This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/YpEIU7oBXpQHjZnpi0wheo8-1x4.roa File: YpEIU7oBXpQHjZnpi0wheo8-1x4.roa (raw, json) Hash identifier: timvsij1t+AwdE8hg7UZpIDt/dbM6PaXZ26qNPAglrA= Subject key identifier: 62:91:08:53:BA:01:5E:94:07:8D:99:E9:8B:4C:21:7A:8F:3E:D7:1E Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b Certificate serial: 019B7D5D14EE22D07177EC1488C883FD2912 Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/YpEIU7oBXpQHjZnpi0wheo8-1x4.roa Signing time: Fri 02 Jan 2026 06:20:10 +0000 ROA not before: Fri 02 Jan 2026 06:20:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15555 IP address blocks: 62.201.96.0/21 maxlen: 21 80.249.160.0/20 maxlen: 20 81.182.245.0/24 maxlen: 24 81.183.232.0/23 maxlen: 23 81.183.238.0/23 maxlen: 23 84.1.30.0/23 maxlen: 23 84.1.32.0/23 maxlen: 23 84.1.118.0/23 maxlen: 23 84.2.40.0/23 maxlen: 23 84.2.41.0/24 maxlen: 24 84.2.44.0/23 maxlen: 23 84.2.46.0/23 maxlen: 23 84.2.56.0/23 maxlen: 23 84.2.224.0/21 maxlen: 21 84.2.226.0/24 maxlen: 24 188.6.167.0/24 maxlen: 24 188.6.250.0/23 maxlen: 23 188.6.252.0/23 maxlen: 23 188.36.224.0/23 maxlen: 23 188.36.227.0/24 maxlen: 24 188.36.228.0/24 maxlen: 24 194.149.58.0/24 maxlen: 24 195.228.80.0/23 maxlen: 23 195.228.82.0/23 maxlen: 23 195.228.156.0/23 maxlen: 23 195.228.163.0/24 maxlen: 24 195.228.203.0/24 maxlen: 24 195.228.224.0/23 maxlen: 23 195.228.236.0/24 maxlen: 24 195.228.240.0/20 maxlen: 20 195.228.240.0/24 maxlen: 24 195.228.243.0/24 maxlen: 24 195.228.244.0/24 maxlen: 24 195.228.248.0/24 maxlen: 24 195.228.249.0/24 maxlen: 24 195.228.250.0/24 maxlen: 24 195.228.251.0/24 maxlen: 24 195.228.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.mft rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:14:ee:22:d0:71:77:ec:14:88:c8:83:fd:29:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b Validity Not Before: Jan 2 06:20:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=62910853ba015e94078d99e98b4c217a8f3ed71e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:44:45:c1:e8:49:90:8b:29:01:e5:84:8b:56: 20:bf:0d:2b:99:41:9f:e5:dc:bc:34:b9:23:70:67: b5:30:35:55:52:4c:d8:fd:b9:c5:70:b4:d9:54:93: 86:0d:07:49:d5:ff:bf:7d:c8:e4:87:83:76:5e:d5: 4f:28:f6:a6:8b:16:70:5f:c6:a3:b4:e9:73:c0:ee: fe:db:0b:54:3b:f2:eb:03:4f:cd:59:0a:bc:31:13: 9d:cc:0b:0b:ea:60:54:ba:e8:9a:3c:a8:f9:6d:4c: 31:3d:17:b2:a1:9a:42:8d:69:5c:f5:21:12:74:90: fa:f1:2d:8e:c5:c7:d7:62:a8:37:f3:a1:c3:e9:00: 9f:9f:be:66:0e:6f:7e:5b:36:32:c5:2f:08:85:5a: a9:13:a1:a5:d5:b4:24:42:f5:b5:1a:06:be:26:22: 67:5b:4f:90:db:29:a0:e7:bf:b7:cc:da:89:c5:a5: 2f:85:a7:f7:39:d2:cd:a1:9c:a5:35:63:eb:5b:7f: 16:e8:78:ca:c5:40:fa:3a:ab:0c:2e:c0:ec:9a:25: 97:88:b0:8e:6a:d8:3e:41:23:ff:a1:bc:b6:42:4b: 4b:40:79:5e:96:db:68:44:a0:62:3c:2d:a2:fa:7b: cc:79:f7:5f:c1:fd:59:76:cf:7d:f3:7c:2f:15:2a: a9:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:91:08:53:BA:01:5E:94:07:8D:99:E9:8B:4C:21:7A:8F:3E:D7:1E X509v3 Authority Key Identifier: keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/YpEIU7oBXpQHjZnpi0wheo8-1x4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.201.96.0/21 80.249.160.0/20 81.182.245.0/24 