This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/Y94X6_HOf3KuSVPAOGMuBrzSxtg.roa File: Y94X6_HOf3KuSVPAOGMuBrzSxtg.roa (raw, json) Hash identifier: jodD56xisILiJQmZjw16ioNeXG3x3llQ2TPGO/o2XeM= Subject key identifier: 63:DE:17:EB:F1:CE:7F:72:AE:49:53:C0:38:63:2E:06:BC:D2:C6:D8 Certificate issuer: /CN=574cca899ef5bf4237f0f6bdd1779221b20052f3 Certificate serial: 019B26ECFE33A1EA6E0BAB310D86D2469531 Authority key identifier: 57:4C:CA:89:9E:F5:BF:42:37:F0:F6:BD:D1:77:92:21:B2:00:52:F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V0zKiZ71v0I38Pa90XeSIbIAUvM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/Y94X6_HOf3KuSVPAOGMuBrzSxtg.roa Signing time: Tue 16 Dec 2025 11:30:24 +0000 ROA not before: Tue 16 Dec 2025 11:30:24 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 12365 IP address blocks: 81.95.224.0/20 maxlen: 20 81.95.224.96/27 maxlen: 27 81.95.224.192/26 maxlen: 26 81.95.234.128/28 maxlen: 28 81.95.234.192/26 maxlen: 26 82.215.66.0/23 maxlen: 23 82.215.68.0/23 maxlen: 23 82.215.72.0/22 maxlen: 22 82.215.77.0/24 maxlen: 24 82.215.78.0/23 maxlen: 23 82.215.80.0/22 maxlen: 22 82.215.86.0/23 maxlen: 23 82.215.88.0/21 maxlen: 21 82.215.88.0/22 maxlen: 22 82.215.92.0/22 maxlen: 22 82.215.112.0/22 maxlen: 22 82.215.116.0/22 maxlen: 22 82.215.120.0/22 maxlen: 22 82.215.124.0/22 maxlen: 22 89.146.64.0/18 maxlen: 18 89.146.64.0/22 maxlen: 22 89.146.68.0/22 maxlen: 22 89.146.72.0/22 maxlen: 22 89.146.76.0/22 maxlen: 22 89.146.80.0/22 maxlen: 22 89.146.84.0/22 maxlen: 22 89.146.88.0/22 maxlen: 22 89.146.92.0/22 maxlen: 22 89.146.96.0/22 maxlen: 22 89.146.100.0/22 maxlen: 22 89.146.104.0/22 maxlen: 22 89.146.108.0/22 maxlen: 22 89.146.112.0/22 maxlen: 22 89.146.116.0/22 maxlen: 22 89.146.120.0/22 maxlen: 22 89.146.124.0/22 maxlen: 22 185.78.136.0/22 maxlen: 22 2a00:8840::/32 maxlen: 32 2a00:8840:c000::/36 maxlen: 36 2a00:8840:d000::/36 maxlen: 36 2a00:8840:e000::/36 maxlen: 36 2a00:8840:f000::/36 maxlen: 36 2a00:8841::/32 maxlen: 32 2a00:8842::/32 maxlen: 32 2a00:8843::/32 maxlen: 32 2a00:8844::/32 maxlen: 32 2a00:8845::/32 maxlen: 32 2a00:8846::/32 maxlen: 32 2a00:8847::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/V0zKiZ71v0I38Pa90XeSIbIAUvM.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/V0zKiZ71v0I38Pa90XeSIbIAUvM.mft rsync://rpki.ripe.net/repository/DEFAULT/V0zKiZ71v0I38Pa90XeSIbIAUvM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:ec:fe:33:a1:ea:6e:0b:ab:31:0d:86:d2:46:95:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=574cca899ef5bf4237f0f6bdd1779221b20052f3 Validity Not Before: Dec 16 11:30:24 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=63de17ebf1ce7f72ae4953c038632e06bcd2c6d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c5:79:8a:d8:b1:2f:00:25:f1:05:42:26:43: 1f:07:39:90:28:c8:99:11:89:16:df:98:92:52:df: e9:f7:c7:cf:50:28:73:c4:91:5b:05:21:ef:97:44: 3f:c5:fe:95:0f:a4:88:e8:8c:17:a0:dd:69:9e:2b: 04:49:17:bd:05:d5:06:3d:97:57:c3:6b:28:cf:35: f2:66:d8:ad:49:35:47:00:94:96:1f:ff:18:80:41: 74:17:58:37:b6:8c:5d:41:fb:51:52:16:7a:98:eb: 40:98:89:bd:39:4d:2e:81:3d:27:20:f3:61:c0:a0: 07:a4:a5:cd:38:1b:d8:b7:68:e9:98:84:b1:ad:11: 47:f5:88:27:97:e2:82:05:69:02:c1:11:44:e2:ff: 62:c7:0a:58:69:56:6f:7d:1d:bb:8a:51:54:50:21: 3b:85:93:2f:18:eb:ef:e3:8e:38:07:29:1b:8e:65: 31:6f:48:94:75:7b:6b:1d:87:ee:2f:ff:eb:29:c6: 5e:35:b7:53:70:d0:4d:50:9a:d2:ee:9c:59:34:51: 11:50:ae:9d:09:b6:83:40:4a:51:c3:4e:27:d6:29: 