This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/YhAgOfBxB36OmlW5J6iwNI4pf-A.roa File: YhAgOfBxB36OmlW5J6iwNI4pf-A.roa (raw, json) Hash identifier: YgJ931EB8K2m5BcoLz5t++aQe+CzOPxkeIACGG7/szQ= Subject key identifier: 62:10:20:39:F0:71:07:7E:8E:9A:55:B9:27:A8:B0:34:8E:29:7F:E0 Certificate issuer: /CN=d82cb43ca3c0c57816cee360478d0cf882207fd2 Certificate serial: 019B78349E3E91525E8CB48D20C267B98190 Authority key identifier: D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/YhAgOfBxB36OmlW5J6iwNI4pf-A.roa Signing time: Thu 01 Jan 2026 06:17:52 +0000 ROA not before: Thu 01 Jan 2026 06:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57858 IP address blocks: 5.34.240.0/24 maxlen: 24 5.34.241.0/24 maxlen: 24 5.34.242.0/24 maxlen: 24 5.34.243.0/24 maxlen: 24 5.34.244.0/24 maxlen: 24 5.34.245.0/24 maxlen: 24 5.34.246.0/24 maxlen: 24 5.34.247.0/24 maxlen: 24 5.153.233.0/24 maxlen: 24 5.153.234.0/24 maxlen: 24 5.153.235.0/24 maxlen: 24 5.153.237.0/24 maxlen: 24 5.153.238.0/24 maxlen: 24 5.157.0.0/24 maxlen: 24 5.157.1.0/24 maxlen: 24 5.157.5.0/24 maxlen: 24 5.157.7.0/24 maxlen: 24 5.157.9.0/24 maxlen: 24 5.157.10.0/24 maxlen: 24 5.157.12.0/24 maxlen: 24 5.157.15.0/24 maxlen: 24 5.157.16.0/24 maxlen: 24 5.157.18.0/24 maxlen: 24 5.157.20.0/24 maxlen: 24 5.157.25.0/24 maxlen: 24 5.157.28.0/24 maxlen: 24 5.157.35.0/24 maxlen: 24 5.157.36.0/24 maxlen: 24 5.157.38.0/24 maxlen: 24 5.157.39.0/24 maxlen: 24 5.157.40.0/24 maxlen: 24 5.157.44.0/24 maxlen: 24 5.157.46.0/24 maxlen: 24 5.157.47.0/24 maxlen: 24 5.157.48.0/24 maxlen: 24 5.157.49.0/24 maxlen: 24 5.157.50.0/24 maxlen: 24 5.157.52.0/24 maxlen: 24 5.157.54.0/24 maxlen: 24 37.72.187.0/24 maxlen: 24 37.72.188.0/24 maxlen: 24 37.72.189.0/24 maxlen: 24 37.72.190.0/24 maxlen: 24 37.72.191.0/24 maxlen: 24 37.203.208.0/24 maxlen: 24 37.203.209.0/24 maxlen: 24 37.203.210.0/24 maxlen: 24 37.203.211.0/24 maxlen: 24 37.203.212.0/24 maxlen: 24 37.203.213.0/24 maxlen: 24 37.203.214.0/24 maxlen: 24 46.29.248.0/23 maxlen: 23 46.29.250.0/23 maxlen: 23 46.29.252.0/24 maxlen: 24 46.29.253.0/24 maxlen: 24 46.29.254.0/24 maxlen: 24 46.29.255.0/24 maxlen: 24 91.108.176.0/24 maxlen: 24 91.108.177.0/24 maxlen: 24 91.108.178.0/24 maxlen: 24 91.108.179.0/24 maxlen: 24 91.108.180.0/24 maxlen: 24 91.108.181.0/24 maxlen: 24 91.108.182.0/24 maxlen: 24 91.108.183.0/24 maxlen: 24 130.185.152.0/24 maxlen: 24 130.185.154.0/24 maxlen: 24 130.185.155.0/24 maxlen: 24 130.185.156.0/24 maxlen: 24 130.185.157.0/24 maxlen: 24 130.185.158.0/24 maxlen: 24 130.185.159.0/24 maxlen: 24 151.237.176.0/24 maxlen: 24 151.237.177.0/24 maxlen: 24 151.237.178.0/24 maxlen: 24 151.237.179.0/24 maxlen: 24 151.237.180.0/24 maxlen: 24 151.237.181.0/24 maxlen: 24 151.237.182.0/24 maxlen: 24 151.237.183.0/24 maxlen: 