This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/ydnlWyGO3Jfdb_tyMWMU8xPHXYI.roa File: ydnlWyGO3Jfdb_tyMWMU8xPHXYI.roa (raw, json) Hash identifier: Ru/439bGNY9LH8lI6h5ro7RQl1vDsNzQYkMDDvy5oe8= Subject key identifier: C9:D9:E5:5B:21:8E:DC:97:DD:6F:FB:72:31:63:14:F3:13:C7:5D:82 Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d Certificate serial: 019B7D5AF3B4DAA0F0FAD3CCCDEC2638E1CD Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/ydnlWyGO3Jfdb_tyMWMU8xPHXYI.roa Signing time: Fri 02 Jan 2026 06:17:51 +0000 ROA not before: Fri 02 Jan 2026 06:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7018 IP address blocks: 89.34.224.0/23 maxlen: 24 89.34.228.0/24 maxlen: 24 89.34.231.0/24 maxlen: 24 89.38.228.0/24 maxlen: 24 89.38.229.0/24 maxlen: 24 89.40.82.0/24 maxlen: 24 89.42.80.0/24 maxlen: 24 89.42.81.0/24 maxlen: 24 89.42.82.0/24 maxlen: 24 89.42.86.0/24 maxlen: 24 89.42.95.0/24 maxlen: 24 89.42.143.0/24 maxlen: 24 89.43.140.0/24 maxlen: 24 89.43.143.0/24 maxlen: 24 89.46.0.0/24 maxlen: 24 89.46.3.0/24 maxlen: 24 89.47.99.0/24 maxlen: 24 89.47.115.0/24 maxlen: 24 89.47.117.0/24 maxlen: 24 89.47.118.0/24 maxlen: 24 89.47.119.0/24 maxlen: 24 89.47.125.0/24 maxlen: 24 89.47.126.0/24 maxlen: 24 89.47.127.0/24 maxlen: 24 93.113.181.0/24 maxlen: 24 93.114.74.0/24 maxlen: 24 93.114.75.0/24 maxlen: 24 93.114.76.0/24 maxlen: 24 93.114.77.0/24 maxlen: 24 93.114.78.0/24 maxlen: 24 93.114.79.0/24 maxlen: 24 185.101.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:f3:b4:da:a0:f0:fa:d3:cc:cd:ec:26:38:e1:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d Validity Not Before: Jan 2 06:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c9d9e55b218edc97dd6ffb72316314f313c75d82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:af:56:de:c3:14:52:42:fd:4d:ff:88:a0:a5: 32:e6:91:0e:c1:38:55:cc:42:02:6a:df:ac:c9:55: c4:91:84:7f:75:8c:b8:0c:d5:3c:3e:b1:b4:e8:64: 6d:78:ca:91:99:6a:b2:12:59:07:c2:cb:a5:3b:50: ee:d3:05:f1:96:6e:c3:d3:34:0d:82:7c:85:de:2f: 7c:50:00:ec:8b:56:74:4e:17:55:13:98:d2:b1:f5: 7c:cd:8f:3c:ae:13:a6:ce:88:fa:aa:3e:85:12:fe: 11:ea:6b:9c:10:63:c9:0e:42:73:c7:ef:0b:f3:4e: 4c:57:0e:a9:7b:cb:8f:e2:bf:a0:2a:61:f8:45:5c: 4c:0f:fd:1a:ae:3e:2c:3e:f7:09:ac:19:9c:b4:92: 0b:d9:be:df:d2:da:a0:91:cd:04:cb:3c:2c:26:b6: 45:d9:d2:48:3e:68:72:74:2b:3e:f7:ff:2d:2e:00: 1d:cd:1f:2f:4a:4f:af:83:dc:3e:cc:cd:47:64:73: 1b:f3:85:3a:95:60:82:dc:9c:a2:d4:30:ac:c6:24: cd:2f:6b:37:38:91:7a:bd:a8:90:11:15:b4:3e:fa: 68:c4:59:e7:b3:a1:5d:2c:10:7c:69:26:b5:ef:4b: d2:c1:1d:5f:dc:1d:ac:41:f4:35:4b:c3:ac:cc:ae: 0f:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:D9:E5:5B:21:8E:DC:97:DD:6F:FB:72:31:63:14:F3:13:C7:5D:82 X509v3 Authority Key Identifier: keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/ydnlWyGO3Jfdb_tyMWMU8xPHXYI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.34.224.0/23 