This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/RYe-A-tcBgsvnTviE-ENg27AeMY.roa File: RYe-A-tcBgsvnTviE-ENg27AeMY.roa (raw, json) Hash identifier: BIG9Ev2/ZDOm8EsC2U3aW/Qd5R8vFaAuiSgknEWjyDA= Subject key identifier: 45:87:BE:03:EB:5C:06:0B:2F:9D:3B:E2:13:E1:0D:83:6E:C0:78:C6 Certificate issuer: /CN=ae72e47d56692499a726bf800ea8380362deb6be Certificate serial: 019B7DC8B8512F89F9A25086F4F20BB1F65C Authority key identifier: AE:72:E4:7D:56:69:24:99:A7:26:BF:80:0E:A8:38:03:62:DE:B6:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rnLkfVZpJJmnJr-ADqg4A2Letr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/RYe-A-tcBgsvnTviE-ENg27AeMY.roa Signing time: Fri 02 Jan 2026 08:17:44 +0000 ROA not before: Fri 02 Jan 2026 08:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29177 IP address blocks: 31.216.240.0/20 maxlen: 20 31.216.240.0/22 maxlen: 22 31.216.244.0/22 maxlen: 22 31.216.248.0/22 maxlen: 22 31.216.250.0/24 maxlen: 24 31.216.252.0/22 maxlen: 22 80.86.144.0/20 maxlen: 20 80.86.144.0/22 maxlen: 22 80.86.148.0/22 maxlen: 22 80.86.152.0/22 maxlen: 22 80.86.156.0/22 maxlen: 22 185.182.196.0/22 maxlen: 22 185.182.199.0/24 maxlen: 24 188.125.96.0/19 maxlen: 19 188.125.96.0/22 maxlen: 22 188.125.100.0/22 maxlen: 22 188.125.104.0/22 maxlen: 22 188.125.108.0/22 maxlen: 22 188.125.112.0/22 maxlen: 22 188.125.116.0/22 maxlen: 22 188.125.120.0/22 maxlen: 22 188.125.122.0/24 maxlen: 24 188.125.124.0/22 maxlen: 22 2a03:5c00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.mft rsync://rpki.ripe.net/repository/DEFAULT/rnLkfVZpJJmnJr-ADqg4A2Letr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c8:b8:51:2f:89:f9:a2:50:86:f4:f2:0b:b1:f6:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae72e47d56692499a726bf800ea8380362deb6be Validity Not Before: Jan 2 08:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4587be03eb5c060b2f9d3be213e10d836ec078c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:89:24:12:fd:d6:39:0b:75:88:73:2d:e5:84: 9d:eb:75:d5:a8:f2:39:e4:02:a0:d5:3d:00:30:10: 4f:cd:a8:bd:bd:a2:9c:29:2f:8e:49:4b:72:a2:8a: 8f:69:08:1c:d4:c6:84:19:a9:b4:05:7b:d6:ec:d3: ff:b5:6c:ee:f5:ab:ce:32:77:42:f3:c4:75:39:d0: 7f:21:cb:2b:0e:06:bd:6f:bf:ac:26:ea:f7:4c:1c: 00:26:f7:f5:c1:4a:55:a4:bb:3b:74:a8:a6:94:ec: eb:ad:00:ae:c1:93:83:7a:9e:71:fb:7c:56:e5:91: ae:14:2f:8c:d5:79:69:a6:53:72:b6:eb:e0:13:48: 2b:a6:7e:c2:a3:a2:ad:60:e3:db:18:58:0d:6b:87: 32:27:8d:35:44:e6:ad:f6:8b:af:da:52:5f:6a:1d: 0b:d8:86:fb:a9:92:92:6c:f8:5b:07:ee:49:10:a8: 54:ce:83:ed:d9:01:0f:62:09:2b:b0:c6:13:2b:68: 4d:a0:6d:dd:12:b8:4c:3a:dd:3e:b5:02:3c:35:3d: 69:f1:2b:bc:27:64:d9:fe:57:16:d3:2c:1d:cb:39: 62:12:f2:c0:d0:82:82:6a:8c:ca:a3:ce:b8:0f:cd: 68:dd:a8:c8:46:25:4d:a5:0c:c0:75:36:25:ac:93: 2f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:87:BE:03:EB:5C:06:0B:2F:9D:3B:E2:13:E1:0D:83:6E:C0:78:C6 X509v3 Authority Key Identifier: keyid:AE:72:E4:7D:56:69:24:99:A7:26:BF:80:0E:A8:38:03:62:DE:B6:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnLkfVZpJJmnJr-ADqg4A2Letr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/RYe-A-tcBgsvnTviE-ENg27AeMY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.216.240.0/20 80.86.144.0/20 185.182.196.0/22 188.125.96.0/19 IPv6: 2a03:5c00::/32 Signature Algorithm: sha256WithRSAEncryption 70:6c:66:85:0f:96:70:d0:93:2f:67:cd:a8:16:91:f6:b4:67: 2b:8d:85:42:43:08:73:76:3b:97:9b:a9:c4:84:04:7c:50:53: 11:23:c2:b2:64:09:e0:ec:e3:a0:db:76:2a:7c:cd:95:60:1c: 04:61:02:60:7e:cf:18:54:98:03:b1:3d:c9:87:d3:3e:f0:9d: b7:d6:1a:69:95:fa:56:4f:a2:d5:9d:bc:dd:87:09:b8:11:ee: 20:55:26:85:58:37:1d:37:36:30:72:30:d0:f7:8c:4e:23:95: 1f:f5:2f:77:21:f2:7f:a2:ee:d6:71:63:1d:c0:19:30:0d:71: 35:ac:d2:60:28:04:ec:fa:a9:99:31:75:69:cb:44:98:34:2d: 8c:75:97:e8:94:53:69:9c:f4:32:ae:7f:4e:cb:b3:9d:d9:a6: f5:60:d2:77:a4:b3:f4:14:8b:b0:5a:5c:e9:b9:17:b9:00:23: cb:fb:4c:49:81:6a:ff:9c:65:19:d7:2b:dc:b7:62:17:d5:17: 4c:59:e8:18:c6:ed:63:d1:15:bf:84:75:20:ce:13:3a:7f:c6: d3:2b:46:61:33:95:63:09:78:5d:36:2a:e6:4f:e0:e2:bb:d4: 98:d7:3e:ce:15:90:1a:d9:08:40:54:82:e8:8d:d2:de:81:8d: 6e:06:14:4b -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt9yLhRL4n5olCG9PILsfZcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlNzJlNDdkNTY2OTI0OTlhNzI2YmY4MDBlYTgzODAzNjJk ZWI2YmUwHhcNMjYwMTAyMDgxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NTg3YmUwM2ViNWMwNjBiMmY5ZDNiZTIxM2UxMGQ4MzZlYzA3OGM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4kkEv3WOQt1iHMt5YSd63XVqPI5 5AKg1T0AMBBPzai9vaKcKS+OSUtyooqPaQgc1MaEGam0BXvW7NP/tWzu9avOMndC 88R1OdB/IcsrDga9b7+sJur3TBwAJvf1wUpVpLs7dKimlOzrrQCuwZODep5x+3xW 5ZGuFC+M1XlpplNytuvgE0grpn7Co6KtYOPbGFgNa4cyJ401ROat9ouv2lJfah0L 2Ib7qZKSbPhbB+5JEKhUzoPt2QEPYgkrsMYTK2hNoG3dErhMOt0+tQI8NT1p8Su8 J2TZ/lcW0ywdyzliEvLA0IKCaozKo864D81o3ajIRiVNpQzAdTYlrJMv8wIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFEWHvgPrXAYLL5074hPhDYNuwHjGMB8GA1UdIwQY MBaAFK5y5H1WaSSZpya/gA6oOANi3ra+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcm5Ma2ZWWnBKSm1uSnItQURxZzRBMkxldHI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS82YmI0NzEtNGEzZS00ODhkLWI4OGMt ZmUxMmM3NWJmNGFiLzEvUlllLUEtdGNCZ3N2blR2aUUtRU5nMjdBZU1ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS82YmI0NzEtNGEzZS00ODhkLWI4OGMtZmUxMmM3NWJmNGFi LzEvcm5Ma2ZWWnBKSm1uSnItQURxZzRBMkxldHI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQEH9jwAwQE UFaQAwQCubbEAwQFvH1gMA0EAgACMAcDBQAqA1wAMA0GCSqGSIb3DQEBCwUAA4IB AQBwbGaFD5Zw0JMvZ82oFpH2tGcrjYVCQwhzdjuXm6nEhAR8UFMRI8KyZAng7OOg 23YqfM2VYBwEYQJgfs8YVJgDsT3Jh9M+8J231hpplfpWT6LVnbzdhwm4Ee4gVSaF WDcdNzYwcjDQ94xOI5Uf9S93IfJ/ou7WcWMdwBkwDXE1rNJgKATs+qmZMXVpy0SY NC2MdZfolFNpnPQyrn9Oy7Od2ab1YNJ3pLP0FIuwWlzpuRe5ACPL+0xJgWr/nGUZ 1yvct2IX1RdMWegYxu1j0RW/hHUgzhM6f8bTK0ZhM5VjCXhdNirmT+Diu9SY1z7O FZAa2QhAVILojdLegY1uBhRL -----END CERTIFICATE-----Generated at Tue Feb 10 03:09:22 2026 by rpki-client