This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/YFsmm4apHvY6ZL8EsMyBPmZGQ-E.roa File: YFsmm4apHvY6ZL8EsMyBPmZGQ-E.roa (raw, json) Hash identifier: QK8FK49xDAR7s4a20/0YVNHlxDPHbZSZvfiRmsUbSrc= Subject key identifier: 60:5B:26:9B:86:A9:1E:F6:3A:64:BF:04:B0:CC:81:3E:66:46:43:E1 Certificate issuer: /CN=400e07d799fb355c952025f3d27b00e9b4ee34ed Certificate serial: 019B7F15C08DBD994A7EE36C20A1E0F385FB Authority key identifier: 40:0E:07:D7:99:FB:35:5C:95:20:25:F3:D2:7B:00:E9:B4:EE:34:ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QA4H15n7NVyVICXz0nsA6bTuNO0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/YFsmm4apHvY6ZL8EsMyBPmZGQ-E.roa Signing time: Fri 02 Jan 2026 14:21:30 +0000 ROA not before: Fri 02 Jan 2026 14:21:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61102 IP address blocks: 89.33.28.0/24 maxlen: 24 89.33.29.0/24 maxlen: 24 107.150.178.0/24 maxlen: 24 107.150.179.0/24 maxlen: 24 176.223.65.0/24 maxlen: 24 185.18.204.0/24 maxlen: 24 185.18.205.0/24 maxlen: 24 185.18.206.0/24 maxlen: 24 185.18.207.0/24 maxlen: 24 185.37.148.0/24 maxlen: 24 185.37.149.0/24 maxlen: 24 185.37.150.0/24 maxlen: 24 185.37.151.0/24 maxlen: 24 185.217.96.0/24 maxlen: 24 185.217.97.0/24 maxlen: 24 185.217.98.0/24 maxlen: 24 185.217.99.0/24 maxlen: 24 188.210.255.0/24 maxlen: 24 2a03:ff40:4ed1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/QA4H15n7NVyVICXz0nsA6bTuNO0.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/QA4H15n7NVyVICXz0nsA6bTuNO0.mft rsync://rpki.ripe.net/repository/DEFAULT/QA4H15n7NVyVICXz0nsA6bTuNO0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:c0:8d:bd:99:4a:7e:e3:6c:20:a1:e0:f3:85:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=400e07d799fb355c952025f3d27b00e9b4ee34ed Validity Not Before: Jan 2 14:21:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=605b269b86a91ef63a64bf04b0cc813e664643e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:5c:b9:d5:fc:27:e2:4d:59:a8:f6:f5:31:1e: 20:fb:dd:53:59:f3:12:93:f4:83:eb:4a:1e:6a:67: 61:5b:90:5d:45:e8:7d:c0:57:81:b1:a9:b8:42:dd: 72:91:ec:5b:40:62:32:f3:a6:77:4e:30:1a:6f:35: f1:36:f9:ee:71:15:f9:2f:6e:0e:f1:44:e7:98:20: f7:9a:a4:42:dc:ad:24:3e:15:34:9d:19:ab:f2:76: 15:79:38:13:c9:a1:90:82:fb:f6:1b:10:5a:91:da: d9:fc:df:56:08:c3:e0:59:9f:95:d7:9a:9a:64:ab: 25:87:65:45:7f:58:38:60:fe:cd:95:c3:83:5f:b4: ca:8d:aa:17:56:74:02:d1:62:96:53:58:43:f0:fc: c9:94:73:c9:32:15:d7:1b:6b:04:ed:cb:00:b1:1d: 5c:a1:d3:5d:b6:61:e9:16:58:44:e6:a9:85:09:bd: 4e:cd:a0:de:69:a3:a8:27:ca:68:f2:ea:00:2d:fe: ce:86:5d:f8:34:75:45:80:19:c8:b5:91:08:96:33: 3b:91:5a:a1:4f:7a:1b:9d:31:ad:b7:56:d8:b2:4d: 8a:fd:e1:dd:77:5c:33:9e:47:aa:06:2c:1e:1f:0c: c2:85:e3:58:c1:96:fc:36:2e:92:36:fc:92:d3:86: e0:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:5B:26:9B:86:A9:1E:F6:3A:64:BF:04:B0:CC:81:3E:66:46:43:E1 X509v3 Authority Key Identifier: