This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/Y1p8iN7vXVc5hkWklA-jsy2oDOs.roa File: Y1p8iN7vXVc5hkWklA-jsy2oDOs.roa (raw, json) Hash identifier: TAYuH8YzwKdTZbEvh6nabM+xwxNAutYkky5c5hoWXrE= Subject key identifier: 63:5A:7C:88:DE:EF:5D:57:39:86:45:A4:94:0F:A3:B3:2D:A8:0C:EB Certificate issuer: /CN=d434f1686102876c6216bcea28a5e502ec0d7b6b Certificate serial: 019AEE2BAD6131F2A971447C3C2CADC39050 Authority key identifier: D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/Y1p8iN7vXVc5hkWklA-jsy2oDOs.roa Signing time: Fri 05 Dec 2025 11:00:31 +0000 ROA not before: Fri 05 Dec 2025 11:00:31 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 12430 IP address blocks: 2.154.0.0/15 maxlen: 16 2.154.0.0/16 maxlen: 16 2.154.192.0/18 maxlen: 18 2.155.0.0/16 maxlen: 16 5.40.0.0/16 maxlen: 16 62.42.0.0/15 maxlen: 16 62.57.0.0/16 maxlen: 16 62.81.0.0/16 maxlen: 24 62.82.0.0/15 maxlen: 16 62.100.96.0/19 maxlen: 19 62.117.128.0/17 maxlen: 17 62.174.0.0/15 maxlen: 19 80.224.0.0/16 maxlen: 16 81.60.0.0/15 maxlen: 18 81.184.0.0/16 maxlen: 16 81.202.0.0/16 maxlen: 16 82.159.0.0/16 maxlen: 16 82.213.128.0/18 maxlen: 18 83.173.128.0/18 maxlen: 18 84.120.0.0/13 maxlen: 19 84.127.229.0/24 maxlen: 24 85.219.0.0/17 maxlen: 17 85.251.0.0/16 maxlen: 17 89.140.0.0/16 maxlen: 16 89.141.0.0/16 maxlen: 16 95.39.0.0/16 maxlen: 19 185.128.128.0/22 maxlen: 24 194.106.0.0/19 maxlen: 19 194.140.128.0/18 maxlen: 18 194.149.192.0/19 maxlen: 19 212.21.224.0/19 maxlen: 19 212.40.224.0/19 maxlen: 19 212.40.224.0/24 maxlen: 24 212.78.128.0/19 maxlen: 19 212.79.128.0/19 maxlen: 19 212.95.192.0/19 maxlen: 19 212.97.160.0/19 maxlen: 19 212.183.192.0/18 maxlen: 18 213.37.0.0/16 maxlen: 16 213.201.0.0/17 maxlen: 17 213.227.0.0/18 maxlen: 18 213.231.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.mft rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ee:2b:ad:61:31:f2:a9:71:44:7c:3c:2c:ad:c3:90:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d434f1686102876c6216bcea28a5e502ec0d7b6b Validity Not Before: Dec 5 11:00:31 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=635a7c88deef5d57398645a4940fa3b32da80ceb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:cc:a9:7a:43:d5:f3:5a:ed:0e:1d:ca:87:90: 44:1c:0b:60:7e:df:cf:cf:07:59:5f:1b:b3:79:20: d5:85:7a:8c:32:3f:e1:ab:cc:36:fd:29:5d:ea:05: d1:9a:c5:c9:90:9e:64:97:d2:d9:85:13:e0:67:eb: ff:4d:f5:e4:e4:4c:b6:52:93:93:d4:36:0a:c8:22: 8a:5d:bb:10:66:4d:b8:cd:86:6d:de:c7:d8:ca:62: 2c:e9:df:e2:be:be:ea:4a:61:cc:40:ca:0c:9a:f6: f5:37:10:61:b1:15:6e:7c:9b:b2:4d:b2:97:05:a3: b3:7a:36:ef:ea:58:85:6e:8f:3d:f2:53:5b:ce:7e: 70:3f:f7:0d:da:4b:ef:fb:c4:63:5e:1f:54:49:ea: 32:3b:20:a6:c5:88:81:9c:0a:36:f2:a2:b4:b8:9b: 5d:59:7b:0b:68:ff:9f:3e:87:ba:94:1d:7d:fd:25: df:c4:05:34:7a:57:e8:4b:77:41:2a:4f:5d:ee:f8: d2:d6:2a:f0:dd:e7:55:90:03:c3:7d:f4:94:09:36: 68:08:d5:d0:2a:c3:19:fe:98:e6:97:d2:eb:e7:10: e7:11:19:8c:18:bb:e1:f9:e4:ac:a6:4a:4f:8d:54: 37:ce:b3:39:85:7f:93:57:0b:ae:dc:4a:62:cd:7d: 49:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:5A:7C:88:DE:EF:5D:57:39:86:45:A4:94:0F:A3:B3:2D:A8:0C:EB X509v3 Authority Key Identifier: keyid:D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/Y1p8iN7vXVc5hkWklA-jsy2oDOs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.154.0.0/15 5.40.0.0/16 62.42.0.0/15 62.57.0.0/16 