This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/yNpYoRN2Jui6WiJYc8qJGmLQ8ZM.roa File: yNpYoRN2Jui6WiJYc8qJGmLQ8ZM.roa (raw, json) Hash identifier: N3NkPMi2wZ62GAfD3+jtEuabxW8VmrmktMjIWdHv/jo= Subject key identifier: C8:DA:58:A1:13:76:26:E8:BA:5A:22:58:73:CA:89:1A:62:D0:F1:93 Certificate issuer: /CN=d31d4b941e064b46bc29af645bc754704d3a94c1 Certificate serial: 019B797EC6CD7C1B929556144F1DF4BB785D Authority key identifier: D3:1D:4B:94:1E:06:4B:46:BC:29:AF:64:5B:C7:54:70:4D:3A:94:C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0x1LlB4GS0a8Ka9kW8dUcE06lME.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/yNpYoRN2Jui6WiJYc8qJGmLQ8ZM.roa Signing time: Thu 01 Jan 2026 12:18:30 +0000 ROA not before: Thu 01 Jan 2026 12:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57424 IP address blocks: 149.62.48.0/24 maxlen: 24 149.62.49.0/24 maxlen: 24 149.62.50.0/24 maxlen: 24 149.62.51.0/24 maxlen: 24 149.62.52.0/24 maxlen: 24 149.62.53.0/24 maxlen: 24 149.62.54.0/24 maxlen: 24 149.62.55.0/24 maxlen: 24 185.77.204.0/24 maxlen: 24 185.77.205.0/24 maxlen: 24 185.77.206.0/24 maxlen: 24 185.77.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.mft rsync://rpki.ripe.net/repository/DEFAULT/0x1LlB4GS0a8Ka9kW8dUcE06lME.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:c6:cd:7c:1b:92:95:56:14:4f:1d:f4:bb:78:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d31d4b941e064b46bc29af645bc754704d3a94c1 Validity Not Before: Jan 1 12:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c8da58a1137626e8ba5a225873ca891a62d0f193 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:75:9a:46:60:13:8c:59:d1:f7:5b:27:3f:9c: 44:c4:ac:8c:26:4d:92:e6:2b:89:1f:5c:6e:2d:6b: 3d:9c:a0:d0:cb:ac:fd:58:d8:bc:b3:a0:f4:de:61: 89:92:5d:30:7d:ac:24:44:f5:d1:1e:53:3b:11:19: 97:a1:26:51:5e:9e:3c:50:5d:c7:f4:18:7a:8a:b7: aa:5c:8a:7a:7a:d4:fa:7f:22:7f:cd:25:30:17:88: 39:03:53:da:ea:3f:3a:75:f3:98:5a:1b:00:6c:81: 72:9e:fc:69:ca:ae:d2:56:4d:2b:20:03:f1:b6:2d: 6f:78:68:88:7e:99:29:5f:f1:d6:11:c9:15:48:80: 03:6d:4c:28:58:23:b4:8e:f3:d1:8e:d8:17:39:ae: 3f:e7:b0:42:8e:0a:26:34:ef:82:71:39:ab:87:10: 0f:dc:c9:f2:b7:34:68:41:30:48:7a:6b:36:2a:f1: d0:d6:d3:ef:2f:60:05:93:c4:04:45:24:01:4c:1c: a5:37:c6:d4:fe:3e:b6:69:46:90:c9:bb:6d:69:06: 3d:1b:0b:b9:09:29:7a:d8:d8:d0:ee:5c:0d:b4:f7: 2c:ce:32:48:2f:d7:93:5f:36:12:fb:7b:80:82:f7: e1:2c:71:8b:02:f1:08:63:86:bc:93:ba:48:2e:04: 59:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:DA:58:A1:13:76:26:E8:BA:5A:22:58:73:CA:89:1A:62:D0:F1:93 X509v3 Authority Key Identifier: keyid:D3:1D:4B:94:1E:06:4B:46:BC:29:AF:64:5B:C7:54:70:4D:3A:94:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0x1LlB4GS0a8Ka9kW8dUcE06lME.