81.183.232.0/23 81.183.238.0/23 84.1.30.0-84.1.33.255 84.1.118.0/23 84.2.40.0/23 84.2.44.0/22 84.2.56.0/23 84.2.224.0/21 188.6.167.0/24 188.6.250.0-188.6.253.255 188.36.224.0/23 188.36.227.0-188.36.228.255 194.149.58.0/24 195.228.80.0/22 195.228.156.0/23 195.228.163.0/24 195.228.203.0/24 195.228.224.0/23 195.228.236.0/24 195.228.240.0/20 Signature Algorithm: sha256WithRSAEncryption 14:7c:0f:d5:65:a0:ce:14:8f:a6:66:08:de:5c:8c:58:92:4b: b8:c3:d9:1c:4c:f9:ab:01:84:b3:2d:60:0d:ab:44:89:11:81: af:5c:0c:fa:9f:fc:a6:38:a1:81:63:18:32:61:66:9a:15:a0: 94:6e:ea:c2:bd:dd:92:4a:b9:12:72:3a:0c:fb:77:84:d5:97: 95:fa:dd:33:3c:61:f3:05:51:bc:fa:99:f3:12:4d:83:88:bc: 32:46:e5:b4:7a:b5:bf:c9:2d:71:8e:db:44:1d:be:a9:2e:78: 20:b2:4e:9e:7a:cc:b4:31:c8:03:87:de:9e:03:ea:27:d9:22: 29:58:8d:7c:c1:22:ff:15:8d:25:f6:95:47:e5:5a:6e:f2:5f: 6f:82:a7:1b:94:23:dd:27:53:58:98:d1:d2:b4:3b:05:3b:39: d4:9a:a3:25:9e:ea:c3:f2:32:fe:04:8b:6b:a5:4b:76:6a:a1: f7:53:cf:bf:5b:76:fa:d5:a6:ef:be:f6:35:a2:63:e1:92:66: a4:ab:70:93:1e:a1:91:2a:71:f4:65:04:21:af:8c:d9:3a:22: c3:02:21:98:1e:95:fa:d3:6a:ff:f1:dd:6a:79:37:b6:32:6a: 7a:63:54:47:52:4b:2d:74:ad:f7:e0:d9:9d:f7:21:0d:c1:c8: fb:9b:a5:f7 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgISAZt9XRTuItBxd+wUiMiD/SkSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwMmRhYzYwNWY0NjU5NzE4YzBhMTVlMWY3MzJjYmQ0ZjQ4 YWFlN2IwHhcNMjYwMTAyMDYyMDEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MjkxMDg1M2JhMDE1ZTk0MDc4ZDk5ZTk4YjRjMjE3YThmM2VkNzFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuERFwehJkIspAeWEi1Ygvw0rmUGf 5dy8NLkjcGe1MDVVUkzY/bnFcLTZVJOGDQdJ1f+/fcjkh4N2XtVPKPamixZwX8aj tOlzwO7+2wtUO/LrA0/NWQq8MROdzAsL6mBUuuiaPKj5bUwxPReyoZpCjWlc9SES dJD68S2OxcfXYqg386HD6QCfn75mDm9+WzYyxS8IhVqpE6Gl1bQkQvW1Gga+JiJn W0+Q2ymg57+3zNqJxaUvhaf3OdLNoZylNWPrW38W6HjKxUD6OqsMLsDsmiWXiLCO atg+QSP/oby2QktLQHlelttoRKBiPC2i+nvMefdfwf1Zds9983wvFSqp1QIDAQAB o4ICqjCCAqYwHQYDVR0OBBYEFGKRCFO6AV6UB42Z6YtMIXqPPtceMB8GA1UdIwQY MBaAFPAtrGBfRllxjAoV4fcyy9T0iq57MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEMyc1lGOUdXWEdNQ2hYaDl6TEwxUFNLcm5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9lOTA5NzYtM2RkMS00NzE2LWJiZjYt MjkyYWU0NmU2MzAyLzEvWXBFSVU3b0JYcFFIalpucGkwd2hlbzgtMXg0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC9lOTA5NzYtM2RkMS00NzE2LWJiZjYtMjkyYWU0NmU2MzAy LzEvOEMyc1lGOUdXWEdNQ2hYaDl6TEwxUFNLcm5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIG/BggrBgEFBQcBBwEB/wSBrzCBrDCBqQQCAAEwgaIDBAM+ yWADBARQ+aADBABRtvUDBAFRt+gDBAFRt+4wDAMEAVQBHgMEAVQBIAMEAVQBdgME AVQCKAMEAlQCLAMEAVQCOAMEA1QC4AMEALwGpzAMAwQBvAb6AwQBvAb8AwQBvCTg MAwDBAC8JOMDBAC8JOQDBADClToDBALD5FADBAHD5JwDBADD5KMDBADD5MsDBAHD 5OADBADD5OwDBATD5PAwDQYJKoZIhvcNAQELBQADggEBABR8D9VloM4Uj6ZmCN5c jFiSS7jD2RxM+asBhLMtYA2rRIkRga9cDPqf/KY4oYFjGDJhZpoVoJRu6sK93ZJK uRJyOgz7d4TVl5X63TM8YfMFUbz6mfMSTYOIvDJG5bR6tb/JLXGO20QdvqkueCCy Tp56zLQxyAOH3p4D6ifZIilYjXzBIv8VjSX2lUflWm7yX2+CpxuUI90nU1iY0dK0 OwU7OdSaoyWe6sPyMv4Ei2ulS3ZqofdTz79bdvrVpu++9jWiY+GSZqSrcJMeoZEq cfRlBCGvjNk6IsMCIZgelfrTav/x3Wp5N7YyanpjVEdSSy10rffg2Z33IQ3ByPub pfc= -----END CERTIFICATE-----Generated at Sun Jan 25 16:54:57 2026 by rpki-client