This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Yo2OMvKcfdcYupX4YzMuNg6YOoU.roa File: Yo2OMvKcfdcYupX4YzMuNg6YOoU.roa (raw, json) Hash identifier: m4lMqUG0bdl6WZJBNR/JE1WP+BWFScOk7QdsyR0VQzU= Subject key identifier: 62:8D:8E:32:F2:9C:7D:D7:18:BA:95:F8:63:33:2E:36:0E:98:3A:85 Certificate issuer: /CN=6749aeda8a8ace7ec596fc187a2fe10582a6704d Certificate serial: 019B7BA51899E15B15E7AF6442A280EA716E Authority key identifier: 67:49:AE:DA:8A:8A:CE:7E:C5:96:FC:18:7A:2F:E1:05:82:A6:70:4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mu2oqKzn7FlvwYei_hBYKmcE0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Yo2OMvKcfdcYupX4YzMuNg6YOoU.roa Signing time: Thu 01 Jan 2026 22:19:35 +0000 ROA not before: Thu 01 Jan 2026 22:19:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6805 IP address blocks: 62.109.64.0/18 maxlen: 18 78.48.0.0/13 maxlen: 13 78.48.0.0/16 maxlen: 16 78.48.0.0/18 maxlen: 18 78.48.64.0/18 maxlen: 18 78.48.128.0/18 maxlen: 18 78.48.192.0/18 maxlen: 18 78.49.0.0/16 maxlen: 16 78.49.0.0/18 maxlen: 18 78.49.64.0/18 maxlen: 18 78.49.128.0/18 maxlen: 18 78.49.192.0/18 maxlen: 18 78.50.0.0/16 maxlen: 16 78.50.0.0/17 maxlen: 17 78.50.128.0/17 maxlen: 17 78.51.0.0/19 maxlen: 19 78.51.32.0/19 maxlen: 19 78.51.64.0/19 maxlen: 19 78.51.96.0/19 maxlen: 19 78.51.128.0/18 maxlen: 18 78.51.192.0/18 maxlen: 18 78.54.0.0/18 maxlen: 18 78.54.64.0/18 maxlen: 18 78.54.128.0/18 maxlen: 18 78.54.192.0/18 maxlen: 18 78.55.0.0/18 maxlen: 18 78.55.64.0/18 maxlen: 18 78.55.128.0/18 maxlen: 18 78.55.192.0/18 maxlen: 18 80.171.0.0/16 maxlen: 16 80.171.0.0/18 maxlen: 18 80.171.64.0/18 maxlen: 18 80.171.128.0/18 maxlen: 18 80.171.192.0/18 maxlen: 18 85.176.0.0/13 maxlen: 13 85.183.16.0/23 maxlen: 23 85.183.18.0/23 maxlen: 23 89.12.0.0/14 maxlen: 14 89.12.0.0/16 maxlen: 16 89.12.0.0/18 maxlen: 18 89.12.64.0/18 maxlen: 18 89.12.128.0/18 maxlen: 18 89.12.192.0/18 maxlen: 18 89.13.0.0/16 maxlen: 16 89.13.0.0/17 maxlen: 17 89.13.128.0/17 maxlen: 17 89.14.0.0/18 maxlen: 18 89.14.64.0/18 maxlen: 18 89.14.128.0/18 maxlen: 18 89.14.192.0/18 maxlen: 18 89.15.232.0/21 maxlen: 21 92.224.0.0/13 maxlen: 13 92.224.0.0/16 maxlen: 16 92.224.128.0/17 maxlen: 17 92.225.0.0/16 maxlen: 16 92.225.0.0/17 maxlen: 17 92.225.128.0/17 maxlen: 17 92.227.194.0/23 maxlen: 23 92.228.72.0/23 maxlen: 23 92.228.74.0/23 maxlen: 23 92.228.76.0/23 maxlen: 23 92.228.78.0/23 maxlen: 23 92.228.80.0/23 maxlen: 23 92.228.82.0/23 maxlen: 23 92.228.84.0/23 maxlen: 23 92.228.86.0/23 maxlen: 23 92.229.0.0/16 maxlen: 16 92.229.0.0/17 maxlen: 17 92.230.20.0/23 maxlen: 23 92.230.22.0/23 maxlen: 23 185.93.236.0/22 maxlen: 22 213.39.128.0/17 maxlen: 17 213.191.64.0/19 maxlen: 19 2a01:c00::/26 maxlen: 39 2a01:c08::/47 maxlen: 47 2a01:c20:7000::/39 maxlen: 39 2a01:c20:7200::/47 maxlen: 47 2a01:c22:1c00::/47 maxlen: 47 2a01:c22:1e00::/39 maxlen: 39 2a01:c22:3400::/39 maxlen: 