This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/KyVhfqtkBsFTeLR6r-rmi2OSi4s.roa File: KyVhfqtkBsFTeLR6r-rmi2OSi4s.roa (raw, json) Hash identifier: I4wHLPw8A0l6Nh6OwevrOypXlF/JR2vemPdaafwkJEI= Subject key identifier: 2B:25:61:7E:AB:64:06:C1:53:78:B4:7A:AF:EA:E6:8B:63:92:8B:8B Certificate issuer: /CN=e6596f1b163cab0c45a84eeb13261b65f1a22962 Certificate serial: 019B7F83E5AF81114CA0FF291626BAE5CACB Authority key identifier: E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/KyVhfqtkBsFTeLR6r-rmi2OSi4s.roa Signing time: Fri 02 Jan 2026 16:21:49 +0000 ROA not before: Fri 02 Jan 2026 16:21:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29314 IP address blocks: 31.11.128.0/17 maxlen: 17 31.11.128.0/24 maxlen: 24 31.11.129.0/24 maxlen: 24 31.11.130.0/24 maxlen: 24 31.11.131.0/24 maxlen: 24 31.11.132.0/22 maxlen: 22 31.11.172.0/24 maxlen: 24 31.11.202.0/24 maxlen: 24 31.11.208.0/22 maxlen: 22 31.11.228.0/24 maxlen: 24 31.22.96.0/21 maxlen: 21 31.22.100.0/23 maxlen: 23 31.135.168.0/21 maxlen: 21 31.135.175.0/24 maxlen: 24 37.8.192.0/18 maxlen: 18 37.8.208.0/24 maxlen: 24 37.8.214.0/24 maxlen: 24 37.8.230.0/24 maxlen: 24 37.8.231.0/24 maxlen: 24 37.77.152.0/21 maxlen: 21 62.122.112.0/21 maxlen: 21 77.222.224.0/21 maxlen: 21 77.222.232.0/21 maxlen: 21 77.222.240.0/20 maxlen: 20 77.222.248.0/22 maxlen: 22 77.222.252.0/22 maxlen: 22 78.31.152.0/21 maxlen: 21 78.31.209.0/24 maxlen: 24 78.88.0.0/17 maxlen: 17 78.88.16.0/24 maxlen: 24 78.88.28.0/22 maxlen: 22 78.88.28.0/24 maxlen: 24 78.88.29.0/24 maxlen: 24 78.88.30.0/24 maxlen: 24 78.88.31.0/24 maxlen: 24 78.88.43.0/24 maxlen: 24 78.88.123.0/24 maxlen: 24 78.88.128.0/17 maxlen: 17 78.88.188.0/22 maxlen: 22 78.88.216.0/22 maxlen: 22 82.139.0.0/18 maxlen: 18 82.139.32.0/21 maxlen: 21 82.139.48.0/21 maxlen: 21 83.143.40.0/21 maxlen: 21 83.143.136.0/21 maxlen: 21 83.243.104.0/21 maxlen: 21 88.156.0.0/18 maxlen: 18 88.156.64.0/18 maxlen: 18 88.156.64.0/24 maxlen: 24 88.156.78.0/24 maxlen: 24 88.156.80.176/28 maxlen: 28 88.156.128.0/18 maxlen: 18 88.156.128.0/21 maxlen: 21 88.156.128.0/23 maxlen: 23 88.156.130.0/23 maxlen: 23 88.156.132.0/23 maxlen: 23 88.156.134.0/23 maxlen: 23 88.156.136.0/21 maxlen: 21 88.156.164.0/22 maxlen: 22 88.156.192.0/18 maxlen: 18 88.156.222.0/24 maxlen: 24 88.156.226.0/23 maxlen: 23 88.156.255.0/24 maxlen: 24 89.151.0.0/18 maxlen: 18 89.151.16.0/20 maxlen: 20 89.151.40.0/21 maxlen: 21 91.192.76.0/22 maxlen: 22 91.192.76.0/24 maxlen: 24 91.192.78.0/24 maxlen: 24 91.230.159.0/24 maxlen: 24 91.230.162.0/23 maxlen: 23 91.230.164.0/22 maxlen: 22 91.231.116.0/23 maxlen: 23 91.238.232.0/22 maxlen: 22 93.105.0.0/17 maxlen: 17 93.105.40.0/24 maxlen: 24 93.105.42.0/24 maxlen: 24 93.105.128.0/17 maxlen: 17 93.105.142.0/24 