This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/Yqdl2ckpwtXnbxiFNcXWwRDh9cI.roa
File: Yqdl2ckpwtXnbxiFNcXWwRDh9cI.roa (raw, json)
Hash identifier: PI5nHqQq8jZqisC8+hZEzS0n7ByrBt+NTZFOvSELpKY=
Subject key identifier: 62:A7:65:D9:C9:29:C2:D5:E7:6F:18:85:35:C5:D6:C1:10:E1:F5:C2
Certificate issuer: /CN=237c83447d17183380f489bc946c8b9e300ffb1d
Certificate serial: 019BB581B153F8DF7F2ED6EE330C9A061FC4
Authority key identifier: 23:7C:83:44:7D:17:18:33:80:F4:89:BC:94:6C:8B:9E:30:0F:FB:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/Yqdl2ckpwtXnbxiFNcXWwRDh9cI.roa
Signing time: Tue 13 Jan 2026 03:58:54 +0000
ROA not before: Tue 13 Jan 2026 03:58:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31898
IP address blocks: 79.72.0.0/20 maxlen: 20
79.72.16.0/22 maxlen: 22
79.72.20.0/23 maxlen: 23
79.72.24.0/21 maxlen: 21
79.72.32.0/22 maxlen: 24
79.72.40.0/21 maxlen: 21
79.72.48.0/20 maxlen: 20
79.72.64.0/19 maxlen: 19
79.76.0.0/20 maxlen: 20
79.76.16.0/23 maxlen: 23
79.76.18.0/23 maxlen: 23
79.76.20.0/24 maxlen: 24
79.76.24.0/21 maxlen: 21
79.76.32.0/19 maxlen: 19
79.76.96.0/19 maxlen: 19
80.225.64.0/20 maxlen: 20
80.225.80.0/20 maxlen: 20
80.225.160.0/21 maxlen: 21
80.225.168.0/23 maxlen: 23
80.225.170.0/23 maxlen: 23
80.225.172.0/23 maxlen: 23
80.225.174.0/23 maxlen: 23
80.225.176.0/23 maxlen: 23
80.225.178.0/23 maxlen: 23
80.225.184.0/21 maxlen: 21
80.225.192.0/18 maxlen: 18
81.208.160.0/20 maxlen: 20
81.208.188.0/22 maxlen: 22
82.70.224.0/20 maxlen: 20
82.70.248.0/22 maxlen: 22
84.8.64.0/21 maxlen: 21
84.8.72.0/23 maxlen: 23
84.8.74.0/23 maxlen: 23
84.8.76.0/23 maxlen: 23
84.8.78.0/23 maxlen: 23
84.8.80.0/23 maxlen: 23
84.8.88.0/23 maxlen: 23
84.8.96.0/19 maxlen: 19
84.8.128.0/20 maxlen: 20
84.8.144.0/20 maxlen: 20
84.8.224.0/21 maxlen: 21
84.8.232.0/23 maxlen: 23
84.8.234.0/23 maxlen: 23
84.8.238.0/23 maxlen: 23
84.8.240.0/23 maxlen: 23
84.8.242.0/23 maxlen: 23
84.8.248.0/21 maxlen: 21
84.235.160.0/19 maxlen: 19
84.235.192.0/23 maxlen: 23
84.235.198.0/23 maxlen: 23
84.235.200.0/21 maxlen: 21
84.235.208.0/20 maxlen: 20
84.235.224.0/20 maxlen: 20
84.235.240.0/20 maxlen: 20
89.168.0.0/21 maxlen: 21
89.168.16.0/20 maxlen: 20
89.168.32.0/19 maxlen: 19
89.168.64.0/18 maxlen: 18
92.4.64.0/19 maxlen: 19
92.4.128.0/19 maxlen: 19
92.4.160.0/20 maxlen: 20
92.4.176.0/20 maxlen: 20
92.4.192.0/21 maxlen: 21
92.4.228.0/22 maxlen: 24
92.4.232.0/23 maxlen: 23
92.4.235.0/24 maxlen: 24
92.4.236.0/24 maxlen: 24
92.4.237.0/24 maxlen: 24
92.4.238.0/24 maxlen: 24
92.4.239.0/24 maxlen: 24
92.4.240.0/20 maxlen: 20
92.5.0.0/17 maxlen: 17
92.5.128.0/18 maxlen: 18
92.5.192.0/19 maxlen: 19
92.5.224.0/20 maxlen: 20
92.5.240.0/21 maxlen: 21
