This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/yPiMHjLe7Lx-apJUCtwGCyF0QEQ.roa File: yPiMHjLe7Lx-apJUCtwGCyF0QEQ.roa (raw, json) Hash identifier: ICKm3WW06PEK2/zQT82o1LcARoTsPsCjUgO3Z7PoEuo= Subject key identifier: C8:F8:8C:1E:32:DE:EC:BC:7E:6A:92:54:0A:DC:06:0B:21:74:40:44 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019BC5D92050F30BCD532362C6B17C59C5C8 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/yPiMHjLe7Lx-apJUCtwGCyF0QEQ.roa Signing time: Fri 16 Jan 2026 08:08:19 +0000 ROA not before: Fri 16 Jan 2026 08:08:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16276 IP address blocks: 37.252.26.0/24 maxlen: 24 79.99.76.0/24 maxlen: 24 80.240.85.0/24 maxlen: 24 82.152.8.0/24 maxlen: 24 82.152.57.0/24 maxlen: 24 82.152.58.0/24 maxlen: 24 82.152.68.0/24 maxlen: 24 82.152.73.0/24 maxlen: 24 82.152.75.0/24 maxlen: 24 82.152.98.0/24 maxlen: 24 82.152.109.0/24 maxlen: 24 82.152.226.0/24 maxlen: 24 82.152.240.0/24 maxlen: 24 82.152.243.0/24 maxlen: 24 82.153.205.0/24 maxlen: 24 82.153.217.0/24 maxlen: 24 82.153.220.0/24 maxlen: 24 82.163.23.0/24 maxlen: 24 89.213.105.0/24 maxlen: 24 109.176.40.0/21 maxlen: 24 109.176.48.0/21 maxlen: 24 109.176.153.0/24 maxlen: 24 213.130.130.0/24 maxlen: 24 213.130.149.0/24 maxlen: 24 213.210.54.0/24 maxlen: 24 213.218.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c5:d9:20:50:f3:0b:cd:53:23:62:c6:b1:7c:59:c5:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 16 08:08:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c8f88c1e32deecbc7e6a92540adc060b21744044 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d8:92:b6:6e:8a:76:f9:90:32:dd:3c:d6:49: f0:e0:b9:dc:43:37:c0:7c:fc:6f:68:d5:f9:f2:a8: c0:0d:6f:c0:af:a6:bd:ee:3a:8f:ef:fe:c8:82:a8: f2:70:ba:e6:93:c5:d5:41:55:a5:45:16:92:9b:05: c1:4b:d7:4b:23:71:70:d7:d0:ec:09:f4:77:2a:69: 97:65:1b:fe:25:f5:7a:5d:08:13:1b:04:17:1f:a8: e4:7f:01:e2:24:35:f6:8d:3b:e4:d4:2d:82:3c:bd: 5d:dc:fb:32:35:10:01:83:c7:08:80:1c:59:d7:83: b6:64:ac:a2:9e:30:c4:c0:67:4d:23:6d:f3:97:59: 8f:92:7d:35:c5:e8:d3:6c:1c:e6:94:99:25:b6:79: 40:82:25:3a:17:0e:b4:33:dc:e7:0c:df:2a:4e:20: a0:43:bb:73:c3:27:95:83:5c:da:d3:d5:f9:b6:1e: bd:78:17:37:fa:99:de:7c:41:0b:13:8b:a9:a8:f7: 0f:ff:c6:d9:83:2c:49:b1:6e:4b:00:98:2e:bf:54: f7:cf:65:48:e8:d8:db:d8:eb:15:04:f8:92:bc:ed: 91:f9:f9:60:c3:4f:57:6e:b6:0d:d8:c3:49:03:58: 03:d1:37:c4:1c:6f:63:a9:95:27:b8:3f:02:01:fd: f9:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:F8:8C:1E:32:DE:EC:BC:7E:6A:92:54:0A:DC:06:0B:21:74:40:44 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/yPiMHjLe7Lx-apJUCtwGCyF0QEQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.252.26.0/24 79.99.76.0/24 80.240.85.0/24 82.152.8.0/24 82.152.57.0-82.152.58.255 82.152.68.0/24 82.152.73.0/24 82.152.75.0/24 82.152.98.0/24 82.152.109.0/24 82.152.226.0/24 82.152.240.0/24 82.152.243.0/24 82.153.205.0/24 82.153.217.0/24 82.153.220.0/24 82.163.23.0/24 89.213.105.0/24 109.176.40.0-109.176.55.255 109.176.153.0/24 213.130.130.0/24 213.130.149.0/24 213.210.54.0/24 213.218.214.