This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/_yVAzxjl24FDV96xUTvvk5gkA0E.roa File: _yVAzxjl24FDV96xUTvvk5gkA0E.roa (raw, json) Hash identifier: NnUbDVKOcYmx2Wqw1jJxZj2hDVC/77z7H8jrmJ3lYSk= Subject key identifier: FF:25:40:CF:18:E5:DB:81:43:57:DE:B1:51:3B:EF:93:98:24:03:41 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B7A5A9556428891B89299DFAF973BEA6D Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/_yVAzxjl24FDV96xUTvvk5gkA0E.roa Signing time: Thu 01 Jan 2026 16:18:35 +0000 ROA not before: Thu 01 Jan 2026 16:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8851 IP address blocks: 37.98.144.0/21 maxlen: 24 37.98.144.0/22 maxlen: 24 37.252.24.0/21 maxlen: 24 77.93.128.0/19 maxlen: 24 77.107.64.0/18 maxlen: 24 79.99.72.0/21 maxlen: 24 79.99.144.0/21 maxlen: 24 80.240.80.0/20 maxlen: 24 81.5.128.0/18 maxlen: 24 81.168.0.0/17 maxlen: 24 82.152.0.0/15 maxlen: 24 82.152.0.0/16 maxlen: 24 82.163.0.0/19 maxlen: 24 85.159.128.0/21 maxlen: 24 89.28.232.0/21 maxlen: 24 89.31.232.0/21 maxlen: 24 89.213.48.0/20 maxlen: 24 89.213.64.0/18 maxlen: 24 89.213.192.0/18 maxlen: 24 95.130.96.0/21 maxlen: 24 109.176.0.0/16 maxlen: 24 158.255.8.0/21 maxlen: 24 185.20.32.0/22 maxlen: 24 185.20.34.0/24 maxlen: 24 185.20.35.0/24 maxlen: 24 185.24.84.0/24 maxlen: 24 185.24.86.0/23 maxlen: 24 185.101.44.0/22 maxlen: 24 193.27.212.0/23 maxlen: 24 194.105.64.0/19 maxlen: 24 195.128.138.0/24 maxlen: 24 212.38.64.0/19 maxlen: 24 213.130.128.0/19 maxlen: 24 213.152.32.0/19 maxlen: 24 213.210.0.0/18 maxlen: 24 213.218.208.0/20 maxlen: 24 213.218.224.0/19 maxlen: 24 217.144.144.0/20 maxlen: 24 217.145.64.0/20 maxlen: 24 2001:1a90::/32 maxlen: 48 2a00:c60::/32 maxlen: 48 2a00:1c40::/29 maxlen: 48 2a02:21f8::/32 maxlen: 48 2a02:6f80::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 07:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:95:56:42:88:91:b8:92:99:df:af:97:3b:ea:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 1 16:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ff2540cf18e5db814357deb1513bef9398240341 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:d5:4e:b5:f0:c5:88:9b:a4:e7:84:f9:fa:e0: 8e:50:0c:b1:0d:41:47:f6:d5:72:c4:2b:4e:97:44: 30:c5:42:db:73:a4:38:28:97:a6:0f:8b:93:e5:5c: de:9e:00:fd:cb:74:7a:3b:47:22:df:0c:87:17:69: 73:a8:d6:5f:53:3f:de:26:36:7c:dc:d8:e1:b1:a8: 1f:06:ec:3a:b0:23:c5:7a:ad:07:7d:88:17:c0:b0: 67:c2:88:7c:0e:1c:bf:a3:32:23:65:c6:54:f5:7f: b7:aa:02:e8:69:81:4f:64:17:13:76:6a:ef:24:44: ba:b7:5a:b0:e9:f1:b8:1a:94:5e:4d:8b:42:18:f9: b7:b7:68:f1:60:67:2c:2a:b5:cf:eb:a2:96:2e:57: 6f:f6:22:48:a2:2d:40:7d:fe:f8:71:a9:38:5b:71: 43:16:95:99:d1:79:0b:eb:c6:db:c0:14:57:2f:de: 91:bb:63:13:7f:a1:9f:7b:71:a5:3c:03:fc:db:c4: e8:22:f6:26:0a:f3:ae:12:6f:f4:d7:1f:96:af:62: 5f:00:ca:3e:e2:91:48:30:67:97:7d:d2:90:33:ad: 39:d8:12:91:1d:2d:e5:04:0f:9b:d7:25:32:12:d0: dc:89:e0:5f:4a:45:ea:bc:4c:fb:aa:26:3b:89:e6: 99:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:25:40:CF:18:E5:DB:81:43:57:DE:B1:51:3B:EF:93:98:24:03:41 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/_yVAzxjl24FDV96xUTvvk5gkA0E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.98.144.0/21 