92.5.248.0/22 maxlen: 22
92.5.254.0/24 maxlen: 24
92.5.255.0/24 maxlen: 24
130.110.0.0/20 maxlen: 20
130.110.16.0/21 maxlen: 21
130.110.24.0/22 maxlen: 22
130.110.28.0/23 maxlen: 23
130.110.32.0/19 maxlen: 19
130.110.64.0/19 maxlen: 19
130.110.96.0/19 maxlen: 19
130.110.192.0/24 maxlen: 24
130.110.206.0/24 maxlen: 24
130.110.207.0/24 maxlen: 24
130.110.208.0/24 maxlen: 24
130.110.209.0/24 maxlen: 24
130.110.210.0/24 maxlen: 24
130.110.211.0/24 maxlen: 24
130.110.212.0/24 maxlen: 24
130.110.213.0/24 maxlen: 24
130.110.214.0/24 maxlen: 24
130.110.215.0/24 maxlen: 24
130.110.216.0/24 maxlen: 24
130.110.218.0/24 maxlen: 24
130.110.219.0/24 maxlen: 24
130.110.220.0/24 maxlen: 24
130.110.221.0/24 maxlen: 24
130.110.222.0/24 maxlen: 24
130.110.223.0/24 maxlen: 24
130.110.224.0/21 maxlen: 21
130.110.232.0/22 maxlen: 22
130.110.236.0/23 maxlen: 23
130.110.238.0/24 maxlen: 24
130.110.239.0/24 maxlen: 24
130.110.240.0/20 maxlen: 20
134.98.64.0/23 maxlen: 23
134.98.128.0/19 maxlen: 24
134.98.192.0/19 maxlen: 19
134.98.224.0/23 maxlen: 23
134.98.248.0/21 maxlen: 21
141.253.96.0/19 maxlen: 19
141.253.192.0/20 maxlen: 20
141.253.208.0/22 maxlen: 22
141.253.212.0/23 maxlen: 23
141.253.214.0/24 maxlen: 24
141.253.215.0/24 maxlen: 24
141.253.216.0/21 maxlen: 21
145.241.96.0/21 maxlen: 21
145.241.104.0/21 maxlen: 24
145.241.112.0/20 maxlen: 20
145.241.144.0/21 maxlen: 21
145.241.152.0/21 maxlen: 21
145.241.160.0/20 maxlen: 20
145.241.176.0/24 maxlen: 24
145.241.177.0/24 maxlen: 24
145.241.178.0/23 maxlen: 23
145.241.180.0/23 maxlen: 23
145.241.182.0/24 maxlen: 24
145.241.183.0/24 maxlen: 24
145.241.184.0/21 maxlen: 21
145.241.192.0/18 maxlen: 18
213.35.96.0/19 maxlen: 19
217.142.128.0/19 maxlen: 19
217.142.160.0/21 maxlen: 21
217.142.168.0/23 maxlen: 23
217.142.170.0/23 maxlen: 23
217.142.172.0/23 maxlen: 23
217.142.174.0/23 maxlen: 23
217.142.176.0/23 maxlen: 23
217.142.178.0/23 maxlen: 23
217.142.184.0/21 maxlen: 21
217.142.224.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft
rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:b5:81:b1:53:f8:df:7f:2e:d6:ee:33:0c:9a:06:1f:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237c83447d17183380f489bc946c8b9e300ffb1d
Validity
Not Before: Jan 13 03:58:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=62a765d9c929c2d5e76f188535c5d6c110e1f5c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:97:c2:0b:69:67:2d:01:f8:61:10:7b:87:17:
d5:1f:c7:38:e2:f3:8f:88:a1:3a:15:45:cc:55:a3:
88:7c:7c:e2:0c:fe:b5:03:4c:f1:19:5d:9b:27:60:
8a:65:04:f9:9b:90:91:75:de:bf:c1:d9:18:18:f6:
85:7a:d1:49:26:d3:7e:a0:3b:a7:e7:31:86:ae:3c:
33:67:5d:ac:3c:d6:e2:c6:77:c3:26:ad:43:e7:8c:
e6:a5:7b:d4:fc:74:4b:dc:7e:99:a8:a5:8c:0f:ef:
e3:51:9b:e7:42:a7:74:37:b6:e1:d7:27:79:75:c0:
52:d8:79:32:76:53:4c:40:39:78:12:23:3b:55:70:
c6:60:92:a6:9b:94:d1:b5:66:77:26:7e:82:1c:a7:
45:6d:bb:8f:5e:7c:5c:b4:13:aa:45:91:42:0f:e1:
a2:c0:fe:3c:a1:ca:21:4b:4f:b5:70:d4:f5:8a:6f:
d3:72:1f:bc:63:0c:41:ac:5f:65:b0:78:67:65:d4:
f7:05:4c:00:a7:36:ba:50:02:52:cd:38:81:c3:3c:
8e:d0:83:19:e6:08:72:a3:2e:48:7a:ef:c9:8c:50:
dd:21:71:b7:bf:a7:e3:85:7c:0f:2d:25:46:7c:2e:
cd:b1:dd:35:c4:c4:de:cd:8f:5c:80:f5:4a:97:9a:
aa:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:A7:65:D9:C9:29:C2:D5:E7:6F:18:85:35:C5:D6:C1:10:E1:F5:C2
X509v3 Authority Key Identifier:
keyid:23:7C:83:44:7D:17:18:33:80:F4:89:BC:94:6C:8B:9E:30:0F:FB:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/Yqdl2ckpwtXnbxiFNcXWwRDh9cI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.72.0.0-79.72.21.255
79.72.24.0-79.72.35.255
79.72.40.0-79.72.95.255
79.76.0.0-79.76.20.255
79.76.24.0-79.76.63.255
79.76.96.0/19
80.225.64.0/19
80.225.160.0-80.225.179.255
80.225.184.0-80.225.255.255
81.208.160.0/20
81.208.188.0/22
82.70.224.0/20
82.70.248.0/22
84.8.64.0-84.8.81.255
84.8.88.0/23
84.8.96.0-84.8.159.255
84.8.224.0-84.8.235.255
84.8.238.0-84.8.243.255
84.8.248.0/21
84.235.160.0-84.235.193.255
84.235.198.0-84.235.255.255
89.168.0.0/21
89.168.16.0-89.168.127.255
92.4.64.0/19
92.4.128.0-92.4.199.255
92.4.228.0-92.4.233.255
92.4.235.0-92.5.251.255
92.5.254.0/23
130.110.0.0-130.110.29.255
130.110.32.0-130.110.127.255
130.110.192.0/24
130.110.206.0-130.110.216.255
130.110.218.0-130.110.255.255
134.98.64.0/23
134.98.128.0/19
134.98.192.0-134.98.225.255
134.98.248.0/21
141.253.96.0/19
141.253.192.0/19
145.241.96.0/19
145.241.144.0-145.241.255.255
213.35.96.0/19
217.142.128.0-217.142.179.255
217.142.184.0/21
217.142.224.0/19
Signature Algorithm: sha256WithRSAEncryption
4a:de:f8:43:2e:d7:7e:6f:d5:a3:3f:21:99:8a:9a:1c:47:61:
88:d3:bc:1a:e0:4a:fc:da:1a:4a:bf:89:be:4e:c8:a8:50:0f:
6a:22:ea:17:77:66:69:ef:b2:ea:27:f7:81:48:de:e6:f6:57:
a0:d0:2a:39:dc:80:d5:77:3c:d8:32:49:06:5a:56:f9:ef:77:
bd:09:45:a2:f7:d9:72:d2:84:06:c7:f0:15:a3:20:6c:39:2e:
d2:19:18:03:9a:32:d8:8b:fd:89:f7:45:99:61:2e:64:cc:d8:
72:a4:0f:e7:94:7c:03:f9:68:63:32:e4:02:53:b4:ed:cb:51:
cc:a2:f8:98:9d:45:9f:4f:c7:11:db:a1:c4:8f:d8:06:ec:e8:
78:51:44:f6:59:ba:26:2e:ba:d7:d4:c2:4a:48:93:fe:13:3b:
b8:ce:94:2d:75:32:7c:e8:63:e9:f5:cd:24:7a:67:a7:0d:53:
dd:57:4f:78:ba:6f:06:74:58:7d:3b:a7:d0:3e:25:5c:a9:32:
c4:c1:cc:f0:c9:1d:6f:18:06:24:f6:19:73:c7:47:c1:4c:7d:
47:d9:79:ad:ba:6f:14:59:89:2e:82:a8:f6:ac:6b:f9:8e:0b:
3f:ab:c8:d0:4a:64:ea:46:8a:27:1e:53:f0:f9:51:82:5f:a5:
46:0d:1b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:22:05 2026 by rpki-client