This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/YRVJ0Gjf3ToFSXg4tQ2csynme1g.roa File: YRVJ0Gjf3ToFSXg4tQ2csynme1g.roa (raw, json) Hash identifier: +3oRd6tn6dDyNGcRR/+Wdu79deA/W9QRUODpof/4dqI= Subject key identifier: 61:15:49:D0:68:DF:DD:3A:05:49:78:38:B5:0D:9C:B3:29:E6:7B:58 Certificate issuer: /CN=abc8dbe52083ad335c9f1fde6016ec8b49293140 Certificate serial: 019B7CEDBC91C29BF53BF7BFCF1947683A6D Authority key identifier: AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/YRVJ0Gjf3ToFSXg4tQ2csynme1g.roa Signing time: Fri 02 Jan 2026 04:18:33 +0000 ROA not before: Fri 02 Jan 2026 04:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31520 IP address blocks: 5.1.0.0/23 maxlen: 24 5.1.4.0/22 maxlen: 24 5.1.8.0/21 maxlen: 24 5.1.16.0/20 maxlen: 24 31.128.76.0/23 maxlen: 24 31.128.78.0/23 maxlen: 24 31.128.80.0/22 maxlen: 22 31.128.84.0/22 maxlen: 22 31.128.88.0/22 maxlen: 22 31.128.92.0/22 maxlen: 22 77.222.139.0/24 maxlen: 24 77.222.152.0/22 maxlen: 24 77.222.156.0/23 maxlen: 24 77.222.158.0/23 maxlen: 24 80.77.32.0/22 maxlen: 24 80.77.36.0/24 maxlen: 24 80.77.37.0/24 maxlen: 24 80.77.38.0/24 maxlen: 24 80.77.39.0/24 maxlen: 24 80.77.40.0/21 maxlen: 24 80.77.40.0/22 maxlen: 22 80.77.44.0/22 maxlen: 22 80.91.166.0/24 maxlen: 24 85.159.0.0/21 maxlen: 24 91.197.220.0/24 maxlen: 24 91.197.221.0/24 maxlen: 24 91.197.222.0/24 maxlen: 24 91.197.223.0/24 maxlen: 24 93.183.214.0/24 maxlen: 24 93.183.216.0/24 maxlen: 24 93.183.217.0/24 maxlen: 24 93.183.218.0/23 maxlen: 23 93.183.220.0/22 maxlen: 22 93.183.224.0/24 maxlen: 24 93.183.225.0/24 maxlen: 24 93.183.226.0/24 maxlen: 24 93.183.227.0/24 maxlen: 24 93.183.230.0/24 maxlen: 24 93.183.231.0/24 maxlen: 24 93.183.232.0/22 maxlen: 22 93.183.240.0/21 maxlen: 21 93.183.248.0/21 maxlen: 21 94.232.72.0/21 maxlen: 21 109.206.32.0/19 maxlen: 24 176.102.48.0/23 maxlen: 23 176.102.50.0/24 maxlen: 24 176.102.51.0/24 maxlen: 24 176.102.52.0/22 maxlen: 24 176.102.56.0/21 maxlen: 24 176.112.0.0/19 maxlen: 24 176.241.128.0/19 maxlen: 24 176.241.148.0/22 maxlen: 22 178.213.168.0/21 maxlen: 24 185.46.248.0/22 maxlen: 24 188.247.96.0/20 maxlen: 20 188.247.116.0/24 maxlen: 24 188.247.117.0/24 maxlen: 24 188.247.118.0/24 maxlen: 24 188.247.119.0/24 maxlen: 24 193.108.49.0/24 maxlen: 24 193.108.128.0/24 maxlen: 24 194.29.60.0/22 maxlen: 24 195.114.128.0/24 maxlen: 24 195.114.129.0/24 maxlen: 24 195.114.135.0/24 maxlen: 24 195.114.141.0/24 maxlen: 24 195.114.142.0/24 maxlen: 24 195.114.143.0/24 maxlen: 24 195.114.144.0/24 maxlen: 24 195.114.145.0/24 maxlen: 24 195.114.146.0/23 maxlen: 24 195.114.148.0/23 maxlen: 24 195.114.150.0/24 maxlen: 24 