This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/wYQQFIQIglltXxfXQVpxwZ1D82s.roa File: wYQQFIQIglltXxfXQVpxwZ1D82s.roa (raw, json) Hash identifier: aB+z2l6ojQ6PXmjLcXa145T+AmEidbRVU2bYYZOMwPg= Subject key identifier: C1:84:10:14:84:08:82:59:6D:5F:17:D7:41:5A:71:C1:9D:43:F3:6B Certificate issuer: /CN=2ba1cfd757f51f2feb74509e9c39be46806be642 Certificate serial: 019BD545E2A5F87936CB47903FEA2B21A584 Authority key identifier: 2B:A1:CF:D7:57:F5:1F:2F:EB:74:50:9E:9C:39:BE:46:80:6B:E6:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/wYQQFIQIglltXxfXQVpxwZ1D82s.roa Signing time: Mon 19 Jan 2026 08:01:25 +0000 ROA not before: Mon 19 Jan 2026 08:01:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25441 IP address blocks: 62.231.32.0/19 maxlen: 19 78.135.128.0/17 maxlen: 17 78.135.208.0/21 maxlen: 21 78.135.216.0/21 maxlen: 21 78.135.224.0/21 maxlen: 21 78.135.232.0/21 maxlen: 21 78.135.240.0/21 maxlen: 21 78.135.248.0/21 maxlen: 21 83.141.64.0/18 maxlen: 18 85.134.128.0/17 maxlen: 17 85.134.128.0/21 maxlen: 21 85.134.136.0/21 maxlen: 21 85.134.144.0/21 maxlen: 21 85.134.152.0/21 maxlen: 21 85.134.160.0/21 maxlen: 21 85.134.168.0/21 maxlen: 21 85.134.176.0/21 maxlen: 21 85.134.184.0/21 maxlen: 21 85.134.192.0/21 maxlen: 21 85.134.200.0/21 maxlen: 21 85.134.208.0/21 maxlen: 21 85.134.216.0/21 maxlen: 21 85.134.224.0/21 maxlen: 21 85.134.232.0/21 maxlen: 21 85.134.240.0/21 maxlen: 21 85.134.248.0/21 maxlen: 21 87.192.0.0/18 maxlen: 18 87.192.64.0/20 maxlen: 20 87.192.82.0/23 maxlen: 23 87.192.84.0/22 maxlen: 22 87.192.216.0/22 maxlen: 22 87.192.222.0/23 maxlen: 23 87.232.0.0/19 maxlen: 19 87.232.192.0/24 maxlen: 24 87.232.194.0/23 maxlen: 23 87.232.196.0/22 maxlen: 22 87.232.225.0/24 maxlen: 24 87.232.228.0/22 maxlen: 22 89.124.0.0/24 maxlen: 24 89.124.224.0/20 maxlen: 20 89.124.245.0/24 maxlen: 24 89.126.0.0/22 maxlen: 22 89.126.4.0/22 maxlen: 22 89.126.8.0/22 maxlen: 22 89.126.12.0/22 maxlen: 22 89.126.16.0/22 maxlen: 22 89.126.20.0/22 maxlen: 22 89.126.24.0/22 maxlen: 22 89.126.28.0/22 maxlen: 22 89.127.0.0/17 maxlen: 17 89.127.128.0/18 maxlen: 18 89.127.192.0/19 maxlen: 19 89.127.248.0/22 maxlen: 22 89.127.254.0/23 maxlen: 23 185.247.52.0/22 maxlen: 22 2001:4d68::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.mft rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d5:45:e2:a5:f8:79:36:cb:47:90:3f:ea:2b:21:a5:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ba1cfd757f51f2feb74509e9c39be46806be642 Validity Not Before: Jan 19 08:01:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c1841014840882596d5f17d7415a71c19d43f36b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:0e:12:f4:41:09:a7:d2:44:ba:ea:58:0b:97: f4:df:3f:4b:50:ee:a3:1a:5e:f8:14:43:e6:03:c4: 5f:a9:67:71:8c:25:aa:9f:54:67:52:89:ca:91:04: 0f:db:64:f4:22:67:11:ec:27:34:ca:6d:75:98:25: bc:09:0c:60:fc:43:82:86:49:77:e0:e8:36:ae:17: 3f:ab:4e:a8:ef:13:3b:42:24:41:4a:59:0e:e8:40: b1:2b:40:d9:c9:30:4a:ef:d8:90:1f:01:7b:9a:d6: ca:b5:3f:25:6f:ba:7d:cf:97:dd:53:59:d5:88:a5: 12:fb:1e:b5:c2:e8:bc:d2:d1:46:1d:04:24:32:91: cd:fe:82:92:23:32:db:8b:b3:23:d4:19:97:ae:99: 4a:19:52:fb:d1:74:a7:bd:e3:1f:94:4c:a8:c6:34: bf:b3:8c:f0:26:2c:ab:6a:11:66:1b:1d:02:e1:8d: fb:46:79:8b:0e:4b:d6:f2:18:4c:7e:47:ea:53:89: a3:73:20:70:f1:ec:55:7e:47:c3:69:46:26:ae:74: 3b:48:34:dd:2a:dc:d4:df:22:25:5f:bd:7c:2b:2f: 4e:08:08:e6:71:71:b9:00:ca:ee:39:1a:4e:d6:85: eb:a6:03:9a:02:33:3a:88:59:29:22:48:7d:fa:ab: f6:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:84:10:14:84:08:82:59:6D:5F:17:D7:41:5A:71:C1:9D:43:F3:6B X509v3 Authority Key Identifier: keyid:2B:A1:CF:D7:57:F5:1F:2F:EB:74:50:9E:9C:39:BE:46:80:6B:E6:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/wYQQFIQIglltXxfXQVpxwZ1D82s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.231.32.0/19 78.135.128.0/17 83.141.64.0/18 85.134.128.0/17 87.192.0.0-87.192.79.255 87.192.82.0-87.192.87.255 87.192.216.0/22 87.192.222.0/23 87.232.0.0/19 87.232.192.0/24 87.232.194.0-87.232.199.255 87.232.225.0/24 87.232.228.0/22 89.124.0.0/24 89.124.224.0/20 89.124.245.0/24 89.126.0.0/19 89.127.0.0-89.127.223.255 89.127.248.0/22 89.127.254.0/23 185.247.52.0/22 IPv6: 2001:4d68::/32 Signature Algorithm: sha256WithRSAEncryption 51:9f:cc:f9:bb:60:b3:12:55:4a:53:34:6c:d5:d2:ef:af:1f: a7:11:c0:00:d3:6d:5a:7e:6b:93:4b:3e:a4:3a:58:ce:7c:0f: 38:1c:b9:f5:d1:99:88:29:62:ec:ea:a1:a5:c8:60:14:94:ef: 58:85:89:f4:a9:85:f2:8a:0f:b9:43:ed:3e:f4:0d:a5:d0:7d: aa:34:b7:0e:b5:12:e4:13:de:c8:26:db:fb:65:5b:f2:47:b9: 01:ea:e4:04:38:fc:15:d5:ea:bf:33:e8:07:b7:11:87:d3:c2: d9:55:9b:cb:b6:fe:da:48:8d:04:c2:64:6a:20:9d:0e:bf:1e: 74:a1:b2:81:e5:99:87:51:f1:8d:c8:ba:36:1e:5e:27:cb:b6: f2:9d:93:48:5e:44:d8:c0:88:ac:9e:a8:51:ce:fc:c1:d6:b1: 8e:7c:ee:ca:f1:cf:05:0b:43:a5:b7:de:f9:36:2b:da:65:df: 99:20:e8:78:ff:20:4d:1a:37:25:cf:34:98:77:ad:e4:ee:62: 28:8e:75:30:66:05:a7:94:ed:9e:b3:1e:8f:f1:61:a8:07:d1: c4:79:15:7c:d2:ae:4f:fa:25:88:76:12:f4:af:fc:13:ea:86: f6:84:f5:c1:b2:84:ac:d0:0c:a0:aa:13:3b:37:6c:b4:88:72: ef:85:c4:72 -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgISAZvVReKl+Hk2y0eQP+orIaWEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiYTFjZmQ3NTdmNTFmMmZlYjc0NTA5ZTljMzliZTQ2ODA2 YmU2NDIwHhcNMjYwMTE5MDgwMTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMTg0MTAxNDg0MDg4MjU5NmQ1ZjE3ZDc0MTVhNzFjMTlkNDNmMzZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnw4S9EEJp9JEuupYC5f03z9LUO6j Gl74FEPmA8RfqWdxjCWqn1RnUonKkQQP22T0ImcR7Cc0ym11mCW8CQxg/EOChkl3 4Og2rhc/q06o7xM7QiRBSlkO6ECxK0DZyTBK79iQHwF7mtbKtT8lb7p9z5fdU1nV iKUS+x61wui80tFGHQQkMpHN/oKSIzLbi7Mj1BmXrplKGVL70XSnveMflEyoxjS/ s4zwJiyrahFmGx0C4Y37RnmLDkvW8hhMfkfqU4mjcyBw8exVfkfDaUYmrnQ7SDTd KtzU3yIlX718Ky9OCAjmcXG5AMruORpO1oXrpgOaAjM6iFkpIkh9+qv2OQIDAQAB o4ICszCCAq8wHQYDVR0OBBYEFMGEEBSECIJZbV8X10FaccGdQ/NrMB8GA1UdIwQY MBaAFCuhz9dX9R8v63RQnpw5vkaAa+ZCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzZIUDExZjFIeV9yZEZDZW5EbS1Sb0JyNWtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS83NDU5MTAtODZjNi00M2QxLTk3NjUt NTc4OWRlNDI0YTQyLzEvd1lRUUZJUUlnbGx0WHhmWFFWcHh3WjFEODJzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS83NDU5MTAtODZjNi00M2QxLTk3NjUtNTc4OWRlNDI0YTQy LzEvSzZIUDExZjFIeV9yZEZDZW5EbS1Sb0JyNWtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHIBggrBgEFBQcBBwEB/wSBuDCBtTCBowQCAAEwgZwDBAU+ 5yADBAdOh4ADBAZTjUADBAdVhoAwCwMDBlfAAwQEV8BAMAwDBAFXwFIDBANXwFAD BAJXwNgDBAFXwN4DBAVX6AADBABX6MAwDAMEAVfowgMEA1fowAMEAFfo4QMEAlfo 5AMEAFl8AAMEBFl84AMEAFl89QMEBVl+ADALAwMAWX8DBAVZf8ADBAJZf/gDBAFZ f/4DBAK59zQwDQQCAAIwBwMFACABTWgwDQYJKoZIhvcNAQELBQADggEBAFGfzPm7 YLMSVUpTNGzV0u+vH6cRwADTbVp+a5NLPqQ6WM58DzgcufXRmYgpYuzqoaXIYBSU 71iFifSphfKKD7lD7T70DaXQfao0tw61EuQT3sgm2/tlW/JHuQHq5AQ4/BXV6r8z 6Ae3EYfTwtlVm8u2/tpIjQTCZGognQ6/HnShsoHlmYdR8Y3IujYeXifLtvKdk0he RNjAiKyeqFHO/MHWsY587srxzwULQ6W33vk2K9pl35kg6Hj/IE0aNyXPNJh3reTu YiiOdTBmBaeU7Z6zHo/xYagH0cR5FXzSrk/6JYh2EvSv/BPqhvaE9cGyhKzQDKCq Ezs3bLSIcu+FxHI= -----END CERTIFICATE-----Generated at Sun Jan 25 11:13:03 2026 by rpki-client