This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/jytqbvPB7p4L3yG-M73X311CEZM.roa File: jytqbvPB7p4L3yG-M73X311CEZM.roa (raw, json) Hash identifier: OoChTy3t+Ypl0/yoHt/yN9OFfFbQL1CiSDqOkSSFy9Y= Subject key identifier: 8F:2B:6A:6E:F3:C1:EE:9E:0B:DF:21:BE:33:BD:D7:DF:5D:42:11:93 Certificate issuer: /CN=b3a5d99863db2e49b44f6c324eb04388fc7515d2 Certificate serial: 019B7EA6B26409070297354C552572E911BA Authority key identifier: B3:A5:D9:98:63:DB:2E:49:B4:4F:6C:32:4E:B0:43:88:FC:75:15:D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/jytqbvPB7p4L3yG-M73X311CEZM.roa Signing time: Fri 02 Jan 2026 12:20:12 +0000 ROA not before: Fri 02 Jan 2026 12:20:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12663 IP address blocks: 37.25.128.0/17 maxlen: 24 46.108.0.0/16 maxlen: 24 46.190.128.0/17 maxlen: 24 47.73.0.0/16 maxlen: 24 47.73.1.0/24 maxlen: 24 47.73.8.0/21 maxlen: 21 47.73.8.0/23 maxlen: 23 47.73.10.0/23 maxlen: 23 47.73.12.0/23 maxlen: 23 47.73.15.0/24 maxlen: 24 47.73.36.0/23 maxlen: 23 47.73.37.0/24 maxlen: 24 47.73.40.0/24 maxlen: 24 47.73.42.0/24 maxlen: 24 47.73.44.0/22 maxlen: 22 47.73.44.0/23 maxlen: 23 47.73.46.0/23 maxlen: 23 47.73.56.0/23 maxlen: 23 47.73.63.0/24 maxlen: 24 47.73.67.0/24 maxlen: 24 47.73.68.0/24 maxlen: 24 47.73.73.0/24 maxlen: 24 47.73.75.0/24 maxlen: 24 47.73.77.0/24 maxlen: 24 47.73.78.0/24 maxlen: 24 47.73.79.0/24 maxlen: 24 47.73.88.0/22 maxlen: 22 47.73.88.0/24 maxlen: 24 47.73.89.0/24 maxlen: 24 47.73.90.0/24 maxlen: 24 47.73.91.0/24 maxlen: 24 47.73.93.0/24 maxlen: 24 47.73.94.0/24 maxlen: 24 47.73.96.0/21 maxlen: 21 47.73.104.0/23 maxlen: 23 47.73.104.0/24 maxlen: 24 47.73.105.0/24 maxlen: 24 47.73.106.0/24 maxlen: 24 47.73.108.0/23 maxlen: 23 47.73.108.0/24 maxlen: 24 47.73.109.0/24 maxlen: 24 47.73.110.0/24 maxlen: 24 47.73.120.0/24 maxlen: 24 47.73.121.0/24 maxlen: 24 47.73.123.0/24 maxlen: 24 47.73.124.0/24 maxlen: 24 47.73.125.0/24 maxlen: 24 47.73.141.0/24 maxlen: 24 47.73.212.0/24 maxlen: 24 47.73.218.0/24 maxlen: 24 47.73.220.0/24 maxlen: 24 47.73.224.0/21 maxlen: 21 47.73.248.0/24 maxlen: 24 47.73.252.0/22 maxlen: 22 62.213.128.0/19 maxlen: 19 85.205.0.0/16 maxlen: 24 86.104.216.0/22 maxlen: 22 89.32.48.0/21 maxlen: 21 92.114.8.0/21 maxlen: 21 108.179.64.0/18 maxlen: 24 130.195.32.0/20 maxlen: 20 130.195.64.0/19 maxlen: 19 130.195.96.0/19 maxlen: 19 130.195.128.0/18 maxlen: 24 130.195.200.0/21 maxlen: 21 139.47.160.0/19 maxlen: 24 139.47.192.0/18 maxlen: 24 145.230.0.0/16 maxlen: 24 