This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/y81jmZh2IG1vc4T2rX8QCQEOL9E.roa File: y81jmZh2IG1vc4T2rX8QCQEOL9E.roa (raw, json) Hash identifier: Y1jjyD/MrRS3ujVJRgR28FUQy55OTENwus5vMZGjmSg= Subject key identifier: CB:CD:63:99:98:76:20:6D:6F:73:84:F6:AD:7F:10:09:01:0E:2F:D1 Certificate issuer: /CN=d50697943676399ac5cac6a3e476545af0df49dd Certificate serial: 019B79EC39CC6E4D0939B82775E8C8ADA30F Authority key identifier: D5:06:97:94:36:76:39:9A:C5:CA:C6:A3:E4:76:54:5A:F0:DF:49:DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QaXlDZ2OZrFysaj5HZUWvDfSd0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/y81jmZh2IG1vc4T2rX8QCQEOL9E.roa Signing time: Thu 01 Jan 2026 14:18:03 +0000 ROA not before: Thu 01 Jan 2026 14:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 375 IP address blocks: 131.207.0.0/17 maxlen: 17 192.49.0.0/21 maxlen: 21 192.49.9.0/24 maxlen: 24 192.49.10.0/24 maxlen: 24 192.49.13.0/24 maxlen: 24 192.49.19.0/24 maxlen: 24 192.49.20.0/24 maxlen: 24 192.49.22.0/24 maxlen: 24 192.49.33.0/24 maxlen: 24 192.49.36.0/22 maxlen: 22 192.49.40.0/21 maxlen: 21 192.49.48.0/22 maxlen: 22 192.49.52.0/23 maxlen: 23 192.49.55.0/24 maxlen: 24 192.49.56.0/21 maxlen: 21 192.49.64.0/22 maxlen: 22 192.49.68.0/24 maxlen: 24 192.49.70.0/23 maxlen: 23 192.49.72.0/23 maxlen: 23 192.49.72.0/24 maxlen: 24 192.49.78.0/24 maxlen: 24 192.49.81.0/24 maxlen: 24 192.49.86.0/23 maxlen: 23 192.49.88.0/23 maxlen: 23 192.49.90.0/24 maxlen: 24 192.49.91.0/24 maxlen: 24 192.49.92.0/22 maxlen: 22 192.49.96.0/20 maxlen: 20 192.49.112.0/22 maxlen: 22 192.49.117.0/24 maxlen: 24 192.49.119.0/24 maxlen: 24 192.49.120.0/22 maxlen: 22 192.49.124.0/23 maxlen: 23 192.49.126.0/24 maxlen: 24 192.49.128.0/22 maxlen: 22 192.49.133.0/24 maxlen: 24 192.49.134.0/24 maxlen: 24 192.49.136.0/23 maxlen: 23 192.49.139.0/24 maxlen: 24 192.49.140.0/23 maxlen: 23 192.49.142.0/24 maxlen: 24 192.49.144.0/24 maxlen: 24 192.49.146.0/24 maxlen: 24 192.49.148.0/22 maxlen: 22 192.49.152.0/21 maxlen: 21 192.49.160.0/21 maxlen: 21 192.49.168.0/23 maxlen: 23 192.49.170.0/24 maxlen: 24 192.49.173.0/24 maxlen: 24 192.49.174.0/23 maxlen: 23 192.49.176.0/20 maxlen: 20 192.49.192.0/18 maxlen: 18 2a03:9b80::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft rsync://rpki.ripe.net/repository/DEFAULT/1QaXlDZ2OZrFysaj5HZUWvDfSd0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:39:cc:6e:4d:09:39:b8:27:75:e8:c8:ad:a3:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d50697943676399ac5cac6a3e476545af0df49dd