This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/ymuaW4C8o-lO-r5wBm-7A05dtLg.roa File: ymuaW4C8o-lO-r5wBm-7A05dtLg.roa (raw, json) Hash identifier: g3AL+YyG28zpjRvk8zWwYh7S+XChprFtrfTtHo1inzQ= Subject key identifier: CA:6B:9A:5B:80:BC:A3:E9:4E:FA:BE:70:06:6F:BB:03:4E:5D:B4:B8 Certificate issuer: /CN=ec4fb061a9426e4fb2885d822867572a1b58a4c0 Certificate serial: 019B77C66FE26E32F2D6123570FE5A214036 Authority key identifier: EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/ymuaW4C8o-lO-r5wBm-7A05dtLg.roa Signing time: Thu 01 Jan 2026 04:17:32 +0000 ROA not before: Thu 01 Jan 2026 04:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62068 IP address blocks: 5.182.208.0/22 maxlen: 24 45.14.224.0/22 maxlen: 24 45.87.41.0/24 maxlen: 24 45.87.42.0/23 maxlen: 24 45.148.120.0/23 maxlen: 24 45.148.122.0/24 maxlen: 24 62.68.71.0/24 maxlen: 24 91.217.200.0/24 maxlen: 24 91.226.227.0/24 maxlen: 24 91.230.49.0/24 maxlen: 24 146.19.248.0/24 maxlen: 24 185.46.70.0/24 maxlen: 24 185.224.128.0/22 maxlen: 24 185.244.36.0/22 maxlen: 24 2a0d:2400::/29 maxlen: 39 2a0d:2780::/29 maxlen: 32 2a0e:16c0::/29 maxlen: 29 2a0e:1740::/29 maxlen: 29 2a0e:2000::/29 maxlen: 29 2a11:b240::/29 maxlen: 32 2a12:a8c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:6f:e2:6e:32:f2:d6:12:35:70:fe:5a:21:40:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec4fb061a9426e4fb2885d822867572a1b58a4c0 Validity Not Before: Jan 1 04:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ca6b9a5b80bca3e94efabe70066fbb034e5db4b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ab:80:2c:14:5a:99:2c:a4:ca:ef:83:ec:1f: 8a:aa:57:9f:f8:e9:0a:bd:9e:ff:38:94:c3:78:05: a4:1f:91:c7:45:04:b9:b1:53:0d:83:01:a1:ce:6c: bc:a8:da:7d:58:49:46:18:b5:64:02:98:2b:e8:16: bc:e8:4b:34:e7:77:b8:5b:93:cd:74:66:b7:bc:29: 05:3c:48:c1:ac:41:e6:5d:51:c0:0f:98:4d:ee:cd: 98:69:e8:7b:44:85:01:b3:c7:4d:48:3d:94:c7:a9: 8e:83:9a:61:6b:0e:b4:8f:99:ff:01:91:67:1c:b5: 37:84:52:e0:08:f4:f9:fb:1b:4a:e5:1c:73:6f:78: fc:d8:8c:aa:5f:d9:d2:9c:ca:bc:18:dd:64:0e:9f: 8b:3c:e2:7a:35:d4:76:88:49:f5:10:7f:5d:e1:4d: 2b:2c:e8:66:33:c9:30:1c:47:7c:44:0d:e3:45:13: 77:78:42:20:3e:c7:c0:53:a3:8c:36:d7:c6:40:d9: cb:25:40:8d:8e:72:ff:4e:d1:4e:33:f7:c2:13:50: 5c:87:dd:e0:c0:6b:05:97:54:e0:fc:98:0f:e3:6c: 29:8b:7a:10:6c:c1:5f:13:65:2b:42:7a:cc:cf:89: 27:82:76:23:f8:32:2b:af:4c:bc:f9:0c:09:4f:ca: b1:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:6B:9A:5B:80:BC:A3:E9:4E:FA:BE:70:06:6F:BB:03:4E:5D:B4:B8 X509v3 Authority Key Identifier: keyid:EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/ymuaW4C8o-lO-r5wBm-7A05dtLg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.182.208.0/22 45.14.224.0/22 45.87.41.0-45.87.43.255 45.148.120.0-45.148.122.255 62.68.71.0/24 91.217.200.0/24 91.226.227.0/24 91.230.49.0/24 146.19.248.0/24 185.46.70.0/24 185.224.128.0/22 185.244.36.0/22 