This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/yKAfRmz0lp4Uyw4vB_IDI2VcQuE.roa File: yKAfRmz0lp4Uyw4vB_IDI2VcQuE.roa (raw, json) Hash identifier: rpj5bKJAvGAFaeDNuyON8+x6UXta2DFBTwaunaYyAeg= Subject key identifier: C8:A0:1F:46:6C:F4:96:9E:14:CB:0E:2F:07:F2:03:23:65:5C:42:E1 Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2 Certificate serial: 019B7834476FF2770D38D01647ED2E6A323E Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/yKAfRmz0lp4Uyw4vB_IDI2VcQuE.roa Signing time: Thu 01 Jan 2026 06:17:30 +0000 ROA not before: Thu 01 Jan 2026 06:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 23959 IP address blocks: 45.14.64.0/22 maxlen: 24 45.14.70.0/24 maxlen: 24 45.14.105.0/24 maxlen: 24 45.14.107.0/24 maxlen: 24 45.66.128.0/22 maxlen: 24 45.66.216.0/22 maxlen: 24 45.82.76.0/22 maxlen: 32 45.130.21.0/24 maxlen: 24 45.142.125.0/24 maxlen: 24 45.142.126.0/24 maxlen: 24 45.142.127.0/24 maxlen: 24 45.143.232.0/22 maxlen: 24 45.143.232.0/24 maxlen: 24 45.143.233.0/24 maxlen: 24 45.143.234.0/24 maxlen: 24 45.143.235.0/24 maxlen: 24 45.149.156.0/22 maxlen: 24 45.159.48.0/22 maxlen: 24 79.143.140.0/22 maxlen: 24 88.214.22.0/24 maxlen: 24 91.200.240.0/24 maxlen: 24 91.200.242.0/24 maxlen: 24 91.200.243.0/24 maxlen: 24 92.60.43.0/24 maxlen: 24 94.124.119.0/24 maxlen: 24 95.214.164.0/24 maxlen: 24 95.214.165.0/24 maxlen: 24 141.98.196.0/24 maxlen: 24 141.98.197.0/24 maxlen: 24 141.98.198.0/24 maxlen: 24 147.78.240.0/21 maxlen: 24 149.62.44.0/24 maxlen: 24 149.62.45.0/24 maxlen: 24 149.62.46.0/24 maxlen: 24 149.62.47.0/24 maxlen: 24 176.119.148.0/22 maxlen: 24 185.194.54.0/24 maxlen: 24 185.200.64.0/24 maxlen: 24 185.200.66.0/24 maxlen: 24 193.32.148.0/22 maxlen: 24 193.111.30.0/23 maxlen: 24 194.36.24.0/24 maxlen: 24 194.104.153.0/24 maxlen: 24 194.104.154.0/24 maxlen: 24 194.104.155.0/24 maxlen: 24 194.114.136.0/24 maxlen: 24 194.169.54.0/24 maxlen: 24 195.245.219.0/24 maxlen: 24 195.245.241.0/24 maxlen: 24 195.245.242.0/24 maxlen: 24 2a09:7::/36 maxlen: 48 2a0d:c7c1::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:47:6f:f2:77:0d:38:d0:16:47:ed:2e:6a:32:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2 Validity Not Before: Jan 1 06:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c8a01f466cf4969e14cb0e2f07f20323655c42e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b0:61:89:da:b9:bc:1b:2a:50:90:a7:e0:0d: 30:fd:e7:f1:37:fc:76:c8:8f:0d:d0:b4:47:2b:e1: f6:48:2f:a1:c0:bf:30:fa:3d:31:d0:82:4b:43:b8: 99:f7:3d:fd:9a:cd:af:e5:78:d2:3e:d4:e4:3d:e2: 96:73:cb:03:ce:d9:53:89:aa:2e:9a:f6:71:63:6d: 54:c0:21:96:e3:89:4a:8a:24:a9:34:55:00:5c:40: be:e1:97:57:3f:f2:58:30:25:a6:0b:86:85:18:5a: 06:7c:3c:9e:6c:1f:9e:1f:9d:6c:d2:c2:62:4b:df: fb:be:46:28:99:3a:27:d4:e7:4a:05:18:b8:10:2e: c3:cb:90:46:2c:76:cb:d9:82:ed:19:e7:66:5c:d9: 19:42:19:11:96:9e:45:3a:09:53:49:4b:85:86:fb: 23:75:2d:e7:c0:bc:fb:9a:29:f3:98:33:51:ee:a5: fb:40:c7:19:70:be:e0:d6:d5:ec:54:93:eb:7a:e4: be:cf:2c:19:95:b6:bc:d5:f1:da:4d:cc:b2:ca:4b: 64:12:a4:e9:42:0f:f5:4f:c1:3e:41:a9:8f:15:c2: b2:72:86:b8:c6:20:88:73:71:59:0a:d4:d6:94:84: e1:ff:78:1c:14:19:e6:21:b2:fa:6d:ff:62:c4:50: 5b:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:A0:1F:46:6C:F4:96:9E:14:CB:0E:2F:07:F2:03:23:65:5C:42:E1 X509v3 Authority Key Identifier: keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/yKAfRmz0lp4Uyw4vB_IDI2VcQuE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.14.64.0/22 