This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/yMp7kYSn21EDSkrtR9j7oGjGxcQ.roa File: yMp7kYSn21EDSkrtR9j7oGjGxcQ.roa (raw, json) Hash identifier: xycgqlP92ghAdWAotDZ0yF2GeDGMCSXJLo6HRtND7No= Subject key identifier: C8:CA:7B:91:84:A7:DB:51:03:4A:4A:ED:47:D8:FB:A0:68:C6:C5:C4 Certificate issuer: /CN=d794e81d72f59c65a0d18144a1b2607983536b4a Certificate serial: 019B7CECD60737E445E6A6C4EA5BDE423BFC Authority key identifier: D7:94:E8:1D:72:F5:9C:65:A0:D1:81:44:A1:B2:60:79:83:53:6B:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15ToHXL1nGWg0YFEobJgeYNTa0o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/yMp7kYSn21EDSkrtR9j7oGjGxcQ.roa Signing time: Fri 02 Jan 2026 04:17:34 +0000 ROA not before: Fri 02 Jan 2026 04:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42313 IP address blocks: 79.106.0.0/16 maxlen: 16 79.106.0.0/17 maxlen: 17 79.106.0.0/19 maxlen: 19 79.106.0.0/24 maxlen: 24 79.106.32.0/19 maxlen: 19 79.106.37.0/24 maxlen: 24 79.106.40.0/24 maxlen: 24 79.106.42.0/24 maxlen: 24 79.106.48.0/24 maxlen: 24 79.106.50.0/24 maxlen: 24 79.106.56.0/22 maxlen: 22 79.106.64.0/19 maxlen: 19 79.106.64.0/24 maxlen: 24 79.106.75.0/24 maxlen: 24 79.106.77.0/24 maxlen: 24 79.106.84.0/24 maxlen: 24 79.106.90.0/24 maxlen: 24 79.106.94.0/23 maxlen: 23 79.106.95.0/24 maxlen: 24 79.106.96.0/19 maxlen: 19 79.106.101.0/24 maxlen: 24 79.106.102.0/24 maxlen: 24 79.106.103.0/24 maxlen: 24 79.106.104.0/24 maxlen: 24 79.106.107.0/24 maxlen: 24 79.106.117.0/24 maxlen: 24 79.106.118.0/23 maxlen: 23 79.106.120.0/24 maxlen: 24 79.106.122.0/24 maxlen: 24 79.106.123.0/24 maxlen: 24 79.106.124.0/24 maxlen: 24 79.106.125.0/24 maxlen: 24 79.106.126.0/24 maxlen: 24 79.106.127.0/24 maxlen: 24 79.106.128.0/17 maxlen: 17 79.106.128.0/19 maxlen: 19 79.106.160.0/19 maxlen: 19 79.106.162.0/24 maxlen: 24 79.106.173.0/24 maxlen: 24 79.106.176.0/21 maxlen: 21 79.106.192.0/19 maxlen: 19 79.106.194.0/23 maxlen: 23 79.106.195.0/24 maxlen: 24 79.106.196.0/24 maxlen: 24 79.106.204.0/24 maxlen: 24 79.106.205.0/24 maxlen: 24 79.106.207.0/24 maxlen: 24 79.106.209.0/24 maxlen: 24 79.106.210.0/24 maxlen: 24 79.106.211.0/24 maxlen: 24 79.106.214.0/24 maxlen: 24 79.106.215.0/24 maxlen: 24 79.106.218.0/23 maxlen: 23 79.106.220.0/24 maxlen: 24 79.106.224.0/19 maxlen: 19 79.106.225.0/24 maxlen: 24 79.106.226.0/24 maxlen: 24 79.106.228.0/24 maxlen: 24 79.106.229.0/24 maxlen: 24 79.106.230.0/24 maxlen: 24 79.106.232.0/22 maxlen: 22 79.106.240.0/21 maxlen: 21 79.106.240.0/23 maxlen: 23 79.106.242.0/23 maxlen: 23 79.106.244.0/23 maxlen: 23 79.106.246.0/23 maxlen: 23 79.106.254.0/24 maxlen: 24 79.106.255.0/24 maxlen: 24 185.171.144.0/22 