89.34.228.0/24 89.34.231.0/24 89.38.228.0/23 89.40.82.0/24 89.42.80.0-89.42.82.255 89.42.86.0/24 89.42.95.0/24 89.42.143.0/24 89.43.140.0/24 89.43.143.0/24 89.46.0.0/24 89.46.3.0/24 89.47.99.0/24 89.47.115.0/24 89.47.117.0-89.47.119.255 89.47.125.0-89.47.127.255 93.113.181.0/24 93.114.74.0-93.114.79.255 185.101.105.0/24 Signature Algorithm: sha256WithRSAEncryption 65:9e:fc:2d:97:47:a5:17:92:02:4c:bb:20:75:6a:8c:4f:74: 43:41:4b:44:3c:89:7f:d9:93:b2:0a:12:33:71:fd:c5:1d:0e: 0c:57:9f:77:11:98:e0:10:d8:b5:5a:a8:ab:f4:52:24:fd:b3: cd:f7:b6:d4:e8:c6:df:8d:9d:64:97:db:a5:a4:78:a3:0e:26: 7c:54:d7:36:4f:d9:1c:c8:9c:12:16:92:61:8d:b4:ad:20:13: 14:e6:1e:29:c2:09:63:c0:9d:39:dc:6e:95:1b:b6:09:3e:07: 00:bc:b3:b2:91:5b:5c:ba:98:78:e4:ea:d2:99:8b:14:b2:4b: d7:df:0b:91:f5:e2:47:9c:b1:91:41:d1:58:43:a6:6c:82:f5: 8f:02:93:6c:d2:56:28:81:63:cd:e0:a4:27:c5:90:62:54:ab: 61:0a:51:f0:93:1d:22:a2:51:9e:f8:54:d8:10:aa:ea:a6:ad: 8c:72:d1:c8:d1:84:ef:8f:1b:53:c2:cc:7e:13:1c:8d:a3:81: 89:14:88:12:34:3f:39:49:16:2e:a2:dd:dc:5d:43:49:f7:06: 31:30:53:41:50:6f:d0:03:e0:97:f0:57:fb:bf:82:ac:91:aa: 71:38:55:a1:1d:1d:fd:e0:b3:c9:fc:39:43:73:ca:27:04:9e: 48:9a:3a:c5 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt9WvO02qDw+tPMzewmOOHNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm MDFjMWQwHhcNMjYwMTAyMDYxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOWQ5ZTU1YjIxOGVkYzk3ZGQ2ZmZiNzIzMTYzMTRmMzEzYzc1ZDgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtq9W3sMUUkL9Tf+IoKUy5pEOwThV zEICat+syVXEkYR/dYy4DNU8PrG06GRteMqRmWqyElkHwsulO1Du0wXxlm7D0zQN gnyF3i98UADsi1Z0ThdVE5jSsfV8zY88rhOmzoj6qj6FEv4R6mucEGPJDkJzx+8L 805MVw6pe8uP4r+gKmH4RVxMD/0arj4sPvcJrBmctJIL2b7f0tqgkc0EyzwsJrZF 2dJIPmhydCs+9/8tLgAdzR8vSk+vg9w+zM1HZHMb84U6lWCC3Jyi1DCsxiTNL2s3 OJF6vaiQERW0PvpoxFnns6FdLBB8aSa170vSwR1f3B2sQfQ1S8OszK4PDwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFMnZ5VshjtyX3W/7cjFjFPMTx12CMB8GA1UdIwQY MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt YjQyZjIzZDgyOGMzLzEveWRubFd5R08zSmZkYl90eU1XTVU4eFBIWFlJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIG1BggrBgEFBQcBBwEB/wSBpTCBojCBnwQCAAEwgZgDBAFZ IuADBABZIuQDBABZIucDBAFZJuQDBABZKFIwDAMEBFkqUAMEAFkqUgMEAFkqVgME AFkqXwMEAFkqjwMEAFkrjAMEAFkrjwMEAFkuAAMEAFkuAwMEAFkvYwMEAFkvczAM AwQAWS91AwQDWS9wMAwDBABZL30DBAdZLwADBABdcbUwDAMEAV1ySgMEBF1yQAME ALllaTANBgkqhkiG9w0BAQsFAAOCAQEAZZ78LZdHpReSAky7IHVqjE90Q0FLRDyJ f9mTsgoSM3H9xR0ODFefdxGY4BDYtVqoq/RSJP2zzfe21OjG342dZJfbpaR4ow4m fFTXNk/ZHMicEhaSYY20rSATFOYeKcIJY8CdOdxulRu2CT4HALyzspFbXLqYeOTq 0pmLFLJL198LkfXiR5yxkUHRWEOmbIL1jwKTbNJWKIFjzeCkJ8WQYlSrYQpR8JMd IqJRnvhU2BCq6qatjHLRyNGE748bU8LMfhMcjaOBiRSIEjQ/OUkWLqLd3F1DSfcG MTBTQVBv0APgl/BX+7+CrJGqcThVoR0d/eCzyfw5Q3PKJwSeSJo6xQ== -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:14 2026 by rpki-client