This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/ee6c6a-fb55-4dc8-9dcf-22e7a37e8e38/1/yWlr9VhD3SJfQoZRaRVivi_O_PY.roa File: yWlr9VhD3SJfQoZRaRVivi_O_PY.roa (raw, json) Hash identifier: fhdr/oSGw1h3pLttatkAKAsMck/xxB0W5z4d1j4pNKo= Subject key identifier: C9:69:6B:F5:58:43:DD:22:5F:42:86:51:69:15:62:BE:2F:CE:FC:F6 Certificate issuer: /CN=b7cc2da2bdb97be912a2d942ebe7eafa4651e885 Certificate serial: 019B7EA557BE8744E1C08E698055387EAC4E Authority key identifier: B7:CC:2D:A2:BD:B9:7B:E9:12:A2:D9:42:EB:E7:EA:FA:46:51:E8:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t8wtor25e-kSotlC6-fq-kZR6IU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/ee6c6a-fb55-4dc8-9dcf-22e7a37e8e38/1/yWlr9VhD3SJfQoZRaRVivi_O_PY.roa Signing time: Fri 02 Jan 2026 12:18:43 +0000 ROA not before: Fri 02 Jan 2026 12:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44314 IP address blocks: 79.170.176.0/21 maxlen: 21 79.170.176.0/22 maxlen: 22 79.170.176.0/23 maxlen: 23 79.170.176.0/24 maxlen: 24 79.170.177.0/24 maxlen: 24 79.170.178.0/23 maxlen: 23 79.170.178.0/24 maxlen: 24 79.170.179.0/24 maxlen: 24 79.170.180.0/22 maxlen: 22 79.170.180.0/23 maxlen: 23 79.170.180.0/24 maxlen: 24 79.170.181.0/24 maxlen: 24 79.170.182.0/23 maxlen: 23 79.170.182.0/24 maxlen: 24 79.170.183.0/24 maxlen: 24 185.83.52.0/22 maxlen: 22 185.83.52.0/23 maxlen: 23 185.83.52.0/24 maxlen: 24 185.83.53.0/24 maxlen: 24 185.83.54.0/23 maxlen: 23 185.83.54.0/24 maxlen: 24 185.83.55.0/24 maxlen: 24 2a01:4e8::/32 maxlen: 32 2a01:4e8::/33 maxlen: 33 2a01:4e8::/34 maxlen: 34 2a01:4e8:127::/48 maxlen: 48 2a01:4e8:182::/48 maxlen: 48 2a01:4e8:f1d::/48 maxlen: 48 2a01:4e8:3a4d::/48 maxlen: 48 2a01:4e8:4000::/34 maxlen: 34 2a01:4e8:8000::/33 maxlen: 33 2a01:4e8:8000::/34 maxlen: 34 2a01:4e8:bce0::/48 maxlen: 48 2a01:4e8:c000::/34 maxlen: 34 2a01:4e8:c0c0::/48 maxlen: 48 2a01:4e8:c22c::/48 maxlen: 48 2a01:4e8:cafe::/48 maxlen: 48 2a01:4e8:cccc::/48 maxlen: 48 2a01:4e8:cda8::/48 maxlen: 48 2a01:4e8:feed::/48 maxlen: 48 2a01:4e8:ffff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/ee6c6a-fb55-4dc8-9dcf-22e7a37e8e38/1/t8wtor25e-kSotlC6-fq-kZR6IU.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/ee6c6a-fb55-4dc8-9dcf-22e7a37e8e38/1/t8wtor25e-kSotlC6-fq-kZR6IU.mft rsync://rpki.ripe.net/repository/DEFAULT/t8wtor25e-kSotlC6-fq-kZR6IU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:57:be:87:44:e1:c0:8e:69:80:55:38:7e:ac:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7cc2da2bdb97be912a2d942ebe7eafa4651e885 Validity Not Before: Jan 2 12:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c9696bf55843dd225f428651691562be2fcefcf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:a9:15:f4:2d:a7:dc:48:d7:18:70:83:a1:58: c8:da:69:d2:04:96:ab:4e:7b:26:c8:20:d8:99:5e: 94:36:49:3f:fe:a2:21:a4:8f:66:e8:61:88:73:bc: 0b:9b:75:65:a1:1f:fe:02:c9:34:b4:2f:9b:c9:ce: 90:d4:6e:7e:8f:83:f5:eb:32:2c:b5:fc:4e:54:cb: 36:aa:0c:76:4b:a7:d1:57:be:1c:f1:29:2a:7b:64: 9f:67:40:a2:cf:41:a1:3a:c1:50:50:3a:3d:7c:2d: 53:c7:af:39:be:ba:e3:41:a5:4c:4c:ac:19:0f:b9: 21:d0:58:b2:ba:d5:35:0d:85:56:e4:c5:44:eb:ae: 07:a2:8b:aa:ae:36:e1:8a:50:73:0b:e4:e5:fb:ff: 98:8b:bf:ee:9c:7f:07:be:4a:6c:37:06:9d:02:88: ee:84:a1:76:de:5c:50:19:bb:3e:da:3f:dc:4b:b8: e3:76:a7:30:de:b6:8f:86:f4:26:5a:9f:bf:f3:36: 27:48:6f:1d:99:5b:95:9c:31:25:47:4f:bf:06:3b: 