62.81.0.0-62.83.255.255 62.100.96.0/19 62.117.128.0/17 62.174.0.0/15 80.224.0.0/16 81.60.0.0/15 81.184.0.0/16 81.202.0.0/16 82.159.0.0/16 82.213.128.0/18 83.173.128.0/18 84.120.0.0/13 85.219.0.0/17 85.251.0.0/16 89.140.0.0/15 95.39.0.0/16 185.128.128.0/22 194.106.0.0/19 194.140.128.0/18 194.149.192.0/19 212.21.224.0/19 212.40.224.0/19 212.78.128.0/19 212.79.128.0/19 212.95.192.0/19 212.97.160.0/19 212.183.192.0/18 213.37.0.0/16 213.201.0.0/17 213.227.0.0/18 213.231.64.0/18 Signature Algorithm: sha256WithRSAEncryption 0b:1a:ae:ee:00:12:cd:e6:38:5a:41:99:fa:10:14:c3:61:15: 9c:f0:25:28:cd:da:e6:86:b4:6f:9e:d2:ea:20:30:57:70:95: a7:6e:7d:c9:3d:6c:55:3c:25:3e:42:e1:da:80:33:e7:00:7d: c7:3f:7f:92:b1:1f:28:17:67:ee:f1:44:0f:85:63:ae:4d:a2: f9:02:6f:b6:e9:4a:3c:bb:45:aa:62:2e:d7:7b:67:5d:49:08: a2:b1:5a:35:7f:e1:3d:d0:74:3b:8b:fb:02:dc:21:56:ee:d0: 38:ec:9e:ac:fe:94:3c:4c:c7:06:f9:22:2d:d2:9e:af:b4:99: ce:e5:b7:d8:b4:8b:97:3d:dc:d1:2d:9f:41:8e:8f:5e:71:53: 31:8b:e3:cb:3a:cf:ab:df:79:94:4f:09:19:8c:2c:24:9c:d9: 0c:e4:f9:44:dc:8c:87:c8:0b:12:5d:f9:f2:96:2f:b0:87:7e: 34:1f:a4:d2:71:84:39:10:a7:1a:1e:dd:a3:3c:11:46:23:2a: 45:39:f8:21:69:ca:2b:56:4c:69:df:4b:07:4d:bd:63:31:ca: b9:44:3e:eb:4f:52:18:a2:ca:e5:84:a5:45:80:13:94:f6:68: 97:44:9b:6d:27:04:9c:5a:ca:6d:2f:6b:67:31:97:a8:ff:31: d9:3d:f8:40 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgISAZruK61hMfKpcUR8PCytw5BQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0MzRmMTY4NjEwMjg3NmM2MjE2YmNlYTI4YTVlNTAyZWMw ZDdiNmIwHhcNMjUxMjA1MTEwMDMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MzVhN2M4OGRlZWY1ZDU3Mzk4NjQ1YTQ5NDBmYTNiMzJkYTgwY2ViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcypekPV81rtDh3Kh5BEHAtgft/P zwdZXxuzeSDVhXqMMj/hq8w2/Sld6gXRmsXJkJ5kl9LZhRPgZ+v/TfXk5Ey2UpOT 1DYKyCKKXbsQZk24zYZt3sfYymIs6d/ivr7qSmHMQMoMmvb1NxBhsRVufJuyTbKX BaOzejbv6liFbo898lNbzn5wP/cN2kvv+8RjXh9USeoyOyCmxYiBnAo28qK0uJtd WXsLaP+fPoe6lB19/SXfxAU0elfoS3dBKk9d7vjS1irw3edVkAPDffSUCTZoCNXQ KsMZ/pjml9Lr5xDnERmMGLvh+eSspkpPjVQ3zrM5hX+TVwuu3EpizX1JxwIDAQAB o4IC0TCCAs0wHQYDVR0OBBYEFGNafIje711XOYZFpJQPo7MtqAzrMB8GA1UdIwQY MBaAFNQ08WhhAodsYha86iil5QLsDXtrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMURUeGFHRUNoMnhpRnJ6cUtLWGxBdXdOZTJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC83MjZiYjQtNWQ4Ny00MDJkLTkxY2Ut NTcxMmQ5NWFlNjM4LzEvWTFwOGlON3ZYVmM1aGtXa2xBLWpzeTJvRE9zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC83MjZiYjQtNWQ4Ny00MDJkLTkxY2UtNTcxMmQ5NWFlNjM4 LzEvMURUeGFHRUNoMnhpRnJ6cUtLWGxBdXdOZTJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHmBggrBgEFBQcBBwEB/wSB1jCB0zCB0AQCAAEwgckDAwEC mgMDAAUoAwMBPioDAwA+OTAKAwMAPlEDAwI+UAMEBT5kYAMEBz51gAMDAT6uAwMA UOADAwFRPAMDAFG4AwMAUcoDAwBSnwMEBlLVgAMEBlOtgAMDA1R4AwQHVdsAAwMA VfsDAwFZjAMDAF8nAwQCuYCAAwQFwmoAAwQGwoyAAwQFwpXAAwQF1BXgAwQF1Cjg AwQF1E6AAwQF1E+AAwQF1F/AAwQF1GGgAwQG1LfAAwMA1SUDBAfVyQADBAbV4wAD BAbV50AwDQYJKoZIhvcNAQELBQADggEBAAsaru4AEs3mOFpBmfoQFMNhFZzwJSjN 2uaGtG+e0uogMFdwladufck9bFU8JT5C4dqAM+cAfcc/f5KxHygXZ+7xRA+FY65N ovkCb7bpSjy7RapiLtd7Z11JCKKxWjV/4T3QdDuL+wLcIVbu0Djsnqz+lDxMxwb5 Ii3Snq+0mc7lt9i0i5c93NEtn0GOj15xUzGL48s6z6vfeZRPCRmMLCSc2Qzk+UTc jIfICxJd+fKWL7CHfjQfpNJxhDkQpxoe3aM8EUYjKkU5+CFpyitWTGnfSwdNvWMx yrlEPutPUhiiyuWEpUWAE5T2aJdEm20nBJxaym0va2cxl6j/Mdk9+EA= -----END CERTIFICATE-----Generated at Sat Dec 6 08:55:00 2025 by rpki-client