This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/YTCh_KTvg3_khxNc30C-teYdFt8.roa File: YTCh_KTvg3_khxNc30C-teYdFt8.roa (raw, json) Hash identifier: Q0VAnidH4TLtzlGY3yDgOA7gaxF3mxZbgN5VU2AOhNI= Subject key identifier: 61:30:A1:FC:A4:EF:83:7F:E4:87:13:5C:DF:40:BE:B5:E6:1D:16:DF Certificate issuer: /CN=1daf46a40c246d6540d992c321b1cc3623d65995 Certificate serial: 019BC7BE57E25D7761D057F1FCF26A24F95C Authority key identifier: 1D:AF:46:A4:0C:24:6D:65:40:D9:92:C3:21:B1:CC:36:23:D6:59:95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/YTCh_KTvg3_khxNc30C-teYdFt8.roa Signing time: Fri 16 Jan 2026 16:58:18 +0000 ROA not before: Fri 16 Jan 2026 16:58:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62370 IP address blocks: 5.104.228.0/24 maxlen: 24 37.148.161.0/24 maxlen: 24 77.95.229.0/24 maxlen: 24 78.41.204.0/24 maxlen: 24 78.41.205.0/24 maxlen: 24 78.41.207.0/24 maxlen: 24 89.207.128.0/24 maxlen: 24 89.207.130.0/24 maxlen: 24 89.207.131.0/24 maxlen: 24 89.207.134.0/24 maxlen: 24 128.204.192.0/24 maxlen: 24 185.62.56.0/24 maxlen: 24 185.62.57.0/24 maxlen: 24 185.62.58.0/24 maxlen: 24 185.62.59.0/24 maxlen: 24 193.33.60.0/24 maxlen: 24 193.33.61.0/24 maxlen: 24 193.34.166.0/24 maxlen: 24 193.34.167.0/24 maxlen: 24 2a00:7b80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.crl rsync://rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.mft rsync://rpki.ripe.net/repository/DEFAULT/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c7:be:57:e2:5d:77:61:d0:57:f1:fc:f2:6a:24:f9:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1daf46a40c246d6540d992c321b1cc3623d65995 Validity Not Before: Jan 16 16:58:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6130a1fca4ef837fe487135cdf40beb5e61d16df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:53:81:b9:c8:64:5b:1f:ec:75:98:b5:f2:38: fb:b6:2e:5b:53:a2:39:7a:88:e1:e6:33:ce:a1:06: c1:9f:e0:ac:41:dc:07:4f:8e:11:5b:91:6c:aa:bc: d2:85:c5:a7:bb:d6:60:be:b0:28:7e:e1:26:9e:31: bb:81:2e:01:62:b7:43:96:e7:0e:36:99:74:b4:00: 8c:09:27:db:9c:0c:ed:98:3f:3a:1d:02:82:e7:19: 10:40:71:55:e4:aa:9c:21:bb:30:06:8b:25:fe:4c: 56:b2:1b:71:1d:e0:da:8e:58:5f:8b:e1:81:90:56: 3c:78:2d:4c:5b:6c:6f:25:f2:8e:2a:e7:08:22:8c: f6:c2:55:ca:b9:48:5f:af:f7:6c:16:ef:f8:19:bd: cb:81:f9:82:11:fd:3c:d7:38:d4:51:99:9e:54:5c: cf:9b:61:37:9e:e2:b7:78:04:b0:9b:d0:3c:eb:b2: bb:1a:5f:af:07:39:ef:69:8f:37:8b:37:74:be:b8: 5e:4f:ab:c8:d5:5c:4b:66:a1:41:3e:68:51:59:b6: 65:88:29:8a:13:96:d7:30:11:1b:ea:a7:be:70:1e: a6:c1:b0:e1:e8:9f:59:16:fc:85:3f:e7:6a:b4:4e: d0:0b:b1:b0:4e:40:03:c4:c5:bc:67:b3:75:7c:c3: 6c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:30:A1:FC:A4:EF:83:7F:E4:87:13:5C:DF:40:BE:B5:E6:1D:16:DF X509v3 Authority Key Identifier: keyid:1D:AF:46:A4:0C:24:6D:65:40:D9:92:C3:21:B1:CC:36:23:D6:59:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/YTCh_KTvg3_khxNc30C-teYdFt8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.104.228.0/24 