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/yNpYoRN2Jui6WiJYc8qJGmLQ8ZM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 149.62.48.0/21 185.77.204.0/22 Signature Algorithm: sha256WithRSAEncryption 59:a4:ad:0a:1a:04:2c:ae:97:11:00:da:56:f4:b5:14:bf:fe: 87:d4:ef:8a:7e:55:80:bc:c2:4f:28:c8:89:80:a4:f7:93:b0: 08:c4:e4:b5:4b:ab:99:a4:94:05:7a:34:87:1f:b7:dc:1a:3e: 80:e7:d2:a0:ab:85:fb:e7:9b:2a:81:b3:29:82:20:b0:b0:9e: 81:70:15:8b:3f:e0:9b:a9:d7:ca:6c:e6:b2:46:4e:95:0f:5c: 77:70:01:31:c2:cf:c8:76:7e:85:fd:38:6d:42:e3:9b:2c:51: a6:aa:5e:d6:6c:db:55:f4:09:d6:96:a1:12:94:8f:00:c2:4d: f9:1a:94:c2:61:38:e8:77:55:7f:ff:e7:e5:86:ce:dd:04:ea: 60:bb:8f:1c:1b:e2:1a:9f:4c:d9:6d:7d:c0:06:a0:ce:a1:bb: 24:08:f8:54:4f:d0:0b:8c:4d:c0:6a:e9:5e:34:fd:42:ec:3d: d3:55:e1:ba:3f:ed:85:a0:ff:54:5b:e7:1a:5d:06:c7:06:12: 49:56:75:1f:c3:4b:9b:39:b8:fc:ff:c0:cb:9f:e9:62:89:ec: 0a:26:e2:c6:42:8e:c7:69:cd:7c:b9:65:f1:0d:8a:c7:af:9e: 15:fd:41:ab:8f:df:0c:d8:f0:ac:71:02:94:3c:57:49:97:e2: c5:ac:69:69 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5fsbNfBuSlVYUTx30u3hdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzMWQ0Yjk0MWUwNjRiNDZiYzI5YWY2NDViYzc1NDcwNGQz YTk0YzEwHhcNMjYwMTAxMTIxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOGRhNThhMTEzNzYyNmU4YmE1YTIyNTg3M2NhODkxYTYyZDBmMTkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHWaRmATjFnR91snP5xExKyMJk2S 5iuJH1xuLWs9nKDQy6z9WNi8s6D03mGJkl0wfawkRPXRHlM7ERmXoSZRXp48UF3H 9Bh6ireqXIp6etT6fyJ/zSUwF4g5A1Pa6j86dfOYWhsAbIFynvxpyq7SVk0rIAPx ti1veGiIfpkpX/HWEckVSIADbUwoWCO0jvPRjtgXOa4/57BCjgomNO+CcTmrhxAP 3MnytzRoQTBIems2KvHQ1tPvL2AFk8QERSQBTBylN8bU/j62aUaQybttaQY9Gwu5 CSl62NjQ7lwNtPcszjJIL9eTXzYS+3uAgvfhLHGLAvEIY4a8k7pILgRZKwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMjaWKETdibouloiWHPKiRpi0PGTMB8GA1UdIwQY MBaAFNMdS5QeBktGvCmvZFvHVHBNOpTBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHgxTGxCNEdTMGE4S2E5a1c4ZFVjRTA2bE1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8zMzMxMTMtYTg5MS00ZDkyLWI2Njkt NzA1NDQ5YmRlZWI2LzEveU5wWW9STjJKdWk2V2lKWWM4cUpHbUxROFpNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS8zMzMxMTMtYTg5MS00ZDkyLWI2NjktNzA1NDQ5YmRlZWI2 LzEvMHgxTGxCNEdTMGE4S2E5a1c4ZFVjRTA2bE1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDlT4wAwQC uU3MMA0GCSqGSIb3DQEBCwUAA4IBAQBZpK0KGgQsrpcRANpW9LUUv/6H1O+KflWA vMJPKMiJgKT3k7AIxOS1S6uZpJQFejSHH7fcGj6A59Kgq4X755sqgbMpgiCwsJ6B cBWLP+CbqdfKbOayRk6VD1x3cAExws/Idn6F/ThtQuObLFGmql7WbNtV9AnWlqES lI8Awk35GpTCYTjod1V//+flhs7dBOpgu48cG+Ian0zZbX3ABqDOobskCPhUT9AL jE3AauleNP1C7D3TVeG6P+2FoP9UW+caXQbHBhJJVnUfw0ubObj8/8DLn+liiewK JuLGQo7Hac18uWXxDYrHr54V/UGrj98M2PCscQKUPFdJl+LFrGlp -----END CERTIFICATE-----Generated at Mon Feb 9 19:38:33 2026 by rpki-client