37.252.24.0/21 77.93.128.0/19 77.107.64.0/18 79.99.72.0/21 79.99.144.0/21 80.240.80.0/20 81.5.128.0/18 81.168.0.0/17 82.152.0.0/15 82.163.0.0/19 85.159.128.0/21 89.28.232.0/21 89.31.232.0/21 89.213.48.0-89.213.127.255 89.213.192.0/18 95.130.96.0/21 109.176.0.0/16 158.255.8.0/21 185.20.32.0/22 185.24.84.0/24 185.24.86.0/23 185.101.44.0/22 193.27.212.0/23 194.105.64.0/19 195.128.138.0/24 212.38.64.0/19 213.130.128.0/19 213.152.32.0/19 213.210.0.0/18 213.218.208.0-213.218.255.255 217.144.144.0/20 217.145.64.0/20 IPv6: 2001:1a90::/32 2a00:c60::/32 2a00:1c40::/29 2a02:21f8::/32 2a02:6f80::/29 Signature Algorithm: sha256WithRSAEncryption a6:56:27:1a:97:3c:1e:d1:06:86:03:94:17:ed:27:0c:a0:86: d8:cf:01:bc:08:61:f6:07:fa:29:86:37:f8:e3:c8:29:d0:da: bd:49:1e:33:2a:3c:6d:e2:28:22:58:fe:bf:9c:be:2e:b8:24: b9:03:0a:11:7b:0d:66:c6:06:b3:87:cc:7a:cd:b1:58:ff:5c: 4f:14:a9:0c:6e:31:e8:d3:69:51:d7:43:49:57:4c:4c:98:44: df:0e:ea:ce:ef:dc:12:76:85:82:81:02:04:1d:e6:6a:87:5e: 62:24:de:c0:d1:ef:d9:22:35:42:9a:07:b6:27:90:ee:10:31: a2:d1:3e:2e:0e:74:39:56:89:c0:f8:ea:4f:01:f5:de:d8:c4: 64:60:c9:68:1c:25:e7:e9:4a:dd:41:94:41:5d:ce:54:3a:e0: 06:80:9e:d5:10:ca:bd:b3:56:ce:6b:4c:57:92:68:50:aa:ff: 81:b3:40:b3:16:90:50:d5:ba:32:79:dc:e0:14:c1:ba:7b:f1: da:36:07:78:b6:e4:5f:99:d1:69:4d:ad:21:8a:15:99:a0:23: 52:bc:a8:24:60:bb:76:cf:96:6d:dd:01:7d:47:c8:1f:c0:dc: ac:b8:94:7e:a8:31:56:eb:2d:ce:fa:95:f8:b3:80:46:ab:1b: 93:5e:5a:92 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgISAZt6WpVWQoiRuJKZ36+XO+ptMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTAxMTYxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZjI1NDBjZjE4ZTVkYjgxNDM1N2RlYjE1MTNiZWY5Mzk4MjQwMzQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1tVOtfDFiJuk54T5+uCOUAyxDUFH 9tVyxCtOl0QwxULbc6Q4KJemD4uT5VzengD9y3R6O0ci3wyHF2lzqNZfUz/eJjZ8 3NjhsagfBuw6sCPFeq0HfYgXwLBnwoh8Dhy/ozIjZcZU9X+3qgLoaYFPZBcTdmrv JES6t1qw6fG4GpReTYtCGPm3t2jxYGcsKrXP66KWLldv9iJIoi1Aff74cak4W3FD FpWZ0XkL68bbwBRXL96Ru2MTf6Gfe3GlPAP828ToIvYmCvOuEm/01x+Wr2JfAMo+ 4pFIMGeXfdKQM6052BKRHS3lBA+b1yUyEtDcieBfSkXqvEz7qiY7ieaZnwIDAQAB o4IDCTCCAwUwHQYDVR0OBBYEFP8lQM8Y5duBQ1fesVE775OYJANBMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvX3lWQXp4amwyNEZEVjk2eFVUdnZrNWdrQTBFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBHQYIKwYBBQUHAQcBAf8EggEMMIIBCDCB2gQCAAEwgdMD BAMlYpADBAMl/BgDBAVNXYADBAZNa0ADBANPY0gDBANPY5ADBARQ8FADBAZRBYAD BAdRqAADAwFSmAMEBVKjAAMEA1WfgAMEA1kc6AMEA1kf6DAMAwQEWdUwAwQHWdUA AwQGWdXAAwQDX4JgAwMAbbADBAOe/wgDBAK5FCADBAC5GFQDBAG5GFYDBAK5ZSwD BAHBG9QDBAXCaUADBADDgIoDBAXUJkADBAXVgoADBAXVmCADBAbV0gAwCwMEBNXa 0AMDANXaAwQE2ZCQAwQE2ZFAMCkEAgACMCMDBQAgARqQAwUAKgAMYAMFAyoAHEAD BQAqAiH4AwUDKgJvgDANBgkqhkiG9w0BAQsFAAOCAQEAplYnGpc8HtEGhgOUF+0n DKCG2M8BvAhh9gf6KYY3+OPIKdDavUkeMyo8beIoIlj+v5y+LrgkuQMKEXsNZsYG s4fMes2xWP9cTxSpDG4x6NNpUddDSVdMTJhE3w7qzu/cEnaFgoECBB3maodeYiTe wNHv2SI1QpoHtieQ7hAxotE+Lg50OVaJwPjqTwH13tjEZGDJaBwl5+lK3UGUQV3O VDrgBoCe1RDKvbNWzmtMV5JoUKr/gbNAsxaQUNW6Mnnc4BTBunvx2jYHeLbkX5nR aU2tIYoVmaAjUryoJGC7ds+Wbd0BfUfIH8DcrLiUfqgxVustzvqV+LOARqsbk15a kg== -----END CERTIFICATE-----Generated at Fri Jan 23 13:43:42 2026 by rpki-client