37.148.161.0/24 77.95.229.0/24 78.41.204.0/23 78.41.207.0/24 89.207.128.0/24 89.207.130.0/23 89.207.134.0/24 128.204.192.0/24 185.62.56.0/22 193.33.60.0/23 193.34.166.0/23 IPv6: 2a00:7b80::/32 Signature Algorithm: sha256WithRSAEncryption 7b:7c:0f:6e:46:51:6b:c8:ab:81:88:dc:95:16:04:4e:fa:ab: 5b:cf:3a:6a:92:6a:55:a2:6b:6f:67:b1:31:0f:24:fb:9d:a1: 5a:59:43:bd:1c:36:a1:2a:f4:18:e3:5b:73:85:3d:6d:0e:90: bd:6f:d3:d0:98:14:9c:75:60:6a:7b:26:0c:ee:2d:90:90:89: 17:8a:70:7f:f9:87:35:ea:33:c6:a0:52:1d:35:08:f0:57:95: 35:6a:c9:02:c8:25:7b:df:c6:02:55:28:5a:84:7d:8c:a0:21: 83:db:be:54:99:57:7d:23:da:f0:2f:08:1d:a1:8b:20:04:bf: a4:13:a8:7a:16:5c:d9:7b:3e:c0:1b:11:64:52:b1:31:9f:09: 26:fd:56:64:2a:01:66:b4:de:f7:33:d0:06:d8:8b:b8:5a:17: 90:80:49:fc:24:67:9f:88:dc:97:05:07:d7:d4:56:3e:aa:db: ef:55:d2:33:fe:38:3a:7a:48:88:5d:42:d6:e8:4a:42:21:bb: 91:ad:bc:cc:55:97:34:55:07:f7:4e:50:bf:d7:80:04:be:5d: 5b:3c:7a:2b:3a:ff:22:61:56:32:43:3e:e2:32:60:e9:67:9a: 1b:4d:b2:10:d7:43:23:99:e9:c4:4a:05:cf:1f:74:1a:73:bb: 71:2b:71:60 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgISAZvHvlfiXXdh0Ffx/PJqJPlcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkYWY0NmE0MGMyNDZkNjU0MGQ5OTJjMzIxYjFjYzM2MjNk NjU5OTUwHhcNMjYwMTE2MTY1ODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MTMwYTFmY2E0ZWY4MzdmZTQ4NzEzNWNkZjQwYmViNWU2MWQxNmRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFOBuchkWx/sdZi18jj7ti5bU6I5 eojh5jPOoQbBn+CsQdwHT44RW5FsqrzShcWnu9ZgvrAofuEmnjG7gS4BYrdDlucO Npl0tACMCSfbnAztmD86HQKC5xkQQHFV5KqcIbswBosl/kxWshtxHeDajlhfi+GB kFY8eC1MW2xvJfKOKucIIoz2wlXKuUhfr/dsFu/4Gb3LgfmCEf081zjUUZmeVFzP m2E3nuK3eASwm9A867K7Gl+vBznvaY83izd0vrheT6vI1VxLZqFBPmhRWbZliCmK E5bXMBEb6qe+cB6mwbDh6J9ZFvyFP+dqtE7QC7GwTkADxMW8Z7N1fMNsGQIDAQAB o4ICWjCCAlYwHQYDVR0OBBYEFGEwofyk74N/5IcTXN9AvrXmHRbfMB8GA1UdIwQY MBaAFB2vRqQMJG1lQNmSwyGxzDYj1lmVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGE5R3BBd2tiV1ZBMlpMREliSE1OaVBXV1pVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS80NGMwZWYtNWRhNi00ZmYyLWI1ZWYt NzlmMDQ4YmQyYTdhLzEvWVRDaF9LVHZnM19raHhOYzMwQy10ZVlkRnQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS80NGMwZWYtNWRhNi00ZmYyLWI1ZWYtNzlmMDQ4YmQyYTdh LzEvSGE5R3BBd2tiV1ZBMlpMREliSE1OaVBXV1pVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHAGCCsGAQUFBwEHAQH/BGEwXzBOBAIAATBIAwQABWjkAwQA JZShAwQATV/lAwQBTinMAwQATinPAwQAWc+AAwQBWc+CAwQAWc+GAwQAgMzAAwQC uT44AwQBwSE8AwQBwSKmMA0EAgACMAcDBQAqAHuAMA0GCSqGSIb3DQEBCwUAA4IB AQB7fA9uRlFryKuBiNyVFgRO+qtbzzpqkmpVomtvZ7ExDyT7naFaWUO9HDahKvQY 41tzhT1tDpC9b9PQmBScdWBqeyYM7i2QkIkXinB/+Yc16jPGoFIdNQjwV5U1askC yCV738YCVShahH2MoCGD275UmVd9I9rwLwgdoYsgBL+kE6h6FlzZez7AGxFkUrEx nwkm/VZkKgFmtN73M9AG2Iu4WheQgEn8JGefiNyXBQfX1FY+qtvvVdIz/jg6ekiI XULW6EpCIbuRrbzMVZc0VQf3TlC/14AEvl1bPHorOv8iYVYyQz7iMmDpZ5obTbIQ 10MjmenESgXPH3Qac7txK3Fg -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:02 2026 by rpki-client