This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/yWPqOgOBvju_AqBpcll2n69Siyg.roa File: yWPqOgOBvju_AqBpcll2n69Siyg.roa (raw, json) Hash identifier: r7Vqk0QTVCvbIxJGhQ/NDTG06WGq4j4lpvgrIiORKak= Subject key identifier: C9:63:EA:3A:03:81:BE:3B:BF:02:A0:69:72:59:76:9F:AF:52:8B:28 Certificate issuer: /CN=eacdc1e247faa95318082a4ac5edbd80511f8df7 Certificate serial: 019B7F15EA714AE5C635439044C5C7C002F8 Authority key identifier: EA:CD:C1:E2:47:FA:A9:53:18:08:2A:4A:C5:ED:BD:80:51:1F:8D:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6s3B4kf6qVMYCCpKxe29gFEfjfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/yWPqOgOBvju_AqBpcll2n69Siyg.roa Signing time: Fri 02 Jan 2026 14:21:41 +0000 ROA not before: Fri 02 Jan 2026 14:21:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57152 IP address blocks: 104.247.170.0/24 maxlen: 24 104.247.172.0/24 maxlen: 24 104.247.174.0/24 maxlen: 24 104.247.176.0/24 maxlen: 24 104.247.177.0/24 maxlen: 24 104.247.178.0/24 maxlen: 24 104.247.180.0/24 maxlen: 24 104.247.181.0/24 maxlen: 24 104.247.182.0/24 maxlen: 24 104.247.184.0/24 maxlen: 24 104.247.185.0/24 maxlen: 24 104.247.186.0/24 maxlen: 24 104.247.187.0/24 maxlen: 24 104.247.190.0/24 maxlen: 24 104.247.191.0/24 maxlen: 24 185.73.129.0/24 maxlen: 24 185.73.130.0/24 maxlen: 24 185.137.215.0/24 maxlen: 24 2a03:a5a0:1::/48 maxlen: 48 2a03:a5a0:4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.mft rsync://rpki.ripe.net/repository/DEFAULT/6s3B4kf6qVMYCCpKxe29gFEfjfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:ea:71:4a:e5:c6:35:43:90:44:c5:c7:c0:02:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eacdc1e247faa95318082a4ac5edbd80511f8df7 Validity Not Before: Jan 2 14:21:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c963ea3a0381be3bbf02a0697259769faf528b28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:2b:da:6f:fb:75:ac:c9:38:c3:c5:66:27:09: 1b:43:3f:e1:80:35:86:97:4e:e5:a6:26:4b:19:7d: 20:fd:78:53:d3:91:5e:8b:a4:04:6b:dc:53:7c:b0: b1:34:12:5b:ac:fa:8f:a5:5c:22:7b:32:b9:3d:12: 5b:12:bc:07:af:61:86:6a:7f:7a:b3:22:32:41:d9: 65:e0:63:43:47:93:d7:e4:02:2a:93:fe:9c:19:51: 33:e2:c2:ef:0b:4b:13:47:dc:a3:f2:d3:30:2d:9b: 5a:12:e3:df:39:66:8e:6e:9b:af:4d:17:6b:4c:ef: 48:bc:3c:1d:e6:1b:46:3b:23:21:11:d7:7c:02:a3: b0:36:48:df:b5:9a:52:54:fd:d9:19:19:41:2b:45: 6b:f8:89:33:2d:a7:6b:84:8d:a0:72:90:3d:13:3b: 35:da:7c:44:00:69:4a:2b:47:eb:38:35:78:ab:13: 1a:09:6b:c4:75:98:c7:9d:e8:14:25:a3:38:b5:1b: 19:72:51:43:82:3e:8b:08:4d:cf:2a:a4:31:ec:fe: 72:92:ca:33:8b:c0:65:80:6f:01:c9:05:89:e9:98: 13:eb:72:ef:1c:fa:75:9b:d5:cb:ad:c0:0e:b4:75: 05:7f:d6:2f:72:bb:c7:b5:a2:63:0f:a2:67:f0:9d: 0d:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:63:EA:3A:03:81:BE:3B:BF:02:A0:69:72:59:76:9F:AF:52:8B:28 X509v3 Authority Key Identifier: keyid:EA:CD:C1:E2:47:FA:A9:53:18:08:2A:4A:C5:ED:BD:80:51:1F:8D:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6s3B4kf6qVMYCCpKxe29gFEfjfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/yWPqOgOBvju_AqBpcll2n69Siyg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.247.170.0/24 