keyid:40:0E:07:D7:99:FB:35:5C:95:20:25:F3:D2:7B:00:E9:B4:EE:34:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QA4H15n7NVyVICXz0nsA6bTuNO0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/YFsmm4apHvY6ZL8EsMyBPmZGQ-E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/QA4H15n7NVyVICXz0nsA6bTuNO0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.33.28.0/23 107.150.178.0/23 176.223.65.0/24 185.18.204.0/22 185.37.148.0/22 185.217.96.0/22 188.210.255.0/24 IPv6: 2a03:ff40:4ed1::/48 Signature Algorithm: sha256WithRSAEncryption 54:0c:af:f2:da:ab:dd:08:31:42:93:5a:d5:06:dd:a0:f1:29: a2:8c:bd:c1:cb:6e:1d:fd:c6:17:28:6a:59:42:40:47:cf:c9: 47:d0:b4:2e:61:3b:32:f7:21:7a:9c:3c:b0:75:7c:19:8e:f4: bb:41:d7:ce:21:b6:a7:30:f3:05:8d:71:d7:96:b0:91:a7:ea: 7a:8a:ee:b1:07:9b:94:99:11:83:87:05:df:3d:5f:d3:b7:7f: 87:28:ef:7e:ed:da:3d:ba:1d:e8:15:db:ef:df:47:de:1c:d8: 18:3e:c3:cc:dd:34:a8:ae:7d:4e:cf:f1:48:d0:1d:5c:67:06: 61:b4:32:23:24:4f:98:a3:db:a6:41:2e:b0:ba:c2:df:52:d3: cd:af:07:dd:b0:75:ed:5a:a7:b1:35:7d:02:9e:aa:4a:51:5b: f2:c6:4d:21:78:bd:2e:28:e4:92:20:29:81:8d:4c:48:3e:f9: 98:64:b3:59:24:bd:08:ca:4d:eb:4f:a9:6b:f8:7b:9d:ad:8f: 89:e1:79:1a:19:b6:81:f7:fd:59:e9:d6:8a:34:f6:e1:47:58: 42:fb:f6:b7:82:c2:7f:ca:bd:63:79:de:cc:92:42:53:51:5a: 10:53:6d:88:9c:da:28:4c:98:c4:70:28:4e:9d:03:16:b6:6b: d4:cc:c5:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgISAZt/FcCNvZlKfuNsIKHg84X7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwMGUwN2Q3OTlmYjM1NWM5NTIwMjVmM2QyN2IwMGU5YjRl ZTM0ZWQwHhcNMjYwMTAyMTQyMTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MDViMjY5Yjg2YTkxZWY2M2E2NGJmMDRiMGNjODEzZTY2NDY0M2UxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1y51fwn4k1ZqPb1MR4g+91TWfMS k/SD60oeamdhW5BdReh9wFeBsam4Qt1ykexbQGIy86Z3TjAabzXxNvnucRX5L24O 8UTnmCD3mqRC3K0kPhU0nRmr8nYVeTgTyaGQgvv2GxBakdrZ/N9WCMPgWZ+V15qa ZKslh2VFf1g4YP7NlcODX7TKjaoXVnQC0WKWU1hD8PzJlHPJMhXXG2sE7csAsR1c odNdtmHpFlhE5qmFCb1OzaDeaaOoJ8po8uoALf7Ohl34NHVFgBnItZEIljM7kVqh T3obnTGtt1bYsk2K/eHdd1wznkeqBiweHwzCheNYwZb8Ni6SNvyS04bgIwIDAQAB o4ICPjCCAjowHQYDVR0OBBYEFGBbJpuGqR72OmS/BLDMgT5mRkPhMB8GA1UdIwQY MBaAFEAOB9eZ+zVclSAl89J7AOm07jTtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUE0SDE1bjdOVnlWSUNYejBuc0E2YlR1Tk8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8yZjM2YjYtZDcwMS00MzM1LWFmMzAt NDhmZTYzM2IxYjNmLzEvWUZzbW00YXBIdlk2Wkw4RXNNeUJQbVpHUS1FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC8yZjM2YjYtZDcwMS00MzM1LWFmMzAtNDhmZTYzM2IxYjNm LzEvUUE0SDE1bjdOVnlWSUNYejBuc0E2YlR1Tk8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFQGCCsGAQUFBwEHAQH/BEUwQzAwBAIAATAqAwQBWSEcAwQB a5ayAwQAsN9BAwQCuRLMAwQCuSWUAwQCudlgAwQAvNL/MA8EAgACMAkDBwAqA/9A TtEwDQYJKoZIhvcNAQELBQADggEBAFQMr/Laq90IMUKTWtUG3aDxKaKMvcHLbh39 xhcoallCQEfPyUfQtC5hOzL3IXqcPLB1fBmO9LtB184htqcw8wWNcdeWsJGn6nqK 7rEHm5SZEYOHBd89X9O3f4co737t2j26HegV2+/fR94c2Bg+w8zdNKiufU7P8UjQ HVxnBmG0MiMkT5ij26ZBLrC6wt9S082vB92wde1ap7E1fQKeqkpRW/LGTSF4vS4o 5JIgKYGNTEg++Zhks1kkvQjKTetPqWv4e52tj4nheRoZtoH3/Vnp1oo09uFHWEL7 9reCwn/KvWN53sySQlNRWhBTbYic2ihMmMRwKE6dAxa2a9TMxV0= -----END CERTIFICATE-----Generated at Sun Jan 25 13:01:46 2026 by rpki-client