This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/yQttOsQxW36OS-VvRBzTPm-A63M.roa File: yQttOsQxW36OS-VvRBzTPm-A63M.roa (raw, json) Hash identifier: qt8FgnFLRhAmKzXjcfKvUfLhcAOTBrwQNF5TJ1+JFSc= Subject key identifier: C9:0B:6D:3A:C4:31:5B:7E:8E:4B:E5:6F:44:1C:D3:3E:6F:80:EB:73 Certificate issuer: /CN=02bbd4f865a12d79a09a034486ce61ba023882c7 Certificate serial: 019B7A5AA8DC9650795D87C4508511B0B1AC Authority key identifier: 02:BB:D4:F8:65:A1:2D:79:A0:9A:03:44:86:CE:61:BA:02:38:82:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ArvU-GWhLXmgmgNEhs5hugI4gsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/yQttOsQxW36OS-VvRBzTPm-A63M.roa Signing time: Thu 01 Jan 2026 16:18:40 +0000 ROA not before: Thu 01 Jan 2026 16:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51020 IP address blocks: 5.62.128.0/23 maxlen: 23 5.62.128.0/24 maxlen: 24 5.62.129.0/24 maxlen: 24 5.62.136.0/23 maxlen: 23 5.62.136.0/24 maxlen: 24 5.62.137.0/24 maxlen: 24 31.7.80.0/23 maxlen: 23 31.7.80.0/24 maxlen: 24 31.7.81.0/24 maxlen: 24 31.7.82.0/23 maxlen: 23 31.7.82.0/24 maxlen: 24 31.7.84.0/23 maxlen: 23 31.7.84.0/24 maxlen: 24 31.7.85.0/24 maxlen: 24 31.7.86.0/23 maxlen: 23 31.7.86.0/24 maxlen: 24 31.7.87.0/24 maxlen: 24 37.77.48.0/23 maxlen: 23 37.77.48.0/24 maxlen: 24 37.77.49.0/24 maxlen: 24 37.77.50.0/23 maxlen: 23 37.77.50.0/24 maxlen: 24 37.77.51.0/24 maxlen: 24 37.77.52.0/23 maxlen: 23 37.77.52.0/24 maxlen: 24 37.77.53.0/24 maxlen: 24 37.77.54.0/23 maxlen: 23 37.77.54.0/24 maxlen: 24 37.77.55.0/24 maxlen: 24 185.69.4.0/23 maxlen: 23 185.69.4.0/24 maxlen: 24 185.69.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/ArvU-GWhLXmgmgNEhs5hugI4gsc.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/ArvU-GWhLXmgmgNEhs5hugI4gsc.mft rsync://rpki.ripe.net/repository/DEFAULT/ArvU-GWhLXmgmgNEhs5hugI4gsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:a8:dc:96:50:79:5d:87:c4:50:85:11:b0:b1:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02bbd4f865a12d79a09a034486ce61ba023882c7 Validity Not Before: Jan 1 16:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c90b6d3ac4315b7e8e4be56f441cd33e6f80eb73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:37:08:47:e0:00:fd:b4:e4:cd:52:0f:8a:bd: 90:be:f8:01:2b:39:57:a2:6c:8e:28:72:d7:73:22: fe:b3:76:04:06:08:e7:15:8d:d4:64:41:0e:df:98: 55:2d:33:96:9b:2c:ca:43:27:7c:06:69:92:de:10: ba:fd:cc:f1:c3:df:88:6b:91:1a:e1:3e:7a:01:98: a8:9a:23:27:a8:5f:b5:0e:31:72:f5:63:32:59:d2: a4:43:0e:6a:e7:a2:b4:f5:7d:af:09:45:49:c7:8c: 73:d8:bf:6c:5a:4a:4e:91:68:24:2e:eb:2f:47:89: a5:4b:79:28:92:69:90:63:bf:85:54:e0:a3:20:ec: e8:03:d8:bc:48:3c:e3:c2:a7:d2:b5:be:5c:74:0b: b0:ca:55:21:37:0d:e6:8a:fa:bd:36:8b:8f:e3:39: d0:4b:37:08:27:10:6d:ec:9e:11:77:c7:27:27:63: db:6d:97:8e:cd:04:59:f1:dc:bf:13:bd:d6:f9:c9: c6:a6:3e:ba:50:08:c3:54:d4:a6:1d:c7:df:13:15: 01:61:34:b1:29:44:3c:fe:e2:32:c7:99:1f:ca:8e: c8:08:0f:62:26:e0:fe:d2:3f:a9:4d:ee:76:e8:fe: bd:8b:28:9c:ad:2f:44:7a:20:f7:76:22:ed:2f:91: ed:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:0B:6D:3A:C4:31:5B:7E:8E:4B:E5:6F:44:1C:D3:3E:6F:80:EB:73 