This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/vyC954Q_j9rYp0C-azzq2YV8c9o.roa File: vyC954Q_j9rYp0C-azzq2YV8c9o.roa (raw, json) Hash identifier: IWod9LGAkMAvkPg/q48dVduXCl8c7LHbCJqM7XHDNOc= Subject key identifier: BF:20:BD:E7:84:3F:8F:DA:D8:A7:40:BE:6B:3C:EA:D9:85:7C:73:DA Certificate issuer: /CN=92192e8d785581f72b18644224bd8c3fa8a2d11b Certificate serial: 019BABE02F0148A683D29D5209564B2A2E49 Authority key identifier: 92:19:2E:8D:78:55:81:F7:2B:18:64:42:24:BD:8C:3F:A8:A2:D1:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khkujXhVgfcrGGRCJL2MP6ii0Rs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/vyC954Q_j9rYp0C-azzq2YV8c9o.roa Signing time: Sun 11 Jan 2026 07:05:54 +0000 ROA not before: Sun 11 Jan 2026 07:05:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59588 IP address blocks: 5.252.132.0/22 maxlen: 24 5.252.135.0/24 maxlen: 24 45.153.116.0/23 maxlen: 23 45.153.116.0/24 maxlen: 24 45.153.117.0/24 maxlen: 24 45.153.118.0/23 maxlen: 23 45.153.118.0/24 maxlen: 24 45.153.119.0/24 maxlen: 24 151.236.160.0/23 maxlen: 23 151.236.160.0/24 maxlen: 24 151.236.161.0/24 maxlen: 24 151.236.162.0/23 maxlen: 23 151.236.162.0/24 maxlen: 24 151.236.163.0/24 maxlen: 24 151.236.164.0/23 maxlen: 23 151.236.164.0/24 maxlen: 24 151.236.165.0/24 maxlen: 24 151.236.166.0/23 maxlen: 23 151.236.166.0/24 maxlen: 24 151.236.167.0/24 maxlen: 24 151.236.168.0/23 maxlen: 23 151.236.168.0/24 maxlen: 24 151.236.169.0/24 maxlen: 24 151.236.170.0/23 maxlen: 23 151.236.170.0/24 maxlen: 24 151.236.171.0/24 maxlen: 24 151.236.172.0/23 maxlen: 23 151.236.172.0/24 maxlen: 24 151.236.173.0/24 maxlen: 24 151.236.174.0/23 maxlen: 23 151.236.174.0/24 maxlen: 24 151.236.175.0/24 maxlen: 24 151.236.176.0/23 maxlen: 23 151.236.176.0/24 maxlen: 24 151.236.177.0/24 maxlen: 24 151.236.178.0/23 maxlen: 23 151.236.178.0/24 maxlen: 24 151.236.179.0/24 maxlen: 24 151.236.180.0/23 maxlen: 23 151.236.180.0/24 maxlen: 24 151.236.181.0/24 maxlen: 24 151.236.182.0/23 maxlen: 24 151.236.182.0/24 maxlen: 24 151.236.183.0/24 maxlen: 24 151.236.186.0/24 maxlen: 24 151.236.188.0/23 maxlen: 23 151.236.188.0/24 maxlen: 24 151.236.189.0/24 maxlen: 24 151.236.190.0/23 maxlen: 23 151.236.190.0/24 maxlen: 24 151.236.191.0/24 maxlen: 24 194.59.28.0/23 maxlen: 24 194.59.28.0/24 maxlen: 24 194.59.29.0/24 maxlen: 24 198.160.164.0/24 maxlen: 24 198.160.165.0/24 maxlen: 24 198.160.166.0/24 maxlen: 24 198.160.167.0/24 maxlen: 24 198.160.168.0/23 maxlen: 23 198.160.168.0/24 maxlen: 24 198.160.169.0/24 maxlen: 24 198.176.116.0/23 