39 2a01:c22:3600::/47 maxlen: 47 2a01:c22:6c00::/47 maxlen: 47 2a01:c22:6e00::/39 maxlen: 39 2a01:c22:7000::/47 maxlen: 47 2a01:c22:7200::/39 maxlen: 39 2a01:c22:7400::/47 maxlen: 47 2a01:c22:7600::/39 maxlen: 39 2a01:c22:7800::/47 maxlen: 47 2a01:c22:7a00::/39 maxlen: 39 2a01:c22:8400::/39 maxlen: 39 2a01:c22:8600::/47 maxlen: 47 2a01:c22:8800::/39 maxlen: 39 2a01:c22:8a00::/47 maxlen: 47 2a01:c22:8c00::/39 maxlen: 39 2a01:c22:8e00::/47 maxlen: 47 2a01:c22:a600::/47 maxlen: 47 2a01:c22:aa00::/47 maxlen: 47 2a01:c22:ae00::/47 maxlen: 47 2a01:c22:b200::/47 maxlen: 47 2a01:c22:b600::/47 maxlen: 47 2a01:c22:ba00::/47 maxlen: 47 2a01:c22:be00::/47 maxlen: 47 2a01:c22:c200::/47 maxlen: 47 2a01:c22:ca00::/47 maxlen: 47 2a01:c22:ce00::/47 maxlen: 47 2a01:c22:d200::/47 maxlen: 47 2a01:c22:d600::/47 maxlen: 47 2a01:c23:5e00::/47 maxlen: 47 2a01:c23:6200::/47 maxlen: 47 2a01:c23:6600::/47 maxlen: 47 2a01:c23:6a00::/47 maxlen: 47 2a01:c23:6e00::/47 maxlen: 47 2a01:c23:7200::/47 maxlen: 47 2a01:c23:7600::/47 maxlen: 47 2a01:c23:8a00::/47 maxlen: 47 2a01:c23:8e00::/47 maxlen: 47 2a01:c23:9200::/47 maxlen: 47 2a01:c23:9600::/47 maxlen: 47 2a01:c23:ba00::/47 maxlen: 47 2a01:c23:be00::/47 maxlen: 47 2a01:c23:c200::/47 maxlen: 47 2a01:c23:c600::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft rsync://rpki.ripe.net/repository/DEFAULT/Z0mu2oqKzn7FlvwYei_hBYKmcE0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:18:99:e1:5b:15:e7:af:64:42:a2:80:ea:71:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6749aeda8a8ace7ec596fc187a2fe10582a6704d Validity Not Before: Jan 1 22:19:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=628d8e32f29c7dd718ba95f863332e360e983a85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:7d:d2:89:9a:df:08:22:66:17:9a:d6:a3:71: 86:98:9b:bc:0b:cb:e3:3b:71:ed:29:80:be:8b:1b: d4:72:18:63:a6:6b:8e:de:89:e0:00:80:1d:e2:99: 2e:6e:38:68:de:fb:7b:2c:0a:79:ba:19:ae:d1:ed: 93:9e:97:83:4f:f4:78:92:29:b3:96:53:6f:c4:ff: d5:87:74:6a:eb:8e:84:02:1c:9c:0d:cd:b8:20:27: be:2f:db:4d:2b:38:13:cd:70:3b:2d:71:66:54:2f: 67:dd:30:07:ee:81:14:35:ef:fa:d6:83:3c:d0:30: 42:f7:3e:07:7f:48:4f:85:c0:de:be:e9:23:7e:32: 09:bb:a6:c8:30:57:61:51:e8:db:d7:b2:6b:d0:37: 5a:d3:11:c7:71:46:53:a6:df:c2:6b:6d:58:b1:af: 7e:90:1c:7c:1f:db:56:2a:83:51:85:1a:21:e0:f2: 1a:55:23:32:2b:65:4f:d1:57:2d:eb:05:0e:c8:72: 8f:ec:47:84:4c:cf:e9:e4:5e:2b:8f:7f:93:28:7e: 17:10:1c:01:e3:91:d2:30:db:dc:75:90:7d:f4:2a: 6c:0d:eb:83:07:fe:de:82:d0:de:8c:7a:62:06:8a: 10:36:20:66:79:61:af:df:e9:14:66:2a:40:34:8f: 60:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:8D:8E:32:F2:9C:7D:D7:18:BA:95:F8:63:33:2E:36:0E:98:3A:85 X509v3 Authority Key Identifier: keyid:67:49:AE:DA:8A:8A:CE:7E:C5:96:FC:18:7A:2F:E1:05:82:A6:70:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mu2oqKzn7FlvwYei_hBYKmcE0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Yo2OMvKcfdcYupX4YzMuNg6YOoU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.109.64.0/18 