24 151.237.184.0/24 maxlen: 24 151.237.185.0/24 maxlen: 24 151.237.187.0/24 maxlen: 24 151.237.189.0/24 maxlen: 24 151.237.190.0/24 maxlen: 24 151.237.191.0/24 maxlen: 24 176.61.136.0/24 maxlen: 24 176.61.137.0/24 maxlen: 24 176.61.138.0/24 maxlen: 24 176.61.139.0/24 maxlen: 24 176.61.140.0/24 maxlen: 24 176.61.141.0/24 maxlen: 24 176.61.142.0/24 maxlen: 24 176.61.143.0/24 maxlen: 24 178.216.48.0/24 maxlen: 24 178.216.49.0/24 maxlen: 24 178.216.50.0/24 maxlen: 24 178.216.51.0/24 maxlen: 24 178.216.52.0/24 maxlen: 24 178.216.53.0/24 maxlen: 24 178.216.54.0/24 maxlen: 24 178.216.55.0/24 maxlen: 24 185.3.132.0/24 maxlen: 24 185.3.133.0/24 maxlen: 24 185.3.134.0/24 maxlen: 24 185.3.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:9e:3e:91:52:5e:8c:b4:8d:20:c2:67:b9:81:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d82cb43ca3c0c57816cee360478d0cf882207fd2 Validity Not Before: Jan 1 06:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=62102039f071077e8e9a55b927a8b0348e297fe0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:e4:a1:53:f9:37:c2:01:52:80:bd:e9:22:ce: d5:51:63:7b:57:0e:c8:f6:9a:21:62:90:61:f2:e8: 03:bc:c0:06:93:68:c1:c8:c3:af:97:35:ed:58:2e: 5d:c2:79:05:88:1d:fa:13:0d:1c:eb:0f:d8:e5:9d: f3:74:55:35:fa:68:be:75:f2:42:c1:e2:cf:59:86: 0b:fe:3b:4b:21:60:42:62:fe:17:11:ce:09:36:c2: 55:b2:e7:5e:c5:f6:7c:ae:71:77:1b:bf:3e:19:d9: a3:43:18:a1:59:b1:90:3a:81:51:ec:e2:3e:d2:43: 18:cf:2d:f8:67:29:3c:57:79:d5:97:e6:f6:3d:e4: d3:73:69:9d:30:16:4a:02:f9:bd:0d:28:9c:92:dd: db:6e:8e:17:34:67:04:5c:8d:b0:51:a8:36:d4:75: 96:46:e0:fd:2e:02:19:17:92:24:d8:f1:4b:30:fc: b5:66:40:98:cc:27:af:43:af:31:eb:83:5d:d1:ab: a8:fe:44:4c:c1:21:7d:3b:5b:ad:18:b9:f5:8b:e1: 62:5e:b8:c0:09:73:30:4b:ed:84:0e:73:4c:e9:8d: aa:4f:a1:e5:0f:1d:1e:2a:f4:39:96:69:6d:01:de: f5:5b:97:c0:23:7a:02:91:24:83:b9:78:f2:26:db: 1f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:10:20:39:F0:71:07:7E:8E:9A:55:B9:27:A8:B0:34:8E:29:7F:E0 X509v3 Authority Key Identifier: keyid:D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/YhAgOfBxB36OmlW5J6iwNI4pf-A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.34.240.0/21 5.153.233.0-5.153.235.255 5.153.237.0-5.153.238.255 5.157.0.0/23 5.157.5.0/24 5.157.7.0/24 5.157.9.0-5.157.10.255 5.157.12.0/24 5.157.15.0-5.157.16.255 5.157.18.0/24 5.157.20.0/24 5.157.25.0/24 5.157.28.0/24 5.157.35.0-5.157.36.255 5.157.38.0-5.157.40.255 5.157.44.0/24 5.157.46.0-5.157.50.255 5.157.52.0/24 5.157.54.0/24 37.72.187.0-37.72.191.255 37.203.208.0-37.203.214.255 46.29.248.0/21 91.108.176.0/21 130.185.152.0/24 130.185.154.0-130.185.159.255 151.237.176.0-151.237.185.255 151.237.187.0/24 151.237.189.0-151.237.191.255 176.61.136.0/21 178.216.48.0/21 185.3.132.0/22 Signature Algorithm: sha256WithRSAEncryption 