Validity Not Before: Jan 1 14:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cbcd63999876206d6f7384f6ad7f1009010e2fd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9c:2a:fc:cd:6e:18:35:4a:17:a9:bf:84:f3: a5:1a:ae:ed:de:ac:78:23:8f:be:29:4f:53:7c:ed: 19:3c:1f:d8:0e:9c:46:ab:22:1f:4d:67:4a:a8:7d: 9e:f2:38:d6:30:79:61:fb:9e:98:90:29:a7:6b:19: 0d:f3:9d:7d:0d:c5:29:d2:f8:72:1b:cb:8a:11:22: 51:9d:01:ab:aa:60:38:93:70:03:30:cc:a6:09:8f: e4:e7:92:4f:b7:91:05:9c:5f:4e:dc:b1:6f:aa:dc: 30:e3:e2:64:30:a3:b1:6c:e2:96:1a:f9:e2:11:37: c3:b5:e8:87:1f:a4:b7:a0:53:c8:06:d9:ce:93:09: 9b:ac:43:bc:04:a6:0e:b8:28:4f:1d:f3:2b:fe:0f: 38:79:d6:a3:bd:35:88:91:a4:3e:dd:b2:f4:aa:f3: e2:c9:56:bd:b3:c5:e1:0f:f9:3a:25:6e:f7:4e:65: 3c:49:c1:da:26:52:bc:64:2f:ec:13:b3:ae:62:0c: 2c:da:c5:f6:f0:67:14:41:b4:20:03:e7:55:82:a1: 2d:a8:de:aa:22:50:88:21:55:91:7d:42:53:c0:45: 10:8f:54:01:f4:f3:20:b4:af:25:65:5b:f7:00:76: 2a:37:f3:11:86:63:0b:24:53:6f:9b:aa:c6:b9:2c: 3a:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:CD:63:99:98:76:20:6D:6F:73:84:F6:AD:7F:10:09:01:0E:2F:D1 X509v3 Authority Key Identifier: keyid:D5:06:97:94:36:76:39:9A:C5:CA:C6:A3:E4:76:54:5A:F0:DF:49:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QaXlDZ2OZrFysaj5HZUWvDfSd0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/y81jmZh2IG1vc4T2rX8QCQEOL9E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.207.0.0/17 192.49.0.0/21 192.49.9.0-192.49.10.255 192.49.13.0/24 192.49.19.0-192.49.20.255 192.49.22.0/24 192.49.33.0/24 192.49.36.0-192.49.53.255 192.49.55.0-192.49.68.255 192.49.70.0-192.49.73.255 192.49.78.0/24 192.49.81.0/24 192.49.86.0-192.49.115.255 192.49.117.0/24 192.49.119.0-192.49.126.255 192.49.128.0/22 192.49.133.0-192.49.134.255 192.49.136.0/23 192.49.139.0-192.49.142.255 192.49.144.0/24 192.49.146.0/24 192.49.148.0-192.49.170.255 192.49.173.0-192.49.255.255 IPv6: 2a03:9b80::/34 Signature Algorithm: sha256WithRSAEncryption 53:da:1e:04:da:d5:da:3f:9c:c1:a5:61:34:6c:3b:b3:e7:e1: d8:6b:dd:6f:d5:80:14:34:5f:8d:c3:44:ec:89:ca:0e:0d:49: d2:11:e3:f4:bc:4f:ba:11:e4:31:a1:7c:a0:d7:5a:a7:2b:38: b3:32:58:59:f0:b6:54:f9:af:67:6c:7d:23:a4:3e:aa:ef:79: 54:81:9a:f0:af:cc:b4:a9:d9:04:d7:46:5c:21:be:b1:c1:dd: 98:90:9b:58:ce:93:4e:c5:74:60:fe:3f:3c:eb:dc:7b:d2:14: 63:55:92:d1:ce:e5:35:9a:54:55:1c:91:60:3a:81:f3:68:4f: a8:6c:ea:4f:62:cd:e6:3c:6b:a6:1f:99:39:88:45:14:85:0d: 3d:29:02:c3:82:34:87:7a:04:ca:bf:da:c0:6f:5c:99:b2:84: 5f:7a:26:04:04:7a:12:e9:18:3b:df:36:66:68:da:1f:f8:f0: 3b:2b:2c:d8:c9:58:79:98:f9:97:e5:26:f5:36:0d:ab:ef:f9: 38:db:af:b7:ed:8a:50:f2:5b:17:88:1e:0e:63:a4:b3:66:40: c8:a5:e9:94:89:0c:f7:23:9b:a6:08:95:98:a0:9f:85:79:fb: b3:78:d8:1a:5a:75:20:95:b9:f9:31:02:cf:80:d9:9e:80:28: 26:65:29:2f -----BEGIN CERTIFICATE----- MIIF7jCCBNagAwIBAgISAZt57DnMbk0JObgndejIraMPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1MDY5Nzk0MzY3NjM5OWFjNWNhYzZhM2U0NzY1NDVhZjBk ZjQ5ZGQwHhcNMjYwMTAxMTQxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYmNkNjM5OTk4NzYyMDZkNmY3Mzg0ZjZhZDdmMTAwOTAxMGUyZmQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupwq/M1uGDVKF6m/hPOlGq7t3qx4 I4++KU9TfO0ZPB/YDpxGqyIfTWdKqH2e8jjWMHlh+56YkCmnaxkN8519DcUp0vhy G8uKESJRnQGrqmA4k3ADMMymCY/k55JPt5EFnF9O3LFvqtww4+JkMKOxbOKWGvni ETfDteiHH6S3oFPIBtnOkwmbrEO8BKYOuChPHfMr/g84edajvTWIkaQ+3bL0qvPi yVa9s8XhD/k6JW73TmU8ScHaJlK8ZC/sE7OuYgws2sX28GcUQbQgA+dVgqEtqN6q IlCIIVWRfUJTwEUQj1QB9PMgtK8lZVv3AHYqN/MRhmMLJFNvm6rGuSw6zwIDAQAB o4IC+jCCAvYwHQYDVR0OBBYEFMvNY5mYdiBtb3OE9q1/EAkBDi/RMB8GA1UdIwQY MBaAFNUGl5Q2djmaxcrGo+R2VFrw30ndMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVFhWGxEWjJPWnJGeXNhajVIWlVXdkRmU2QwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS81ZjZhZmYtMTNiYi00ZGI4LTk1N2Yt OGQyM2FjNWNiNTAyLzEveTgxam1aaDJJRzF2YzRUMnJYOFFDUUVPTDlFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS81ZjZhZmYtMTNiYi00ZGI4LTk1N2YtOGQyM2FjNWNiNTAy LzEvMVFhWGxEWjJPWnJGeXNhajVIWlVXdkRmU2QwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBDgYIKwYBBQUHAQcBAf8Egf4wgfswgegEAgABMIHhAwQH g88AAwQDwDEAMAwDBADAMQkDBADAMQoDBADAMQ0wDAMEAMAxEwMEAMAxFAMEAMAx FgMEAMAxITAMAwQCwDEkAwQBwDE0MAwDBADAMTcDBADAMUQwDAMEAcAxRgMEAcAx SAMEAMAxTgMEAMAxUTAMAwQBwDFWAwQCwDFwAwQAwDF1MAwDBADAMXcDBADAMX4D BALAMYAwDAMEAMAxhQMEAMAxhgMEAcAxiDAMAwQAwDGLAwQAwDGOAwQAwDGQAwQA wDGSMAwDBALAMZQDBADAMaowCwMEAMAxrQMDAcAwMA4EAgACMAgDBgYqA5uAADAN BgkqhkiG9w0BAQsFAAOCAQEAU9oeBNrV2j+cwaVhNGw7s+fh2Gvdb9WAFDRfjcNE 7InKDg1J0hHj9LxPuhHkMaF8oNdapys4szJYWfC2VPmvZ2x9I6Q+qu95VIGa8K/M tKnZBNdGXCG+scHdmJCbWM6TTsV0YP4/POvce9IUY1WS0c7lNZpUVRyRYDqB82hP qGzqT2LN5jxrph+ZOYhFFIUNPSkCw4I0h3oEyr/awG9cmbKEX3omBAR6EukYO982 ZmjaH/jwOyss2MlYeZj5l+Um9TYNq+/5ONuvt+2KUPJbF4geDmOks2ZAyKXplIkM 9yObpgiVmKCfhXn7s3jYGlp1IJW5+TECz4DZnoAoJmUpLw== -----END CERTIFICATE-----Generated at Sun Jan 25 21:05:49 2026 by rpki-client