78.48.0.0/13 80.171.0.0/16 85.176.0.0/13 89.12.0.0/14 92.224.0.0/13 185.93.236.0/22 213.39.128.0/17 213.191.64.0/19 IPv6: 2a01:c00::/26 Signature Algorithm: sha256WithRSAEncryption 92:e0:07:43:ab:f0:b4:99:f1:3c:ec:f6:01:1b:a5:cf:4d:be: f1:4d:91:5a:ac:6d:c1:54:9e:ca:2f:0a:89:cd:da:7e:4a:69: da:e7:0b:fd:17:26:a1:30:9b:c5:62:74:ad:d5:6d:12:36:cf: 3a:85:18:aa:d9:ec:b7:08:07:5a:a2:ab:84:d0:ce:1f:b4:b7: 03:0c:10:b4:82:d9:e9:99:cd:8f:fa:8d:de:52:0e:b6:d8:20: 56:9c:aa:df:c7:36:ba:54:fc:c6:e1:cb:07:20:b7:f9:e4:6e: 56:12:14:82:ee:2d:76:cf:70:fd:b9:0c:ce:e7:c5:ab:a2:d0: ed:6a:49:8e:4d:d4:b5:a9:1b:97:3e:74:b0:6b:f4:f2:42:6c: 26:a3:e6:89:56:9d:2a:57:30:e4:60:36:6a:fc:01:e5:9f:d4: 64:9d:66:21:54:75:fc:e1:e6:99:2e:46:4c:e6:92:85:ec:54: d8:b2:75:b1:c0:70:f8:8d:cf:17:1a:49:76:9b:cb:fd:a7:0f: 45:26:93:cc:cf:25:3c:69:d6:51:44:ca:a2:aa:dd:a1:0d:0b: e5:ce:32:1c:f0:87:0e:87:11:bc:b0:e5:da:47:01:f7:f5:91: 68:69:ee:57:e1:82:1c:86:db:ec:d0:a1:f2:39:ff:bb:ee:04: ce:e2:7e:1b -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgISAZt7pRiZ4VsV569kQqKA6nFuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3NDlhZWRhOGE4YWNlN2VjNTk2ZmMxODdhMmZlMTA1ODJh NjcwNGQwHhcNMjYwMTAxMjIxOTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MjhkOGUzMmYyOWM3ZGQ3MThiYTk1Zjg2MzMzMmUzNjBlOTgzYTg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA033SiZrfCCJmF5rWo3GGmJu8C8vj O3HtKYC+ixvUchhjpmuO3ongAIAd4pkubjho3vt7LAp5uhmu0e2TnpeDT/R4kimz llNvxP/Vh3Rq646EAhycDc24ICe+L9tNKzgTzXA7LXFmVC9n3TAH7oEUNe/61oM8 0DBC9z4Hf0hPhcDevukjfjIJu6bIMFdhUejb17Jr0Dda0xHHcUZTpt/Ca21Ysa9+ kBx8H9tWKoNRhRoh4PIaVSMyK2VP0Vct6wUOyHKP7EeETM/p5F4rj3+TKH4XEBwB 45HSMNvcdZB99CpsDeuDB/7egtDejHpiBooQNiBmeWGv3+kUZipANI9g9QIDAQAB o4ICQzCCAj8wHQYDVR0OBBYEFGKNjjLynH3XGLqV+GMzLjYOmDqFMB8GA1UdIwQY MBaAFGdJrtqKis5+xZb8GHov4QWCpnBNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjBtdTJvcUt6bjdGbHZ3WWVpX2hCWUttY0UwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8yZDM2YWItZGVlNS00NjlkLTkyMTYt NjY2M2ZhYmExZGQwLzEvWW8yT012S2NmZGNZdXBYNFl6TXVOZzZZT29VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC8yZDM2YWItZGVlNS00NjlkLTkyMTYtNjY2M2ZhYmExZGQw LzEvWjBtdTJvcUt6bjdGbHZ3WWVpX2hCWUttY0UwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFkGCCsGAQUFBwEHAQH/BEowSDA3BAIAATAxAwQGPm1AAwMD TjADAwBQqwMDA1WwAwMCWQwDAwNc4AMEArld7AMEB9UngAMEBdW/QDANBAIAAjAH AwUGKgEMADANBgkqhkiG9w0BAQsFAAOCAQEAkuAHQ6vwtJnxPOz2ARulz02+8U2R WqxtwVSeyi8Kic3afkpp2ucL/RcmoTCbxWJ0rdVtEjbPOoUYqtnstwgHWqKrhNDO H7S3AwwQtILZ6ZnNj/qN3lIOttggVpyq38c2ulT8xuHLByC3+eRuVhIUgu4tds9w /bkMzufFq6LQ7WpJjk3Utakblz50sGv08kJsJqPmiVadKlcw5GA2avwB5Z/UZJ1m IVR1/OHmmS5GTOaShexU2LJ1scBw+I3PFxpJdpvL/acPRSaTzM8lPGnWUUTKoqrd oQ0L5c4yHPCHDocRvLDl2kcB9/WRaGnuV+GCHIbb7NCh8jn/u+4EzuJ+Gw== -----END CERTIFICATE-----Generated at Sun Jan 25 19:36:35 2026 by rpki-client