This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/yCM63OQDYqcvVbZwl8JUXlse3G8.roa File: yCM63OQDYqcvVbZwl8JUXlse3G8.roa (raw, json) Hash identifier: FBFy+DNQgiduUDfdDm3Rn+ekVlkc6jpNaRCRR3OdGmQ= Subject key identifier: C8:23:3A:DC:E4:03:62:A7:2F:55:B6:70:97:C2:54:5E:5B:1E:DC:6F Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f Certificate serial: 019B7AC9028C6C1AC28C4FD5C7D7A6827022 Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/yCM63OQDYqcvVbZwl8JUXlse3G8.roa Signing time: Thu 01 Jan 2026 18:19:12 +0000 ROA not before: Thu 01 Jan 2026 18:19:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9123 IP address blocks: 37.220.80.0/24 maxlen: 24 37.220.87.0/24 maxlen: 24 45.8.96.0/24 maxlen: 24 45.8.97.0/24 maxlen: 24 45.8.98.0/24 maxlen: 24 45.8.99.0/24 maxlen: 24 45.89.190.0/24 maxlen: 24 45.95.234.0/24 maxlen: 24 46.19.64.0/24 maxlen: 24 46.19.65.0/24 maxlen: 24 46.19.66.0/24 maxlen: 24 46.19.67.0/24 maxlen: 24 81.200.144.0/24 maxlen: 24 81.200.145.0/24 maxlen: 24 81.200.146.0/24 maxlen: 24 81.200.147.0/24 maxlen: 24 81.200.148.0/24 maxlen: 24 81.200.149.0/24 maxlen: 24 81.200.150.0/24 maxlen: 24 81.200.151.0/24 maxlen: 24 81.200.152.0/24 maxlen: 24 81.200.153.0/24 maxlen: 24 81.200.158.0/24 maxlen: 24 85.92.110.0/24 maxlen: 24 85.92.111.0/24 maxlen: 24 92.118.113.0/24 maxlen: 24 92.118.114.0/24 maxlen: 24 92.118.115.0/24 maxlen: 24 94.198.216.0/24 maxlen: 24 94.198.217.0/24 maxlen: 24 94.198.218.0/24 maxlen: 24 94.198.219.0/24 maxlen: 24 94.198.220.0/24 maxlen: 24 94.198.221.0/24 maxlen: 24 94.198.223.0/24 maxlen: 24 185.247.185.0/24 maxlen: 24 195.80.50.0/24 maxlen: 24 195.80.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 06:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:02:8c:6c:1a:c2:8c:4f:d5:c7:d7:a6:82:70:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f Validity Not Before: Jan 1 18:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c8233adce40362a72f55b67097c2545e5b1edc6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ce:14:ed:77:f2:35:9e:a8:84:33:0f:6b:da: 1f:e4:04:02:8c:01:38:ae:88:33:b5:a5:97:f3:96: 93:49:a0:f6:c4:05:ae:3c:27:7c:4b:6d:96:af:ab: 38:5a:62:3b:0d:f6:5b:04:31:27:1b:74:bd:2e:bc: 44:61:1d:ab:83:e9:62:c4:b4:22:2a:55:52:3a:35: 2d:86:94:cc:3f:da:aa:be:74:0b:d9:ae:03:b1:22: 81:64:bc:b1:aa:07:c7:07:7a:35:2e:f0:21:59:e3: be:70:bf:b5:f3:78:a3:37:80:65:9a:82:b5:ea:3a: ea:52:0e:d6:98:c3:2a:e4:51:c1:3a:6e:d9:83:80: d8:b2:e9:54:77:a6:08:f6:49:4a:03:9c:05:3c:d3: cb:f5:28:39:79:08:48:9b:79:14:b4:3e:be:ae:90: c9:6e:2b:31:1a:35:f4:f9:12:a9:a0:23:86:f0:2d: 03:f4:73:81:7d:57:8a:be:38:72:b6:be:0b:a2:e2: f8:dd:f9:c9:89:09:97:b3:f1:fc:fe:99:7a:28:cb: fe:6b:34:f7:10:15:49:c0:71:38:9b:a9:a2:f1:f3: 70:08:c5:da:8a:06:57:9f:50:c2:b8:4a:ea:bf:a4: eb:fe:2d:02:10:26:81:6d:84:0c:45:0b:ec:5f:4e: eb:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:23:3A:DC:E4:03:62:A7:2F:55:B6:70:97:C2:54:5E:5B:1E:DC:6F X509v3 Authority Key Identifier: keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/yCM63OQDYqcvVbZwl8JUXlse3G8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.220.80.0/24 37.220.87.0/24 45.8.96.0/22 45.89.190.0/24 45.95.234.0/24 46.19.64.0/22 81.200.144.0-81.200.153.255 81.200.158.0/24 85.92.110.0/23 92.118.113.0-92.118.115.255 94.198.216.0-94.198.221.255 94.198.223.0/24 185.247.185.0/24 195.80.50.0/23 Signature Algorithm: sha256WithRSAEncryption 39:b6:f8:f4:b2:85:a6:c9:5d:15:d5:31:2e:bf:71:73:59:6f: 12:76:71:83:66:8f:d3:dc:58:e7:f5:1b:7b:a2:1c:2e:f5:00: b8:27:eb:bb:19:eb:5b:50:87:1c:b2:9d:57:e8:a4:ca:2b:87: 42:f0:cc:da:26:11:56:52:a0:16:9d:33:87:fd:dc:fa:50:86: 6e:39:fe:b5:ed:41:96:d9:8b:28:5e:48:ee:a9:71:8f:51:a9: 2e:a1:5e:ac:09:98:a0:40:a4:85:84:cd:a6:cf:fa:3f:a7:95: 95:b8:10:6a:b4:c6:91:ff:86:e0:08:ea:f7:a4:c5:a7:a6:d5: a6:a8:5f:cf:20:52:2e:03:f4:a4:3e:df:b6:f6:f8:91:fb:d0: 29:46:db:45:55:e3:97:2f:6d:f7:ee:38:31:de:5d:c9:6c:98: 85:58:66:fc:d3:13:57:ac:6b:cd:b5:92:c6:d9:11:bd:47:d0: 9c:84:3f:8c:79:3e:47:66:4e:7e:2e:8a:93:74:62:4b:17:3d: f8:df:bc:bb:77:56:c4:31:d9:2d:b2:56:01:c7:bd:23:b8:57: b5:9b:7a:02:26:c0:7f:53:7d:81:01:4d:bf:fb:0c:67:cb:f1: c5:21:5b:5d:9d:00:32:d6:0e:5c:56:60:87:94:87:b0:95:3a: 76:d1:0d:98 -----BEGIN CERTIFICATE----- MIIFZDCCBEygAwIBAgISAZt6yQKMbBrCjE/Vx9emgnAiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1YjFkMTNjMmUyNmUxMjc4NjI0NmE1ZWM0YzViZWE2OTg2 NGIyMGYwHhcNMjYwMTAxMTgxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjODIzM2FkY2U0MDM2MmE3MmY1NWI2NzA5N2MyNTQ1ZTViMWVkYzZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr84U7XfyNZ6ohDMPa9of5AQCjAE4 rogztaWX85aTSaD2xAWuPCd8S22Wr6s4WmI7DfZbBDEnG3S9LrxEYR2rg+lixLQi KlVSOjUthpTMP9qqvnQL2a4DsSKBZLyxqgfHB3o1LvAhWeO+cL+183ijN4BlmoK1 6jrqUg7WmMMq5FHBOm7Zg4DYsulUd6YI9klKA5wFPNPL9Sg5eQhIm3kUtD6+rpDJ bisxGjX0+RKpoCOG8C0D9HOBfVeKvjhytr4LouL43fnJiQmXs/H8/pl6KMv+azT3 EBVJwHE4m6mi8fNwCMXaigZXn1DCuErqv6Tr/i0CECaBbYQMRQvsX07r9wIDAQAB o4ICcDCCAmwwHQYDVR0OBBYEFMgjOtzkA2KnL1W2cJfCVF5bHtxvMB8GA1UdIwQY MBaAFAWx0TwuJuEnhiRqXsTFvqaYZLIPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmJIUlBDNG00U2VHSkdwZXhNVy1wcGhrc2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9jNjEwOTItNzM0YS00ZWVmLTlkNjct NDkwNTI0M2JjODI4LzEveUNNNjNPUURZcWN2VmJad2w4SlVYbHNlM0c4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9jNjEwOTItNzM0YS00ZWVmLTlkNjctNDkwNTI0M2JjODI4 LzEvQmJIUlBDNG00U2VHSkdwZXhNVy1wcGhrc2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGFBggrBgEFBQcBBwEB/wR2MHQwcgQCAAEwbAMEACXcUAME ACXcVwMEAi0IYAMEAC1ZvgMEAC1f6gMEAi4TQDAMAwQEUciQAwQBUciYAwQAUcie AwQBVVxuMAwDBABcdnEDBAJcdnAwDAMEA17G2AMEAV7G3AMEAF7G3wMEALn3uQME AcNQMjANBgkqhkiG9w0BAQsFAAOCAQEAObb49LKFpsldFdUxLr9xc1lvEnZxg2aP 09xY5/Ube6IcLvUAuCfruxnrW1CHHLKdV+ikyiuHQvDM2iYRVlKgFp0zh/3c+lCG bjn+te1BltmLKF5I7qlxj1GpLqFerAmYoECkhYTNps/6P6eVlbgQarTGkf+G4Ajq 96TFp6bVpqhfzyBSLgP0pD7ftvb4kfvQKUbbRVXjly9t9+44Md5dyWyYhVhm/NMT V6xrzbWSxtkRvUfQnIQ/jHk+R2ZOfi6Kk3RiSxc9+N+8u3dWxDHZLbJWAce9I7hX tZt6AibAf1N9gQFNv/sMZ8vxxSFbXZ0AMtYOXFZgh5SHsJU6dtENmA== -----END CERTIFICATE-----Generated at Wed Jan 21 11:15:19 2026 by rpki-client