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:7c:f2:df:38:90:86:07:bb:9d:7a:81:3f:ca:ee:af:75:a9: a3:49:70:c4:f2:34:c0:18:be:71:3a:fa:5e:f6:7e:c3:e8:a8: dc:ab:64:f3:d4:13:75:c7:fc:4b:aa:26:36:8b:27:e0:f4:16: 3a:2c:9b:01:92:86:b8:25:7f:55:e6:d2:f5:67:da:1f:c1:08: 25:d9:ec:3c:18:9d:33:19:10:91:8b:aa:7e:17:54:99:6b:a1: ef:1b:7f:d2:86:06:0f:c4:d1:5c:db:1e:1c:0b:8b:a2:b8:f3: 85:e8:22:4c:41:6b:9f:9a:16:cd:7f:4f:9a:2b:03:f8:99:d2: 25:73:7f:db:bb:f4:34:13:97:eb:e2:62:6b:2c:4f:f9:32:5c: bb:b6:5e:c5:c4:91:3e:a7:70:80:09:62:b1:75:02:e4:a2:45: f9:b0:5c:8f:36:fd:bf:6c:bf:d2:dc:69:40:56:1a:5e:96:39: 63:10:4a:7b:13:c7:7b:31:1f:5b:29:b1:12:be:10:1e:5f:30: 07:81:5a:e6:0a:e8:7d:b5:7e:7e:26:0b:4d:8d:06:4a:80:62: 6d:86:98:b6:1b:dc:f9:eb:5b:22:12:8e:64:6c:86:b3:a3:59: ce:9f:2b:15:5e:50:22:91:9f:0d:06:77:0b:47:9f:81:dc:ea: 80:8d:6e:eb -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgISAZvF2SBQ8wvNUyNixrF8WcXIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTE2MDgwODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOGY4OGMxZTMyZGVlY2JjN2U2YTkyNTQwYWRjMDYwYjIxNzQ0MDQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztiStm6KdvmQMt081knw4LncQzfA fPxvaNX58qjADW/Ar6a97jqP7/7IgqjycLrmk8XVQVWlRRaSmwXBS9dLI3Fw19Ds CfR3KmmXZRv+JfV6XQgTGwQXH6jkfwHiJDX2jTvk1C2CPL1d3PsyNRABg8cIgBxZ 14O2ZKyinjDEwGdNI23zl1mPkn01xejTbBzmlJkltnlAgiU6Fw60M9znDN8qTiCg Q7tzwyeVg1za09X5th69eBc3+pnefEELE4upqPcP/8bZgyxJsW5LAJguv1T3z2VI 6Njb2OsVBPiSvO2R+flgw09XbrYN2MNJA1gD0TfEHG9jqZUnuD8CAf35/QIDAQAB o4ICqDCCAqQwHQYDVR0OBBYEFMj4jB4y3uy8fmqSVArcBgshdEBEMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEveVBpTUhqTGU3THgtYXBKVUN0d0dDeUYwUUVRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIG9BggrBgEFBQcBBwEB/wSBrTCBqjCBpwQCAAEwgaADBAAl /BoDBABPY0wDBABQ8FUDBABSmAgwDAMEAFKYOQMEAFKYOgMEAFKYRAMEAFKYSQME AFKYSwMEAFKYYgMEAFKYbQMEAFKY4gMEAFKY8AMEAFKY8wMEAFKZzQMEAFKZ2QME AFKZ3AMEAFKjFwMEAFnVaTAMAwQDbbAoAwQDbbAwAwQAbbCZAwQA1YKCAwQA1YKV AwQA1dI2AwQA1drWMA0GCSqGSIb3DQEBCwUAA4IBAQBbfPLfOJCGB7udeoE/yu6v damjSXDE8jTAGL5xOvpe9n7D6Kjcq2Tz1BN1x/xLqiY2iyfg9BY6LJsBkoa4JX9V 5tL1Z9ofwQgl2ew8GJ0zGRCRi6p+F1SZa6HvG3/ShgYPxNFc2x4cC4uiuPOF6CJM QWufmhbNf0+aKwP4mdIlc3/bu/Q0E5fr4mJrLE/5Mly7tl7FxJE+p3CACWKxdQLk okX5sFyPNv2/bL/S3GlAVhpeljljEEp7E8d7MR9bKbESvhAeXzAHgVrmCuh9tX5+ JgtNjQZKgGJthpi2G9z561siEo5kbIazo1nOnysVXlAikZ8NBncLR5+B3OqAjW7r -----END CERTIFICATE-----Generated at Sun Jan 25 08:49:15 2026 by rpki-client