LzEveXdWempQQTFKbEtUVW0yb2ppaUlxeXdRa2pBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS9mZjEwNzgtZDE5Ni00NmE1LWE3NDEtZWQzMWU0M2YxZTA4 LzEvRE53SF9hYjAxVnQ4Z1lMSkthUEVyRHdLZ3YwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFoGCCsGAQUFBwEHAQH/BEswSTASBAIAATAMAwQDkvdAAwQC uX/cMDMEAgACMC0DBwAqBZ3AAAADBwAqBZ3ABAADBwAqBZ3ABBADBwAqBZ3ABCAD BwAqBZ3A//8wDQYJKoZIhvcNAQELBQADggEBABN8sxCTYNpKpow2zkRVksWF9sKV pMRfq69/5oMNEXFXn0XjSX0/K+I18l3b9lliIUvSZuZDjquicfX8HcwzuiGlTQex ndut8qXBHBzyixOX9jO0lr0b1xIa9qX6Hvbq7jvQJhESn2/KUea1xyXltaVPAIXH krtXFB3NpJs08PBApn66yNzeJW1oY4yVICzThg7hDM2lcDDy9UZDUDFZYSLPfkB3 fZ4Wrroc/pOoh/ihXtFEyAav5RKlaqfzMpfEMFfaY3b1WSTE7pmP/D/R3CkBWK9y m+AcBWpvFZn1twScq3BElE7L/ltCiVqDl7beT+NbEQNG7k7aIL47JDzuncA= -----END CERTIFICATE-----Generated at Mon Feb 9 23:04:02 2026 by rpki-client