maxlen: 24 93.105.144.0/22 maxlen: 22 93.105.168.0/21 maxlen: 21 93.105.176.0/23 maxlen: 23 93.105.178.0/23 maxlen: 23 93.105.179.0/24 maxlen: 24 93.105.180.0/24 maxlen: 24 93.105.181.0/24 maxlen: 24 93.105.182.0/24 maxlen: 24 93.105.183.0/24 maxlen: 24 93.105.224.0/21 maxlen: 21 93.105.236.0/24 maxlen: 24 93.105.237.0/24 maxlen: 24 93.176.192.0/18 maxlen: 24 94.231.48.0/20 maxlen: 20 95.160.0.0/17 maxlen: 24 95.160.16.0/22 maxlen: 22 95.160.28.0/22 maxlen: 22 95.160.56.0/22 maxlen: 22 95.160.76.0/22 maxlen: 22 95.160.126.0/23 maxlen: 23 95.160.128.0/17 maxlen: 17 95.160.152.0/24 maxlen: 24 95.160.153.0/24 maxlen: 24 95.160.154.0/24 maxlen: 24 95.160.155.0/24 maxlen: 24 95.160.156.0/24 maxlen: 24 95.160.157.0/24 maxlen: 24 95.160.158.0/24 maxlen: 24 95.160.159.0/24 maxlen: 24 95.160.166.0/24 maxlen: 24 95.160.170.0/24 maxlen: 24 95.160.228.0/22 maxlen: 22 95.160.233.0/24 maxlen: 24 95.160.236.0/22 maxlen: 22 109.107.0.0/19 maxlen: 19 109.107.0.0/21 maxlen: 21 109.107.9.0/24 maxlen: 24 109.197.56.0/21 maxlen: 21 109.197.64.0/21 maxlen: 21 109.241.0.0/18 maxlen: 18 109.241.64.0/18 maxlen: 18 109.241.128.0/18 maxlen: 18 109.241.192.0/18 maxlen: 18 178.235.0.0/17 maxlen: 17 178.235.40.0/24 maxlen: 24 178.235.41.0/24 maxlen: 24 178.235.42.0/24 maxlen: 24 178.235.43.0/24 maxlen: 24 178.235.98.0/24 maxlen: 24 178.235.110.0/24 maxlen: 24 178.235.128.0/17 maxlen: 17 178.235.128.0/24 maxlen: 24 178.235.129.0/24 maxlen: 24 178.235.130.0/24 maxlen: 24 178.235.131.0/24 maxlen: 24 178.235.132.0/23 maxlen: 23 178.235.134.0/24 maxlen: 24 178.235.135.0/24 maxlen: 24 178.235.136.0/23 maxlen: 23 178.235.138.0/23 maxlen: 23 178.235.140.0/24 maxlen: 24 178.235.141.0/24 maxlen: 24 178.235.142.0/23 maxlen: 23 178.235.144.0/23 maxlen: 23 178.235.146.0/24 maxlen: 24 178.235.147.0/24 maxlen: 24 178.235.148.0/22 maxlen: 22 178.235.148.0/23 maxlen: 23 178.235.150.0/23 maxlen: 23 178.235.150.0/24 maxlen: 24 178.235.152.0/21 maxlen: 21 178.235.160.0/19 maxlen: 19 178.235.192.0/18 maxlen: 18 185.51.180.0/22 maxlen: 22 192.166.120.0/23 maxlen: 23 193.201.18.0/23 maxlen: 23 194.54.188.0/22 maxlen: 22 195.26.72.0/22 maxlen: 22 195.28.170.0/23 maxlen: 23 195.191.162.0/23 maxlen: 23 195.225.92.0/22 maxlen: 22 195.242.252.0/22 maxlen: 22 2a00:9f00::/32 maxlen: 32 2a00:9f00::/36 maxlen: 36 2a00:9f00::/48 maxlen: 48 2a00:9f00:1::/48 maxlen: 48 2a00:9f00:a::/48 maxlen: 48 2a00:9f00:c::/48 maxlen: 48 2a00:9f00:10::/48 maxlen: 48 2a00:9f00:aa::/48 maxlen: 48 2a00:9f00:bb::/48 maxlen: 48 2a00:9f00:cc::/48 maxlen: 48 2a00:9f00:1000::/36 maxlen: 36 2a00:9f00:2000::/36 maxlen: 36 2a00:9f00:2007::/48 maxlen: 48 2a00:9f00:3000::/36 maxlen: 36 2a00:9f00:4000::/36 maxlen: 36 2a00:9f00:5000::/36 maxlen: 36 2a00:9f00:6000::/36 maxlen: 36 