This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/YRAKxO_5PDBMOVzyQuHwC3_OCD0.roa File: YRAKxO_5PDBMOVzyQuHwC3_OCD0.roa (raw, json) Hash identifier: R49X3LjYIsb7KWKXblARjfqClqVhgPPU/f35T6qlbaA= Subject key identifier: 61:10:0A:C4:EF:F9:3C:30:4C:39:5C:F2:42:E1:F0:0B:7F:CE:08:3D Certificate issuer: /CN=8f3818554a51808eefb829ec7465a3222f270123 Certificate serial: 019B78A32C736C8E91A4C29088840967D40C Authority key identifier: 8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/YRAKxO_5PDBMOVzyQuHwC3_OCD0.roa Signing time: Thu 01 Jan 2026 08:18:38 +0000 ROA not before: Thu 01 Jan 2026 08:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8641 IP address blocks: 77.73.24.0/21 maxlen: 21 77.94.160.0/19 maxlen: 19 81.26.144.0/21 maxlen: 21 81.26.144.0/24 maxlen: 24 81.26.150.0/24 maxlen: 24 81.26.152.0/22 maxlen: 22 81.26.154.0/24 maxlen: 24 81.26.155.0/24 maxlen: 24 84.47.128.0/23 maxlen: 23 84.47.131.0/24 maxlen: 24 84.47.134.0/23 maxlen: 23 84.47.135.0/24 maxlen: 24 84.47.136.0/24 maxlen: 24 84.47.140.0/22 maxlen: 22 84.47.143.0/24 maxlen: 24 84.47.144.0/23 maxlen: 23 84.47.147.0/24 maxlen: 24 84.47.150.0/23 maxlen: 32 84.47.152.0/23 maxlen: 23 84.47.156.0/22 maxlen: 22 84.47.158.0/23 maxlen: 23 84.47.160.0/24 maxlen: 24 84.47.161.0/24 maxlen: 24 84.47.162.0/24 maxlen: 24 84.47.163.0/24 maxlen: 24 84.47.164.0/23 maxlen: 23 84.47.164.0/24 maxlen: 24 84.47.168.0/22 maxlen: 22 84.47.172.0/24 maxlen: 24 84.47.174.0/23 maxlen: 23 84.47.176.0/23 maxlen: 23 84.47.176.0/24 maxlen: 24 84.47.177.0/24 maxlen: 24 84.47.178.0/24 maxlen: 24 84.47.181.0/24 maxlen: 24 84.47.182.0/23 maxlen: 23 84.47.186.0/23 maxlen: 23 84.47.190.0/23 maxlen: 23 85.91.96.0/21 maxlen: 21 85.91.112.0/22 maxlen: 22 85.91.118.0/23 maxlen: 23 85.91.120.0/23 maxlen: 23 85.91.122.0/24 maxlen: 24 91.197.183.0/24 maxlen: 24 185.106.107.0/24 maxlen: 24 213.135.64.0/23 maxlen: 23 213.135.67.0/24 maxlen: 24 213.135.69.0/24 maxlen: 24 213.135.70.0/24 maxlen: 24 213.135.72.0/23 maxlen: 23 213.135.77.0/24 maxlen: 24 213.135.82.0/23 maxlen: 23 213.135.84.0/22 maxlen: 22 213.135.88.0/22 maxlen: 22 213.135.92.0/24 maxlen: 24 213.135.95.0/24 maxlen: 24 213.208.160.0/21 maxlen: 21 213.208.168.0/23 maxlen: 23 213.208.170.0/24 maxlen: 24 213.208.172.0/23 maxlen: 23 213.208.174.0/23 maxlen: 23 213.208.176.0/21 maxlen: 21 213.208.184.0/24 maxlen: 24 213.208.188.0/22 maxlen: 22 2a02:bc8::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.mft rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:2c:73:6c:8e:91:a4:c2:90:88:84:09:67:d4:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f3818554a51808eefb829ec7465a3222f270123 Validity Not Before: Jan 1 08:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=61100ac4eff93c304c395cf242e1f00b7fce083d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:4e:5b:49:1f:9e:c5:68:e8:61:f3:3a:7c:fc: 6b:f5:73:e2:34:4a:47:25:f2:ff:6a:11:39:2d:02: d2:a3:47:43:04:bd:56:18:89:f6:9c:46:5c:3e:72: a9:da:bc:c9:49:e0:8c:57:85:f8:af:93:3b:00:1a: 7c:4f:30:95:bc:a8:90:9e:09:d4:d7:e3:5f:44:a1: 1f:17:1a:26:a3:25:0f:ab:b8:77:98:72:28:61:a1: f7:df:90:f2:e6:81:ba:5c:2e:3b:4a:3e:28:15:82: b2:bb:a0:45:f2:3d:4e:aa:ba:3c:bc:6e:81:be:02: 76:c4:d0:16:c0:f2:a5:c0:50:01:f0:48:f1:ef:97: 18:19:89:3d:73:b3:59:95:81:39:b3:59:92:79:f2: 0b:d9:2c:ad:d0:d1:4f:ac:d3:14:89:1a:6f:68:60: 01:09:f3:2b:85:75:7a:7f:72:db:a2:5d:c7:6e:bc: 67:22:cc:3b:c7:64:9d:69:91:85:1a:79:be:74:76: 88:86:0e:23:8a:fc:a3:f0:72:73:5e:9c:02:6c:36: 39:4f:7e:ed:cf:08:7f:59:cd:b5:9c:ef:3d:88:96: 85:ba:b5:c4:4d:08:a1:d7:06:b8:45:28:22:fa:16: 82:5d:83:33:c2:b4:a2:76:e3:2f:f6:60:5f:f2:b2: ee:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:10:0A:C4:EF:F9:3C:30:4C:39:5C:F2:42:E1:F0:0B:7F:CE:08:3D X509v3 Authority Key Identifier: keyid:8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/YRAKxO_5PDBMOVzyQuHwC3_OCD0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.73.24.0/21 77.94.160.0/19 81.26.144.0-81.26.155.255 84.47.128.0/23 84.47.131.0/24 84.47.134.0-84.47.136.255 84.47.140.0-84.47.145.255 84.47.147.0/24 84.47.150.0-84.47.153.255 84.47.156.0-84.47.165.255 84.47.168.0-84.47.172.255 84.47.174.0-84.47.178.255 84.47.181.0-84.47.183.255 84.47.186.0/23 84.47.190.0/23 85.91.96.0/21 85.91.112.0/22 85.91.118.0-85.91.122.255 91.197.183.0/24 185.106.107.0/24 213.135.64.0/23 213.135.67.0/24 213.135.69.0-213.135.70.255 213.135.72.0/23 213.135.77.0/24 213.135.82.0-213.135.92.255 213.135.95.0/24 213.208.160.0-213.208.170.255 213.208.172.0-213.208.184.255 213.208.188.0/22 IPv6: 2a02:bc8::/29 Signature Algorithm: sha256WithRSAEncryption 12:3b:23:18:c2:18:25:99:7b:fa:eb:5c:66:64:d3:52:ee:af: 06:d3:d5:bc:7a:c6:3e:92:66:7d:73:df:b3:23:a8:fd:57:72: 81:cd:f9:5c:a1:ac:f4:8f:35:8f:50:14:87:9e:a2:44:4f:d8: 01:41:cb:64:f1:5b:aa:93:b5:f7:00:7c:ee:5d:fa:d2:60:93: 07:58:84:0e:55:35:ec:b1:80:02:3f:5a:ff:73:d0:17:37:df: 79:f8:aa:0d:19:31:43:37:66:ca:b0:3c:8e:95:a0:46:c5:f4: 41:26:21:ce:44:51:83:89:29:ae:b2:17:5b:27:04:0b:dc:e0: 4c:78:e5:61:78:2e:77:4b:f1:53:98:8d:d7:20:d8:69:af:ad: b0:c9:c6:66:6d:b6:03:8b:13:c3:db:11:82:94:db:b5:5c:1a: de:43:db:f9:e1:c4:e9:50:be:54:d6:04:66:92:99:a7:71:c2: 7d:75:09:c7:b6:b1:ea:d3:2a:bf:a5:9b:98:f7:c2:90:74:c8: 04:0b:14:f2:25:15:73:b4:d8:09:d1:53:06:d7:70:ae:ea:70: dd:7d:f1:6d:3b:5b:bc:2c:11:f7:36:8c:e3:12:0f:34:a1:25: 24:27:08:35:49:88:19:f7:5d:49:b1:52:b0:13:41:57:2a:53: c8:c6:35:d8 -----BEGIN CERTIFICATE----- MIIGLDCCBRSgAwIBAgISAZt4oyxzbI6RpMKQiIQJZ9QMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmMzgxODU1NGE1MTgwOGVlZmI4MjllYzc0NjVhMzIyMmYy NzAxMjMwHhcNMjYwMTAxMDgxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MTEwMGFjNGVmZjkzYzMwNGMzOTVjZjI0MmUxZjAwYjdmY2UwODNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7k5bSR+exWjoYfM6fPxr9XPiNEpH JfL/ahE5LQLSo0dDBL1WGIn2nEZcPnKp2rzJSeCMV4X4r5M7ABp8TzCVvKiQngnU 1+NfRKEfFxomoyUPq7h3mHIoYaH335Dy5oG6XC47Sj4oFYKyu6BF8j1Oqro8vG6B vgJ2xNAWwPKlwFAB8Ejx75cYGYk9c7NZlYE5s1mSefIL2Syt0NFPrNMUiRpvaGAB CfMrhXV6f3Lbol3HbrxnIsw7x2SdaZGFGnm+dHaIhg4jivyj8HJzXpwCbDY5T37t zwh/Wc21nO89iJaFurXETQih1wa4RSgi+haCXYMzwrSiduMv9mBf8rLudwIDAQAB o4IDODCCAzQwHQYDVR0OBBYEFGEQCsTv+TwwTDlc8kLh8At/zgg9MB8GA1UdIwQY MBaAFI84GFVKUYCO77gp7HRloyIvJwEjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanpnWVZVcFJnSTd2dUNuc2RHV2pJaThuQVNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8wOWRiYTQtMWM5My00OWQ2LTg4ODgt YmZiNGJhMzBlNDVhLzEvWVJBS3hPXzVQREJNT1Z6eVF1SHdDM19PQ0QwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni8wOWRiYTQtMWM5My00OWQ2LTg4ODgtYmZiNGJhMzBlNDVh LzEvanpnWVZVcFJnSTd2dUNuc2RHV2pJaThuQVNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBTAYIKwYBBQUHAQcBAf8EggE7MIIBNzCCASQEAgABMIIB HAMEA01JGAMEBU1eoDAMAwQEURqQAwQCURqYAwQBVC+AAwQAVC+DMAwDBAFUL4YD BABUL4gwDAMEAlQvjAMEAVQvkAMEAFQvkzAMAwQBVC+WAwQBVC+YMAwDBAJUL5wD BAFUL6QwDAMEA1QvqAMEAFQvrDAMAwQBVC+uAwQAVC+yMAwDBABUL7UDBANUL7AD BAFUL7oDBAFUL74DBANVW2ADBAJVW3AwDAMEAVVbdgMEAFVbegMEAFvFtwMEALlq awMEAdWHQAMEANWHQzAMAwQA1YdFAwQA1YdGAwQB1YdIAwQA1YdNMAwDBAHVh1ID BADVh1wDBADVh18wDAMEBdXQoAMEANXQqjAMAwQC1dCsAwQA1dC4AwQC1dC8MA0E AgACMAcDBQMqAgvIMA0GCSqGSIb3DQEBCwUAA4IBAQASOyMYwhglmXv661xmZNNS 7q8G09W8esY+kmZ9c9+zI6j9V3KBzflcoaz0jzWPUBSHnqJET9gBQctk8Vuqk7X3 AHzuXfrSYJMHWIQOVTXssYACP1r/c9AXN995+KoNGTFDN2bKsDyOlaBGxfRBJiHO RFGDiSmushdbJwQL3OBMeOVheC53S/FTmI3XINhpr62wycZmbbYDixPD2xGClNu1 XBreQ9v54cTpUL5U1gRmkpmnccJ9dQnHtrHq0yq/pZuY98KQdMgECxTyJRVztNgJ 0VMG13Cu6nDdffFtO1u8LBH3NozjEg80oSUkJwg1SYgZ911JsVKwE0FXKlPIxjXY -----END CERTIFICATE-----Generated at Sun Jan 25 22:41:43 2026 by rpki-client