1d:f4:be:0c:3f:fc:d6:85:80:d0:ac:a1:5e:63:1a:4b:45:42: fc:1e:1c:3e:8b:27:d4:7d:aa:3f:39:20:fe:47:bc:b2:3b:d4: cd:5a:7a:84:df:55:de:8b:4a:e0:64:d3:2f:b4:de:f8:a7:fd: 83:0e:90:cd:2b:64:e0:d3:47:a6:a6:5c:6f:00:be:e0:60:29: 54:9a:5d:0e:9f:45:b9:4f:68:2f:63:63:c2:5a:6b:c0:84:c8: 96:89:3b:e9:8a:a4:b3:8c:bc:8e:f2:f5:a8:e7:5d:0d:72:82: 59:97:61:db:86:c9:c2:a6:17:73:f6:5e:01:c2:3a:49:6b:29: 9f:1d:cd:dd:50:67:4b:d5:51:70:5b:9b:11:d8:0e:b3:2a:15: 9a:85:83:97:d0:ad:d4:e0:fd:1b:36:8e:00:9f:f4:40:05:66: 6d:3d:84:bb:c4:ba:ce:f4:74:51:5b:72:e4:9a:26:bf:56:27: 2b:73:77:84:1c:bd:b2:d9:f7:22:00:ce:a6:17:0d:41:73:53: 44:33:83:3d:47:48:ac:dc:76:d8:7d:8b:91:24:a7:6e:fd:24: 0e:cb:d4:cf:19:dd:8d:0f:fd:a5:e1:8a:cf:0f:60:12:e2:c2: 1d:c8:0d:bf:01:6f:1f:9a:a5:b7:5a:ca:28:16:f4:2b:3f:90: cc:09:07:84 -----BEGIN CERTIFICATE----- MIIGGzCCBQOgAwIBAgISAZt4NJ4+kVJejLSNIMJnuYGQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4MmNiNDNjYTNjMGM1NzgxNmNlZTM2MDQ3OGQwY2Y4ODIy MDdmZDIwHhcNMjYwMTAxMDYxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MjEwMjAzOWYwNzEwNzdlOGU5YTU1YjkyN2E4YjAzNDhlMjk3ZmUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9+ShU/k3wgFSgL3pIs7VUWN7Vw7I 9pohYpBh8ugDvMAGk2jByMOvlzXtWC5dwnkFiB36Ew0c6w/Y5Z3zdFU1+mi+dfJC weLPWYYL/jtLIWBCYv4XEc4JNsJVsudexfZ8rnF3G78+GdmjQxihWbGQOoFR7OI+ 0kMYzy34Zyk8V3nVl+b2PeTTc2mdMBZKAvm9DSickt3bbo4XNGcEXI2wUag21HWW RuD9LgIZF5Ik2PFLMPy1ZkCYzCevQ68x64Nd0auo/kRMwSF9O1utGLn1i+FiXrjA CXMwS+2EDnNM6Y2qT6HlDx0eKvQ5lmltAd71W5fAI3oCkSSDuXjyJtsfGwIDAQAB o4IDJzCCAyMwHQYDVR0OBBYEFGIQIDnwcQd+jppVuSeosDSOKX/gMB8GA1UdIwQY MBaAFNgstDyjwMV4Fs7jYEeNDPiCIH/SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8zYjUxYjgtMTBjNi00MzhiLWExMjAt MTVmMTNlM2Y3ZDg1LzEvWWhBZ09mQnhCMzZPbWxXNUo2aXdOSTRwZi1BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8zYjUxYjgtMTBjNi00MzhiLWExMjAtMTVmMTNlM2Y3ZDg1 LzEvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBOwYIKwYBBQUHAQcBAf8EggEqMIIBJjCCASIEAgABMIIB GgMEAwUi8DAMAwQABZnpAwQCBZnoMAwDBAAFme0DBAAFme4DBAEFnQADBAAFnQUD BAAFnQcwDAMEAAWdCQMEAAWdCgMEAAWdDDAMAwQABZ0PAwQABZ0QAwQABZ0SAwQA BZ0UAwQABZ0ZAwQABZ0cMAwDBAAFnSMDBAAFnSQwDAMEAQWdJgMEAAWdKAMEAAWd LDAMAwQBBZ0uAwQABZ0yAwQABZ00AwQABZ02MAwDBAAlSLsDBAYlSIAwDAMEBCXL 0AMEACXL1gMEAy4d+AMEA1tssAMEAIK5mDAMAwQBgrmaAwQFgrmAMAwDBASX7bAD BAGX7bgDBACX7bswDAMEAJftvQMEBpftgAMEA7A9iAMEA7LYMAMEArkDhDANBgkq hkiG9w0BAQsFAAOCAQEAHfS+DD/81oWA0KyhXmMaS0VC/B4cPosn1H2qPzkg/ke8 sjvUzVp6hN9V3otK4GTTL7Te+Kf9gw6QzStk4NNHpqZcbwC+4GApVJpdDp9FuU9o L2NjwlprwITIlok76Yqks4y8jvL1qOddDXKCWZdh24bJwqYXc/ZeAcI6SWspnx3N 3VBnS9VRcFubEdgOsyoVmoWDl9Ct1OD9GzaOAJ/0QAVmbT2Eu8S6zvR0UVty5Jom v1YnK3N3hBy9stn3IgDOphcNQXNTRDODPUdIrNx22H2LkSSnbv0kDsvUzxndjQ/9 peGKzw9gEuLCHcgNvwFvH5qlt1rKKBb0Kz+QzAkHhA== -----END CERTIFICATE-----Generated at Sun Jan 25 22:16:53 2026 by rpki-client