This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/o_YC-Jv8AASDzsSCCW50AzSTP5Y.roa File: o_YC-Jv8AASDzsSCCW50AzSTP5Y.roa (raw, json) Hash identifier: A7gc2Z0AbWWUYELEKT6Vntch2aYN/I7m2iW5/JasCNI= Subject key identifier: A3:F6:02:F8:9B:FC:00:04:83:CE:C4:82:09:6E:74:03:34:93:3F:96 Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d Certificate serial: 019C1D70671660F5095FF7F411F1C3F979F1 Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/o_YC-Jv8AASDzsSCCW50AzSTP5Y.roa Signing time: Mon 02 Feb 2026 08:20:31 +0000 ROA not before: Mon 02 Feb 2026 08:20:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 834 IP address blocks: 62.171.232.0/21 maxlen: 24 62.171.240.0/22 maxlen: 24 62.171.244.0/22 maxlen: 24 62.171.248.0/24 maxlen: 24 194.154.24.0/22 maxlen: 24 194.154.28.0/22 maxlen: 24 194.238.40.0/23 maxlen: 24 194.238.42.0/23 maxlen: 24 194.238.44.0/22 maxlen: 24 194.238.72.0/22 maxlen: 24 194.238.76.0/22 maxlen: 24 194.238.78.0/24 maxlen: 24 194.238.79.0/24 maxlen: 24 194.238.80.0/22 maxlen: 24 194.238.84.0/22 maxlen: 24 194.238.88.0/22 maxlen: 24 194.238.92.0/22 maxlen: 24 213.18.245.0/24 maxlen: 24 217.177.0.0/21 maxlen: 24 217.177.8.0/22 maxlen: 24 217.177.12.0/22 maxlen: 24 217.177.32.0/24 maxlen: 24 217.177.33.0/24 maxlen: 24 217.177.34.0/24 maxlen: 24 217.177.35.0/24 maxlen: 24 217.177.40.0/22 maxlen: 24 217.177.72.0/24 maxlen: 24 217.177.73.0/24 maxlen: 24 217.177.74.0/24 maxlen: 24 217.177.75.0/24 maxlen: 24 217.177.80.0/22 maxlen: 24 217.177.84.0/22 maxlen: 24 217.179.72.0/23 maxlen: 24 217.179.88.0/24 maxlen: 24 217.179.91.0/24 maxlen: 24 217.179.228.0/22 maxlen: 24 217.180.15.0/24 maxlen: 24 217.180.20.0/24 maxlen: 24 217.180.21.0/24 maxlen: 24 217.180.22.0/23 maxlen: 24 217.180.40.0/22 maxlen: 24 217.180.44.0/24 maxlen: 24 217.180.45.0/24 maxlen: 24 217.180.46.0/24 maxlen: 24 217.180.47.0/24 maxlen: 24 217.180.52.0/24 maxlen: 24 217.180.53.0/24 maxlen: 24 217.180.54.0/24 maxlen: 24 217.180.55.0/24 maxlen: 24 217.180.60.0/24 maxlen: 24 217.181.80.0/21 maxlen: 24 217.181.88.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 04 Feb 2026 15:22:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1d:70:67:16:60:f5:09:5f:f7:f4:11:f1:c3:f9:79:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d Validity Not Before: Feb 2 08:20:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a3f602f89bfc000483cec482096e740334933f96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a4:61:44:0d:37:c6:98:f9:32:29:52:f4:ad: 7f:bf:25:ec:4e:00:5a:61:c6:36:9a:0d:00:4f:bb: 1b:6a:46:21:e9:00:69:0a:45:80:3d:9a:76:42:2a: 98:35:4e:bb:2f:64:dd:17:43:2e:a0:a7:a6:e8:ff: 91:52:a9:da:9f:09:8b:c5:ea:a8:3b:c4:86:5e:6d: 06:53:1c:4e:88:ed:5c:ee:e7:03:f6:ec:86:9e:78: d4:a1:3a:f4:57:86:b3:cb:f5:62:88:26:78:6c:7e: 68:b5:f8:1b:33:35:e0:0f:d5:fa:ec:bc:fd:00:4f: 20:1e:56:ec:47:b1:67:76:0b:5c:d0:b6:4a:14:19: a8:dc:cc:62:95:1b:32:1e:db:2c:2c:ae:7c:3c:30: ed:5f:33:b6:c3:57:23:c8:b3:d9:41:72:52:ec:1e: d8:fb:f2:60:d2:56:7a:78:82:d5:fc:d3:2d:f7:c4: be:83:77:44:4d:1b:3e:24:cd:83:b2:f3:8c:a2:40: 84:14:e3:d6:f0:a5:fe:0a:12:3f:4d:b6:ec:4c:81: ea:18:fb:08:f2:2a:b7:30:8d:21:df:c9:bd:82:9b: 25:b4:45:28:95:a6:9e:55:0e:78:af:10:3a:ea:33: cb:2b:42:4f:7f:bb:26:c6:d5:c4:5a:66:fb:fb:72: db:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:F6:02:F8:9B:FC:00:04:83:CE:C4:82:09:6E:74:03:34:93:3F:96 