This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/YfNYQnNkpWTidcEt_ZUtYpnBJag.roa File: YfNYQnNkpWTidcEt_ZUtYpnBJag.roa (raw, json) Hash identifier: srxgyUuXEznWp1bawfSiP/mWkO4c/cQ7JZPaBiwCW+M= Subject key identifier: 61:F3:58:42:73:64:A5:64:E2:75:C1:2D:FD:95:2D:62:99:C1:25:A8 Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0 Certificate serial: 019B77C765F8046F0B9F73B931EE9DE344A5 Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/YfNYQnNkpWTidcEt_ZUtYpnBJag.roa Signing time: Thu 01 Jan 2026 04:18:35 +0000 ROA not before: Thu 01 Jan 2026 04:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31213 IP address blocks: 37.28.160.0/21 maxlen: 21 37.28.168.0/21 maxlen: 21 37.29.48.0/21 maxlen: 21 37.29.56.0/21 maxlen: 21 37.29.64.0/22 maxlen: 22 37.29.68.0/23 maxlen: 23 37.29.70.0/24 maxlen: 24 37.29.71.0/24 maxlen: 24 78.25.96.0/21 maxlen: 21 78.25.104.0/22 maxlen: 22 78.25.108.0/22 maxlen: 22 78.25.120.0/22 maxlen: 22 83.149.0.0/21 maxlen: 21 85.26.128.0/20 maxlen: 20 85.26.208.0/22 maxlen: 22 85.26.212.0/22 maxlen: 22 85.26.216.0/22 maxlen: 22 85.26.220.0/22 maxlen: 22 85.26.248.0/22 maxlen: 22 85.26.252.0/22 maxlen: 22 94.25.208.0/22 maxlen: 22 94.25.216.0/21 maxlen: 21 94.25.224.0/21 maxlen: 21 94.25.228.0/23 maxlen: 23 94.25.232.0/21 maxlen: 21 109.188.128.0/17 maxlen: 17 128.204.74.0/24 maxlen: 24 128.204.75.0/24 maxlen: 24 176.106.130.0/24 maxlen: 24 176.106.131.0/24 maxlen: 24 178.178.224.0/24 maxlen: 24 178.178.225.0/24 maxlen: 24 178.178.226.0/24 maxlen: 24 178.178.227.0/24 maxlen: 24 188.162.64.0/23 maxlen: 23 188.170.64.0/24 maxlen: 24 188.170.65.0/24 maxlen: 24 188.170.66.0/24 maxlen: 24 188.170.67.0/24 maxlen: 24 188.170.68.0/24 maxlen: 24 188.170.72.0/21 maxlen: 21 188.170.80.0/21 maxlen: 21 188.170.92.0/22 maxlen: 22 2a03:d000::/40 maxlen: 40 2a03:d000::/41 maxlen: 41 2a03:d000:80::/41 maxlen: 41 2a03:d000:100::/40 maxlen: 40 2a03:d000:100::/41 maxlen: 41 2a03:d000:180::/41 maxlen: 41 2a03:d000:200::/41 maxlen: 41 2a03:d000:280::/41 maxlen: 41 2a03:d000:301::/48 maxlen: 48 2a03:d000:400::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:65:f8:04:6f:0b:9f:73:b9:31:ee:9d:e3:44:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0 Validity Not Before: Jan 1 04:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=61f358427364a564e275c12dfd952d6299c125a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:99:bc:f9:24:92:13:79:9d:fd:2f:e6:3a:68: 9d:6d:d9:62:52:fd:cf:47:22:94:ae:71:eb:41:1a: d2:44:0d:95:c1:c2:8f:76:03:8b:51:fe:6a:a1:1d: 47:d2:a7:1e:27:17:eb:d4:3d:1a:27:ef:ee:c1:eb: 16:6c:e2:db:e5:8a:3e:60:65:87:ce:1c:0d:97:23: 85:dc:cb:fe:a1:05:26:ad:d1:c3:b5:3f:a9:ee:09: 41:c3:e6:4d:a0:97:f9:b3:4c:00:54:09:5a:d8:05: c6:8a:a5:9f:7a:35:80:0f:86:08:0e:08:a7:0a:b8: 78:30:fa:ee:40:f2:c6:ea:bd:6e:23:88:12:3c:7b: 73:78:75:7d:9b:a4:34:6f:d4:84:92:74:00:f8:05: f0:c3:fc:64:f9:b2:be:68:54:99:33:1a:fe:88:a1: 14:f8:c8:d4:3a:cb:32:66:f9:b9:fe:6c:df:62:9a: a4:94:0f:0a:5c:44:d2:f3:42:6b:c6:7f:2d:5c:49: 78:80:8b:d7:dc:ef:9d:db:ba:98:fe:23:fe:f5:34: 3b:7a:54:a7:ae:38:81:93:ab:c4:9d:5f:d4:45:6e: 22:f7:64:ce:7d:b4:d6:bf:04:0a:80:5c:78:52:f1: e9:d0:da:b1:9a:7c:ef:78:8d:67:9c:d9:08:16:1f: 37:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:F3:58:42:73:64:A5:64:E2:75:C1:2D:FD:95:2D:62:99:C1:25:A8 X509v3 Authority Key Identifier: keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/YfNYQnNkpWTidcEt_ZUtYpnBJag.