This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/y97Q2cCIA4p_jfA1RbOfelZQKOo.roa File: y97Q2cCIA4p_jfA1RbOfelZQKOo.roa (raw, json) Hash identifier: oRmoVnYM94QBjpHDaFRFV+BA4jZYdHdlmrs4oEppUqA= Subject key identifier: CB:DE:D0:D9:C0:88:03:8A:7F:8D:F0:35:45:B3:9F:7A:56:50:28:EA Certificate issuer: /CN=cc40d96242b082efe5b4f2258820b3059396198d Certificate serial: 019B7834697B362F1FBC07DA751FE4D0EA41 Authority key identifier: CC:40:D9:62:42:B0:82:EF:E5:B4:F2:25:88:20:B3:05:93:96:19:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zEDZYkKwgu_ltPIliCCzBZOWGY0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/y97Q2cCIA4p_jfA1RbOfelZQKOo.roa Signing time: Thu 01 Jan 2026 06:17:39 +0000 ROA not before: Thu 01 Jan 2026 06:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8412 IP address blocks: 62.99.128.0/17 maxlen: 18 81.223.0.0/16 maxlen: 17 83.64.0.0/15 maxlen: 16 85.124.0.0/14 maxlen: 15 85.127.96.0/20 maxlen: 20 91.118.0.0/15 maxlen: 16 195.58.160.0/19 maxlen: 20 212.41.224.0/19 maxlen: 20 213.229.0.0/18 maxlen: 19 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.mft rsync://rpki.ripe.net/repository/DEFAULT/zEDZYkKwgu_ltPIliCCzBZOWGY0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:69:7b:36:2f:1f:bc:07:da:75:1f:e4:d0:ea:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc40d96242b082efe5b4f2258820b3059396198d Validity Not Before: Jan 1 06:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cbded0d9c088038a7f8df03545b39f7a565028ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:5f:ca:e4:b5:0e:d2:f0:50:74:d3:88:93:9e: 96:d8:07:90:f0:04:78:a9:75:99:fc:c0:38:9b:31: d9:c1:c1:cb:b9:51:cc:ac:57:70:3d:34:b2:8a:08: 99:8f:76:4e:1a:d5:7c:ec:50:ba:63:a9:c4:33:60: 72:47:a1:d6:32:9d:4f:ee:eb:49:e3:f9:0b:a8:29: bb:69:68:25:56:ca:6b:a7:0f:d0:0d:a6:03:ec:d8: a6:93:24:71:11:7e:62:80:b5:a5:6a:6f:f3:d0:c7: ac:49:4e:11:a8:fd:e1:14:e5:3d:a9:30:ac:c3:2d: f7:5a:ae:aa:46:fc:06:4f:f3:0c:4d:55:fe:2b:92: 97:15:55:2c:37:5c:a4:c3:de:c5:b7:aa:c3:f5:03: 6a:df:b3:35:29:81:63:a8:57:39:b9:f8:f7:0b:e6: 29:81:cc:6e:4c:86:e8:91:72:53:f8:5a:51:c9:01: e8:c3:cc:74:0f:90:a5:f3:67:83:05:71:48:e9:ec: e2:a8:61:24:3d:7f:c9:35:a5:27:8d:f9:4d:b6:27: b4:3e:43:b2:3e:17:3f:19:97:7a:fd:aa:29:3b:0d: 2f:3e:0f:e4:61:4d:1d:ba:ab:b3:71:78:1c:f7:28: 17:88:cb:ba:00:bc:c3:05:f8:9f:05:6f:b1:32:7f: 84:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:DE:D0:D9:C0:88:03:8A:7F:8D:F0:35:45:B3:9F:7A:56:50:28:EA X509v3 Authority Key Identifier: keyid:CC:40:D9:62:42:B0:82:EF:E5:B4:F2:25:88:20:B3:05:93:96:19:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEDZYkKwgu_ltPIliCCzBZOWGY0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/y97Q2cCIA4p_jfA1RbOfelZQKOo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.99.128.0/17 