This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/yNDcn7_YAgDZZm2i8gFSSGcDmD8.roa File: yNDcn7_YAgDZZm2i8gFSSGcDmD8.roa (raw, json) Hash identifier: lsW80dY6/ypLPll75wSzW6y40nqxhinJEK5/rFAqHvQ= Subject key identifier: C8:D0:DC:9F:BF:D8:02:00:D9:66:6D:A2:F2:01:52:48:67:03:98:3F Certificate issuer: /CN=aebf394e2f1b251c88d988a87161084580786ef5 Certificate serial: 019AFDF5B509B064E762183F3B1F93EF4C71 Authority key identifier: AE:BF:39:4E:2F:1B:25:1C:88:D9:88:A8:71:61:08:45:80:78:6E:F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/yNDcn7_YAgDZZm2i8gFSSGcDmD8.roa Signing time: Mon 08 Dec 2025 12:35:29 +0000 ROA not before: Mon 08 Dec 2025 12:35:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 16347 IP address blocks: 5.182.252.0/22 maxlen: 24 37.18.160.0/20 maxlen: 24 37.58.128.0/17 maxlen: 24 37.157.8.0/23 maxlen: 24 37.157.10.0/24 maxlen: 24 37.157.12.0/22 maxlen: 24 37.157.60.0/22 maxlen: 24 45.142.172.0/22 maxlen: 24 45.145.124.0/22 maxlen: 24 46.20.160.0/20 maxlen: 24 62.102.224.0/19 maxlen: 24 62.244.70.0/23 maxlen: 24 62.244.72.0/22 maxlen: 24 62.244.80.0/23 maxlen: 24 62.244.90.0/23 maxlen: 24 62.244.92.0/23 maxlen: 24 79.98.96.0/21 maxlen: 24 81.22.216.0/21 maxlen: 24 89.38.200.0/21 maxlen: 24 91.103.232.0/21 maxlen: 24 91.205.156.0/24 maxlen: 24 91.206.156.0/23 maxlen: 24 91.217.94.0/23 maxlen: 24 91.229.230.0/23 maxlen: 24 92.61.72.0/21 maxlen: 24 93.113.136.0/21 maxlen: 24 94.127.8.0/21 maxlen: 24 103.73.172.0/22 maxlen: 24 103.77.32.0/22 maxlen: 24 103.229.36.0/23 maxlen: 24 103.232.172.0/22 maxlen: 24 109.69.192.0/21 maxlen: 24 109.237.240.0/20 maxlen: 24 128.127.128.0/20 maxlen: 24 146.247.88.0/21 maxlen: 24 149.255.136.0/21 maxlen: 24 178.249.160.0/21 maxlen: 24 185.15.128.0/22 maxlen: 24 185.42.132.0/22 maxlen: 24 185.49.120.0/23 maxlen: 24 185.49.122.0/24 maxlen: 24 185.65.224.0/22 maxlen: 24 185.67.88.0/22 maxlen: 24 185.79.148.0/22 maxlen: 24 185.90.96.0/22 maxlen: 24 185.95.120.0/22 maxlen: 24 185.138.104.0/22 maxlen: 24 185.149.8.0/22 maxlen: 24 185.172.16.0/22 maxlen: 24 185.196.248.0/22 maxlen: 24 185.204.140.0/22 maxlen: 24 185.208.248.0/22 maxlen: 24 185.247.248.0/22 maxlen: 24 188.66.56.0/22 maxlen: 24 193.3.24.0/24 maxlen: 24 193.27.194.0/23 maxlen: 24 193.41.95.0/24 maxlen: 24 193.47.139.0/24 maxlen: 24 193.84.100.0/24 maxlen: 24 193.108.197.0/24 maxlen: 24 193.222.142.0/23 maxlen: 24 193.222.188.0/23 maxlen: 24 194.177.32.0/19 maxlen: 24 195.214.240.0/21 maxlen: 24 212.51.160.0/19 maxlen: 24 213.108.64.0/21 maxlen: 24 213.151.166.0/24 maxlen: 24 213.151.168.0/23 maxlen: 24 213.151.171.0/24 maxlen: 24 213.151.172.0/23 maxlen: 24 213.151.174.0/24 maxlen: 24 213.151.175.0/24 maxlen: 24 2a00:bc80::/32 maxlen: 32 2a01:6d8::/32 maxlen: 32 2a01:728::/29 maxlen: 48 2a03:4c00::/29 maxlen: 48 2a03:bf40::/32 maxlen: 32 2a05:df00::/29 maxlen: 29 