1d:aa:8c:5d:93:b7:4d:ab:30:4f:c2:f2:45:b6:2b: 90:53:8d:a2:e1:0a:24:ac:99:aa:77:5c:e9:ed:94: f8:69:db:97:6f:16:af:8a:16:65:21:95:4f:84:b3: 0d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:69:6B:F5:58:43:DD:22:5F:42:86:51:69:15:62:BE:2F:CE:FC:F6 X509v3 Authority Key Identifier: keyid:B7:CC:2D:A2:BD:B9:7B:E9:12:A2:D9:42:EB:E7:EA:FA:46:51:E8:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t8wtor25e-kSotlC6-fq-kZR6IU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ee6c6a-fb55-4dc8-9dcf-22e7a37e8e38/1/yWlr9VhD3SJfQoZRaRVivi_O_PY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ee6c6a-fb55-4dc8-9dcf-22e7a37e8e38/1/t8wtor25e-kSotlC6-fq-kZR6IU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.170.176.0/21 185.83.52.0/22 IPv6: 2a01:4e8::/32 Signature Algorithm: sha256WithRSAEncryption c5:c3:77:de:73:8a:2a:ed:68:5f:11:68:a8:09:be:53:50:0a: 95:df:36:3f:8a:3e:2a:b1:f6:97:cf:cc:c0:91:00:e7:0c:ad: 74:9c:0a:23:0f:09:82:3b:9d:16:03:bf:bf:8a:10:5b:d8:6a: 88:ae:40:d9:51:d3:f2:fa:74:0a:66:24:46:47:1f:80:60:13: 64:bd:be:88:c8:fd:87:f7:d9:74:dd:e5:b3:c9:69:d9:4f:52: 7a:d8:f6:fd:77:fd:ba:10:c6:87:4e:3c:32:70:7c:ed:91:4d: 5d:c1:f9:cd:9b:bc:bd:fd:61:db:71:72:b3:21:cb:1b:18:2c: 9d:f1:d4:87:0f:bf:03:75:ec:16:7d:72:02:c2:3c:ca:d5:22: c6:11:62:02:05:26:cc:3d:07:02:a6:18:1c:f6:ec:30:1d:3c: 9a:4f:97:e5:7b:90:1c:5d:29:98:df:5c:fd:b7:a1:b8:ae:ef: a4:ec:7f:81:bd:a6:e2:7c:61:ae:10:11:38:e5:0d:69:d4:31: 66:34:4a:2a:77:16:59:94:01:37:ed:89:01:4f:36:04:f2:b2: cc:82:9e:b4:78:0d:b2:fd:46:96:1b:ef:53:49:f1:2c:d4:79: 5e:2a:ad:1a:5b:44:ad:bd:cc:3d:c0:38:bc:f7:e6:4f:4d:fa: 59:87:a4:b7 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt+pVe+h0ThwI5pgFU4fqxOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3Y2MyZGEyYmRiOTdiZTkxMmEyZDk0MmViZTdlYWZhNDY1 MWU4ODUwHhcNMjYwMTAyMTIxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOTY5NmJmNTU4NDNkZDIyNWY0Mjg2NTE2OTE1NjJiZTJmY2VmY2Y2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlakV9C2n3EjXGHCDoVjI2mnSBJar TnsmyCDYmV6UNkk//qIhpI9m6GGIc7wLm3VloR/+Ask0tC+byc6Q1G5+j4P16zIs tfxOVMs2qgx2S6fRV74c8Skqe2SfZ0Ciz0GhOsFQUDo9fC1Tx685vrrjQaVMTKwZ D7kh0FiyutU1DYVW5MVE664HoouqrjbhilBzC+Tl+/+Yi7/unH8HvkpsNwadAoju hKF23lxQGbs+2j/cS7jjdqcw3raPhvQmWp+/8zYnSG8dmVuVnDElR0+/Bjsdqoxd k7dNqzBPwvJFtiuQU42i4QokrJmqd1zp7ZT4aduXbxavihZlIZVPhLMN3wIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFMlpa/VYQ90iX0KGUWkVYr4vzvz2MB8GA1UdIwQY MBaAFLfMLaK9uXvpEqLZQuvn6vpGUeiFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDh3dG9yMjVlLWtTb3RsQzYtZnEta1pSNklVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9lZTZjNmEtZmI1NS00ZGM4LTlkY2Yt MjJlN2EzN2U4ZTM4LzEveVdscjlWaEQzU0pmUW9aUmFSVml2aV9PX1BZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC9lZTZjNmEtZmI1NS00ZGM4LTlkY2YtMjJlN2EzN2U4ZTM4 LzEvdDh3dG9yMjVlLWtTb3RsQzYtZnEta1pSNklVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDT6qwAwQC uVM0MA0EAgACMAcDBQAqAQToMA0GCSqGSIb3DQEBCwUAA4IBAQDFw3fec4oq7Whf EWioCb5TUAqV3zY/ij4qsfaXz8zAkQDnDK10nAojDwmCO50WA7+/ihBb2GqIrkDZ UdPy+nQKZiRGRx+AYBNkvb6IyP2H99l03eWzyWnZT1J62Pb9d/26EMaHTjwycHzt kU1dwfnNm7y9/WHbcXKzIcsbGCyd8dSHD78DdewWfXICwjzK1SLGEWICBSbMPQcC phgc9uwwHTyaT5fle5AcXSmY31z9t6G4ru+k7H+BvabifGGuEBE45Q1p1DFmNEoq dxZZlAE37YkBTzYE8rLMgp60eA2y/UaWG+9TSfEs1HleKq0aW0Stvcw9wDi89+ZP TfpZh6S3 -----END CERTIFICATE-----Generated at Mon Feb 9 23:45:09 2026 by rpki-client