This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/YwjZZ9bgLVxt2xabfmCAAbgkMaU.roa File: YwjZZ9bgLVxt2xabfmCAAbgkMaU.roa (raw, json) Hash identifier: 1zAPzM37tpNFKQcC0bPci1i0+4xvK1uwZaId1VplQqg= Subject key identifier: 63:08:D9:67:D6:E0:2D:5C:6D:DB:16:9B:7E:60:80:01:B8:24:31:A5 Certificate issuer: /CN=aca66a5938af567a9e29b4f76f115607c2b8aa20 Certificate serial: 019BE3ADB3AA223C4C2F206302D3779E0D4F Authority key identifier: AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/YwjZZ9bgLVxt2xabfmCAAbgkMaU.roa Signing time: Thu 22 Jan 2026 03:09:30 +0000 ROA not before: Thu 22 Jan 2026 03:09:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 22616 IP address blocks: 147.161.128.0/23 maxlen: 24 159.254.58.0/23 maxlen: 24 159.254.60.0/23 maxlen: 24 159.254.64.0/23 maxlen: 24 159.254.66.0/23 maxlen: 24 159.254.69.0/24 maxlen: 24 159.254.84.0/24 maxlen: 24 159.254.85.0/24 maxlen: 24 159.254.86.0/24 maxlen: 24 159.254.92.0/24 maxlen: 24 159.254.93.0/24 maxlen: 24 159.254.94.0/24 maxlen: 24 159.254.95.0/24 maxlen: 24 159.254.96.0/24 maxlen: 24 159.254.97.0/24 maxlen: 24 159.254.99.0/24 maxlen: 24 159.254.100.0/24 maxlen: 24 159.254.182.0/23 maxlen: 24 159.254.184.0/23 maxlen: 24 159.254.202.0/24 maxlen: 24 159.254.209.0/24 maxlen: 24 159.254.217.0/24 maxlen: 24 164.137.4.0/24 maxlen: 24 164.137.5.0/24 maxlen: 24 164.137.6.0/24 maxlen: 24 164.137.7.0/24 maxlen: 24 164.137.8.0/24 maxlen: 24 164.137.9.0/24 maxlen: 24 164.137.10.0/24 maxlen: 24 164.137.11.0/24 maxlen: 24 164.137.12.0/24 maxlen: 24 164.137.13.0/24 maxlen: 24 164.137.14.0/24 maxlen: 24 164.137.15.0/24 maxlen: 24 164.137.16.0/24 maxlen: 24 164.137.17.0/24 maxlen: 24 164.137.18.0/24 maxlen: 24 164.137.19.0/24 maxlen: 24 164.137.20.0/24 maxlen: 24 164.137.21.0/24 maxlen: 24 164.137.22.0/24 maxlen: 24 164.137.23.0/24 maxlen: 24 164.137.24.0/24 maxlen: 24 164.137.25.0/24 maxlen: 24 164.137.26.0/24 maxlen: 24 164.137.27.0/24 maxlen: 24 164.137.28.0/24 maxlen: 24 164.137.29.0/24 maxlen: 24 164.137.30.0/24 maxlen: 24 164.137.31.0/24 maxlen: 24 164.137.32.0/24 maxlen: 24 164.137.33.0/24 maxlen: 24 164.137.34.0/24 maxlen: 24 164.137.35.0/24 maxlen: 24 164.137.36.0/24 maxlen: 24 164.137.37.0/24 maxlen: 24 164.137.38.0/24 maxlen: 24 164.137.39.0/24 maxlen: 24 164.137.40.0/24 maxlen: 24 164.137.41.0/24 maxlen: 24 164.137.42.0/24 maxlen: 24 164.137.43.0/24 maxlen: 24 164.137.44.0/24 maxlen: 24 164.137.45.0/24 maxlen: 24 164.137.46.0/24 maxlen: 24 164.137.47.0/24 