2a0d:4240::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fd:f5:b5:09:b0:64:e7:62:18:3f:3b:1f:93:ef:4c:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aebf394e2f1b251c88d988a87161084580786ef5 Validity Not Before: Dec 8 12:35:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c8d0dc9fbfd80200d9666da2f20152486703983f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:7f:f9:3d:cd:22:79:bb:f8:48:95:8a:ee:59: f7:80:fc:82:b8:30:c4:fd:52:8c:85:8e:fa:b8:c1: 19:3f:94:a4:f7:c9:f3:db:95:e4:21:97:88:89:46: 4b:3e:d8:8e:03:be:62:30:3f:e4:b9:e1:62:23:74: e6:4d:0c:38:a9:b5:33:e4:9a:03:77:1c:49:4c:56: 98:ac:f6:49:af:75:9d:95:b5:98:d5:ad:54:06:15: 67:9b:ec:36:7d:fe:7b:13:10:fc:1f:d9:b5:f3:f5: cb:8a:de:e0:19:d3:df:b2:f0:76:bf:36:4a:6e:ff: 31:eb:0a:94:02:d5:73:94:93:83:4a:17:40:16:b1: 02:a4:e3:21:b5:1a:c3:ba:34:8c:8c:6b:ad:9d:25: 0c:73:bc:a8:e5:e8:f0:32:ab:1f:4d:d5:e3:41:bb: 04:fe:ca:12:ab:79:ad:b2:b4:20:dc:df:ee:5e:82: ce:91:a3:99:1e:02:39:63:9c:4f:91:a9:07:47:53: 59:0b:cf:9f:c5:28:0f:5d:34:d4:67:1c:aa:39:6a: ff:5f:ca:53:c4:75:11:a3:fd:98:75:33:96:ec:1f: 98:e5:63:ce:55:41:ae:f7:74:b6:4e:fb:3b:4f:13: d2:f5:d0:de:60:8f:bb:28:1c:6d:8d:58:c0:21:67: 32:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:D0:DC:9F:BF:D8:02:00:D9:66:6D:A2:F2:01:52:48:67:03:98:3F X509v3 Authority Key Identifier: keyid:AE:BF:39:4E:2F:1B:25:1C:88:D9:88:A8:71:61:08:45:80:78:6E:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/yNDcn7_YAgDZZm2i8gFSSGcDmD8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.182.252.0/22 37.18.160.0/20 37.58.128.0/17 37.157.8.0-37.157.10.255 37.157.12.0/22 37.157.60.0/22 45.142.172.0/22 45.145.124.0/22 46.20.160.0/20 62.102.224.0/19 62.244.70.0-62.244.75.255 62.244.80.0/23 62.244.90.0-62.244.93.255 79.98.96.0/21 81.22.216.0/21 89.38.200.0/21 91.103.232.0/21 91.205.156.0/24 91.206.156.0/23 91.217.94.0/23 91.229.230.0/23 92.61.72.0/21 93.113.136.0/21 94.127.8.0/21 103.73.172.0/22 103.77.32.0/22 103.229.36.0/23 103.232.172.0/22 109.69.192.0/21 109.237.240.0/20 128.127.128.0/20 146.247.88.0/21 149.255.136.0/21 178.249.160.0/21 185.15.128.0/22 185.42.132.0/22 185.49.120.0-185.49.122.255 185.65.224.0/22 185.67.88.0/22 185.79.148.0/22 185.90.96.0/22 185.95.120.0/22 185.138.104.0/22 185.149.8.0/22 185.172.16.0/22 185.196.248.0/22 185.204.140.0/22 185.208.248.0/22 185.247.248.0/22 188.66.56.0/22 193.3.24.0/24 193.27.194.0/23 193.41.95.0/24 193.47.139.0/24 193.84.100.0/24 193.108.197.0/24 193.222.142.0/23 193.222.188.0/23 194.177.32.0/19 195.214.240.0/21 212.51.160.0/19 213.108.64.0/21 213.151.166.0/24 213.151.168.0/23 213.151.171.0-213.151.175.255 IPv6: 2a00:bc80::/32 2a01:6d8::/32 2a01:728::/29 2a03:4c00::/29 2a03:bf40::/32 2a05:df00::/29 2a0d:4240::/29 Signature Algorithm: sha256WithRSAEncryption 54:67:7e:98:25:8a:61:02:81:01:49:18:73:d1:7a:c8:16:39: f5:bf:e0:aa:00:93:26:73:02:84:f5:43:d8:af:d1:bb:0d:09: 67:c7:6a:2b:51:93:92:80:3b:bd:8f:ff:ed:e0:80:65:bb:6d: d8:95:41:d8:55:e7:e0:d0:a8:29:c5:d7:72:d4:90:b7:03:12: 4d:3f:f4:03:89:75:63:e9:1e:97:1d:c6:91:04:cc:08:a4:ac: 