This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/yN51QkuGxny069xWkSdZbBfMMQ8.roa File: yN51QkuGxny069xWkSdZbBfMMQ8.roa (raw, json) Hash identifier: DQM4ovM4ArlRPSqcYiLYdUKp5NTy96Mos+hwEgV7qsk= Subject key identifier: C8:DE:75:42:4B:86:C6:7C:B4:EB:DC:56:91:27:59:6C:17:CC:31:0F Certificate issuer: /CN=2874e46bf636ea63e5d12362f551b80b27714780 Certificate serial: 019B7FF24384FBE5CDC1C83AE60916C9366A Authority key identifier: 28:74:E4:6B:F6:36:EA:63:E5:D1:23:62:F5:51:B8:0B:27:71:47:80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KHTka_Y26mPl0SNi9VG4CydxR4A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/yN51QkuGxny069xWkSdZbBfMMQ8.roa Signing time: Fri 02 Jan 2026 18:22:21 +0000 ROA not before: Fri 02 Jan 2026 18:22:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57664 IP address blocks: 37.16.96.0/20 maxlen: 23 37.16.112.0/20 maxlen: 24 37.16.112.0/21 maxlen: 21 37.16.120.0/22 maxlen: 22 37.16.124.0/23 maxlen: 23 37.16.126.0/23 maxlen: 23 37.16.126.0/24 maxlen: 24 37.16.127.0/24 maxlen: 24 178.213.232.0/21 maxlen: 21 178.213.239.0/24 maxlen: 24 2a00:4cc0::/32 maxlen: 32 2a00:4cc1:2501::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/KHTka_Y26mPl0SNi9VG4CydxR4A.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/KHTka_Y26mPl0SNi9VG4CydxR4A.mft rsync://rpki.ripe.net/repository/DEFAULT/KHTka_Y26mPl0SNi9VG4CydxR4A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:43:84:fb:e5:cd:c1:c8:3a:e6:09:16:c9:36:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2874e46bf636ea63e5d12362f551b80b27714780 Validity Not Before: Jan 2 18:22:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c8de75424b86c67cb4ebdc569127596c17cc310f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:db:47:9c:a6:ae:e0:86:67:e4:94:33:87:87: 4f:df:ed:56:3c:8c:30:ee:0e:90:fb:c2:89:e4:1c: 0c:3c:5c:77:c7:49:09:3b:f9:30:ac:39:a6:5f:cc: 35:74:16:1a:7c:51:f1:68:0a:06:69:c8:b5:6e:6f: 86:a8:2f:10:d5:a5:76:8f:44:30:21:43:26:6a:70: 6d:8d:d0:ca:bf:48:60:a2:00:cf:14:41:ac:b9:fa: 42:de:aa:da:34:86:7d:ea:7c:60:20:a8:0e:f9:be: 13:7c:c4:9a:8e:c1:1c:1a:d5:15:29:b0:fd:b2:62: 7f:c2:bd:d5:3e:9f:e0:61:40:0e:7b:2a:9d:cc:bf: 3a:99:b7:8d:b0:6c:fe:27:ec:81:7a:db:6d:6b:a3: 0e:dd:63:74:ea:bc:da:eb:4a:ee:ae:f3:f1:cf:bb: 6e:d8:6a:48:0b:c5:47:89:cb:26:ac:36:33:e3:7e: 29:c5:30:ad:90:f4:90:7b:a1:33:91:fc:ac:9b:72: cd:b1:9f:b9:ce:78:06:ec:00:ae:82:99:bc:23:75: 30:ec:fc:db:72:8d:ab:64:cd:96:e1:8d:e8:e9:26: 4d:0e:f0:74:da:43:e0:fd:14:18:9f:46:eb:cd:b5: fb:ab:e6:16:9b:7b:4c:a3:b8:b5:5c:9a:59:31:77: 74:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:DE:75:42:4B:86:C6:7C:B4:EB:DC:56:91:27:59:6C:17:CC:31:0F X509v3 Authority Key Identifier: keyid:28:74:E4:6B:F6:36:EA:63:E5:D1:23:62:F5:51:B8:0B:27:71:47:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KHTka_Y26mPl0SNi9VG4CydxR4A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/yN51QkuGxny069xWkSdZbBfMMQ8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/KHTka_Y26mPl0SNi9VG4CydxR4A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.16.96.0/19 