104.247.172.0/24 104.247.174.0/24 104.247.176.0-104.247.178.255 104.247.180.0-104.247.182.255 104.247.184.0/22 104.247.190.0/23 185.73.129.0-185.73.130.255 185.137.215.0/24 IPv6: 2a03:a5a0:1::/48 2a03:a5a0:4::/48 Signature Algorithm: sha256WithRSAEncryption 0f:05:54:cc:4f:5a:50:f4:7f:46:62:2a:ac:5a:3b:40:e9:3a: 67:3a:d4:03:19:4a:81:8f:50:25:7c:07:6f:8f:6d:83:df:80: b3:c9:60:af:80:3b:18:31:3e:bf:9b:c8:08:aa:a7:4d:40:21: a2:8b:87:38:da:e3:b4:cc:a1:6a:97:e4:9b:3e:ff:f3:10:c6: 9f:10:c3:9b:38:4c:d5:5b:3f:0a:97:4b:ce:7d:95:04:81:7c: 4d:fa:f3:e6:80:f0:f6:33:2c:71:a4:5d:03:4f:52:91:c3:d2: d7:f7:06:db:45:0f:39:8d:e5:ec:9b:c8:1e:3f:60:ab:ae:a2: 6a:ac:8c:df:d5:54:10:95:6f:ef:e7:41:5f:c9:d1:5a:fb:62: e0:01:20:3c:d7:38:48:e1:8a:3a:13:88:70:74:ac:e5:28:ab: 8e:e1:40:79:7d:d7:30:b2:80:cf:24:01:fe:00:c5:eb:b1:48: 0c:9f:41:c7:d2:34:74:fa:ad:1c:2d:49:4e:c2:64:58:d4:41: 61:8e:e1:8e:44:c7:34:31:26:ea:09:87:fb:29:2b:78:ae:e4: ce:49:84:13:63:ee:98:9a:2b:5a:62:b3:fe:ca:7b:70:72:49: 8a:bb:33:97:92:39:69:de:ef:7a:06:46:66:ff:3f:a3:6c:b8: a2:3f:35:b1 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgISAZt/FepxSuXGNUOQRMXHwAL4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhY2RjMWUyNDdmYWE5NTMxODA4MmE0YWM1ZWRiZDgwNTEx ZjhkZjcwHhcNMjYwMTAyMTQyMTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOTYzZWEzYTAzODFiZTNiYmYwMmEwNjk3MjU5NzY5ZmFmNTI4YjI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCvab/t1rMk4w8VmJwkbQz/hgDWG l07lpiZLGX0g/XhT05Fei6QEa9xTfLCxNBJbrPqPpVwiezK5PRJbErwHr2GGan96 syIyQdll4GNDR5PX5AIqk/6cGVEz4sLvC0sTR9yj8tMwLZtaEuPfOWaObpuvTRdr TO9IvDwd5htGOyMhEdd8AqOwNkjftZpSVP3ZGRlBK0Vr+IkzLadrhI2gcpA9Ezs1 2nxEAGlKK0frODV4qxMaCWvEdZjHnegUJaM4tRsZclFDgj6LCE3PKqQx7P5yksoz i8BlgG8ByQWJ6ZgT63LvHPp1m9XLrcAOtHUFf9YvcrvHtaJjD6Jn8J0N9QIDAQAB o4ICbDCCAmgwHQYDVR0OBBYEFMlj6joDgb47vwKgaXJZdp+vUosoMB8GA1UdIwQY MBaAFOrNweJH+qlTGAgqSsXtvYBRH433MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnMzQjRrZjZxVk1ZQ0NwS3hlMjlnRkVmamZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9lNmM0NGMtMzEyNS00ZmU2LWEwMGQt NjI4Y2NmMDBkZmJkLzEveVdQcU9nT0J2anVfQXFCcGNsbDJuNjlTaXlnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS9lNmM0NGMtMzEyNS00ZmU2LWEwMGQtNjI4Y2NmMDBkZmJk LzEvNnMzQjRrZjZxVk1ZQ0NwS3hlMjlnRkVmamZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGBBggrBgEFBQcBBwEB/wRyMHAwVAQCAAEwTgMEAGj3qgME AGj3rAMEAGj3rjAMAwQEaPewAwQAaPeyMAwDBAJo97QDBABo97YDBAJo97gDBAFo 974wDAMEALlJgQMEALlJggMEALmJ1zAYBAIAAjASAwcAKgOloAABAwcAKgOloAAE MA0GCSqGSIb3DQEBCwUAA4IBAQAPBVTMT1pQ9H9GYiqsWjtA6TpnOtQDGUqBj1Al fAdvj22D34CzyWCvgDsYMT6/m8gIqqdNQCGii4c42uO0zKFql+SbPv/zEMafEMOb OEzVWz8Kl0vOfZUEgXxN+vPmgPD2MyxxpF0DT1KRw9LX9wbbRQ85jeXsm8geP2Cr rqJqrIzf1VQQlW/v50FfydFa+2LgASA81zhI4Yo6E4hwdKzlKKuO4UB5fdcwsoDP JAH+AMXrsUgMn0HH0jR0+q0cLUlOwmRY1EFhjuGORMc0MSbqCYf7KSt4ruTOSYQT Y+6YmitaYrP+yntwckmKuzOXkjlp3u96BkZm/z+jbLiiPzWx -----END CERTIFICATE-----Generated at Mon Jan 26 11:40:03 2026 by rpki-client