81.223.0.0/16 83.64.0.0/15 85.124.0.0/14 91.118.0.0/15 195.58.160.0/19 212.41.224.0/19 213.229.0.0/18 Signature Algorithm: sha256WithRSAEncryption 75:20:b9:a8:e7:0e:08:7f:2f:ec:ff:d3:9f:d2:08:2f:5e:92: 47:f4:06:e2:c7:7d:14:b2:50:00:37:0c:f6:0a:ff:26:e4:2b: c7:74:98:84:f5:36:f1:5f:40:8d:69:2a:35:41:77:3c:08:8a: 1a:c5:5c:e3:b2:6f:8f:14:4b:63:02:b4:90:7c:a3:87:3a:54: 47:64:da:bf:3a:b0:ee:7d:45:18:58:e8:f3:28:ad:69:6d:c5: dc:68:9f:6f:43:3a:5c:2a:52:bb:18:0c:67:92:ed:9c:b7:7a: 36:44:c4:d1:65:02:45:e6:da:a7:ee:eb:2e:9c:b1:85:8b:45: 10:7f:5a:e2:23:42:f2:7a:b9:2a:ec:1f:5b:2f:61:cc:ca:c4: 89:b3:b0:58:2a:8b:d2:55:1f:7a:11:4c:98:54:03:49:d2:90: 16:3d:bd:5b:f4:63:42:0f:af:b1:ae:a1:b5:40:39:a1:e6:1a: 1a:1a:62:18:a0:c0:bd:b6:1a:78:08:f1:d1:b3:e2:d9:8a:00: b0:39:b1:0b:ec:4c:9e:86:63:81:cf:11:d8:da:82:e8:2e:fa: 0d:4d:90:4d:a7:52:9b:ec:d3:b5:73:04:14:7c:dd:d4:b4:3e: d0:58:a7:db:04:5e:ad:dc:2c:e2:02:c9:d2:3c:b7:49:40:7d: 62:24:1c:37 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgISAZt4NGl7Ni8fvAfadR/k0OpBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjNDBkOTYyNDJiMDgyZWZlNWI0ZjIyNTg4MjBiMzA1OTM5 NjE5OGQwHhcNMjYwMTAxMDYxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYmRlZDBkOWMwODgwMzhhN2Y4ZGYwMzU0NWIzOWY3YTU2NTAyOGVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxV/K5LUO0vBQdNOIk56W2AeQ8AR4 qXWZ/MA4mzHZwcHLuVHMrFdwPTSyigiZj3ZOGtV87FC6Y6nEM2ByR6HWMp1P7utJ 4/kLqCm7aWglVsprpw/QDaYD7NimkyRxEX5igLWlam/z0MesSU4RqP3hFOU9qTCs wy33Wq6qRvwGT/MMTVX+K5KXFVUsN1ykw97Ft6rD9QNq37M1KYFjqFc5ufj3C+Yp gcxuTIbokXJT+FpRyQHow8x0D5Cl82eDBXFI6eziqGEkPX/JNaUnjflNtie0PkOy Phc/GZd6/aopOw0vPg/kYU0duquzcXgc9ygXiMu6ALzDBfifBW+xMn+EAQIDAQAB o4ICLzCCAiswHQYDVR0OBBYEFMve0NnAiAOKf43wNUWzn3pWUCjqMB8GA1UdIwQY MBaAFMxA2WJCsILv5bTyJYggswWTlhmNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekVEWllrS3dndV9sdFBJbGlDQ3pCWk9XR1kwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8xYWE2OWYtZGI1NS00ZmJhLWJjZTkt YzFlYmU2MTU0OWNjLzEveTk3UTJjQ0lBNHBfamZBMVJiT2ZlbFpRS09vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS8xYWE2OWYtZGI1NS00ZmJhLWJjZTktYzFlYmU2MTU0OWNj LzEvekVEWllrS3dndV9sdFBJbGlDQ3pCWk9XR1kwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQHPmOAAwMA Ud8DAwFTQAMDAlV8AwMBW3YDBAXDOqADBAXUKeADBAbV5QAwDQYJKoZIhvcNAQEL BQADggEBAHUguajnDgh/L+z/05/SCC9ekkf0BuLHfRSyUAA3DPYK/ybkK8d0mIT1 NvFfQI1pKjVBdzwIihrFXOOyb48US2MCtJB8o4c6VEdk2r86sO59RRhY6PMorWlt xdxon29DOlwqUrsYDGeS7Zy3ejZExNFlAkXm2qfu6y6csYWLRRB/WuIjQvJ6uSrs H1svYczKxImzsFgqi9JVH3oRTJhUA0nSkBY9vVv0Y0IPr7GuobVAOaHmGhoaYhig wL22GngI8dGz4tmKALA5sQvsTJ6GY4HPEdjagugu+g1NkE2nUpvs07VzBBR83dS0 PtBYp9sEXq3cLOICydI8t0lAfWIkHDc= -----END CERTIFICATE-----Generated at Mon Jan 26 10:52:59 2026 by rpki-client