maxlen: 22 185.171.144.0/23 maxlen: 23 185.171.146.0/23 maxlen: 23 185.171.146.0/24 maxlen: 24 185.171.147.0/24 maxlen: 24 217.24.240.0/20 maxlen: 20 217.24.240.0/21 maxlen: 21 217.24.248.0/21 maxlen: 21 217.24.248.0/24 maxlen: 24 217.24.254.0/24 maxlen: 24 2a05:fdc0::/29 maxlen: 29 2a05:fdc0::/32 maxlen: 32 2a05:fdc0:1000::/48 maxlen: 48 2a05:fdc0:2100::/40 maxlen: 40 2a05:fdc0:2200::/40 maxlen: 40 2a05:fdc0:2300::/40 maxlen: 40 2a05:fdc0:3100::/40 maxlen: 40 2a05:fdc0:3200::/40 maxlen: 40 2a05:fdc1::/32 maxlen: 32 2a05:fdc2::/32 maxlen: 32 2a05:fdc2:1000::/36 maxlen: 36 2a05:fdc2:2000::/36 maxlen: 36 2a05:fdc2:3000::/36 maxlen: 36 2a05:fdc2:4000::/36 maxlen: 36 2a05:fdc2:5000::/36 maxlen: 36 2a05:fdc2:6000::/36 maxlen: 36 2a05:fdc2:7000::/36 maxlen: 36 2a05:fdc2:8000::/36 maxlen: 36 2a05:fdc2:9000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.crl rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.mft rsync://rpki.ripe.net/repository/DEFAULT/15ToHXL1nGWg0YFEobJgeYNTa0o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Feb 2026 00:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:d6:07:37:e4:45:e6:a6:c4:ea:5b:de:42:3b:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d794e81d72f59c65a0d18144a1b2607983536b4a Validity Not Before: Jan 2 04:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c8ca7b9184a7db51034a4aed47d8fba068c6c5c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d5:fa:a2:35:78:27:48:0b:49:48:2f:a2:a3: 71:9e:97:60:6e:6d:7c:76:0c:7f:f8:33:3e:0b:92: ba:3e:55:51:74:2e:86:8c:de:0a:16:ad:e0:48:c0: c1:12:ab:22:07:f1:42:0f:fc:b7:da:db:7a:87:44: e2:07:dd:39:75:a5:2e:28:5a:8e:b2:4b:06:e9:a8: 14:90:e4:b4:7f:4b:19:21:d4:aa:98:47:19:a2:a9: b4:01:11:b7:70:95:a2:d0:37:45:f1:01:8f:2a:30: f8:82:36:8c:ee:00:7e:f7:ba:a7:41:32:d4:69:8c: 99:33:e6:8d:e9:36:fb:af:fa:ae:63:c3:1d:01:0b: 84:ed:ed:d8:e4:6d:49:c1:b9:b4:c6:cd:d5:52:f8: 8c:25:f7:54:df:ab:69:91:fe:c2:62:85:74:49:46: cd:fd:e3:d7:81:9e:0c:fe:a7:9b:dc:71:b8:f0:15: d1:01:f3:c3:05:1d:1d:ca:07:9e:5b:1b:d1:b1:33: e7:90:b1:df:55:13:78:52:e3:3f:9e:cb:e9:6b:9c: eb:51:9d:0d:6d:95:65:cb:4c:5b:07:c0:73:92:e0: e5:89:f4:56:59:c0:f2:8e:70:9e:33:b3:9c:e8:62: 00:7f:6a:9e:96:09:ec:87:b0:93:e1:8f:d4:3a:df: bc:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:CA:7B:91:84:A7:DB:51:03:4A:4A:ED:47:D8:FB:A0:68:C6:C5:C4 X509v3 Authority Key Identifier: keyid:D7:94:E8:1D:72:F5:9C:65:A0:D1:81:44:A1:B2:60:79:83:53:6B:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15ToHXL1nGWg0YFEobJgeYNTa0o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/yMp7kYSn21EDSkrtR9j7oGjGxcQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.106.0.0/16 