maxlen: 23 198.176.116.0/24 maxlen: 24 198.176.117.0/24 maxlen: 24 2a10:2200:1::/48 maxlen: 48 2a10:2200:2::/48 maxlen: 48 2a10:2200:3::/48 maxlen: 48 2a10:2200:4::/48 maxlen: 48 2a10:2200:6::/48 maxlen: 48 2a10:2200:7::/48 maxlen: 48 2a10:2200:b::/48 maxlen: 48 2a10:2200:c::/48 maxlen: 48 2a10:2200:d::/48 maxlen: 48 2a10:2200:f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.mft rsync://rpki.ripe.net/repository/DEFAULT/khkujXhVgfcrGGRCJL2MP6ii0Rs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ab:e0:2f:01:48:a6:83:d2:9d:52:09:56:4b:2a:2e:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92192e8d785581f72b18644224bd8c3fa8a2d11b Validity Not Before: Jan 11 07:05:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bf20bde7843f8fdad8a740be6b3cead9857c73da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:7f:ca:75:14:35:f8:54:c7:9d:ae:36:3c:b2: 08:5c:3f:8e:4a:c1:49:e3:45:27:f3:ce:63:54:8b: 88:f8:18:ae:85:16:88:71:39:90:cb:aa:9d:31:f3: 06:f8:a5:f5:a6:48:e2:0a:42:97:3f:56:5f:81:bd: 29:39:4f:4f:96:44:7d:64:7c:82:6c:00:b2:45:7d: e3:33:6c:9c:6f:89:68:7e:15:7f:43:bf:8a:52:a9: 5d:01:05:1a:52:b9:93:5d:94:e2:e0:f4:e8:a6:70: b0:e2:5a:47:0d:7d:42:35:35:f5:47:80:49:fd:26: d2:83:6a:b8:81:ac:44:2e:fd:26:be:eb:f6:ab:ac: 13:12:8b:0c:9a:a5:16:cd:4b:ab:2c:5b:24:66:ae: c6:25:86:f1:16:d6:ee:77:bc:05:f8:90:ed:b3:19: 97:06:3f:e0:8b:a1:37:1e:ca:ba:af:e1:19:76:e1: bb:08:f3:99:82:8b:eb:3e:fb:d2:84:69:e9:ae:7a: e9:4f:2d:58:03:b7:a5:62:23:e1:4d:91:9b:48:6b: e6:2d:8f:55:64:df:4c:f6:d2:af:19:4b:90:ff:d5: 3d:9a:27:07:7a:7e:85:1c:72:e9:8d:0c:8c:24:1b: c3:ff:4e:c7:73:c1:b5:53:06:d3:a5:14:b4:fe:91: e8:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:20:BD:E7:84:3F:8F:DA:D8:A7:40:BE:6B:3C:EA:D9:85:7C:73:DA X509v3 Authority Key Identifier: keyid:92:19:2E:8D:78:55:81:F7:2B:18:64:42:24:BD:8C:3F:A8:A2:D1:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khkujXhVgfcrGGRCJL2MP6ii0Rs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/vyC954Q_j9rYp0C-azzq2YV8c9o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.252.132.0/22 45.153.116.0/22 151.236.160.0-151.236.183.255 151.236.186.0/24 151.236.188.0/22 194.59.28.0/23 198.160.164.0-198.160.169.255 198.176.116.0/23 IPv6: 2a10:2200:1::-2a10:2200:4:ffff:ffff:ffff:ffff:ffff 2a10:2200:6::/47 2a10:2200:b::-2a10:2200:d:ffff:ffff:ffff:ffff:ffff 2a10:2200:f::/48 Signature Algorithm: sha256WithRSAEncryption 3e:6e:b9:d2:9f:f6:83:c4:ae:15:0c:f3:90:73:7b:02:0f:06: f3:df:5d:3b:be:7c:d8:92:a1:4f:f9:e7:95:00:4f:9f:8a:ce: a5:05:8d:3c:84:72:82:b8:49:07:3a:84:0f:c4:ba:88:a9:a1: