This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/ykPAskiY2eo6bwenp7rou0Cd4Co.roa File: ykPAskiY2eo6bwenp7rou0Cd4Co.roa (raw, json) Hash identifier: 7MaXibZAcGAVoxSztPs4C8RQcPHCjtKPNjMHd2bXMxU= Subject key identifier: CA:43:C0:B2:48:98:D9:EA:3A:6F:07:A7:A7:BA:E8:BB:40:9D:E0:2A Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e Certificate serial: 019B7AC8DD6D47F2EB56CFCFAED8BB651C09 Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/ykPAskiY2eo6bwenp7rou0Cd4Co.roa Signing time: Thu 01 Jan 2026 18:19:02 +0000 ROA not before: Thu 01 Jan 2026 18:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21502 IP address blocks: 77.128.0.0/13 maxlen: 24 77.136.0.0/16 maxlen: 24 77.140.0.0/15 maxlen: 24 77.142.0.0/16 maxlen: 24 77.144.0.0/12 maxlen: 24 77.192.0.0/12 maxlen: 24 78.112.0.0/12 maxlen: 24 79.80.0.0/12 maxlen: 24 81.64.0.0/14 maxlen: 24 81.185.0.0/16 maxlen: 24 84.4.0.0/14 maxlen: 24 85.168.0.0/14 maxlen: 24 87.231.0.0/16 maxlen: 24 88.140.0.0/15 maxlen: 24 89.2.0.0/15 maxlen: 24 89.156.0.0/14 maxlen: 24 89.157.88.0/21 maxlen: 21 89.157.96.0/19 maxlen: 19 92.88.0.0/13 maxlen: 24 93.0.0.0/11 maxlen: 24 109.0.0.0/11 maxlen: 24 195.132.0.0/16 maxlen: 24 213.223.0.0/16 maxlen: 24 213.245.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:dd:6d:47:f2:eb:56:cf:cf:ae:d8:bb:65:1c:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e Validity Not Before: Jan 1 18:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ca43c0b24898d9ea3a6f07a7a7bae8bb409de02a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:da:3d:81:61:13:23:4f:4f:68:a4:a2:78:59: e1:cb:19:22:75:92:bf:eb:2d:dd:65:b4:76:5d:c2: b9:6e:c9:fa:b6:2e:98:e5:3b:43:14:4f:91:60:85: fe:b3:83:8d:50:e1:f0:fd:b9:bb:8b:90:97:72:5f: c2:4d:8a:18:21:cd:0f:57:3b:51:8d:a8:02:35:fb: 9c:83:3f:26:fa:62:c1:23:41:92:86:6a:a7:69:39: fa:29:a4:f7:92:b3:70:7b:f6:77:e4:64:5d:46:4f: 4d:90:97:3e:7f:8d:0e:40:6e:31:69:fc:a5:7d:1c: c3:49:7e:5a:5a:4b:e1:bf:0c:66:69:26:63:d4:6b: 6a:be:15:86:78:29:b4:ad:31:48:fd:a6:42:86:21: 56:c1:97:e7:46:8c:6f:63:ef:0c:86:37:b3:94:0f: bb:a3:42:a5:5e:e3:e4:80:43:e9:91:b5:c9:79:d4: c5:2a:60:0c:05:9a:ab:14:a3:70:d7:2b:1a:70:f1: 09:7e:2b:9b:57:8e:c5:89:31:9b:39:73:6e:10:3a: ba:8c:7a:e7:2b:12:d2:32:97:c1:00:ad:de:4c:d0: 82:d6:81:eb:8b:51:a3:3c:2f:b6:c8:f1:95:94:c3: 16:ab:bd:69:46:73:6a:a7:1f:ea:88:92:3c:4d:e5: b5:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:43:C0:B2:48:98:D9:EA:3A:6F:07:A7:A7:BA:E8:BB:40:9D:E0:2A X509v3 Authority Key Identifier: keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/ykPAskiY2eo6bwenp7rou0Cd4Co.