IPv6: 2a0d:2400::/29 2a0d:2780::/29 2a0e:16c0::/29 2a0e:1740::/29 2a0e:2000::/29 2a11:b240::/29 2a12:a8c0::/29 Signature Algorithm: sha256WithRSAEncryption 65:d5:c6:fb:91:6e:8d:fd:b9:0e:d1:d3:63:ed:15:6f:3e:9c: d6:30:ae:0c:1e:3a:90:1c:c1:72:fe:f5:99:04:bd:eb:1a:b1: 55:75:68:b5:9d:68:16:48:e8:ef:19:8a:05:2d:28:de:47:13: e3:cd:26:0c:4a:ba:25:ea:26:34:65:6d:7b:46:56:82:9e:51: 45:e1:34:5d:20:e7:df:cb:c7:6c:f0:56:4f:76:eb:c7:02:10: 4c:d7:1d:43:33:01:d5:c4:94:74:22:fa:04:aa:84:38:85:81: f4:0f:98:01:98:bc:29:51:d2:0f:a2:d1:2d:5c:a1:07:16:ca: 3e:f4:4c:75:e4:56:e9:c4:bc:36:66:a9:69:b9:d5:39:07:cb: 68:a8:25:f8:44:74:fa:1f:2e:24:7d:d2:b2:04:c0:33:ac:e2: 3f:9b:54:5e:cd:c1:4a:b7:d6:64:07:d7:ba:d3:c4:23:52:7e: 54:66:70:96:62:bb:62:e9:09:dc:8f:e4:b7:ed:32:3e:9c:40: 39:3f:34:7d:9a:69:f3:b2:c7:10:b6:e8:a7:08:e2:22:4f:89: b3:1c:bd:f1:d1:de:30:b2:f0:de:68:e7:55:27:90:43:4e:59: 86:6d:d6:b8:6c:12:79:5a:55:06:e1:20:d7:0c:4b:40:e9:a7: f7:d0:e7:0a -----BEGIN CERTIFICATE----- MIIFizCCBHOgAwIBAgISAZt3xm/ibjLy1hI1cP5aIUA2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjNGZiMDYxYTk0MjZlNGZiMjg4NWQ4MjI4Njc1NzJhMWI1 OGE0YzAwHhcNMjYwMTAxMDQxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYTZiOWE1YjgwYmNhM2U5NGVmYWJlNzAwNjZmYmIwMzRlNWRiNGI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6uALBRamSykyu+D7B+Kqlef+OkK vZ7/OJTDeAWkH5HHRQS5sVMNgwGhzmy8qNp9WElGGLVkApgr6Ba86Es053e4W5PN dGa3vCkFPEjBrEHmXVHAD5hN7s2Yaeh7RIUBs8dNSD2Ux6mOg5phaw60j5n/AZFn HLU3hFLgCPT5+xtK5Rxzb3j82IyqX9nSnMq8GN1kDp+LPOJ6NdR2iEn1EH9d4U0r LOhmM8kwHEd8RA3jRRN3eEIgPsfAU6OMNtfGQNnLJUCNjnL/TtFOM/fCE1Bch93g wGsFl1Tg/JgP42wpi3oQbMFfE2UrQnrMz4kngnYj+DIrr0y8+QwJT8qxhQIDAQAB o4IClzCCApMwHQYDVR0OBBYEFMprmluAvKPpTvq+cAZvuwNOXbS4MB8GA1UdIwQY MBaAFOxPsGGpQm5PsohdgihnVyobWKTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0Utd1lhbENiay15aUYyQ0tHZFhLaHRZcE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi83YmMzYWItZDliNi00YWU0LWJjZDEt Y2U1NzE1MDY5NWE5LzEveW11YVc0QzhvLWxPLXI1d0JtLTdBMDVkdExnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi83YmMzYWItZDliNi00YWU0LWJjZDEtY2U1NzE1MDY5NWE5 LzEvN0Utd1lhbENiay15aUYyQ0tHZFhLaHRZcE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGsBggrBgEFBQcBBwEB/wSBnDCBmTBeBAIAATBYAwQCBbbQ AwQCLQ7gMAwDBAAtVykDBAItVygwDAMEAy2UeAMEAC2UegMEAD5ERwMEAFvZyAME AFvi4wMEAFvmMQMEAJIT+AMEALkuRgMEArnggAMEArn0JDA3BAIAAjAxAwUDKg0k AAMFAyoNJ4ADBQMqDhbAAwUDKg4XQAMFAyoOIAADBQMqEbJAAwUDKhKowDANBgkq hkiG9w0BAQsFAAOCAQEAZdXG+5Fujf25DtHTY+0Vbz6c1jCuDB46kBzBcv71mQS9 6xqxVXVotZ1oFkjo7xmKBS0o3kcT480mDEq6JeomNGVte0ZWgp5RReE0XSDn38vH bPBWT3brxwIQTNcdQzMB1cSUdCL6BKqEOIWB9A+YAZi8KVHSD6LRLVyhBxbKPvRM deRW6cS8NmapabnVOQfLaKgl+ER0+h8uJH3SsgTAM6ziP5tUXs3BSrfWZAfXutPE I1J+VGZwlmK7YukJ3I/kt+0yPpxAOT80fZpp87LHELbopwjiIk+Jsxy98dHeMLLw 3mjnVSeQQ05Zhm3WuGwSeVpVBuEg1wxLQOmn99DnCg== -----END CERTIFICATE-----Generated at Sun Jan 25 22:31:21 2026 by rpki-client