This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/YjQiPePy4rwjqfIv0GNTyuHUVeE.roa File: YjQiPePy4rwjqfIv0GNTyuHUVeE.roa (raw, json) Hash identifier: FRyYxB8E0O7w8Ro16U8SMCHBItOvlxbO1vjadeMtAvo= Subject key identifier: 62:34:22:3D:E3:F2:E2:BC:23:A9:F2:2F:D0:63:53:CA:E1:D4:55:E1 Certificate issuer: /CN=7bd5997ed075c2298b461225e1060f577b1d7d4d Certificate serial: 019B7EA647DA49632597868565EA97113D89 Authority key identifier: 7B:D5:99:7E:D0:75:C2:29:8B:46:12:25:E1:06:0F:57:7B:1D:7D:4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e9WZftB1wimLRhIl4QYPV3sdfU0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/YjQiPePy4rwjqfIv0GNTyuHUVeE.roa Signing time: Fri 02 Jan 2026 12:19:45 +0000 ROA not before: Fri 02 Jan 2026 12:19:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41344 IP address blocks: 31.185.8.0/22 maxlen: 22 31.185.8.0/24 maxlen: 24 31.185.9.0/24 maxlen: 24 31.185.10.0/24 maxlen: 24 31.185.11.0/24 maxlen: 24 31.185.12.0/24 maxlen: 24 31.185.13.0/24 maxlen: 24 31.185.14.0/24 maxlen: 24 31.185.15.0/24 maxlen: 24 89.249.224.0/22 maxlen: 22 89.249.226.0/24 maxlen: 24 89.249.228.0/22 maxlen: 22 89.249.231.0/24 maxlen: 24 89.249.232.0/22 maxlen: 22 89.249.232.0/24 maxlen: 24 89.249.233.0/24 maxlen: 24 89.249.235.0/24 maxlen: 24 89.249.236.0/23 maxlen: 23 89.249.236.0/24 maxlen: 24 89.249.237.0/24 maxlen: 24 89.249.238.0/24 maxlen: 24 185.124.176.0/22 maxlen: 22 185.124.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/e9WZftB1wimLRhIl4QYPV3sdfU0.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/e9WZftB1wimLRhIl4QYPV3sdfU0.mft rsync://rpki.ripe.net/repository/DEFAULT/e9WZftB1wimLRhIl4QYPV3sdfU0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:47:da:49:63:25:97:86:85:65:ea:97:11:3d:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bd5997ed075c2298b461225e1060f577b1d7d4d Validity Not Before: Jan 2 12:19:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6234223de3f2e2bc23a9f22fd06353cae1d455e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:4d:5d:f6:3c:7c:ad:1a:90:e1:58:ae:bf:a7: 10:e6:4c:db:74:3e:a7:c6:89:3c:e9:bf:d9:77:8c: 57:c2:28:2c:54:26:8f:f6:4d:3c:3b:e6:d1:62:7c: 30:69:a1:e4:f0:ca:5d:f2:8a:58:83:d5:61:9d:54: e6:9d:19:3a:88:b2:dc:cb:6e:03:b9:fb:16:a1:68: eb:59:b5:41:71:8f:d7:af:02:5e:be:98:dc:c8:c4: 97:50:2b:45:5f:08:c1:1c:d7:11:f8:64:34:d0:8e: 7a:86:78:42:37:c3:03:85:dd:ef:30:ed:61:26:57: 77:cb:f5:0f:d4:de:45:46:2d:87:e0:7f:a0:4e:8c: fd:da:8a:29:86:8e:b6:c8:4f:90:3a:0f:7f:9e:69: 97:8f:d5:7c:6d:a0:92:07:d9:0d:6a:51:e0:56:c7: 5d:3c:0c:c4:20:98:f4:d5:15:83:f1:77:46:72:c0: b0:d2:0c:55:0e:1a:31:ee:29:71:8c:c7:93:7b:62: 7a:f7:d9:82:e0:b6:8d:19:db:35:df:4a:73:be:f8: e9:24:70:c1:35:39:14:24:c9:1c:4f:3f:79:d1:dd: 74:7b:f2:4f:4f:c1:9a:79:4e:e6:94:23:c6:dc:36: 42:22:1c:5c:34:99:e8:8e:9a:21:0d:8e:94:27:86: 5a:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:34:22:3D:E3:F2:E2:BC:23:A9:F2:2F:D0:63:53:CA:E1:D4:55:E1 X509v3 Authority Key Identifier: keyid:7B:D5:99:7E:D0:75:C2:29:8B:46:12:25:E1:06:0F:57:7B:1D:7D:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9WZftB1wimLRhIl4QYPV3sdfU0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/YjQiPePy4rwjqfIv0GNTyuHUVeE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/e9WZftB1wimLRhIl4QYPV3sdfU0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.185.8.0/21 89.249.224.0-89.249.238.255 185.124.176.0/22 Signature Algorithm: sha256WithRSAEncryption 52:99:a2:65:29:28:b9:d1:5a:63:04:79:d4:5b:b1:ab:d3:0a: 79:03:3b:a9:73:0c:cc:4f:aa:f3:97:da:16:37:3c:e3:44:54: a3:24:55:65:2c:6d:a5:1b:35:ae:68:99:4e:fe:ac:fa:94:21: be:96:de:f8:3f:52:06:fb:22:54:fa:c1:f3:57:38:3f:82:06: 93:3a:d4:53:44:e0:3d:ea:01:d7:0b:4d:81:6e:ac:ca:94:d9: b8:13:57:bb:c7:6b:2c:d7:1c:e2:92:be:62:fe:9c:b0:05:75: 04:88:57:c8:98:98:f5:48:28:19:85:a2:fd:ee:2a:a1:c6:0c: b8:d2:7f:37:2a:0e:9f:9c:db:e9:85:4a:de:fd:0f:ef:2c:8f: 1c:a3:57:bd:a2:ea:1d:0e:88:88:7f:f6:91:a9:bd:8f:8c:ce: f9:51:32:05:fb:98:13:6a:4e:c9:ac:e5:4d:71:2b:1c:f9:ac: be:6d:cb:60:e5:91:f0:02:1d:75:76:0c:38:82:c5:9a:52:34: 22:2d:fe:17:df:58:12:8b:3a:f1:8e:dc:b7:78:6a:ed:ee:79: 11:0a:3b:c5:1c:63:07:2d:29:10:e0:df:a6:6e:44:65:00:e2: 18:a4:ce:5b:7d:1e:11:76:98:4f:c1:59:f8:2c:f1:1a:a0:56: 42:da:ba:51 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt+pkfaSWMll4aFZeqXET2JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiZDU5OTdlZDA3NWMyMjk4YjQ2MTIyNWUxMDYwZjU3N2Ix ZDdkNGQwHhcNMjYwMTAyMTIxOTQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MjM0MjIzZGUzZjJlMmJjMjNhOWYyMmZkMDYzNTNjYWUxZDQ1NWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1E1d9jx8rRqQ4Viuv6cQ5kzbdD6n xok86b/Zd4xXwigsVCaP9k08O+bRYnwwaaHk8Mpd8opYg9VhnVTmnRk6iLLcy24D ufsWoWjrWbVBcY/XrwJevpjcyMSXUCtFXwjBHNcR+GQ00I56hnhCN8MDhd3vMO1h Jld3y/UP1N5FRi2H4H+gToz92oopho62yE+QOg9/nmmXj9V8baCSB9kNalHgVsdd PAzEIJj01RWD8XdGcsCw0gxVDhox7ilxjMeTe2J699mC4LaNGds130pzvvjpJHDB NTkUJMkcTz950d10e/JPT8GaeU7mlCPG3DZCIhxcNJnojpohDY6UJ4ZasQIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFGI0Ij3j8uK8I6nyL9BjU8rh1FXhMB8GA1UdIwQY MBaAFHvVmX7QdcIpi0YSJeEGD1d7HX1NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTlXWmZ0QjF3aW1MUmhJbDRRWVBWM3NkZlUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS80ZDdmNDAtNDllYy00Y2UyLTg4MmUt NWFjN2YwNjYyMzBiLzEvWWpRaVBlUHk0cndqcWZJdjBHTlR5dUhVVmVFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS80ZDdmNDAtNDllYy00Y2UyLTg4MmUtNWFjN2YwNjYyMzBi LzEvZTlXWmZ0QjF3aW1MUmhJbDRRWVBWM3NkZlUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQDH7kIMAwD BAVZ+eADBABZ+e4DBAK5fLAwDQYJKoZIhvcNAQELBQADggEBAFKZomUpKLnRWmME edRbsavTCnkDO6lzDMxPqvOX2hY3PONEVKMkVWUsbaUbNa5omU7+rPqUIb6W3vg/ Ugb7IlT6wfNXOD+CBpM61FNE4D3qAdcLTYFurMqU2bgTV7vHayzXHOKSvmL+nLAF dQSIV8iYmPVIKBmFov3uKqHGDLjSfzcqDp+c2+mFSt79D+8sjxyjV72i6h0OiIh/ 9pGpvY+MzvlRMgX7mBNqTsms5U1xKxz5rL5ty2DlkfACHXV2DDiCxZpSNCIt/hff WBKLOvGO3Ld4au3ueREKO8UcYwctKRDg36ZuRGUA4hikzlt9HhF2mE/BWfgs8Rqg VkLaulE= -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:26 2026 by rpki-client