This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/YDjaLvjd_4NBMP35Wk-oecOx8QQ.roa File: YDjaLvjd_4NBMP35Wk-oecOx8QQ.roa (raw, json) Hash identifier: H49ZMq3qndN5kJWaRAax7kiG0pAT3uE2jIvdrAJiUlE= Subject key identifier: 60:38:DA:2E:F8:DD:FF:83:41:30:FD:F9:5A:4F:A8:79:C3:B1:F1:04 Certificate issuer: /CN=260f1087ccd06e6b47643c4ebe78bccf5f3ce5d2 Certificate serial: 019B7B36CE2B29A13D651FB89311AFCCD7FF Authority key identifier: 26:0F:10:87:CC:D0:6E:6B:47:64:3C:4E:BE:78:BC:CF:5F:3C:E5:D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jg8Qh8zQbmtHZDxOvni8z1885dI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/YDjaLvjd_4NBMP35Wk-oecOx8QQ.roa Signing time: Thu 01 Jan 2026 20:19:07 +0000 ROA not before: Thu 01 Jan 2026 20:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201735 IP address blocks: 37.152.80.0/21 maxlen: 21 77.220.200.0/22 maxlen: 22 79.108.240.0/20 maxlen: 20 85.204.146.0/24 maxlen: 24 86.106.88.0/24 maxlen: 24 89.33.160.0/23 maxlen: 23 89.35.24.0/24 maxlen: 24 89.35.134.0/24 maxlen: 24 89.35.205.0/24 maxlen: 24 109.232.64.0/21 maxlen: 21 146.66.136.0/21 maxlen: 21 185.15.148.0/22 maxlen: 22 185.65.64.0/22 maxlen: 22 185.160.230.0/24 maxlen: 24 185.192.182.0/24 maxlen: 24 185.201.72.0/22 maxlen: 22 185.230.146.0/23 maxlen: 23 185.247.180.0/22 maxlen: 22 185.249.60.0/22 maxlen: 22 185.249.84.0/22 maxlen: 22 188.214.56.0/24 maxlen: 24 194.36.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.crl rsync://rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.mft rsync://rpki.ripe.net/repository/DEFAULT/Jg8Qh8zQbmtHZDxOvni8z1885dI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:ce:2b:29:a1:3d:65:1f:b8:93:11:af:cc:d7:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=260f1087ccd06e6b47643c4ebe78bccf5f3ce5d2 Validity Not Before: Jan 1 20:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6038da2ef8ddff834130fdf95a4fa879c3b1f104 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:50:40:e5:dc:06:ab:89:30:e5:24:f9:9b:34: 4b:d5:aa:ef:83:1e:76:e8:8a:0c:46:fa:fa:28:7d: ce:a5:78:87:4e:b3:8b:51:d5:93:51:bd:06:82:4d: 31:98:a2:f7:f1:b1:b6:98:53:18:5e:97:be:57:70: d9:7e:9a:1a:09:2c:19:f0:dc:ad:ad:4d:f5:60:9a: ab:37:68:93:b6:49:b4:d8:93:e6:10:c2:c2:28:37: 62:b9:23:f4:d3:bc:9f:01:99:50:91:c4:b8:46:53: e9:84:92:86:fd:c5:01:c7:0d:9a:3f:8f:55:e5:aa: 26:ce:69:42:ef:9f:c3:0d:55:a6:0d:c4:32:91:c8: c0:c7:ea:c4:04:17:3b:60:0a:a9:4b:b5:c0:62:22: 70:65:4c:b7:f2:c4:82:e8:1f:ac:00:14:43:00:82: 95:14:55:4c:90:82:ff:c2:6a:57:d9:c0:43:e7:e9: 48:8a:4b:af:f6:8b:4a:d4:23:1d:14:2d:51:7f:61: 53:71:0d:c9:23:6b:fd:7f:6e:e8:43:08:2f:de:bc: 4b:12:0b:eb:42:6d:8f:b5:30:8c:9c:c0:03:9f:8a: 5f:b0:50:0d:cd:13:0f:cb:d4:23:38:80:bb:50:81: 63:21:22:4c:fb:f5:a7:b1:2f:e9:05:bd:a4:7d:1c: 55:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:38:DA:2E:F8:DD:FF:83:41:30:FD:F9:5A:4F:A8:79:C3:B1:F1:04 X509v3 Authority Key Identifier: keyid:26:0F:10:87:CC:D0:6E:6B:47:64:3C:4E:BE:78:BC:CF:5F:3C:E5:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jg8Qh8zQbmtHZDxOvni8z1885dI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/YDjaLvjd_4NBMP35Wk-oecOx8QQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.152.80.0/21 