4d:02:66:c2:4c:7b:12:cd:af:5c:24:f7:fa:ec:12: 27:58:a6:69:e3:fb:be:d3:ea:23:e4:ed:e5:1e:f9: 38:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:DE:17:EB:F1:CE:7F:72:AE:49:53:C0:38:63:2E:06:BC:D2:C6:D8 X509v3 Authority Key Identifier: keyid:57:4C:CA:89:9E:F5:BF:42:37:F0:F6:BD:D1:77:92:21:B2:00:52:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V0zKiZ71v0I38Pa90XeSIbIAUvM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/Y94X6_HOf3KuSVPAOGMuBrzSxtg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/V0zKiZ71v0I38Pa90XeSIbIAUvM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.95.224.0/20 82.215.66.0-82.215.69.255 82.215.72.0/22 82.215.77.0-82.215.83.255 82.215.86.0-82.215.95.255 82.215.112.0/20 89.146.64.0/18 185.78.136.0/22 IPv6: 2a00:8840::/29 Signature Algorithm: sha256WithRSAEncryption 93:76:f7:78:c8:fe:a9:5c:85:a2:be:72:48:74:af:18:c1:b7: 98:be:4f:81:98:d5:8c:5d:f1:9a:70:de:03:27:97:14:85:8f: 34:b6:ed:38:c3:5d:33:a3:51:c7:c4:ad:0e:d7:22:fa:dd:a4: 8a:73:d7:32:1f:99:a4:76:48:d9:ed:48:3d:bd:3b:bb:16:05: 7b:b5:20:2c:44:3b:96:54:81:59:ec:4b:88:c3:65:74:b8:95: cd:e7:16:22:83:43:a0:68:a2:20:1b:02:81:d7:0e:bf:9a:cb: 1a:17:90:bf:06:37:93:af:54:65:2b:4c:02:4c:d3:2e:94:51: a8:0d:9d:57:2d:31:78:f5:2c:68:74:fe:37:73:65:9d:02:dd: c2:0b:16:63:f1:88:6f:31:81:0c:88:bc:7d:2e:2a:70:ef:74: 1e:3a:bc:0d:8a:6f:bc:ee:d5:bf:2d:d5:b6:a7:e6:4c:ee:71: a9:83:64:3f:e5:51:6c:77:f6:1f:bb:1a:1e:a5:db:72:a8:4f: 05:70:58:3e:a4:3d:77:aa:e5:da:0f:44:a9:8e:c4:2d:12:d7: 9c:b9:b6:ed:7a:43:28:38:ae:4b:81:2b:24:3f:1e:62:b5:70: 48:56:dd:4b:25:e7:42:e1:24:e4:60:78:3d:9b:89:28:46:fd: 93:0a:27:3d -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgISAZsm7P4zoepuC6sxDYbSRpUxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3NGNjYTg5OWVmNWJmNDIzN2YwZjZiZGQxNzc5MjIxYjIw MDUyZjMwHhcNMjUxMjE2MTEzMDI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2M2RlMTdlYmYxY2U3ZjcyYWU0OTUzYzAzODYzMmUwNmJjZDJjNmQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMV5itixLwAl8QVCJkMfBzmQKMiZ EYkW35iSUt/p98fPUChzxJFbBSHvl0Q/xf6VD6SI6IwXoN1pnisESRe9BdUGPZdX w2sozzXyZtitSTVHAJSWH/8YgEF0F1g3toxdQftRUhZ6mOtAmIm9OU0ugT0nIPNh wKAHpKXNOBvYt2jpmISxrRFH9Ygnl+KCBWkCwRFE4v9ixwpYaVZvfR27ilFUUCE7 hZMvGOvv4444BykbjmUxb0iUdXtrHYfuL//rKcZeNbdTcNBNUJrS7pxZNFERUK6d CbaDQEpRw04n1ilNAmbCTHsSza9cJPf67BInWKZp4/u+0+oj5O3lHvk4FQIDAQAB o4ICWjCCAlYwHQYDVR0OBBYEFGPeF+vxzn9yrklTwDhjLga80sbYMB8GA1UdIwQY MBaAFFdMyome9b9CN/D2vdF3kiGyAFLzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjB6S2laNzF2MEkzOFBhOTBYZVNJYklBVXZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC85MzhhYmQtMTAxOS00ZTdhLWFhODIt ZWUxMTI2YTI4MTk1LzEvWTk0WDZfSE9mM0t1U1ZQQU9HTXVCcnpTeHRnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC85MzhhYmQtMTAxOS00ZTdhLWFhODItZWUxMTI2YTI4MTk1 LzEvVjB6S2laNzF2MEkzOFBhOTBYZVNJYklBVXZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHAGCCsGAQUFBwEHAQH/BGEwXzBOBAIAATBIAwQEUV/gMAwD BAFS10IDBAFS10QDBAJS10gwDAMEAFLXTQMEAlLXUDAMAwQBUtdWAwQFUtdAAwQE UtdwAwQGWZJAAwQCuU6IMA0EAgACMAcDBQMqAIhAMA0GCSqGSIb3DQEBCwUAA4IB AQCTdvd4yP6pXIWivnJIdK8YwbeYvk+BmNWMXfGacN4DJ5cUhY80tu04w10zo1HH xK0O1yL63aSKc9cyH5mkdkjZ7Ug9vTu7FgV7tSAsRDuWVIFZ7EuIw2V0uJXN5xYi g0OgaKIgGwKB1w6/mssaF5C/BjeTr1RlK0wCTNMulFGoDZ1XLTF49SxodP43c2Wd At3CCxZj8YhvMYEMiLx9Lipw73QeOrwNim+87tW/LdW2p+ZM7nGpg2Q/5VFsd/Yf uxoepdtyqE8FcFg+pD13quXaD0SpjsQtEtecubbtekMoOK5LgSskPx5itXBIVt1L JedC4STkYHg9m4koRv2TCic9 -----END CERTIFICATE-----Generated at Tue Dec 16 22:10:14 2025 by rpki-client