This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/eac1f4-ace1-4ce1-a181-cfcabb19f989/1/YwiBk7F0B614LD9wQoEFnkWeQjs.roa File: YwiBk7F0B614LD9wQoEFnkWeQjs.roa (raw, json) Hash identifier: mvD8mcgS8Z/u8tn955UOEASMu8p9nleqgNicn8XmXOw= Subject key identifier: 63:08:81:93:B1:74:07:AD:78:2C:3F:70:42:81:05:9E:45:9E:42:3B Certificate issuer: /CN=a768bbec5a9e11bfbdaed84aa8d3aacda29889f9 Certificate serial: 019B7B35AA965A5172D5294A85B0C20AF3EA Authority key identifier: A7:68:BB:EC:5A:9E:11:BF:BD:AE:D8:4A:A8:D3:AA:CD:A2:98:89:F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2i77FqeEb-9rthKqNOqzaKYifk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/eac1f4-ace1-4ce1-a181-cfcabb19f989/1/YwiBk7F0B614LD9wQoEFnkWeQjs.roa Signing time: Thu 01 Jan 2026 20:17:53 +0000 ROA not before: Thu 01 Jan 2026 20:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197731 IP address blocks: 31.3.104.0/21 maxlen: 21 31.3.104.0/24 maxlen: 24 31.3.105.0/24 maxlen: 24 31.3.106.0/24 maxlen: 24 31.3.107.0/24 maxlen: 24 31.3.108.0/24 maxlen: 24 31.3.109.0/24 maxlen: 24 31.3.110.0/24 maxlen: 24 31.3.111.0/24 maxlen: 24 185.119.28.0/22 maxlen: 22 185.119.28.0/24 maxlen: 24 185.119.29.0/24 maxlen: 24 185.119.30.0/24 maxlen: 24 185.119.31.0/24 maxlen: 24 2a03:7900::/32 maxlen: 32 2a03:7900:500::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/eac1f4-ace1-4ce1-a181-cfcabb19f989/1/p2i77FqeEb-9rthKqNOqzaKYifk.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/eac1f4-ace1-4ce1-a181-cfcabb19f989/1/p2i77FqeEb-9rthKqNOqzaKYifk.mft rsync://rpki.ripe.net/repository/DEFAULT/p2i77FqeEb-9rthKqNOqzaKYifk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:aa:96:5a:51:72:d5:29:4a:85:b0:c2:0a:f3:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a768bbec5a9e11bfbdaed84aa8d3aacda29889f9 Validity Not Before: Jan 1 20:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=63088193b17407ad782c3f704281059e459e423b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:3e:48:9b:e8:7d:8f:62:59:f1:5f:24:22:47: f8:47:3b:e2:25:53:70:a1:36:7e:cd:46:37:4d:63: 42:52:90:40:7e:26:21:d9:91:1d:c8:99:45:27:be: 8d:75:7f:08:9c:eb:0d:8d:98:43:20:c6:9d:f1:33: 77:a8:77:b9:17:fb:03:5a:c4:f6:a4:27:8b:be:b1: 15:dc:49:76:b7:3b:76:2e:eb:2e:f4:bc:42:7c:9e: 65:d9:5b:82:4e:c7:1a:7e:ce:16:1a:0a:7b:69:e4: ac:47:4d:ff:b0:34:f5:c8:cb:8d:00:fc:b9:c5:5f: 57:b1:78:23:d3:d0:a0:c0:3a:3f:83:a1:a3:3e:59: 3e:fa:2f:9c:d2:b8:29:5a:d4:f5:db:f4:b3:45:59: d1:53:ae:b9:d0:3c:13:d2:fc:a8:6c:21:88:8d:f4: cc:a2:cb:86:4c:d3:ab:e5:f8:9f:cc:dd:31:01:a1: 99:c5:cc:a7:31:dd:c5:84:b3:ef:8b:e2:a8:cc:a1: 36:aa:88:9a:e2:e8:7d:ca:25:7b:66:8d:d4:f7:9c: c1:d0:2e:d4:d0:f6:b4:a5:73:f1:f1:c0:6e:7a:a3: c9:44:27:9f:53:18:a5:18:4e:f1:e5:50:81:fe:3d: a5:2e:a6:25:e7:94:97:21:24:e8:08:6a:54:b3:e0: a9:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:08:81:93:B1:74:07:AD:78:2C:3F:70:42:81:05:9E:45:9E:42:3B X509v3 Authority Key Identifier: keyid:A7:68:BB:EC:5A:9E:11:BF:BD:AE:D8:4A:A8:D3:AA:CD:A2:98:89:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2i77FqeEb-9rthKqNOqzaKYifk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/eac1f4-ace1-4ce1-a181-cfcabb19f989/1/YwiBk7F0B614LD9wQoEFnkWeQjs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/eac1f4-ace1-4ce1-a181-cfcabb19f989/1/p2i77FqeEb-9rthKqNOqzaKYifk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.3.104.0/21 185.119.28.0/22 IPv6: 2a03:7900::/32 Signature Algorithm: sha256WithRSAEncryption 5c:75:76:fd:4f:05:6f:22:14:a6:fa:4a:28:d1:53:49:95:21: 1e:8b:f8:be:7e:b1:02:5f:49:00:59:35:7d:67:84:2c:7b:b0: 79:ca:67:3a:18:50:4a:9b:2b:4e:f1:67:30:0a:4d:35:49:4d: 8f:20:0d:80:e4:60:de:35:08:3d:07:cc:fc:c1:f2:fd:1d:36: 88:4b:f5:6b:54:2d:47:df:d4:0a:e5:e0:6b:0d:c2:2f:f4:57: 67:95:6b:c4:0e:dc:86:5d:6f:5f:c8:b4:74:9d:fb:c2:aa:45: 5b:de:6b:a3:77:fc:2b:c3:b6:78:d5:3b:22:d9:29:c6:c9:e3: ca:f2:6c:ac:7d:06:57:38:f4:c3:48:f3:65:86:f8:4d:7d:83: 62:ee:30:7e:25:6b:dd:d1:14:88:4d:f9:f1:1e:a8:9f:f6:80: cb:8d:d2:16:45:8e:d8:cd:d0:90:73:bf:63:14:ab:d1:ed:d3: e2:d5:70:a7:9f:2d:c9:a0:e0:18:ee:b5:19:a9:7c:4a:98:c1: ae:e9:02:ae:c8:41:50:c6:d1:3a:ba:37:88:3f:7d:f0:dd:4d: f3:55:56:b8:58:85:5e:cc:5f:9a:d5:ae:46:77:18:1d:0a:78: a0:a6:28:13:9e:fe:2b:00:85:de:aa:8c:51:70:25:12:27:94: 57:70:eb:50 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt7NaqWWlFy1SlKhbDCCvPqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3NjhiYmVjNWE5ZTExYmZiZGFlZDg0YWE4ZDNhYWNkYTI5 ODg5ZjkwHhcNMjYwMTAxMjAxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MzA4ODE5M2IxNzQwN2FkNzgyYzNmNzA0MjgxMDU5ZTQ1OWU0MjNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzD5Im+h9j2JZ8V8kIkf4RzviJVNw oTZ+zUY3TWNCUpBAfiYh2ZEdyJlFJ76NdX8InOsNjZhDIMad8TN3qHe5F/sDWsT2 pCeLvrEV3El2tzt2Lusu9LxCfJ5l2VuCTscafs4WGgp7aeSsR03/sDT1yMuNAPy5 xV9XsXgj09CgwDo/g6GjPlk++i+c0rgpWtT12/SzRVnRU6650DwT0vyobCGIjfTM osuGTNOr5fifzN0xAaGZxcynMd3FhLPvi+KozKE2qoia4uh9yiV7Zo3U95zB0C7U 0Pa0pXPx8cBueqPJRCefUxilGE7x5VCB/j2lLqYl55SXISToCGpUs+CpTwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFGMIgZOxdAeteCw/cEKBBZ5FnkI7MB8GA1UdIwQY MBaAFKdou+xanhG/va7YSqjTqs2imIn5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDJpNzdGcWVFYi05cnRoS3FOT3F6YUtZaWZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9lYWMxZjQtYWNlMS00Y2UxLWExODEt Y2ZjYWJiMTlmOTg5LzEvWXdpQms3RjBCNjE0TEQ5d1FvRUZua1dlUWpzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy9lYWMxZjQtYWNlMS00Y2UxLWExODEtY2ZjYWJiMTlmOTg5 LzEvcDJpNzdGcWVFYi05cnRoS3FOT3F6YUtZaWZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDHwNoAwQC uXccMA0EAgACMAcDBQAqA3kAMA0GCSqGSIb3DQEBCwUAA4IBAQBcdXb9TwVvIhSm +koo0VNJlSEei/i+frECX0kAWTV9Z4Qse7B5ymc6GFBKmytO8WcwCk01SU2PIA2A 5GDeNQg9B8z8wfL9HTaIS/VrVC1H39QK5eBrDcIv9FdnlWvEDtyGXW9fyLR0nfvC qkVb3mujd/wrw7Z41Tsi2SnGyePK8mysfQZXOPTDSPNlhvhNfYNi7jB+JWvd0RSI TfnxHqif9oDLjdIWRY7YzdCQc79jFKvR7dPi1XCnny3JoOAY7rUZqXxKmMGu6QKu yEFQxtE6ujeIP33w3U3zVVa4WIVezF+a1a5GdxgdCnigpigTnv4rAIXeqoxRcCUS J5RXcOtQ -----END CERTIFICATE-----Generated at Mon Feb 9 23:46:46 2026 by rpki-client