99:ca:9b:70:89:d2:2e:66:c5:5b:7f:1b:87:00:01:4e:12:b3: cd:2a:7a:ff:34:4f:60:d7:a0:6d:cc:a4:5a:79:cf:09:50:aa: 71:cf:a8:91:61:20:1e:f4:b7:d3:46:6d:5c:e0:13:75:fc:8d: 22:bd:1b:e1:48:24:8f:54:52:44:dc:8b:74:96:20:5d:04:78: d6:97:d3:d3:e1:03:b9:90:3b:54:aa:92:46:0f:e6:15:e9:eb: 21:c7:ec:84:8f:4f:91:90:82:12:e8:1c:7e:b6:b8:92:fe:54: b3:79:33:18:4e:fe:b2:9c:91:06:2f:54:b8:de:3f:2d:c7:96: 37:48:f7:fd:91:af:4b:99:bd:20:7c:2a:57:16:08:fa:96:87: 61:e2:54:69:c6:e8:b9:95:05:00:15:56:89:08:15:2d:55:20: 21:83:8c:1f -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgISAZr99bUJsGTnYhg/Ox+T70xxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlYmYzOTRlMmYxYjI1MWM4OGQ5ODhhODcxNjEwODQ1ODA3 ODZlZjUwHhcNMjUxMjA4MTIzNTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOGQwZGM5ZmJmZDgwMjAwZDk2NjZkYTJmMjAxNTI0ODY3MDM5ODNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhH/5Pc0iebv4SJWK7ln3gPyCuDDE /VKMhY76uMEZP5Sk98nz25XkIZeIiUZLPtiOA75iMD/kueFiI3TmTQw4qbUz5JoD dxxJTFaYrPZJr3WdlbWY1a1UBhVnm+w2ff57ExD8H9m18/XLit7gGdPfsvB2vzZK bv8x6wqUAtVzlJODShdAFrECpOMhtRrDujSMjGutnSUMc7yo5ejwMqsfTdXjQbsE /soSq3mtsrQg3N/uXoLOkaOZHgI5Y5xPkakHR1NZC8+fxSgPXTTUZxyqOWr/X8pT xHURo/2YdTOW7B+Y5WPOVUGu93S2Tvs7TxPS9dDeYI+7KBxtjVjAIWcywQIDAQAB o4ID9DCCA/AwHQYDVR0OBBYEFMjQ3J+/2AIA2WZtovIBUkhnA5g/MB8GA1UdIwQY MBaAFK6/OU4vGyUciNmIqHFhCEWAeG71MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnI4NVRpOGJKUnlJMllpb2NXRUlSWUI0YnZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS80MDQ5OGUtZDFjMC00ODRjLWFiY2It NjFlN2Y0MGQ1ZGQ2LzEveU5EY243X1lBZ0RaWm0yaThnRlNTR2NEbUQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS80MDQ5OGUtZDFjMC00ODRjLWFiY2ItNjFlN2Y0MGQ1ZGQ2 LzEvcnI4NVRpOGJKUnlJMllpb2NXRUlSWUI0YnZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIICCAYIKwYBBQUHAQcBAf8EggH3MIIB8zCCAbYEAgABMIIB rgMEAgW2/AMEBCUSoAMEByU6gDAMAwQDJZ0IAwQAJZ0KAwQCJZ0MAwQCJZ08AwQC LY6sAwQCLZF8AwQELhSgAwQFPmbgMAwDBAE+9EYDBAI+9EgDBAE+9FAwDAMEAT70 WgMEAT70XAMEA09iYAMEA1EW2AMEA1kmyAMEA1tn6AMEAFvNnAMEAVvOnAMEAVvZ XgMEAVvl5gMEA1w9SAMEA11xiAMEA15/CAMEAmdJrAMEAmdNIAMEAWflJAMEAmfo rAMEA21FwAMEBG3t8AMEBIB/gAMEA5L3WAMEA5X/iAMEA7L5oAMEArkPgAMEArkq hDAMAwQDuTF4AwQAuTF6AwQCuUHgAwQCuUNYAwQCuU+UAwQCuVpgAwQCuV94AwQC uYpoAwQCuZUIAwQCuawQAwQCucT4AwQCucyMAwQCudD4AwQCuff4AwQCvEI4AwQA wQMYAwQBwRvCAwQAwSlfAwQAwS+LAwQAwVRkAwQAwWzFAwQBwd6OAwQBwd68AwQF wrEgAwQDw9bwAwQF1DOgAwQD1WxAAwQA1ZemAwQB1ZeoMAwDBADVl6sDBATVl6Aw NwQCAAIwMQMFACoAvIADBQAqAQbYAwUDKgEHKAMFAyoDTAADBQAqA79AAwUDKgXf AAMFAyoNQkAwDQYJKoZIhvcNAQELBQADggEBAFRnfpglimECgQFJGHPResgWOfW/ 4KoAkyZzAoT1Q9iv0bsNCWfHaitRk5KAO72P/+3ggGW7bdiVQdhV5+DQqCnF13LU kLcDEk0/9AOJdWPpHpcdxpEEzAikrJnKm3CJ0i5mxVt/G4cAAU4Ss80qev80T2DX oG3MpFp5zwlQqnHPqJFhIB70t9NGbVzgE3X8jSK9G+FIJI9UUkTci3SWIF0EeNaX 09PhA7mQO1SqkkYP5hXp6yHH7ISPT5GQghLoHH62uJL+VLN5MxhO/rKckQYvVLje Py3HljdI9/2Rr0uZvSB8KlcWCPqWh2HiVGnG6LmVBQAVVokIFS1VICGDjB8= -----END CERTIFICATE-----Generated at Sat Dec 20 16:07:23 2025 by rpki-client