maxlen: 24 164.137.48.0/24 maxlen: 24 164.137.49.0/24 maxlen: 24 164.137.50.0/24 maxlen: 24 164.137.51.0/24 maxlen: 24 164.137.52.0/24 maxlen: 24 164.137.53.0/24 maxlen: 24 2a03:eec0:3212::/48 maxlen: 48 2a03:eec0:321b::/48 maxlen: 48 2a03:eec0:322b::/48 maxlen: 48 2a03:eec0:322c::/48 maxlen: 48 2a03:eec0:322d::/48 maxlen: 48 2a03:eec0:322e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e3:ad:b3:aa:22:3c:4c:2f:20:63:02:d3:77:9e:0d:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aca66a5938af567a9e29b4f76f115607c2b8aa20 Validity Not Before: Jan 22 03:09:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6308d967d6e02d5c6ddb169b7e608001b82431a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ac:de:1d:b3:3e:f3:c7:67:05:df:80:fa:5c: c6:cd:78:b2:be:4e:49:f5:fd:97:9c:ef:cd:22:57: cc:10:50:2e:cb:66:cd:d3:a4:76:d2:36:04:c8:de: 5a:e2:17:aa:83:93:b5:07:c9:f0:2b:23:ad:b2:2f: ac:3a:56:41:80:09:53:4f:cb:69:82:f3:26:f1:75: 67:1c:9e:35:a4:fb:02:af:ce:3e:d6:c0:06:4a:ff: 34:0e:b4:46:ec:21:f6:79:10:6d:a2:bd:75:1b:50: 58:e9:0d:1e:2f:56:8f:c8:e0:9f:61:1d:0d:bb:6e: 17:09:fc:e3:68:fe:ee:89:98:87:9d:4b:53:c7:7c: 4b:99:05:fb:f3:61:eb:a9:f1:12:58:96:b0:b7:cc: 7b:c8:1c:2f:c3:a0:a4:00:df:14:27:4a:7f:a4:83: a3:b1:0a:c0:a1:8c:36:95:df:5b:0b:5e:60:e1:60: ba:3c:8f:2c:e2:c7:9c:6f:eb:cb:df:52:13:3f:eb: 35:b9:33:0f:bb:c8:81:34:7c:f7:72:96:bd:3e:9f: 67:de:25:c0:50:c4:11:7d:54:ab:0a:ea:d3:16:22: bb:b4:9d:ca:31:1c:94:93:d1:f1:d3:c5:b6:7e:7f: 00:44:b2:cf:e5:22:c6:f9:4b:05:af:9a:65:83:51: c4:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:08:D9:67:D6:E0:2D:5C:6D:DB:16:9B:7E:60:80:01:B8:24:31:A5 X509v3 Authority Key Identifier: keyid:AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/YwjZZ9bgLVxt2xabfmCAAbgkMaU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.161.128.0/23 159.254.58.0-159.254.61.255 159.254.64.0/22 159.254.69.0/24 159.254.84.0-159.254.86.255 159.254.92.0-159.254.97.255 159.254.99.0-159.254.100.255 159.254.182.0-159.254.185.255 159.254.202.0/24 159.254.209.0/24 159.254.217.0/24 164.137.4.0-164.137.53.255 IPv6: 2a03:eec0:3212::/48 2a03:eec0:321b::/48 2a03:eec0:322b::-2a03:eec0:322e:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 85:c7:df:95:12:4c:99:99:7f:d7:f0:ec:6d:c5:20:9e:a9:ab: 89:9d:05:4d:c8:ed:51:e9:2e:56:fd:5a:e6:9a:4e:56:56:d4: 56:65:91:91:44:5b:83:02:33:b4:70:16:db:50:e1:54:0d:a2: 91:dd:a9:35:e1:2f:9c:8a:ab:ba:db:80:62:25:89:bb:9c:b1: 49:a6:00:51:77:26:ef:4c:e1:18:06:53:9a:a2:c6:67:b7:71: b2:8d:49:dd:f0:d2:7c:65:12:31:d8:c1:5c:92:03:0d:1e:21: 49:be:25:13:4b:b7:02:90:10:0d:41:74:53:d1:f9:05:6b:b7: 71:ad:be:f8:5c:32:4d:06:e1:92:bf:02:65:35:cd:75:f4:ce: 33:10:58:51:4f:61:a1:ea:73:10:8e:c3:8f:e6:7e:42:45:39: 82:4b:d4:03:66:4f:6a:f8:3c:0b:8d:8b:0e:40:1b:11:06:c0: 9f:8b:9c:69:c4:7b:99:7f:38:40:f8:1e:14:de:53:94:a1:b1: 49:92:cf:be:f5:ca:73:1b:42:06:ca:ba:6b:9f:6e:a5:16:be: ae:07:9c:43:7f:1a:6f:9e:e7:22:53:8c:6b:01:5c:09:53:1d: 84:da:ff:96:02:a4:9f:6e:ce:69:2a:c8:2e:bf:fa:d1:98:b1: 22:9b:55:5c -----BEGIN CERTIFICATE----- MIIFoDCCBIigAwIBAgISAZvjrbOqIjxMLyBjAtN3ng1PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjYTY2YTU5MzhhZjU2N2E5ZTI5YjRmNzZmMTE1NjA3YzJi OGFhMjAwHhcNMjYwMTIyMDMwOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MzA4ZDk2N2Q2ZTAyZDVjNmRkYjE2OWI3ZTYwODAwMWI4MjQzMWE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsazeHbM+88dnBd+A+lzGzXiyvk5J 9f2XnO/NIlfMEFAuy2bN06R20jYEyN5a4heqg5O1B8nwKyOtsi+sOlZBgAlTT8tp gvMm8XVnHJ41pPsCr84+1sAGSv80DrRG7CH2eRBtor11G1BY6Q0eL1aPyOCfYR0N u24XCfzjaP7uiZiHnUtTx3xLmQX782HrqfESWJawt8x7yBwvw6CkAN8UJ0p/pIOj sQrAoYw2ld9bC15g4WC6PI8s4secb+vL31ITP+s1uTMPu8iBNHz3cpa9Pp9n3iXA UMQRfVSrCurTFiK7tJ3KMRyUk9Hx08W2fn8ARLLP5SLG+UsFr5plg1HEhQIDAQAB o4ICrDCCAqgwHQYDVR0OBBYEFGMI2WfW4C1cbdsWm35ggAG4JDGlMB8GA1UdIwQY MBaAFKymalk4r1Z6nim0928RVgfCuKogMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcktacVdUaXZWbnFlS2JUM2J4RldCOEs0cWlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8xNTA4OWItMThkNy00ZmYwLTlkMjgt YjliNjU0MDJiOTI4LzEvWXdqWlo5YmdMVnh0MnhhYmZtQ0FBYmdrTWFVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi8xNTA4OWItMThkNy00ZmYwLTlkMjgtYjliNjU0MDJiOTI4 LzEvcktacVdUaXZWbnFlS2JUM2J4RldCOEs0cWlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHBBggrBgEFBQcBBwEB/wSBsTCBrjB+BAIAATB4AwQBk6GA MAwDBAGf/joDBAGf/jwDBAKf/kADBACf/kUwDAMEAp/+VAMEAJ/+VjAMAwQCn/5c AwQBn/5gMAwDBACf/mMDBACf/mQwDAMEAZ/+tgMEAZ/+uAMEAJ/+ygMEAJ/+0QME AJ/+2TAMAwQCpIkEAwQBpIk0MCwEAgACMCYDBwAqA+7AMhIDBwAqA+7AMhswEgMH ACoD7sAyKwMHACoD7sAyLjANBgkqhkiG9w0BAQsFAAOCAQEAhcfflRJMmZl/1/Ds bcUgnqmriZ0FTcjtUekuVv1a5ppOVlbUVmWRkURbgwIztHAW21DhVA2ikd2pNeEv nIqrutuAYiWJu5yxSaYAUXcm70zhGAZTmqLGZ7dxso1J3fDSfGUSMdjBXJIDDR4h Sb4lE0u3ApAQDUF0U9H5BWu3ca2++FwyTQbhkr8CZTXNdfTOMxBYUU9hoepzEI7D j+Z+QkU5gkvUA2ZPavg8C42LDkAbEQbAn4ucacR7mX84QPgeFN5TlKGxSZLPvvXK cxtCBsq6a59upRa+rgecQ38ab57nIlOMawFcCVMdhNr/lgKkn27OaSrILr/60Zix IptVXA== -----END CERTIFICATE-----Generated at Sun Jan 25 10:33:00 2026 by rpki-client