195.114.151.0/24 maxlen: 24 195.114.152.0/24 maxlen: 24 195.114.153.0/24 maxlen: 24 195.114.154.0/24 maxlen: 24 195.114.155.0/24 maxlen: 24 195.114.156.0/24 maxlen: 24 195.114.157.0/24 maxlen: 24 195.114.158.0/24 maxlen: 24 195.114.159.0/24 maxlen: 24 213.111.192.0/18 maxlen: 24 213.111.201.0/24 maxlen: 24 213.111.202.0/24 maxlen: 24 213.111.206.0/23 maxlen: 23 213.111.215.0/24 maxlen: 24 213.111.216.0/24 maxlen: 24 213.111.218.0/23 maxlen: 23 213.111.248.0/24 maxlen: 24 213.111.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:bc:91:c2:9b:f5:3b:f7:bf:cf:19:47:68:3a:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abc8dbe52083ad335c9f1fde6016ec8b49293140 Validity Not Before: Jan 2 04:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=611549d068dfdd3a05497838b50d9cb329e67b58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ab:8d:35:af:67:af:46:54:66:5b:b5:43:db: 18:e6:04:37:fe:36:a1:d6:c8:38:18:21:be:19:11: 9b:ba:07:80:b5:6d:64:b1:87:eb:f8:3c:93:08:c5: e3:f6:6e:dc:b6:64:9d:31:d4:aa:61:a1:39:38:ff: d6:52:07:16:9f:a3:ab:5e:e1:d1:d7:59:d3:64:8f: 4b:90:79:41:4e:f3:0d:d5:92:a4:b7:43:12:5d:b5: d7:aa:16:3a:1b:e3:d3:c6:73:e0:ad:7d:0a:2a:02: e2:08:1d:6d:cf:7e:0c:75:ad:5a:d8:10:53:bc:b6: 55:a9:7c:29:36:73:9e:34:03:c4:b7:17:c5:9c:76: d2:70:f3:20:ab:96:3b:8c:ef:d6:47:32:9f:14:a2: 61:ce:d8:ab:bd:0d:a9:03:b8:eb:85:67:00:11:82: 4e:dc:95:c9:c8:86:4f:32:c5:d1:db:38:5e:f1:f6: 50:ec:e8:1e:8a:5f:bb:c1:eb:72:47:ca:cf:cc:cd: f5:5e:b2:7d:14:53:22:e7:ca:3e:af:88:84:e1:f2: 3e:80:20:f2:00:43:58:22:bc:aa:8b:a5:5c:38:1d: fd:bd:64:e4:24:9e:d4:1d:14:bb:8e:ca:9e:fa:a9: 59:51:a8:97:48:c8:47:f5:b0:74:4f:71:ba:93:4a: 2e:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:15:49:D0:68:DF:DD:3A:05:49:78:38:B5:0D:9C:B3:29:E6:7B:58 X509v3 Authority Key Identifier: keyid:AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/YRVJ0Gjf3ToFSXg4tQ2csynme1g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.1.0.0/23 5.1.4.0-5.1.31.255 31.128.76.0-31.128.95.255 77.222.139.0/24 77.222.152.0/21 80.77.32.0/20 80.91.166.0/24 85.159.0.0/21 91.197.220.0/22 93.183.214.0/24 93.183.216.0-93.183.227.255 93.183.230.0-93.183.235.255 93.183.240.0/20 94.232.72.0/21 109.206.32.0/19 176.102.48.0/20 176.112.0.0/19 176.241.128.0/19 178.213.168.0/21 185.46.248.0/22 188.247.96.0/20 188.247.116.0/22 193.108.49.0/24 193.108.128.0/24 194.29.60.0/22 195.114.128.0/23 195.114.135.0/24 195.114.141.0-195.114.159.255 213.111.192.0/18 Signature Algorithm: sha256WithRSAEncryption 9d:b9:aa:17:21:ce:70:16:39:ac:65:36:da:41:be:4b:21:55: a1:37:14:1f:6d:ee:5e:7c:6e:e3:33:7d:b7:c8:17:de:f5:b5: 87:ed:24:92:b8:89:1a:8f:6d:05:cb:ae:bd:32:3a:75:3e:40: db:ea:83:87:59:e1:07:34:2c:61:4e:16:b4:09:1b:98:8b:31: 54:c9:98:25:0a:92:46:13:ec:ca:22:5d:2e:8e:0e:18:b7:5a: 65:17:5d:b1:b4:7d:32:8f:37:3d:08:e9:7d:8c:62:e7:78:04: 68:29:a4:9f:5d:35:19:21:95:3b:9f:9c:0a:ef:79:4d:bf:d4: 77:c7:97:d6:09:9b:0d:02:e1:01:67:bd:2c:b2:65:88:df:07: 9e:6e:fa:54:90:46:0e:82:30:b4:47:ee:5b:37:79:aa:81:fa: b0:5b:c7:f4:15:b9:da:13:5d:5e:4c:d6:b3:b9:98:73:4c:bf: e5:f4:94:22:6e:f0:50:75:9a:4f:bf:d9:83:76:6e:17:68:60: 6f:23:5d:69:c1:92:00:88:ed:72:1d:e7:c7:7c:9c:70:40:1b: 36:24:d8:85:60:83:3d:e6:9a:29:f3:df:45:b5:26:aa:02:d2: 09:58:a3:dc:8d:cb:64:87:f0:59:38:9d:02:9e:6b:69:67:25: 90:52:00:f3 -----BEGIN CERTIFICATE----- MIIF0jCCBLqgAwIBAgISAZt87byRwpv1O/e/zxlHaDptMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiYzhkYmU1MjA4M2FkMzM1YzlmMWZkZTYwMTZlYzhiNDky OTMxNDAwHhcNMjYwMTAyMDQxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MTE1NDlkMDY4ZGZkZDNhMDU0OTc4MzhiNTBkOWNiMzI5ZTY3YjU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmquNNa9nr0ZUZlu1Q9sY5gQ3/jah 1sg4GCG+GRGbugeAtW1ksYfr+DyTCMXj9m7ctmSdMdSqYaE5OP/WUgcWn6OrXuHR 11nTZI9LkHlBTvMN1ZKkt0MSXbXXqhY6G+PTxnPgrX0KKgLiCB1tz34Mda1a2BBT vLZVqXwpNnOeNAPEtxfFnHbScPMgq5Y7jO/WRzKfFKJhztirvQ2pA7jrhWcAEYJO 3JXJyIZPMsXR2zhe8fZQ7Ogeil+7wetyR8rPzM31XrJ9FFMi58o+r4iE4fI+gCDy AENYIryqi6VcOB39vWTkJJ7UHRS7jsqe+qlZUaiXSMhH9bB0T3G6k0ouCwIDAQAB o4IC3jCCAtowHQYDVR0OBBYEFGEVSdBo3906BUl4OLUNnLMp5ntYMB8GA1UdIwQY MBaAFKvI2+Ugg60zXJ8f3mAW7ItJKTFAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcThqYjVTQ0RyVE5jbnhfZVlCYnNpMGtwTVVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9jZTZjY2ItMjVjZi00OTE3LWIzY2Qt MzA1NmFmOWEzMzVlLzEvWVJWSjBHamYzVG9GU1hnNHRRMmNzeW5tZTFnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9jZTZjY2ItMjVjZi00OTE3LWIzY2QtMzA1NmFmOWEzMzVl LzEvcThqYjVTQ0RyVE5jbnhfZVlCYnNpMGtwTVVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHzBggrBgEFBQcBBwEB/wSB4zCB4DCB3QQCAAEwgdYDBAEF AQAwDAMEAgUBBAMEBQUBADAMAwQCH4BMAwQFH4BAAwQATd6LAwQDTd6YAwQEUE0g AwQAUFumAwQDVZ8AAwQCW8XcAwQAXbfWMAwDBANdt9gDBAJdt+AwDAMEAV235gME Al236AMEBF238AMEA17oSAMEBW3OIAMEBLBmMAMEBbBwAAMEBbDxgAMEA7LVqAME Arku+AMEBLz3YAMEArz3dAMEAMFsMQMEAMFsgAMEAsIdPAMEAcNygAMEAMNyhzAM AwQAw3KNAwQFw3KAAwQG1W/AMA0GCSqGSIb3DQEBCwUAA4IBAQCduaoXIc5wFjms ZTbaQb5LIVWhNxQfbe5efG7jM323yBfe9bWH7SSSuIkaj20Fy669Mjp1PkDb6oOH WeEHNCxhTha0CRuYizFUyZglCpJGE+zKIl0ujg4Yt1plF12xtH0yjzc9COl9jGLn eARoKaSfXTUZIZU7n5wK73lNv9R3x5fWCZsNAuEBZ70ssmWI3weebvpUkEYOgjC0 R+5bN3mqgfqwW8f0FbnaE11eTNazuZhzTL/l9JQibvBQdZpPv9mDdm4XaGBvI11p wZIAiO1yHefHfJxwQBs2JNiFYIM95pop899FtSaqAtIJWKPcjctkh/BZOJ0Cnmtp ZyWQUgDz -----END CERTIFICATE-----Generated at Sun Jan 25 22:50:13 2026 by rpki-client