77.220.200.0/22 79.108.240.0/20 85.204.146.0/24 86.106.88.0/24 89.33.160.0/23 89.35.24.0/24 89.35.134.0/24 89.35.205.0/24 109.232.64.0/21 146.66.136.0/21 185.15.148.0/22 185.65.64.0/22 185.160.230.0/24 185.192.182.0/24 185.201.72.0/22 185.230.146.0/23 185.247.180.0/22 185.249.60.0/22 185.249.84.0/22 188.214.56.0/24 194.36.28.0/22 Signature Algorithm: sha256WithRSAEncryption ab:d0:bc:75:f2:35:4e:75:ba:a0:01:5b:6d:c2:4a:26:b4:9d: 05:4b:10:5b:80:9e:53:16:6f:c1:b4:6a:78:b4:e0:17:88:42: af:9a:1d:10:9a:c5:bc:3d:93:9e:cd:b3:bf:12:d7:c8:18:ce: 3f:1d:7e:fe:05:e6:39:ef:99:e1:11:19:eb:a5:ec:46:2d:1f: 10:4c:2f:0b:a5:45:54:be:c6:1e:f1:89:5b:0c:c3:19:50:23: ff:cb:58:d3:ba:4c:82:28:57:69:04:e0:5f:01:ab:d9:63:44: 69:db:9b:59:3c:3b:9c:e3:20:70:f0:72:e8:9a:35:42:19:bd: 97:52:51:ee:cc:3e:f4:55:83:8b:66:e5:18:11:81:35:02:18: 44:5a:07:bf:4c:46:04:4e:45:14:19:23:c1:c5:6c:10:ba:78: 7f:e2:72:6f:d5:aa:b6:7b:4f:ed:a6:70:5f:4e:0d:44:62:67: 19:d2:62:a6:93:3d:45:dd:52:56:41:0e:11:92:1e:37:5a:c4: b0:a4:ae:b4:ef:15:2a:25:8c:4a:4e:02:34:54:2d:d0:fc:83: 63:5d:5e:8c:45:55:00:3b:a2:f3:e9:71:7e:30:46:66:c4:14: 31:09:92:14:23:bb:d9:1e:b1:7c:78:c2:66:31:ca:28:25:f3: 9e:af:32:2b -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgISAZt7Ns4rKaE9ZR+4kxGvzNf/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2MGYxMDg3Y2NkMDZlNmI0NzY0M2M0ZWJlNzhiY2NmNWYz Y2U1ZDIwHhcNMjYwMTAxMjAxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MDM4ZGEyZWY4ZGRmZjgzNDEzMGZkZjk1YTRmYTg3OWMzYjFmMTA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1BA5dwGq4kw5ST5mzRL1arvgx52 6IoMRvr6KH3OpXiHTrOLUdWTUb0Ggk0xmKL38bG2mFMYXpe+V3DZfpoaCSwZ8Nyt rU31YJqrN2iTtkm02JPmEMLCKDdiuSP007yfAZlQkcS4RlPphJKG/cUBxw2aP49V 5aomzmlC75/DDVWmDcQykcjAx+rEBBc7YAqpS7XAYiJwZUy38sSC6B+sABRDAIKV FFVMkIL/wmpX2cBD5+lIikuv9otK1CMdFC1Rf2FTcQ3JI2v9f27oQwgv3rxLEgvr Qm2PtTCMnMADn4pfsFANzRMPy9QjOIC7UIFjISJM+/WnsS/pBb2kfRxV6wIDAQAB o4ICjDCCAogwHQYDVR0OBBYEFGA42i743f+DQTD9+VpPqHnDsfEEMB8GA1UdIwQY MBaAFCYPEIfM0G5rR2Q8Tr54vM9fPOXSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmc4UWg4elFibXRIWkR4T3ZuaTh6MTg4NWRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy84NTM2ODItMzAzNS00NGZiLWI3YWUt MTliMTJhOTU1MDY1LzEvWURqYUx2amRfNE5CTVAzNVdrLW9lY094OFFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy84NTM2ODItMzAzNS00NGZiLWI3YWUtMTliMTJhOTU1MDY1 LzEvSmc4UWg4elFibXRIWkR4T3ZuaTh6MTg4NWRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGhBggrBgEFBQcBBwEB/wSBkTCBjjCBiwQCAAEwgYQDBAMl mFADBAJN3MgDBARPbPADBABVzJIDBABWalgDBAFZIaADBABZIxgDBABZI4YDBABZ I80DBANt6EADBAOSQogDBAK5D5QDBAK5QUADBAC5oOYDBAC5wLYDBAK5yUgDBAG5 5pIDBAK597QDBAK5+TwDBAK5+VQDBAC81jgDBALCJBwwDQYJKoZIhvcNAQELBQAD ggEBAKvQvHXyNU51uqABW23CSia0nQVLEFuAnlMWb8G0ani04BeIQq+aHRCaxbw9 k57Ns78S18gYzj8dfv4F5jnvmeERGeul7EYtHxBMLwulRVS+xh7xiVsMwxlQI//L WNO6TIIoV2kE4F8Bq9ljRGnbm1k8O5zjIHDwcuiaNUIZvZdSUe7MPvRVg4tm5RgR gTUCGERaB79MRgRORRQZI8HFbBC6eH/icm/VqrZ7T+2mcF9ODURiZxnSYqaTPUXd UlZBDhGSHjdaxLCkrrTvFSoljEpOAjRULdD8g2NdXoxFVQA7ovPpcX4wRmbEFDEJ khQju9kesXx4wmYxyigl856vMis= -----END CERTIFICATE-----Generated at Mon Jan 26 07:57:45 2026 by rpki-client