This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/YQOC7uY6FRNmBO9ZN7PiM76yo6I.roa File: YQOC7uY6FRNmBO9ZN7PiM76yo6I.roa (raw, json) Hash identifier: F4wrLCo6AyKDL70hM0i0er3GASQZx9E2NWI72xLZxxE= Subject key identifier: 61:03:82:EE:E6:3A:15:13:66:04:EF:59:37:B3:E2:33:BE:B2:A3:A2 Certificate issuer: /CN=0608ade86a1ccf7a483b4c2962045db8d0ef826d Certificate serial: 019B7835313E95359E587A49938EF8A3755B Authority key identifier: 06:08:AD:E8:6A:1C:CF:7A:48:3B:4C:29:62:04:5D:B8:D0:EF:82:6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bgit6Gocz3pIO0wpYgRduNDvgm0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/YQOC7uY6FRNmBO9ZN7PiM76yo6I.roa Signing time: Thu 01 Jan 2026 06:18:30 +0000 ROA not before: Thu 01 Jan 2026 06:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16082 IP address blocks: 31.24.0.0/21 maxlen: 21 37.77.176.0/21 maxlen: 21 62.133.0.0/19 maxlen: 19 83.218.128.0/19 maxlen: 19 87.117.72.0/21 maxlen: 21 87.117.112.0/21 maxlen: 21 87.224.0.0/17 maxlen: 17 109.238.64.0/20 maxlen: 20 185.15.104.0/22 maxlen: 22 212.237.64.0/19 maxlen: 19 217.13.128.0/19 maxlen: 19 2a02:b90::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.mft rsync://rpki.ripe.net/repository/DEFAULT/Bgit6Gocz3pIO0wpYgRduNDvgm0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:31:3e:95:35:9e:58:7a:49:93:8e:f8:a3:75:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0608ade86a1ccf7a483b4c2962045db8d0ef826d Validity Not Before: Jan 1 06:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=610382eee63a15136604ef5937b3e233beb2a3a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:44:2e:9f:7b:4f:7d:83:07:55:7c:f2:b8:32: 4e:f2:79:e5:42:39:85:e3:99:dd:4c:32:95:19:60: fa:9f:a5:7e:5e:51:40:eb:d6:5b:4b:4c:0b:2e:57: 5a:6f:49:ee:3a:88:1a:44:dd:48:be:79:90:67:76: 93:2c:f9:89:70:a0:5d:56:e3:c7:f0:37:59:fa:c6: 71:be:8e:1d:7b:51:ea:ec:86:d1:a4:89:91:b9:24: cc:f3:8f:81:eb:74:5c:38:e2:8f:75:fa:d1:9a:43: e6:76:3b:ef:f8:11:90:40:48:72:94:92:c0:2e:b1: 1c:fd:01:ab:86:57:d0:bc:9d:3c:91:68:1d:e1:67: 79:73:fc:e0:14:7f:a8:e7:70:74:32:f2:69:48:f0: a6:f5:9f:80:a4:78:a6:19:e0:d2:51:3e:8e:4f:a5: 7d:d2:62:16:a3:fd:4a:9b:0f:cd:9a:b5:d1:97:b0: 90:48:d4:83:31:4c:0e:9b:1a:4e:cf:4b:eb:90:da: 9d:4c:ea:11:74:63:47:06:28:f3:02:25:10:fa:ac: fd:8c:e6:61:17:6d:06:69:1c:0b:11:09:ef:c7:52: ba:52:44:f0:61:2b:50:09:53:5c:94:a3:f5:a6:69: 43:6d:3f:c1:1f:26:09:36:db:c4:0f:03:0a:0e:1b: 7b:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:03:82:EE:E6:3A:15:13:66:04:EF:59:37:B3:E2:33:BE:B2:A3:A2 X509v3 Authority Key Identifier: keyid:06:08:AD:E8:6A:1C:CF:7A:48:3B:4C:29:62:04:5D:B8:D0:EF:82:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bgit6Gocz3pIO0wpYgRduNDvgm0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/YQOC7uY6FRNmBO9ZN7PiM76yo6I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.24.0.0/21 