178.213.232.0/21 IPv6: 2a00:4cc0::/32 2a00:4cc1:2501::/64 Signature Algorithm: sha256WithRSAEncryption 8f:91:6e:40:45:c9:54:88:63:82:43:a4:57:81:61:b0:3e:e0: b1:1d:29:6f:4e:57:01:14:b1:34:da:af:8b:20:4d:29:32:46: af:8e:0b:fb:3c:95:d6:a7:62:eb:b5:35:ca:64:d8:f7:2e:12: d1:4f:34:0e:16:d1:45:24:08:e6:41:5e:a0:e6:ee:52:bf:05: 9e:d7:c2:86:2e:7f:29:de:3c:19:59:69:e4:1f:62:08:e2:93: 2e:fc:5f:19:15:df:7e:10:95:2c:35:77:c9:85:b1:bd:55:05: 03:a8:45:18:a6:9b:91:bd:23:ca:5a:ba:22:4a:08:3b:17:9b: 0d:83:4c:e4:8c:98:59:58:e4:93:dc:15:3e:d0:01:b5:85:f4: a8:a6:dc:2e:54:b6:4d:97:c7:6f:3f:ef:a6:41:6a:3e:c1:30: 69:ae:78:49:3e:31:24:85:4d:70:cd:6e:ba:6e:2d:98:f4:79: 70:49:7b:2b:d6:82:83:03:ac:9b:95:5a:2d:69:f0:11:84:a7: 4e:08:d1:c7:f5:e9:f2:d3:f9:ec:43:c1:7f:ba:b2:c5:fc:69: 92:ba:e2:73:7b:3c:83:19:69:9b:cc:81:89:44:9f:87:c1:96: 1e:d1:0c:37:62:01:f2:0b:3c:c5:8a:4d:8f:ae:da:c3:57:a2: 73:91:0d:27 -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZt/8kOE++XNwcg65gkWyTZqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4NzRlNDZiZjYzNmVhNjNlNWQxMjM2MmY1NTFiODBiMjc3 MTQ3ODAwHhcNMjYwMTAyMTgyMjIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOGRlNzU0MjRiODZjNjdjYjRlYmRjNTY5MTI3NTk2YzE3Y2MzMTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodtHnKau4IZn5JQzh4dP3+1WPIww 7g6Q+8KJ5BwMPFx3x0kJO/kwrDmmX8w1dBYafFHxaAoGaci1bm+GqC8Q1aV2j0Qw IUMmanBtjdDKv0hgogDPFEGsufpC3qraNIZ96nxgIKgO+b4TfMSajsEcGtUVKbD9 smJ/wr3VPp/gYUAOeyqdzL86mbeNsGz+J+yBettta6MO3WN06rza60rurvPxz7tu 2GpIC8VHicsmrDYz434pxTCtkPSQe6Ezkfysm3LNsZ+5zngG7ACugpm8I3Uw7Pzb co2rZM2W4Y3o6SZNDvB02kPg/RQYn0brzbX7q+YWm3tMo7i1XJpZMXd0EwIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFMjedUJLhsZ8tOvcVpEnWWwXzDEPMB8GA1UdIwQY MBaAFCh05Gv2Nupj5dEjYvVRuAsncUeAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0hUa2FfWTI2bVBsMFNOaTlWRzRDeWR4UjRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9lZGRjMDUtNDAyZC00ZGE3LTk3ZWYt YzEwZGE2YWFjMWIxLzEveU41MVFrdUd4bnkwNjl4V2tTZFpiQmZNTVE4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9lZGRjMDUtNDAyZC00ZGE3LTk3ZWYtYzEwZGE2YWFjMWIx LzEvS0hUa2FfWTI2bVBsMFNOaTlWRzRDeWR4UjRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjASBAIAATAMAwQFJRBgAwQD stXoMBgEAgACMBIDBQAqAEzAAwkAKgBMwSUBAAAwDQYJKoZIhvcNAQELBQADggEB AI+RbkBFyVSIY4JDpFeBYbA+4LEdKW9OVwEUsTTar4sgTSkyRq+OC/s8ldanYuu1 Ncpk2PcuEtFPNA4W0UUkCOZBXqDm7lK/BZ7XwoYufynePBlZaeQfYgjiky78XxkV 334QlSw1d8mFsb1VBQOoRRimm5G9I8pauiJKCDsXmw2DTOSMmFlY5JPcFT7QAbWF 9Kim3C5Utk2Xx28/76ZBaj7BMGmueEk+MSSFTXDNbrpuLZj0eXBJeyvWgoMDrJuV Wi1p8BGEp04I0cf16fLT+exDwX+6ssX8aZK64nN7PIMZaZvMgYlEn4fBlh7RDDdi AfILPMWKTY+u2sNXonORDSc= -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:12 2026 by rpki-client