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.28.160.0/20 37.29.48.0-37.29.71.255 78.25.96.0/20 78.25.120.0/22 83.149.0.0/21 85.26.128.0/20 85.26.208.0/20 85.26.248.0/21 94.25.208.0/22 94.25.216.0-94.25.239.255 109.188.128.0/17 128.204.74.0/23 176.106.130.0/23 178.178.224.0/22 188.162.64.0/23 188.170.64.0-188.170.68.255 188.170.72.0-188.170.87.255 188.170.92.0/22 IPv6: 2a03:d000::-2a03:d000:2ff:ffff:ffff:ffff:ffff:ffff 2a03:d000:301::/48 2a03:d000:400::/40 Signature Algorithm: sha256WithRSAEncryption 42:6d:53:88:70:ff:03:fa:41:82:41:74:8d:34:e9:0a:2d:fa: 4c:e0:dd:96:59:ca:82:dd:1a:e3:f5:8a:39:6a:b3:de:bc:a7: 05:a5:55:84:fb:c0:6e:a5:01:83:7a:43:fb:dc:1d:55:a1:70: 0f:52:21:ca:61:6d:15:c7:b4:e9:98:c4:e0:5f:79:2a:86:bf: 7a:a6:11:1d:fb:e5:b9:30:33:46:0f:70:8d:e5:02:eb:72:5e: 88:22:b0:95:d6:27:7b:19:b1:88:ae:d2:91:2a:2a:f0:d3:2b: 0a:0c:f1:28:90:84:e7:86:e0:96:78:dd:98:1a:bd:ba:4d:55: 00:e0:f8:96:0b:86:01:9f:92:b2:d9:8c:dd:d8:ab:ee:b4:1f: 53:30:d0:58:bc:30:7e:5a:cc:23:b2:d1:9e:f4:62:b1:06:c9: ed:3e:1d:cc:91:19:7e:7c:79:cc:8b:b0:e8:12:26:e7:5b:fc: ca:79:2c:b0:8e:0d:48:f7:37:df:4e:1c:bd:d3:fe:c4:67:c6: 71:1a:4f:ac:70:36:e2:12:df:3b:5f:9f:37:b2:4d:c4:dd:a8: 2f:22:51:75:2b:d4:83:74:b9:c2:e2:3a:22:0c:2c:19:75:56: 68:15:af:ed:d7:ee:ec:6f:b1:47:88:5c:ad:78:14:9e:5b:d9: 28:c1:f4:8b -----BEGIN CERTIFICATE----- MIIFsTCCBJmgAwIBAgISAZt3x2X4BG8Ln3O5Me6d40SlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx Nzg1YzAwHhcNMjYwMTAxMDQxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MWYzNTg0MjczNjRhNTY0ZTI3NWMxMmRmZDk1MmQ2Mjk5YzEyNWE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZm8+SSSE3md/S/mOmidbdliUv3P RyKUrnHrQRrSRA2VwcKPdgOLUf5qoR1H0qceJxfr1D0aJ+/uwesWbOLb5Yo+YGWH zhwNlyOF3Mv+oQUmrdHDtT+p7glBw+ZNoJf5s0wAVAla2AXGiqWfejWAD4YIDgin Crh4MPruQPLG6r1uI4gSPHtzeHV9m6Q0b9SEknQA+AXww/xk+bK+aFSZMxr+iKEU +MjUOssyZvm5/mzfYpqklA8KXETS80Jrxn8tXEl4gIvX3O+d27qY/iP+9TQ7elSn rjiBk6vEnV/URW4i92TOfbTWvwQKgFx4UvHp0NqxmnzveI1nnNkIFh83FwIDAQAB o4ICvTCCArkwHQYDVR0OBBYEFGHzWEJzZKVk4nXBLf2VLWKZwSWoMB8GA1UdIwQY MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct ODllNTZjODBkMWQwLzEvWWZOWVFuTmtwV1RpZGNFdF9aVXRZcG5CSmFnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHSBggrBgEFBQcBBwEB/wSBwjCBvzCBkwQCAAEwgYwDBAQl HKAwDAMEBCUdMAMEAyUdQAMEBE4ZYAMEAk4ZeAMEA1OVAAMEBFUagAMEBFUa0AME A1Ua+AMEAl4Z0DAMAwQDXhnYAwQEXhngAwQHbbyAAwQBgMxKAwQBsGqCAwQCsrLg AwQBvKJAMAwDBAa8qkADBAC8qkQwDAMEA7yqSAMEA7yqUAMEAryqXDAnBAIAAjAh MA4DBAQqA9ADBgAqA9AAAgMHACoD0AADAQMGACoD0AAEMA0GCSqGSIb3DQEBCwUA A4IBAQBCbVOIcP8D+kGCQXSNNOkKLfpM4N2WWcqC3Rrj9Yo5arPevKcFpVWE+8Bu pQGDekP73B1VoXAPUiHKYW0Vx7TpmMTgX3kqhr96phEd++W5MDNGD3CN5QLrcl6I IrCV1id7GbGIrtKRKirw0ysKDPEokITnhuCWeN2YGr26TVUA4PiWC4YBn5Ky2Yzd 2KvutB9TMNBYvDB+WswjstGe9GKxBsntPh3MkRl+fHnMi7DoEibnW/zKeSywjg1I 9zffThy90/7EZ8ZxGk+scDbiEt87X583sk3E3agvIlF1K9SDdLnC4joiDCwZdVZo Fa/t1+7sb7FHiFyteBSeW9kowfSL -----END CERTIFICATE-----Generated at Sun Jan 25 22:47:47 2026 by rpki-client