37.77.176.0/21 62.133.0.0/19 83.218.128.0/19 87.117.72.0/21 87.117.112.0/21 87.224.0.0/17 109.238.64.0/20 185.15.104.0/22 212.237.64.0/19 217.13.128.0/19 IPv6: 2a02:b90::/32 Signature Algorithm: sha256WithRSAEncryption 1a:e2:28:cd:e4:45:b7:49:ef:bf:98:f7:fa:43:c3:e1:51:fc: 3b:54:19:f3:6f:d8:a7:94:ac:16:ff:c6:59:4a:c5:46:ec:24: 0b:7f:e4:b6:63:19:9d:3e:18:88:e7:a9:49:5d:cc:fe:a4:05: 77:4b:25:b0:81:fd:4c:c9:87:44:f7:10:85:ab:45:c9:a7:5c: 32:d8:e7:03:bf:4b:31:52:04:b2:57:88:c4:c5:7b:77:17:ab: cd:d8:1c:31:41:4b:b8:6d:36:96:d9:6e:eb:19:56:75:a8:1f: 6e:b0:8b:37:8d:46:8b:56:57:42:76:ad:1c:94:6d:50:34:d7: c2:e3:63:d8:b3:36:28:19:d8:18:8b:92:46:17:1f:63:b4:18: 7e:d8:66:f8:00:f0:3e:16:db:04:9b:ea:54:a6:1d:b3:4d:90: 72:9d:54:c6:e8:28:c5:b3:b0:8b:36:5a:13:19:9e:27:ac:08: cc:47:6b:7b:be:4d:30:de:af:09:60:c1:65:b9:e7:d2:9e:20: d1:4b:ae:de:5c:fa:95:e3:63:da:e0:13:52:80:ab:2f:f8:e0: ee:ee:0b:ab:ec:38:20:ae:93:13:31:24:9f:c1:3c:97:6f:9e: 55:3d:4c:54:02:8c:85:32:1d:93:28:eb:af:46:64:d4:9f:dd: 34:67:43:73 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgISAZt4NTE+lTWeWHpJk474o3VbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2MDhhZGU4NmExY2NmN2E0ODNiNGMyOTYyMDQ1ZGI4ZDBl ZjgyNmQwHhcNMjYwMTAxMDYxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MTAzODJlZWU2M2ExNTEzNjYwNGVmNTkzN2IzZTIzM2JlYjJhM2EyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEQun3tPfYMHVXzyuDJO8nnlQjmF 45ndTDKVGWD6n6V+XlFA69ZbS0wLLldab0nuOogaRN1IvnmQZ3aTLPmJcKBdVuPH 8DdZ+sZxvo4de1Hq7IbRpImRuSTM84+B63RcOOKPdfrRmkPmdjvv+BGQQEhylJLA LrEc/QGrhlfQvJ08kWgd4Wd5c/zgFH+o53B0MvJpSPCm9Z+ApHimGeDSUT6OT6V9 0mIWo/1Kmw/NmrXRl7CQSNSDMUwOmxpOz0vrkNqdTOoRdGNHBijzAiUQ+qz9jOZh F20GaRwLEQnvx1K6UkTwYStQCVNclKP1pmlDbT/BHyYJNtvEDwMKDht7dQIDAQAB o4ICVDCCAlAwHQYDVR0OBBYEFGEDgu7mOhUTZgTvWTez4jO+sqOiMB8GA1UdIwQY MBaAFAYIrehqHM96SDtMKWIEXbjQ74JtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmdpdDZHb2N6M3BJTzB3cFlnUmR1TkR2Z20wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8yYTk4ZmItZTY3MC00Y2Y0LTgxYTQt NDIxOTAyMjM1MGZhLzEvWVFPQzd1WTZGUk5tQk85Wk43UGlNNzZ5bzZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8yYTk4ZmItZTY3MC00Y2Y0LTgxYTQtNDIxOTAyMjM1MGZh LzEvQmdpdDZHb2N6M3BJTzB3cFlnUmR1TkR2Z20wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGoGCCsGAQUFBwEHAQH/BFswWTBIBAIAATBCAwQDHxgAAwQD JU2wAwQFPoUAAwQFU9qAAwQDV3VIAwQDV3VwAwQHV+AAAwQEbe5AAwQCuQ9oAwQF 1O1AAwQF2Q2AMA0EAgACMAcDBQAqAguQMA0GCSqGSIb3DQEBCwUAA4IBAQAa4ijN 5EW3Se+/mPf6Q8PhUfw7VBnzb9inlKwW/8ZZSsVG7CQLf+S2YxmdPhiI56lJXcz+ pAV3SyWwgf1MyYdE9xCFq0XJp1wy2OcDv0sxUgSyV4jExXt3F6vN2BwxQUu4bTaW 2W7rGVZ1qB9usIs3jUaLVldCdq0clG1QNNfC42PYszYoGdgYi5JGFx9jtBh+2Gb4 APA+FtsEm+pUph2zTZBynVTG6CjFs7CLNloTGZ4nrAjMR2t7vk0w3q8JYMFluefS niDRS67eXPqV42Pa4BNSgKsv+ODu7gur7DggrpMTMSSfwTyXb55VPUxUAoyFMh2T KOuvRmTUn900Z0Nz -----END CERTIFICATE-----Generated at Tue Feb 10 04:15:00 2026 by rpki-client