45.14.70.0/24 45.14.105.0/24 45.14.107.0/24 45.66.128.0/22 45.66.216.0/22 45.82.76.0/22 45.130.21.0/24 45.142.125.0-45.142.127.255 45.143.232.0/22 45.149.156.0/22 45.159.48.0/22 79.143.140.0/22 88.214.22.0/24 91.200.240.0/24 91.200.242.0/23 92.60.43.0/24 94.124.119.0/24 95.214.164.0/23 141.98.196.0-141.98.198.255 147.78.240.0/21 149.62.44.0/22 176.119.148.0/22 185.194.54.0/24 185.200.64.0/24 185.200.66.0/24 193.32.148.0/22 193.111.30.0/23 194.36.24.0/24 194.104.153.0-194.104.155.255 194.114.136.0/24 194.169.54.0/24 195.245.219.0/24 195.245.241.0-195.245.242.255 IPv6: 2a09:7::/36 2a0d:c7c1::/32 Signature Algorithm: sha256WithRSAEncryption 0d:08:cd:66:78:84:02:d9:14:5f:d0:a3:3d:dd:65:32:89:c9: 64:5c:01:22:ee:e4:91:98:e9:66:02:4b:eb:a4:f4:3c:bb:11: 6f:36:ec:ca:68:67:76:d9:2b:33:e5:97:b5:2b:9c:5a:ac:99: 8d:cf:c3:cf:9d:2b:6c:ba:f3:3c:e6:ed:88:7c:9b:a4:c9:ec: 8b:8e:9d:9b:6e:06:e3:f3:1b:c4:88:44:2b:35:11:23:24:42: 5e:7e:ea:ad:cd:82:cb:58:9d:3e:54:46:b5:13:60:b4:90:bb: d1:c1:18:23:78:b8:0f:ca:c0:79:e4:d0:50:a7:9a:7a:92:95: 0e:c1:92:25:47:00:68:c6:b3:87:47:eb:7a:ae:11:c1:9b:4e: 92:2f:4d:13:f9:12:28:10:ad:3b:88:00:4a:ea:94:46:b8:37: 2d:15:99:f1:84:8b:f8:4a:0b:15:d8:7e:89:f8:c1:9e:9e:21: a0:e8:29:68:c4:a9:8e:38:f8:a7:5f:4b:3f:ca:24:97:d9:11: 3f:62:64:01:30:7b:91:c4:62:93:47:ca:0e:d5:50:c4:e1:53: 04:2f:68:92:34:4d:53:1a:5c:be:03:5b:5a:41:fd:eb:26:a0: 92:a8:68:84:14:2e:d6:30:65:64:21:30:3c:29:75:89:5d:63: 08:71:68:82 -----BEGIN CERTIFICATE----- MIIGAjCCBOqgAwIBAgISAZt4NEdv8ncNONAWR+0uajI+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1NzZlYjJjYzQ2MmU2ZTRiZjBkZTY5YjlmNjM0ODc1ZGVi YmFhZTIwHhcNMjYwMTAxMDYxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOGEwMWY0NjZjZjQ5NjllMTRjYjBlMmYwN2YyMDMyMzY1NWM0MmUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbBhidq5vBsqUJCn4A0w/efxN/x2 yI8N0LRHK+H2SC+hwL8w+j0x0IJLQ7iZ9z39ms2v5XjSPtTkPeKWc8sDztlTiaou mvZxY21UwCGW44lKiiSpNFUAXEC+4ZdXP/JYMCWmC4aFGFoGfDyebB+eH51s0sJi S9/7vkYomTon1OdKBRi4EC7Dy5BGLHbL2YLtGedmXNkZQhkRlp5FOglTSUuFhvsj dS3nwLz7minzmDNR7qX7QMcZcL7g1tXsVJPreuS+zywZlba81fHaTcyyyktkEqTp Qg/1T8E+QamPFcKycoa4xiCIc3FZCtTWlITh/3gcFBnmIbL6bf9ixFBb5QIDAQAB o4IDDjCCAwowHQYDVR0OBBYEFMigH0Zs9JaeFMsOLwfyAyNlXELhMB8GA1UdIwQY MBaAFKV26yzEYubkvw3mm59jSHXeu6riMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEt MjU0YWNkOTJiNGUxLzEveUtBZlJtejBscDRVeXc0dkJfSURJMlZjUXVFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEtMjU0YWNkOTJiNGUx LzEvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBIgYIKwYBBQUHAQcBAf8EggERMIIBDTCB8wQCAAEwgewD BAItDkADBAAtDkYDBAAtDmkDBAAtDmsDBAItQoADBAItQtgDBAItUkwDBAAtghUw DAMEAC2OfQMEBy2OAAMEAi2P6AMEAi2VnAMEAi2fMAMEAk+PjAMEAFjWFgMEAFvI 8AMEAVvI8gMEAFw8KwMEAF58dwMEAV/WpDAMAwQCjWLEAwQAjWLGAwQDk07wAwQC lT4sAwQCsHeUAwQAucI2AwQAuchAAwQAuchCAwQCwSCUAwQBwW8eAwQAwiQYMAwD BADCaJkDBALCaJgDBADCcogDBADCqTYDBADD9dswDAMEAMP18QMEAMP18jAVBAIA AjAPAwYEKgkABwADBQAqDcfBMA0GCSqGSIb3DQEBCwUAA4IBAQANCM1meIQC2RRf 0KM93WUyiclkXAEi7uSRmOlmAkvrpPQ8uxFvNuzKaGd22Ssz5Ze1K5xarJmNz8PP nStsuvM85u2IfJukyeyLjp2bbgbj8xvEiEQrNREjJEJefuqtzYLLWJ0+VEa1E2C0 kLvRwRgjeLgPysB55NBQp5p6kpUOwZIlRwBoxrOHR+t6rhHBm06SL00T+RIoEK07 iABK6pRGuDctFZnxhIv4SgsV2H6J+MGeniGg6CloxKmOOPinX0s/yiSX2RE/YmQB MHuRxGKTR8oO1VDE4VMEL2iSNE1TGly+A1taQf3rJqCSqGiEFC7WMGVkITA8KXWJ XWMIcWiC -----END CERTIFICATE-----Generated at Sun Jan 25 18:07:08 2026 by rpki-client