2a00:9f00:7000::/36 maxlen: 36 2a00:9f00:8000::/36 maxlen: 36 2a00:9f00:9000::/36 maxlen: 36 2a00:9f00:a000::/36 maxlen: 36 2a00:9f00:abba::/48 maxlen: 48 2a00:9f00:b000::/36 maxlen: 36 2a00:9f00:babe::/48 maxlen: 48 2a00:9f00:beaf::/48 maxlen: 48 2a00:9f00:c000::/36 maxlen: 36 2a00:9f00:cafe::/48 maxlen: 48 2a00:9f00:d000::/36 maxlen: 36 2a00:9f00:dead::/48 maxlen: 48 2a00:9f00:e000::/36 maxlen: 36 2a00:9f00:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.crl rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.mft rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:e5:af:81:11:4c:a0:ff:29:16:26:ba:e5:ca:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6596f1b163cab0c45a84eeb13261b65f1a22962 Validity Not Before: Jan 2 16:21:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2b25617eab6406c15378b47aafeae68b63928b8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:5f:00:30:2b:62:7a:34:1d:47:75:0a:06:42: be:ba:9f:bc:47:63:a0:9e:7d:a0:11:76:2a:66:55: a7:0c:de:c8:a1:80:52:9f:b3:a4:5e:83:5b:10:6b: e7:7e:88:6a:ef:73:85:93:d5:93:6d:1e:c0:bd:d0: d4:5e:db:27:a7:46:4b:47:6b:db:a1:62:01:d2:5c: f9:5b:5f:f2:4a:e0:a0:4a:da:c9:40:47:80:aa:4c: 1e:fa:1b:61:06:04:eb:28:2a:9d:82:93:a1:4d:8a: a0:08:5e:81:af:12:c5:12:56:26:1b:ca:ca:ea:55: d6:d3:1f:f4:ac:bf:9a:0f:aa:0b:a5:37:ab:d9:34: de:db:67:64:4e:fb:16:ab:ae:47:e2:96:6e:62:06: 63:56:4a:44:4e:bf:83:b3:9e:8a:e3:33:ef:74:48: 84:8e:9c:24:61:2d:2a:6b:3a:dd:cb:f5:36:33:12: 82:11:d2:77:97:2a:04:7e:03:12:74:69:b9:d6:57: 4c:b4:a4:2e:d2:15:8f:b3:ee:4b:3e:37:10:ec:8f: 20:41:fd:03:d5:fc:6b:ec:f4:64:31:f1:32:81:6d: 62:88:7d:eb:2c:c4:95:3e:24:31:e6:40:4f:75:8f: f9:aa:da:7e:44:d1:f6:6d:6c:3c:ff:7f:a4:4d:ec: 6b:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:25:61:7E:AB:64:06:C1:53:78:B4:7A:AF:EA:E6:8B:63:92:8B:8B X509v3 Authority Key Identifier: keyid:E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/KyVhfqtkBsFTeLR6r-rmi2OSi4s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.11.128.0/17 31.22.96.0/21 31.135.168.0/21 37.8.192.0/18 37.77.152.0/21 62.122.112.0/21 77.222.224.0/19 78.31.152.0/21 78.31.209.0/24 78.88.0.0/16 82.139.0.0/18 83.143.40.0/21 83.143.136.0/21 83.243.104.0/21 88.156.0.0/16 89.151.0.0/18 91.192.76.0/22 91.230.159.0/24 91.230.162.0-91.230.167.255 91.231.116.0/23 91.238.232.0/22 93.105.0.0/16 93.176.192.0/18 94.231.48.0/20 95.160.0.0/16 109.107.0.0/19 109.197.56.0-109.197.71.255 109.241.0.0/16 178.235.0.0/16 185.51.180.0/22 192.166.120.0/23 193.201.18.0/23 194.54.188.0/22 195.26.72.0/22 195.28.170.0/23 195.191.162.0/23 195.225.92.0/22 195.242.252.0/22 IPv6: 2a00:9f00::/32 Signature Algorithm: sha256WithRSAEncryption 48:a2:ad:ee:57:9e:cc:7c:8c:2c:38:ad:50:9f:87:ed:30:1b: 75:a3:f8:7a:e3:a3:f8:b9:e1:ee:a6:b9:b8:b8:31:14:ca:95: 