185.171.144.0/22 217.24.240.0/20 IPv6: 2a05:fdc0::/29 Signature Algorithm: sha256WithRSAEncryption 05:a4:4b:5c:b8:04:6a:35:57:a6:e3:a7:b9:c9:ca:e5:60:47: a9:a9:8e:23:4b:cf:d6:c4:d2:b8:d6:34:ea:9a:c5:ec:4b:e4: 9e:87:b3:38:a2:eb:5e:fc:d9:ee:b7:23:c5:d2:2a:fb:f0:af: c3:70:b7:a6:e9:4a:6e:23:42:04:62:9e:cf:8e:ff:91:62:dc: 7f:12:52:da:ff:85:b1:40:e0:5e:5c:ce:61:f5:53:bf:20:5c: b3:1c:72:0f:35:fd:99:6a:db:8c:07:d5:c4:22:12:99:c1:11: d8:9c:ea:ce:b4:9a:2c:70:b2:98:70:c5:81:b9:e4:d2:6b:0d: 55:42:fa:80:24:f8:7b:72:4d:53:f7:97:d9:77:25:e6:9a:e1: fb:22:31:c0:2b:cd:03:19:13:0d:aa:f3:13:6b:e2:58:7f:46: f4:19:5d:ed:a1:e0:35:62:02:e7:64:25:77:af:be:49:8c:e8: ff:3a:7f:26:80:12:27:4f:5c:39:c1:7e:12:1a:e3:8c:a6:5f: e8:c5:6f:08:e5:5d:97:62:8a:3d:91:75:2e:ea:b6:1d:0a:e8: 8e:8f:d5:af:ca:6d:f4:b3:ef:76:df:66:42:25:67:50:3a:9e: 76:27:dd:8c:e8:05:3e:00:51:0a:2a:60:98:bb:e0:26:15:44: 67:cf:93:d2 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt87NYHN+RF5qbE6lveQjv8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3OTRlODFkNzJmNTljNjVhMGQxODE0NGExYjI2MDc5ODM1 MzZiNGEwHhcNMjYwMTAyMDQxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOGNhN2I5MTg0YTdkYjUxMDM0YTRhZWQ0N2Q4ZmJhMDY4YzZjNWM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNX6ojV4J0gLSUgvoqNxnpdgbm18 dgx/+DM+C5K6PlVRdC6GjN4KFq3gSMDBEqsiB/FCD/y32tt6h0TiB905daUuKFqO sksG6agUkOS0f0sZIdSqmEcZoqm0ARG3cJWi0DdF8QGPKjD4gjaM7gB+97qnQTLU aYyZM+aN6Tb7r/quY8MdAQuE7e3Y5G1Jwbm0xs3VUviMJfdU36tpkf7CYoV0SUbN /ePXgZ4M/qeb3HG48BXRAfPDBR0dygeeWxvRsTPnkLHfVRN4UuM/nsvpa5zrUZ0N bZVly0xbB8BzkuDlifRWWcDyjnCeM7Oc6GIAf2qelgnsh7CT4Y/UOt+82QIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFMjKe5GEp9tRA0pK7UfY+6BoxsXEMB8GA1UdIwQY MBaAFNeU6B1y9ZxloNGBRKGyYHmDU2tKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTVUb0hYTDFuR1dnMFlGRW9iSmdlWU5UYTBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9mNmExMjQtN2YwMS00ZTQwLWI3OTYt Y2NhNTJiNjI2ZmNhLzEveU1wN2tZU24yMUVEU2tydFI5ajdvR2pHeGNRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny9mNmExMjQtN2YwMS00ZTQwLWI3OTYtY2NhNTJiNjI2ZmNh LzEvMTVUb0hYTDFuR1dnMFlGRW9iSmdlWU5UYTBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAXBAIAATARAwMAT2oDBAK5 q5ADBATZGPAwDQQCAAIwBwMFAyoF/cAwDQYJKoZIhvcNAQELBQADggEBAAWkS1y4 BGo1V6bjp7nJyuVgR6mpjiNLz9bE0rjWNOqaxexL5J6Hszii61782e63I8XSKvvw r8Nwt6bpSm4jQgRins+O/5Fi3H8SUtr/hbFA4F5czmH1U78gXLMccg81/Zlq24wH 1cQiEpnBEdic6s60mixwsphwxYG55NJrDVVC+oAk+HtyTVP3l9l3Jeaa4fsiMcAr zQMZEw2q8xNr4lh/RvQZXe2h4DViAudkJXevvkmM6P86fyaAEidPXDnBfhIa44ym X+jFbwjlXZdiij2RdS7qth0K6I6P1a/KbfSz73bfZkIlZ1A6nnYn3YzoBT4AUQoq YJi74CYVRGfPk9I= -----END CERTIFICATE-----Generated at Tue Feb 10 08:38:23 2026 by rpki-client