This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/YsJlOYOAHEUO6gKdvv1kjOZl6dg.roa File: YsJlOYOAHEUO6gKdvv1kjOZl6dg.roa (raw, json) Hash identifier: fZFrqWVP5G6ODPOomsfz5c7xAcmQ/0omHKW+Ct1NSys= Subject key identifier: 62:C2:65:39:83:80:1C:45:0E:EA:02:9D:BE:FD:64:8C:E6:65:E9:D8 Certificate issuer: /CN=1795ac843cd8ba90188f7313652bb561299b296f Certificate serial: 019C0D82A0C26D6D75A5D10DEC034F8E92F2 Authority key identifier: 17:95:AC:84:3C:D8:BA:90:18:8F:73:13:65:2B:B5:61:29:9B:29:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5WshDzYupAYj3MTZSu1YSmbKW8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/YsJlOYOAHEUO6gKdvv1kjOZl6dg.roa Signing time: Fri 30 Jan 2026 06:06:30 +0000 ROA not before: Fri 30 Jan 2026 06:06:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31313 IP address blocks: 85.136.116.0/22 maxlen: 24 85.136.116.0/24 maxlen: 24 85.136.117.0/24 maxlen: 24 85.136.118.0/24 maxlen: 24 85.136.119.0/24 maxlen: 24 86.105.108.0/22 maxlen: 24 86.105.216.0/22 maxlen: 24 89.35.192.0/24 maxlen: 24 89.41.56.0/23 maxlen: 24 89.42.116.0/23 maxlen: 24 89.43.190.0/23 maxlen: 24 89.124.128.0/18 maxlen: 24 89.124.192.0/19 maxlen: 24 89.200.246.0/23 maxlen: 24 89.200.247.0/24 maxlen: 24 91.235.4.0/23 maxlen: 24 93.113.29.0/24 maxlen: 24 130.195.57.0/24 maxlen: 24 176.126.252.0/22 maxlen: 24 176.126.252.0/24 maxlen: 24 176.126.253.0/24 maxlen: 24 176.126.254.0/24 maxlen: 24 176.126.255.0/24 maxlen: 24 185.57.80.0/22 maxlen: 24 185.57.80.0/24 maxlen: 24 185.57.81.0/24 maxlen: 24 185.57.82.0/24 maxlen: 24 185.57.83.0/24 maxlen: 24 185.233.148.0/22 maxlen: 24 185.233.148.0/24 maxlen: 24 185.233.149.0/24 maxlen: 24 185.233.150.0/24 maxlen: 24 185.233.151.0/24 maxlen: 24 193.151.28.0/22 maxlen: 24 193.169.21.0/24 maxlen: 24 195.242.244.0/22 maxlen: 24 203.25.143.0/24 maxlen: 24 213.177.0.0/19 maxlen: 24 213.177.0.0/21 maxlen: 21 213.177.8.0/21 maxlen: 21 213.177.16.0/21 maxlen: 21 213.177.24.0/21 maxlen: 21 2a00:5dc0::/29 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.mft rsync://rpki.ripe.net/repository/DEFAULT/F5WshDzYupAYj3MTZSu1YSmbKW8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:0d:82:a0:c2:6d:6d:75:a5:d1:0d:ec:03:4f:8e:92:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1795ac843cd8ba90188f7313652bb561299b296f Validity Not Before: Jan 30 06:06:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=62c2653983801c450eea029dbefd648ce665e9d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:2e:f1:b0:9e:6b:46:a9:da:24:7a:b0:56:02: 86:a6:02:ee:42:55:79:9f:0c:8d:8a:e8:99:80:dc: 90:f6:ff:66:a8:ce:18:3d:f9:84:57:ae:8f:2d:0b: 60:7f:1c:43:d1:9c:cf:11:1a:c7:ce:28:ea:05:53: f3:c3:a1:64:f8:90:0a:cd:ed:3b:8d:db:bf:50:c3: f8:2e:13:29:31:80:8a:0d:07:3e:e1:10:38:17:87: 49:ec:29:2f:b5:cb:24:fa:1c:ad:05:21:a7:32:92: 40:1d:1f:e0:d8:64:3d:09:b4:4e:21:08:7a:43:04: e9:e4:34:d9:0c:bd:28:df:59:eb:d2:c2:0a:14:6a: 05:ee:91:ec:93:ff:7b:19:b8:de:cf:a0:a1:3c:1f: 78:2a:5a:3d:0c:79:4f:2c:dd:75:c8:ce:18:d0:07: b6:3e:d3:e1:13:0c:aa:fd:ae:25:0e:d0:3d:2d:4b: 5a:72:2c:14:fc:53:d5:44:00:a5:34:d1:14:f6:15: b9:7a:63:18:8f:e2:78:08:cf:b7:93:81:01:60:04: e9:33:fb:75:75:e7:df:79:9e:2b:98:7f:29:ea:16: 59:b2:41:fe:ae:e4:75:02:5e:26:13:84:ef:de:ac: 8e:d1:1d:a0:fa:ae:c4:f7:8a:38:c3:bb:68:a6:fc: b3:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:C2:65:39:83:80:1C:45:0E:EA:02:9D:BE:FD:64:8C:E6:65:E9:D8 X509v3 Authority Key