This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/YzKdAdfCvvdPIE3XweETh9g_RFE.roa File: YzKdAdfCvvdPIE3XweETh9g_RFE.roa (raw, json) Hash identifier: EgUeeu3aDHtFIVk2MBTs7H5c0TYshnD2NTKZbs5UU/Q= Subject key identifier: 63:32:9D:01:D7:C2:BE:F7:4F:20:4D:D7:C1:E1:13:87:D8:3F:44:51 Certificate issuer: /CN=7a0cfd5a51013e5fd6caf809878047a605ee9d6d Certificate serial: 019B7C80D4F8118B579868F10376F612F03C Authority key identifier: 7A:0C:FD:5A:51:01:3E:5F:D6:CA:F8:09:87:80:47:A6:05:EE:9D:6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/egz9WlEBPl_WyvgJh4BHpgXunW0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/YzKdAdfCvvdPIE3XweETh9g_RFE.roa Signing time: Fri 02 Jan 2026 02:19:36 +0000 ROA not before: Fri 02 Jan 2026 02:19:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198551 IP address blocks: 185.76.0.0/22 maxlen: 24 185.171.112.0/22 maxlen: 24 185.204.204.0/22 maxlen: 24 185.204.208.0/22 maxlen: 24 185.206.116.0/22 maxlen: 24 185.208.60.0/22 maxlen: 24 185.218.32.0/22 maxlen: 24 185.226.16.0/22 maxlen: 24 185.234.140.0/22 maxlen: 24 212.84.56.0/21 maxlen: 24 2a00:dfc0::/29 maxlen: 29 2a00:dfc1::/32 maxlen: 32 2a00:dfc2::/32 maxlen: 32 2a0a:d100::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/egz9WlEBPl_WyvgJh4BHpgXunW0.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/egz9WlEBPl_WyvgJh4BHpgXunW0.mft rsync://rpki.ripe.net/repository/DEFAULT/egz9WlEBPl_WyvgJh4BHpgXunW0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:d4:f8:11:8b:57:98:68:f1:03:76:f6:12:f0:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a0cfd5a51013e5fd6caf809878047a605ee9d6d Validity Not Before: Jan 2 02:19:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=63329d01d7c2bef74f204dd7c1e11387d83f4451 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:7d:ef:4a:ed:db:8e:1d:71:7d:65:8a:67:d5: 6e:b2:c8:10:21:5e:9a:8f:5a:31:f0:f1:62:63:d9: 9a:fb:60:f2:51:c1:cc:3e:bb:c0:5f:b2:ed:36:9f: 44:79:f2:df:43:58:83:6a:2b:5e:78:a1:28:e6:f3: bd:d9:32:03:8f:46:b6:b0:e2:17:d5:91:ac:de:14: 82:af:6b:89:87:5f:60:fe:eb:30:be:75:7c:0c:b7: 8d:91:b9:7b:cf:42:43:6e:0b:f8:5b:e9:e1:61:a9: 7d:4f:0e:79:2a:1d:ba:cb:8f:55:7f:36:d2:99:79: 74:82:ba:fa:6d:9f:76:5f:35:f3:19:05:b3:f0:ee: 52:ac:9f:c1:19:54:c7:4d:ed:74:99:16:a5:4b:6a: 16:73:df:bf:51:de:c9:42:3e:e4:e2:cb:41:5e:36: c6:cd:d9:8a:f2:6f:17:58:b2:8f:da:b0:69:66:c1: 36:88:00:02:15:ce:35:2a:9f:06:96:cc:64:1e:47: a3:36:39:da:08:52:a4:a7:16:e0:1f:52:d4:c0:78: 4f:c5:d1:4e:b4:7f:1e:e8:6d:c0:78:2b:17:ee:c0: 33:0a:c1:59:5c:73:22:94:4f:f8:02:ee:21:4c:cc: 34:1a:b9:27:d0:6b:15:40:d7:1b:f6:fa:86:bb:fe: b7:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:32:9D:01:D7:C2:BE:F7:4F:20:4D:D7:C1:E1:13:87:D8:3F:44:51 X509v3 Authority Key Identifier: keyid:7A:0C:FD:5A:51:01:3E:5F:D6:CA:F8:09:87:80:47:A6:05:EE:9D:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egz9WlEBPl_WyvgJh4BHpgXunW0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/YzKdAdfCvvdPIE3XweETh9g_RFE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/egz9WlEBPl_WyvgJh4BHpgXunW0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.76.0.0/22 