X509v3 Authority Key Identifier: keyid:02:BB:D4:F8:65:A1:2D:79:A0:9A:03:44:86:CE:61:BA:02:38:82:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArvU-GWhLXmgmgNEhs5hugI4gsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/yQttOsQxW36OS-VvRBzTPm-A63M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/ArvU-GWhLXmgmgNEhs5hugI4gsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.62.128.0/23 5.62.136.0/23 31.7.80.0/21 37.77.48.0/21 185.69.4.0/23 Signature Algorithm: sha256WithRSAEncryption da:7c:ca:55:45:f6:2c:99:f1:48:7d:da:bd:58:68:37:7b:0b: f7:0d:24:da:b9:55:4f:f0:f3:d2:45:f1:1e:b7:bf:b0:ed:61: 9c:46:6d:ed:d1:fd:26:96:54:81:cf:f9:d9:29:56:0c:60:db: fe:10:9b:03:9f:b7:6e:e7:e7:4b:25:db:e6:ea:9e:0c:7c:ab: f9:0e:7a:f8:1a:b0:e5:e9:21:32:50:38:f3:8a:50:04:1f:ce: 33:c3:40:ed:f6:2a:2f:46:a4:86:d8:86:11:67:fc:fe:22:34: b5:3c:7a:ec:33:f1:c1:2d:dd:60:61:9c:6e:25:23:9d:74:36: 97:cf:0d:03:4b:13:95:6e:5c:3e:db:37:3b:b6:b7:39:a6:30: 0c:7c:3b:a7:b0:99:ea:cf:cc:ff:b4:81:ea:ec:32:b2:89:a4: c4:84:47:f0:7f:8f:94:73:a2:a2:a6:9d:3d:ad:99:74:55:4c: c2:ce:04:ed:b1:66:a7:6b:50:d3:07:0e:f2:0b:2a:46:31:3e: 68:be:f1:57:af:8e:17:a6:2d:13:ba:a5:69:ef:a8:4b:09:36: 39:b7:8a:79:ce:8e:34:bd:e6:21:96:28:f2:93:6b:ae:d1:90: 22:58:e5:fc:37:aa:a5:d7:be:fe:29:b0:c9:03:05:b8:48:fc: 7d:9a:f9:97 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt6WqjcllB5XYfEUIURsLGsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyYmJkNGY4NjVhMTJkNzlhMDlhMDM0NDg2Y2U2MWJhMDIz ODgyYzcwHhcNMjYwMTAxMTYxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOTBiNmQzYWM0MzE1YjdlOGU0YmU1NmY0NDFjZDMzZTZmODBlYjczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzcIR+AA/bTkzVIPir2QvvgBKzlX omyOKHLXcyL+s3YEBgjnFY3UZEEO35hVLTOWmyzKQyd8BmmS3hC6/czxw9+Ia5Ea 4T56AZiomiMnqF+1DjFy9WMyWdKkQw5q56K09X2vCUVJx4xz2L9sWkpOkWgkLusv R4mlS3kokmmQY7+FVOCjIOzoA9i8SDzjwqfStb5cdAuwylUhNw3mivq9NouP4znQ SzcIJxBt7J4Rd8cnJ2PbbZeOzQRZ8dy/E73W+cnGpj66UAjDVNSmHcffExUBYTSx KUQ8/uIyx5kfyo7ICA9iJuD+0j+pTe526P69iyicrS9EeiD3diLtL5HtTQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFMkLbTrEMVt+jkvlb0Qc0z5vgOtzMB8GA1UdIwQY MBaAFAK71PhloS15oJoDRIbOYboCOILHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXJ2VS1HV2hMWG1nbWdORWhzNWh1Z0k0Z3NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9jYjgzYjItMzNiNS00NTYwLTg5MzUt MGE5ODA0OGNkZjcyLzEveVF0dE9zUXhXMzZPUy1WdlJCelRQbS1BNjNNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9jYjgzYjItMzNiNS00NTYwLTg5MzUtMGE5ODA0OGNkZjcy LzEvQXJ2VS1HV2hMWG1nbWdORWhzNWh1Z0k0Z3NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQBBT6AAwQB BT6IAwQDHwdQAwQDJU0wAwQBuUUEMA0GCSqGSIb3DQEBCwUAA4IBAQDafMpVRfYs mfFIfdq9WGg3ewv3DSTauVVP8PPSRfEet7+w7WGcRm3t0f0mllSBz/nZKVYMYNv+ EJsDn7du5+dLJdvm6p4MfKv5Dnr4GrDl6SEyUDjzilAEH84zw0Dt9iovRqSG2IYR Z/z+IjS1PHrsM/HBLd1gYZxuJSOddDaXzw0DSxOVblw+2zc7trc5pjAMfDunsJnq z8z/tIHq7DKyiaTEhEfwf4+Uc6Kipp09rZl0VUzCzgTtsWana1DTBw7yCypGMT5o vvFXr44Xpi0TuqVp76hLCTY5t4p5zo40veYhlijyk2uu0ZAiWOX8N6ql177+KbDJ AwW4SPx9mvmX -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:49 2026 by rpki-client