176.125.0.0/19 maxlen: 24 188.240.84.0/22 maxlen: 22 192.125.128.0/17 maxlen: 24 195.232.128.0/17 maxlen: 24 195.233.0.0/16 maxlen: 24 208.53.128.0/18 maxlen: 18 2a01:818:1000::/44 maxlen: 44 2a01:818:1060::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.crl rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.mft rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:b2:64:09:07:02:97:35:4c:55:25:72:e9:11:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3a5d99863db2e49b44f6c324eb04388fc7515d2 Validity Not Before: Jan 2 12:20:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8f2b6a6ef3c1ee9e0bdf21be33bdd7df5d421193 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:a3:e4:69:48:3a:60:49:70:f8:cb:8d:4e:f7: 50:b3:ed:a8:4b:5f:91:fe:29:95:18:61:c0:d8:42: 54:37:37:31:77:12:20:7e:59:9b:cd:86:69:07:b2: 45:24:8f:b1:d6:65:80:fc:e7:be:aa:db:8c:5d:50: a4:e0:4d:d1:4f:ad:83:fb:82:a5:58:02:79:49:d6: ae:2f:8c:f8:08:0a:36:6d:4a:45:39:c2:55:4d:1e: 61:c2:b6:ce:08:d2:ea:21:02:16:ad:16:b2:e0:bb: 12:9f:77:f9:1b:78:4f:d1:58:80:aa:d1:8d:f1:49: e9:ad:8a:ce:04:26:fc:8e:33:d7:9e:aa:b2:38:a9: e7:4b:8d:f6:be:af:5a:34:08:0d:71:51:66:47:aa: c3:87:3e:52:db:a3:32:7d:c3:23:2b:82:41:b1:cd: 59:7e:00:5d:17:61:86:de:68:88:1a:8f:d1:59:29: ad:d2:0e:5b:a8:96:bf:09:b4:70:5b:67:0a:93:00: 08:fe:0e:8c:fb:f4:18:cf:1c:9f:d7:9a:68:66:d3: ab:d4:a2:bc:bb:db:5d:69:5e:df:0b:c2:a1:fd:48: b7:e6:25:c3:dd:75:d1:ea:3b:d4:9e:d7:ba:f9:f9: aa:0c:73:60:55:43:f6:cb:a8:59:5f:3a:37:10:3a: 66:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:2B:6A:6E:F3:C1:EE:9E:0B:DF:21:BE:33:BD:D7:DF:5D:42:11:93 X509v3 Authority Key Identifier: keyid:B3:A5:D9:98:63:DB:2E:49:B4:4F:6C:32:4E:B0:43:88:FC:75:15:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/jytqbvPB7p4L3yG-M73X311CEZM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.25.128.0/17 46.108.0.0/16 46.190.128.0/17 47.73.0.0/16 62.213.128.0/19 85.205.0.0/16 86.104.216.0/22 89.32.48.0/21 92.114.8.0/21 108.179.64.0/18 130.195.32.0/20 130.195.64.0-130.195.191.255 130.195.200.0/21 139.47.160.0-139.47.255.255 145.230.0.0/16 176.125.0.0/19 188.240.84.0/22 192.125.128.0/17 195.232.128.0-195.233.255.255 208.53.128.0/18 IPv6: 2a01:818:1000::/44 2a01:818:1060::/44 Signature Algorithm: sha256WithRSAEncryption 33:9c:2b:b7:52:15:0c:0d:1e:eb:9b:b1:c4:f5:03:46:d7:ca: a5:0c:fc:d2:c8:05:d3:60:4d:c5:14:8c:61:95:0b:ab:cf:82: 5a:40:88:6d:58:de:8c:f7:05:41:66:a1:00:39:e3:e4:7b:ad: cc:73:10:5a:0a:e5:4e:3a:e2:dd:46:81:12:19:de:f3:3f:89: e0:e7:ad:b2:c4:a4:72:14:90:20:68:b9:c5:69:4a:b4:68:b4: 5f:03:3d:d3:30:65:71:bd:34:21:b1:8d:8a:4f:4b:f4:2d:77: ca:a0:5b:7a:00:30:da:88:21:b0:3e:4b:8c:4f:77:b5:7b:b6: 31:73:b2:eb:f7:e5:9d:11:d8:b6:0c:3c:f6:2c:9a:eb:bc:16: b6:1a:2f:d8:8b:f5:ec:8d:34:b5:f7:8d:9a:14:93:0e:42:fb: c6:f4:40:ac:65:60:55:ef:f0:ad:e9:ac:a1:6c:c6:37:e9:5e: 0a:d6:6f:c2:d4:eb:7d:1f:73:23:53:52:97:4c:9f:d0:63:c6: 36:7f:57:8c:00:f8:f8:c7:a4:18:e1:a6:0d:94:aa:c0:3c:6e: 2c:b6:4d:89:4c:57:8c:2f:33:3e:e9:99:1c:90:c8:9a:fa:b5: ac:71:a4:82:dc:aa:1d:09:cc:98:d7:6c:32:b2:db:4b:20:a0: 57:86:a3:81 -----BEGIN CERTIFICATE----- MIIFoDCCBIigAwIBAgISAZt+prJkCQcClzVMVSVy6RG6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzYTVkOTk4NjNkYjJlNDliNDRmNmMzMjRlYjA0Mzg4ZmM3 NTE1ZDIwHhcNMjYwMTAyMTIyMDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZjJiNmE2ZWYzYzFlZTllMGJkZjIxYmUzM2JkZDdkZjVkNDIxMTkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqPkaUg6YElw+MuNTvdQs+2oS1+R /imVGGHA2EJUNzcxdxIgflmbzYZpB7JFJI+x1mWA/Oe+qtuMXVCk4E3RT62D+4Kl WAJ5SdauL4z4CAo2bUpFOcJVTR5hwrbOCNLqIQIWrRay4LsSn3f5G3hP0ViAqtGN 8UnprYrOBCb8jjPXnqqyOKnnS432vq9aNAgNcVFmR6rDhz5S26MyfcMjK4JBsc1Z fgBdF2GG3miIGo/RWSmt0g5bqJa/CbRwW2cKkwAI/g6M+/QYzxyf15poZtOr1KK8 u9tdaV7fC8Kh/Ui35iXD3XXR6jvUnte6+fmqDHNgVUP2y6hZXzo3EDpmkQIDAQAB o4ICrDCCAqgwHQYDVR0OBBYEFI8ram7zwe6eC98hvjO9199dQhGTMB8GA1UdIwQY MBaAFLOl2Zhj2y5JtE9sMk6wQ4j8dRXSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczZYWm1HUGJMa20wVDJ3eVRyQkRpUHgxRmRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8yOWU5YmMtYjE5MC00MDllLTg2YjAt ZWVjNWQ1MGVmYTk0LzEvanl0cWJ2UEI3cDRMM3lHLU03M1gzMTFDRVpNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC8yOWU5YmMtYjE5MC00MDllLTg2YjAtZWVjNWQ1MGVmYTk0 LzEvczZYWm1HUGJMa20wVDJ3eVRyQkRpUHgxRmRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHBBggrBgEFBQcBBwEB/wSBsTCBrjCBkQQCAAEwgYoDBAcl GYADAwAubAMEBy6+gAMDAC9JAwQFPtWAAwMAVc0DBAJWaNgDBANZIDADBANccggD BAZss0ADBASCwyAwDAMEBoLDQAMEBoLDgAMEA4LDyDALAwQFiy+gAwMEiyADAwCR 5gMEBbB9AAMEArzwVAMEB8B9gDALAwQHw+iAAwMBw+gDBAbQNYAwGAQCAAIwEgMH BCoBCBgQAAMHBCoBCBgQYDANBgkqhkiG9w0BAQsFAAOCAQEAM5wrt1IVDA0e65ux xPUDRtfKpQz80sgF02BNxRSMYZULq8+CWkCIbVjejPcFQWahADnj5HutzHMQWgrl Tjri3UaBEhne8z+J4OetssSkchSQIGi5xWlKtGi0XwM90zBlcb00IbGNik9L9C13 yqBbegAw2oghsD5LjE93tXu2MXOy6/flnRHYtgw89iya67wWthov2Iv17I00tfeN mhSTDkL7xvRArGVgVe/wremsoWzGN+leCtZvwtTrfR9zI1NSl0yf0GPGNn9XjAD4 +MekGOGmDZSqwDxuLLZNiUxXjC8zPumZHJDImvq1rHGkgtyqHQnMmNdsMrLbSyCg V4ajgQ== -----END CERTIFICATE-----Generated at Sun Jan 25 22:13:23 2026 by rpki-client