X509v3 Authority Key Identifier: keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/o_YC-Jv8AASDzsSCCW50AzSTP5Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.171.232.0-62.171.248.255 194.154.24.0/21 194.238.40.0/21 194.238.72.0-194.238.95.255 213.18.245.0/24 217.177.0.0/20 217.177.32.0/22 217.177.40.0/22 217.177.72.0/22 217.177.80.0/21 217.179.72.0/23 217.179.88.0/24 217.179.91.0/24 217.179.228.0/22 217.180.15.0/24 217.180.20.0/22 217.180.40.0/21 217.180.52.0/22 217.180.60.0/24 217.181.80.0-217.181.91.255 Signature Algorithm: sha256WithRSAEncryption ad:e0:ff:f0:4e:23:36:60:e4:12:ed:74:88:d1:cf:79:f0:29: 11:79:f1:2a:93:0b:3b:9c:a7:dd:c2:1c:9f:f8:91:e1:54:a8: 34:8f:cb:7a:52:c8:82:04:6a:32:79:c7:13:31:67:e4:14:9a: 37:f2:50:02:9c:60:1b:a0:ac:9c:22:44:0d:ed:69:1d:af:3c: 2b:f0:bb:81:aa:9a:9f:aa:8b:9c:50:97:53:5f:f4:e2:e7:a3: b8:0b:91:31:57:7c:bf:85:74:b7:2e:95:f0:40:bc:ef:f6:7d: 1f:46:86:f9:0a:f3:4d:37:a8:ca:30:85:49:82:70:fc:7a:57: 4c:23:44:55:66:84:59:7e:6c:31:b9:8b:5a:76:f5:ed:62:33: 31:16:4d:c1:8f:6b:af:36:a7:f3:90:08:53:a6:bb:49:9b:da: 6a:c4:49:0f:79:a5:80:27:35:e8:36:ce:47:bc:4f:31:0a:1a: 8a:ec:fd:f7:fb:95:45:f3:5e:49:ca:a5:66:fe:b2:75:f8:19: 66:64:ad:0c:b2:e4:b6:78:a3:d4:7c:0e:b8:89:97:16:80:4e: 8f:6c:7f:a5:1b:a0:8d:4b:b4:ca:0b:b8:df:61:33:27:06:55: 75:b2:aa:57:00:e3:73:56:a2:af:dc:79:52:f4:21:14:97:7c: 4d:89:8a:96 -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgISAZwdcGcWYPUJX/f0EfHD+XnxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhNTgzNmRkZTliOWRhZWYzNWE4YTdmNzRkNjMyNmY2YjQy ZGE3NGQwHhcNMjYwMjAyMDgyMDMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhM2Y2MDJmODliZmMwMDA0ODNjZWM0ODIwOTZlNzQwMzM0OTMzZjk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qRhRA03xpj5MilS9K1/vyXsTgBa YcY2mg0AT7sbakYh6QBpCkWAPZp2QiqYNU67L2TdF0MuoKem6P+RUqnanwmLxeqo O8SGXm0GUxxOiO1c7ucD9uyGnnjUoTr0V4azy/ViiCZ4bH5otfgbMzXgD9X67Lz9 AE8gHlbsR7Fndgtc0LZKFBmo3MxilRsyHtssLK58PDDtXzO2w1cjyLPZQXJS7B7Y +/Jg0lZ6eILV/NMt98S+g3dETRs+JM2DsvOMokCEFOPW8KX+ChI/TbbsTIHqGPsI 8iq3MI0h38m9gpsltEUolaaeVQ54rxA66jPLK0JPf7smxtXEWmb7+3Lb3wIDAQAB o4ICmDCCApQwHQYDVR0OBBYEFKP2Avib/AAEg87EggludAM0kz+WMB8GA1UdIwQY MBaAFGpYNt3pudrvNain901jJva0LadNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWxnMjNlbTUydTgxcUtmM1RXTW05clF0cDAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi84MzgwMzItZGI5Ny00OTdmLThjOTUt YzE5OTQyNzM3ZTZkLzEvb19ZQy1KdjhBQVNEenNTQ0NXNTBBelNUUDVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi84MzgwMzItZGI5Ny00OTdmLThjOTUtYzE5OTQyNzM3ZTZk LzEvYWxnMjNlbTUydTgxcUtmM1RXTW05clF0cDAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGtBggrBgEFBQcBBwEB/wSBnTCBmjCBlwQCAAEwgZAwDAME Az6r6AMEAD6r+AMEA8KaGAMEA8LuKDAMAwQDwu5IAwQFwu5AAwQA1RL1AwQE2bEA AwQC2bEgAwQC2bEoAwQC2bFIAwQD2bFQAwQB2bNIAwQA2bNYAwQA2bNbAwQC2bPk AwQA2bQPAwQC2bQUAwQD2bQoAwQC2bQ0AwQA2bQ8MAwDBATZtVADBALZtVgwDQYJ KoZIhvcNAQELBQADggEBAK3g//BOIzZg5BLtdIjRz3nwKRF58SqTCzucp93CHJ/4 keFUqDSPy3pSyIIEajJ5xxMxZ+QUmjfyUAKcYBugrJwiRA3taR2vPCvwu4Gqmp+q i5xQl1Nf9OLno7gLkTFXfL+FdLculfBAvO/2fR9GhvkK8003qMowhUmCcPx6V0wj RFVmhFl+bDG5i1p29e1iMzEWTcGPa682p/OQCFOmu0mb2mrESQ95pYAnNeg2zke8 TzEKGors/ff7lUXzXknKpWb+snX4GWZkrQyy5LZ4o9R8DriJlxaATo9sf6UboI1L tMoLuN9hMycGVXWyqlcA43NWoq/ceVL0IRSXfE2JipY= -----END CERTIFICATE-----Generated at Wed Feb 4 00:12:48 2026 by rpki-client