14:8e:4a:2f:e9:28:23:f7:08:93:6b:da:5b:a6:ea:c2:43:cd: 39:da:ba:8b:d6:73:cb:2f:5b:08:f2:8a:9e:3c:f8:e6:e9:25: 92:8b:65:59:14:81:ea:3f:0d:85:27:2c:f3:5a:f1:d0:6c:c8: 90:29:fb:dd:35:06:c6:3a:4f:11:fb:dd:23:37:a0:ca:44:f4: 9d:b5:20:38:83:47:50:75:bf:29:c1:a9:98:5d:6d:c1:88:97: cf:33:12:92:6f:b7:c4:93:aa:bb:7c:c0:0c:5e:e2:50:2d:a1: 8d:cc:86:03:2e:be:e2:79:59:23:20:f8:56:0d:e3:b1:88:11: 7d:a3:f3:2c:b3:df:4b:3e:34:86:21:34:54:2a:fc:cf:87:7a: c7:1c:e5:ce:75:91:13:4b:17:00:82:2b:6e:9b:9f:48:46:f1: a4:16:23:0c:82:2f:3c:ff:76:a0:64:44:19:0e:b2:13:6d:4b: 47:24:69:b1:99:c8:e4:92:b2:82:5e:ad:93:de:03:86:62:f7: e7:2e:ec:c1:4a:88:e0:72:88:c5:77:27:9b:f1:b6:37:59:32: ba:79:61:74 -----BEGIN CERTIFICATE----- MIIF/DCCBOSgAwIBAgISAZt/g+WvgRFMoP8pFia65crLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2NTk2ZjFiMTYzY2FiMGM0NWE4NGVlYjEzMjYxYjY1ZjFh MjI5NjIwHhcNMjYwMTAyMTYyMTQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYjI1NjE3ZWFiNjQwNmMxNTM3OGI0N2FhZmVhZTY4YjYzOTI4YjhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6l8AMCtiejQdR3UKBkK+up+8R2Og nn2gEXYqZlWnDN7IoYBSn7OkXoNbEGvnfohq73OFk9WTbR7AvdDUXtsnp0ZLR2vb oWIB0lz5W1/ySuCgStrJQEeAqkwe+hthBgTrKCqdgpOhTYqgCF6BrxLFElYmG8rK 6lXW0x/0rL+aD6oLpTer2TTe22dkTvsWq65H4pZuYgZjVkpETr+Ds56K4zPvdEiE jpwkYS0qazrdy/U2MxKCEdJ3lyoEfgMSdGm51ldMtKQu0hWPs+5LPjcQ7I8gQf0D 1fxr7PRkMfEygW1iiH3rLMSVPiQx5kBPdY/5qtp+RNH2bWw8/3+kTexrBwIDAQAB o4IDCDCCAwQwHQYDVR0OBBYEFCslYX6rZAbBU3i0eq/q5otjkouLMB8GA1UdIwQY MBaAFOZZbxsWPKsMRahO6xMmG2XxoiliMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWxsdkd4WThxd3hGcUU3ckV5WWJaZkdpS1dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9lZGU5NGUtYmEyYS00MWVlLWIxMmMt ZTA1MzRlMjM4NTliLzEvS3lWaGZxdGtCc0ZUZUxSNnItcm1pMk9TaTRzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS9lZGU5NGUtYmEyYS00MWVlLWIxMmMtZTA1MzRlMjM4NTli LzEvNWxsdkd4WThxd3hGcUU3ckV5WWJaZkdpS1dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBHAYIKwYBBQUHAQcBAf8EggELMIIBBzCB9QQCAAEwge4D BAcfC4ADBAMfFmADBAMfh6gDBAYlCMADBAMlTZgDBAM+enADBAVN3uADBANOH5gD BABOH9EDAwBOWAMEBlKLAAMEA1OPKAMEA1OPiAMEA1PzaAMDAFicAwQGWZcAAwQC W8BMAwQAW+afMAwDBAFb5qIDBANb5qADBAFb53QDBAJb7ugDAwBdaQMEBl2wwAME BF7nMAMDAF+gAwQFbWsAMAwDBANtxTgDBANtxUADAwBt8QMDALLrAwQCuTO0AwQB wKZ4AwQBwckSAwQCwja8AwQCwxpIAwQBwxyqAwQBw7+iAwQCw+FcAwQCw/L8MA0E AgACMAcDBQAqAJ8AMA0GCSqGSIb3DQEBCwUAA4IBAQBIoq3uV57MfIwsOK1Qn4ft MBt1o/h646P4ueHuprm4uDEUypUUjkov6Sgj9wiTa9pbpurCQ8052rqL1nPLL1sI 8oqePPjm6SWSi2VZFIHqPw2FJyzzWvHQbMiQKfvdNQbGOk8R+90jN6DKRPSdtSA4 g0dQdb8pwamYXW3BiJfPMxKSb7fEk6q7fMAMXuJQLaGNzIYDLr7ieVkjIPhWDeOx iBF9o/Mss99LPjSGITRUKvzPh3rHHOXOdZETSxcAgitum59IRvGkFiMMgi88/3ag ZEQZDrITbUtHJGmxmcjkkrKCXq2T3gOGYvfnLuzBSojgcojFdyeb8bY3WTK6eWF0 -----END CERTIFICATE-----Generated at Mon Jan 26 08:37:49 2026 by rpki-client