Identifier: keyid:17:95:AC:84:3C:D8:BA:90:18:8F:73:13:65:2B:B5:61:29:9B:29:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5WshDzYupAYj3MTZSu1YSmbKW8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/YsJlOYOAHEUO6gKdvv1kjOZl6dg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.136.116.0/22 86.105.108.0/22 86.105.216.0/22 89.35.192.0/24 89.41.56.0/23 89.42.116.0/23 89.43.190.0/23 89.124.128.0-89.124.223.255 89.200.246.0/23 91.235.4.0/23 93.113.29.0/24 130.195.57.0/24 176.126.252.0/22 185.57.80.0/22 185.233.148.0/22 193.151.28.0/22 193.169.21.0/24 195.242.244.0/22 203.25.143.0/24 213.177.0.0/19 IPv6: 2a00:5dc0::/29 Signature Algorithm: sha256WithRSAEncryption 5b:7e:20:25:c0:1e:7c:14:80:cd:99:10:61:2e:fb:b0:13:9e: bb:2e:b8:4d:5b:f2:4d:18:e4:ff:fc:a8:ef:ec:9b:89:20:ee: 86:da:ef:ce:2b:14:5b:66:4c:d6:05:63:b5:b5:4f:c3:d4:42: a5:52:6c:92:3c:f2:34:9e:8a:e7:24:b9:fb:f5:e5:4e:44:7a: 4a:d6:63:ba:b4:95:a1:60:11:14:ad:73:2d:f4:3d:b3:cb:9b: 06:11:ab:53:06:15:86:fc:4f:2a:98:a6:e1:dc:55:1a:14:91: 03:53:15:5b:64:00:92:c7:03:40:f7:83:56:76:c3:c6:70:99: e5:dc:78:39:60:9d:54:9c:a4:cf:85:47:80:73:60:1e:09:03: 2b:35:3b:40:e4:6e:36:f0:67:67:76:3c:ed:24:5d:6a:58:c2: 3e:27:7d:d1:86:56:49:f2:ef:01:9d:d8:7c:e0:2d:79:56:50: b8:15:e6:71:3c:97:ce:b4:ef:ea:91:f2:d6:03:56:74:2f:e0: 74:2e:da:0b:01:11:86:a7:00:03:e8:e1:e6:b4:07:25:4b:bb: e7:34:35:0d:0d:9e:0d:ce:7a:17:34:9b:f4:5c:6e:fe:3f:6d: 48:96:e3:5b:2c:00:0c:64:c5:4e:95:fe:df:22:83:af:c1:f7: 54:5e:4b:44 -----BEGIN CERTIFICATE----- MIIFizCCBHOgAwIBAgISAZwNgqDCbW11pdEN7ANPjpLyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3OTVhYzg0M2NkOGJhOTAxODhmNzMxMzY1MmJiNTYxMjk5 YjI5NmYwHhcNMjYwMTMwMDYwNjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MmMyNjUzOTgzODAxYzQ1MGVlYTAyOWRiZWZkNjQ4Y2U2NjVlOWQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAii7xsJ5rRqnaJHqwVgKGpgLuQlV5 nwyNiuiZgNyQ9v9mqM4YPfmEV66PLQtgfxxD0ZzPERrHzijqBVPzw6Fk+JAKze07 jdu/UMP4LhMpMYCKDQc+4RA4F4dJ7Ckvtcsk+hytBSGnMpJAHR/g2GQ9CbROIQh6 QwTp5DTZDL0o31nr0sIKFGoF7pHsk/97Gbjez6ChPB94Klo9DHlPLN11yM4Y0Ae2 PtPhEwyq/a4lDtA9LUtaciwU/FPVRAClNNEU9hW5emMYj+J4CM+3k4EBYATpM/t1 deffeZ4rmH8p6hZZskH+ruR1Al4mE4Tv3qyO0R2g+q7E94o4w7topvyzQwIDAQAB o4IClzCCApMwHQYDVR0OBBYEFGLCZTmDgBxFDuoCnb79ZIzmZenYMB8GA1UdIwQY MBaAFBeVrIQ82LqQGI9zE2UrtWEpmylvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjVXc2hEell1cEFZajNNVFpTdTFZU21iS1c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS82NjgzZjQtM2VlYy00ZGNiLTg3ODct NzMxYWJjNmY3NWNhLzEvWXNKbE9ZT0FIRVVPNmdLZHZ2MWtqT1psNmRnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS82NjgzZjQtM2VlYy00ZGNiLTg3ODctNzMxYWJjNmY3NWNh LzEvRjVXc2hEell1cEFZajNNVFpTdTFZU21iS1c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGsBggrBgEFBQcBBwEB/wSBnDCBmTCBhwQCAAEwgYADBAJV iHQDBAJWaWwDBAJWadgDBABZI8ADBAFZKTgDBAFZKnQDBAFZK74wDAMEB1l8gAME BVl8wAMEAVnI9gMEAVvrBAMEAF1xHQMEAILDOQMEArB+/AMEArk5UAMEArnplAME AsGXHAMEAMGpFQMEAsPy9AMEAMsZjwMEBdWxADANBAIAAjAHAwUDKgBdwDANBgkq hkiG9w0BAQsFAAOCAQEAW34gJcAefBSAzZkQYS77sBOeuy64TVvyTRjk//yo7+yb iSDuhtrvzisUW2ZM1gVjtbVPw9RCpVJskjzyNJ6K5yS5+/XlTkR6StZjurSVoWAR FK1zLfQ9s8ubBhGrUwYVhvxPKpim4dxVGhSRA1MVW2QAkscDQPeDVnbDxnCZ5dx4 OWCdVJykz4VHgHNgHgkDKzU7QORuNvBnZ3Y87SRdaljCPid90YZWSfLvAZ3YfOAt eVZQuBXmcTyXzrTv6pHy1gNWdC/gdC7aCwERhqcAA+jh5rQHJUu75zQ1DQ2eDc56 FzSb9Fxu/j9tSJbjWywADGTFTpX+3yKDr8H3VF5LRA== -----END CERTIFICATE-----Generated at Tue Feb 10 03:10:12 2026 by rpki-client