bc:68:d4:c1:0e:ce:76:70:96:bc:a4:54:7a:ae:b1:58:37:b0: 0d:42:05:44:af:a5:5d:b2:2c:40:cf:04:d4:61:ad:9b:7e:dc: 93:71:78:a4:e8:10:da:d5:bc:59:18:68:9c:b9:63:e4:3b:2d: b9:1b:1e:83:3e:76:d8:02:da:1c:cf:75:e3:9a:f0:d7:c8:41: 9b:95:63:38:95:fb:8c:da:c9:f8:11:a8:bb:24:51:45:17:9b: 22:19:44:e6:16:ac:a8:77:f7:b3:b5:9e:f3:8a:46:84:22:df: a1:38:7e:ef:7e:b4:42:ec:c3:4f:10:1b:f6:fb:b2:46:e3:93: 93:88:40:b7:38:3a:5a:90:a2:7e:49:62:28:41:46:7f:44:d5: 6e:a3:70:5c:38:f2:c9:da:14:8f:5d:00:20:3d:09:11:15:61: a7:da:34:8c:95:b5:7c:c9:b8:6c:57:6b:2b:3d:a5:8e:88:57: 0c:d0:41:3f:94:e3:47:29:5c:a7:4d:2f:33:43:e0:f8:77:64: 15:ec:b4:6c -----BEGIN CERTIFICATE----- MIIFfDCCBGSgAwIBAgISAZur4C8BSKaD0p1SCVZLKi5JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyMTkyZThkNzg1NTgxZjcyYjE4NjQ0MjI0YmQ4YzNmYThh MmQxMWIwHhcNMjYwMTExMDcwNTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZjIwYmRlNzg0M2Y4ZmRhZDhhNzQwYmU2YjNjZWFkOTg1N2M3M2RhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAln/KdRQ1+FTHna42PLIIXD+OSsFJ 40Un885jVIuI+BiuhRaIcTmQy6qdMfMG+KX1pkjiCkKXP1Zfgb0pOU9PlkR9ZHyC bACyRX3jM2ycb4lofhV/Q7+KUqldAQUaUrmTXZTi4PTopnCw4lpHDX1CNTX1R4BJ /SbSg2q4gaxELv0mvuv2q6wTEosMmqUWzUurLFskZq7GJYbxFtbud7wF+JDtsxmX Bj/gi6E3Hsq6r+EZduG7CPOZgovrPvvShGnprnrpTy1YA7elYiPhTZGbSGvmLY9V ZN9M9tKvGUuQ/9U9micHen6FHHLpjQyMJBvD/07Hc8G1UwbTpRS0/pHo2QIDAQAB o4ICiDCCAoQwHQYDVR0OBBYEFL8gveeEP4/a2KdAvms86tmFfHPaMB8GA1UdIwQY MBaAFJIZLo14VYH3KxhkQiS9jD+ootEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2hrdWpYaFZnZmNyR0dSQ0pMMk1QNmlpMFJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9kOWIzOTctZTEwNS00YWM5LTg1Mzct MDA4NWEzNjVhMjVmLzEvdnlDOTU0UV9qOXJZcDBDLWF6enEyWVY4YzlvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi9kOWIzOTctZTEwNS00YWM5LTg1MzctMDA4NWEzNjVhMjVm LzEva2hrdWpYaFZnZmNyR0dSQ0pMMk1QNmlpMFJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGdBggrBgEFBQcBBwEB/wSBjTCBijBGBAIAATBAAwQCBfyE AwQCLZl0MAwDBAWX7KADBAOX7LADBACX7LoDBAKX7LwDBAHCOxwwDAMEAsagpAME AcagqAMEAcawdDBABAIAAjA6MBIDBwAqECIAAAEDBwAqECIAAAQDBwEqECIAAAYw EgMHACoQIgAACwMHASoQIgAADAMHACoQIgAADzANBgkqhkiG9w0BAQsFAAOCAQEA Pm650p/2g8SuFQzzkHN7Ag8G899dO7582JKhT/nnlQBPn4rOpQWNPIRygrhJBzqE D8S6iKmhvGjUwQ7OdnCWvKRUeq6xWDewDUIFRK+lXbIsQM8E1GGtm37ck3F4pOgQ 2tW8WRhonLlj5DstuRsegz522ALaHM9145rw18hBm5VjOJX7jNrJ+BGouyRRRReb IhlE5hasqHf3s7We84pGhCLfoTh+7360QuzDTxAb9vuyRuOTk4hAtzg6WpCifkli KEFGf0TVbqNwXDjyydoUj10AID0JERVhp9o0jJW1fMm4bFdrKz2ljohXDNBBP5Tj Rylcp00vM0Pg+HdkFey0bA== -----END CERTIFICATE-----Generated at Mon Jan 26 04:40:54 2026 by rpki-client