185.171.112.0/22 185.204.204.0-185.204.211.255 185.206.116.0/22 185.208.60.0/22 185.218.32.0/22 185.226.16.0/22 185.234.140.0/22 212.84.56.0/21 IPv6: 2a00:dfc0::/29 2a0a:d100::/29 Signature Algorithm: sha256WithRSAEncryption 03:73:a3:59:d8:08:52:f9:40:7a:87:c5:a5:25:4f:90:be:3a: aa:f4:05:97:21:8e:22:fc:c2:e8:c6:0d:6a:1e:f1:d0:d5:83: 51:8c:91:3d:4e:e2:2e:4a:88:ce:4d:48:b8:2d:ac:e0:ac:3d: fc:dc:95:c3:0c:d3:9d:76:bb:ee:f0:08:d8:52:19:b2:28:f7: 95:b4:d1:bf:cd:e5:97:2d:6b:0c:d8:e3:51:9d:5e:75:d1:b8: 95:47:4d:da:54:28:b6:79:c5:7b:9d:36:b1:91:ae:2c:b1:d4: cb:29:cb:b7:6e:96:a1:4e:cb:b9:da:cc:cc:d7:5b:8f:fa:bf: f1:43:05:8a:86:3e:7c:04:6e:04:b8:bb:b3:25:19:09:d1:91: d8:be:84:6b:a4:cf:a9:b0:39:91:17:28:2f:6b:81:9a:04:9a: 0c:aa:58:b0:2f:0d:ca:ec:b9:c8:be:ee:3e:d9:e6:37:bb:e4: a8:77:36:52:e4:01:6a:5c:5c:ac:21:fa:62:53:74:90:16:87: dd:66:ed:d6:aa:8b:5e:28:e4:91:ac:f7:aa:e9:52:1b:07:5d: c5:83:a1:af:0d:a7:cd:c1:79:77:a9:d0:56:d0:10:4a:2f:ef: 6d:44:67:2d:ac:2f:06:43:fd:09:b4:6e:90:2b:8b:84:78:b5: 15:bc:cc:4e -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgISAZt8gNT4EYtXmGjxA3b2EvA8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhMGNmZDVhNTEwMTNlNWZkNmNhZjgwOTg3ODA0N2E2MDVl ZTlkNmQwHhcNMjYwMTAyMDIxOTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MzMyOWQwMWQ3YzJiZWY3NGYyMDRkZDdjMWUxMTM4N2Q4M2Y0NDUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiH3vSu3bjh1xfWWKZ9VussgQIV6a j1ox8PFiY9ma+2DyUcHMPrvAX7LtNp9EefLfQ1iDaiteeKEo5vO92TIDj0a2sOIX 1ZGs3hSCr2uJh19g/uswvnV8DLeNkbl7z0JDbgv4W+nhYal9Tw55Kh26y49VfzbS mXl0grr6bZ92XzXzGQWz8O5SrJ/BGVTHTe10mRalS2oWc9+/Ud7JQj7k4stBXjbG zdmK8m8XWLKP2rBpZsE2iAACFc41Kp8GlsxkHkejNjnaCFKkpxbgH1LUwHhPxdFO tH8e6G3AeCsX7sAzCsFZXHMilE/4Au4hTMw0Grkn0GsVQNcb9vqGu/637wIDAQAB o4ICVzCCAlMwHQYDVR0OBBYEFGMynQHXwr73TyBN18HhE4fYP0RRMB8GA1UdIwQY MBaAFHoM/VpRAT5f1sr4CYeAR6YF7p1tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWd6OVdsRUJQbF9XeXZnSmg0QkhwZ1h1blcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9lZTA0ZDgtNDlkYy00MDlmLTkyZmMt ZGQ1NjIzMDQ4ZWEyLzEvWXpLZEFkZkN2dmRQSUUzWHdlRVRoOWdfUkZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS9lZTA0ZDgtNDlkYy00MDlmLTkyZmMtZGQ1NjIzMDQ4ZWEy LzEvZWd6OVdsRUJQbF9XeXZnSmg0QkhwZ1h1blcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMG0GCCsGAQUFBwEHAQH/BF4wXDBEBAIAATA+AwQCuUwAAwQC uatwMAwDBAK5zMwDBAK5zNADBAK5znQDBAK50DwDBAK52iADBAK54hADBAK56owD BAPUVDgwFAQCAAIwDgMFAyoA38ADBQMqCtEAMA0GCSqGSIb3DQEBCwUAA4IBAQAD c6NZ2AhS+UB6h8WlJU+Qvjqq9AWXIY4i/MLoxg1qHvHQ1YNRjJE9TuIuSojOTUi4 LazgrD383JXDDNOddrvu8AjYUhmyKPeVtNG/zeWXLWsM2ONRnV510biVR03aVCi2 ecV7nTaxka4ssdTLKcu3bpahTsu52szM11uP+r/xQwWKhj58BG4EuLuzJRkJ0ZHY voRrpM+psDmRFygva4GaBJoMqliwLw3K7LnIvu4+2eY3u+SodzZS5AFqXFysIfpi U3SQFofdZu3WqoteKOSRrPeq6VIbB13Fg6GvDafNwXl3qdBW0BBKL+9tRGctrC8G Q/0JtG6QK4uEeLUVvMxO -----END CERTIFICATE-----Generated at Tue Feb 10 02:54:51 2026 by rpki-client