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.128.0.0-77.136.255.255 77.140.0.0-77.142.255.255 77.144.0.0/12 77.192.0.0/12 78.112.0.0/12 79.80.0.0/12 81.64.0.0/14 81.185.0.0/16 84.4.0.0/14 85.168.0.0/14 87.231.0.0/16 88.140.0.0/15 89.2.0.0/15 89.156.0.0/14 92.88.0.0/13 93.0.0.0/11 109.0.0.0/11 195.132.0.0/16 213.223.0.0/16 213.245.0.0/16 Signature Algorithm: sha256WithRSAEncryption aa:b3:a9:9c:7d:50:dd:18:a9:bd:b6:16:22:ba:c1:a2:b4:f1: 9b:ad:de:2e:65:9d:03:0b:1b:05:26:2e:d0:b5:1e:de:7a:c3: 36:9a:78:66:59:af:1d:bb:dd:3b:ed:d9:6b:7e:29:b8:8a:ff: ed:10:42:54:80:ac:0f:54:dc:94:44:d6:9c:f4:f7:de:4e:b1: de:04:21:15:fb:35:71:c9:35:4d:55:72:3b:98:be:28:bd:33: 14:81:76:16:73:b9:de:52:07:8d:cc:c7:dd:06:99:b7:00:46: a6:35:23:ad:8f:11:9b:56:43:0a:b3:1f:08:34:3f:62:0d:76: a7:03:5b:12:e1:62:1a:67:66:b1:58:ee:4e:85:5c:5e:e5:c4: c9:5a:a1:0a:88:e4:12:6a:63:02:96:9a:56:21:45:3b:83:e4: cd:df:8e:c8:17:94:be:7a:47:4a:0f:6b:03:6a:f4:09:27:78: 6f:ba:b1:63:cf:07:1d:0c:bc:11:89:92:47:2b:39:13:83:55: 60:3a:69:60:e3:48:a3:f6:45:5f:49:19:3d:69:0f:3e:ea:97: fc:b9:e5:94:62:d0:b5:fd:b5:86:03:01:a2:6f:6c:2d:93:f9: 4f:a9:c3:bb:97:33:1c:77:cf:15:47:6f:d1:40:76:23:71:86: b6:f1:e4:f1 -----BEGIN CERTIFICATE----- MIIFajCCBFKgAwIBAgISAZt6yN1tR/LrVs/Prti7ZRwJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwZWY1ZmJiZmNhN2E5M2NmZWU5NjVlZWI2YmRlZTZmYjQz YzQwM2UwHhcNMjYwMTAxMTgxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYTQzYzBiMjQ4OThkOWVhM2E2ZjA3YTdhN2JhZThiYjQwOWRlMDJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdo9gWETI09PaKSieFnhyxkidZK/ 6y3dZbR2XcK5bsn6ti6Y5TtDFE+RYIX+s4ONUOHw/bm7i5CXcl/CTYoYIc0PVztR jagCNfucgz8m+mLBI0GShmqnaTn6KaT3krNwe/Z35GRdRk9NkJc+f40OQG4xafyl fRzDSX5aWkvhvwxmaSZj1GtqvhWGeCm0rTFI/aZChiFWwZfnRoxvY+8MhjezlA+7 o0KlXuPkgEPpkbXJedTFKmAMBZqrFKNw1ysacPEJfiubV47FiTGbOXNuEDq6jHrn KxLSMpfBAK3eTNCC1oHri1GjPC+2yPGVlMMWq71pRnNqpx/qiJI8TeW1gwIDAQAB o4ICdjCCAnIwHQYDVR0OBBYEFMpDwLJImNnqOm8Hp6e66LtAneAqMB8GA1UdIwQY MBaAFKDvX7v8p6k8/ull7ra97m+0PEA+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2Mt MDI5MmIwMjAxNTBhLzEveWtQQXNraVkyZW82YndlbnA3cm91MENkNENvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2MtMDI5MmIwMjAxNTBh LzEvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGLBggrBgEFBQcBBwEB/wR8MHoweAQCAAEwcjAKAwMHTYAD AwBNiDAKAwMCTYwDAwBNjgMDBE2QAwMETcADAwROcAMDBE9QAwMCUUADAwBRuQMD AlQEAwMCVagDAwBX5wMDAViMAwMBWQIDAwJZnAMDA1xYAwMFXQADAwVtAAMDAMOE AwMA1d8DAwDV9TANBgkqhkiG9w0BAQsFAAOCAQEAqrOpnH1Q3RipvbYWIrrBorTx m63eLmWdAwsbBSYu0LUe3nrDNpp4ZlmvHbvdO+3Za34puIr/7RBCVICsD1TclETW nPT33k6x3gQhFfs1cck1TVVyO5i+KL0zFIF2FnO53lIHjczH3QaZtwBGpjUjrY8R m1ZDCrMfCDQ/Yg12pwNbEuFiGmdmsVjuToVcXuXEyVqhCojkEmpjApaaViFFO4Pk zd+OyBeUvnpHSg9rA2r0CSd4b7qxY88HHQy8EYmSRys5E4NVYDppYONIo/ZFX0kZ PWkPPuqX/LnllGLQtf21hgMBom9sLZP5T6nDu5czHHfPFUdv0UB2I3GGtvHk8Q== -----END CERTIFICATE-----Generated at Mon Jan 26 02:08:08 2026 by rpki-client