This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/YHDU-pC-zbRKi1yy2lYI10JQDAA.roa File: YHDU-pC-zbRKi1yy2lYI10JQDAA.roa (raw, json) Hash identifier: OsdBvz1GDvAQKgzlljDnLEubRDhINwzoL+uxjEaQ6ig= Subject key identifier: 60:70:D4:FA:90:BE:CD:B4:4A:8B:5C:B2:DA:56:08:D7:42:50:0C:00 Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Certificate serial: 019B2CA157C69A4E3196D54955BEB1A00BBC Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/YHDU-pC-zbRKi1yy2lYI10JQDAA.roa Signing time: Wed 17 Dec 2025 14:05:29 +0000 ROA not before: Wed 17 Dec 2025 14:05:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 57344 IP address blocks: 5.104.168.0/23 maxlen: 23 5.104.174.0/24 maxlen: 24 46.253.134.0/24 maxlen: 24 77.76.0.0/24 maxlen: 24 77.76.8.0/24 maxlen: 24 77.76.10.0/24 maxlen: 24 77.76.11.0/24 maxlen: 24 78.128.0.0/24 maxlen: 24 78.128.8.0/24 maxlen: 24 78.128.41.0/24 maxlen: 24 78.128.43.0/24 maxlen: 24 78.128.60.0/24 maxlen: 24 78.128.67.0/24 maxlen: 24 78.128.72.0/24 maxlen: 24 78.128.76.0/24 maxlen: 24 78.128.79.0/24 maxlen: 24 78.128.81.0/24 maxlen: 24 78.128.92.0/24 maxlen: 24 78.128.94.0/24 maxlen: 24 78.128.96.0/24 maxlen: 24 78.128.98.0/24 maxlen: 24 78.128.106.0/24 maxlen: 24 78.128.107.0/24 maxlen: 24 78.128.108.0/23 maxlen: 23 78.142.1.0/24 maxlen: 24 78.142.4.0/23 maxlen: 23 78.142.17.0/24 maxlen: 24 78.142.20.0/24 maxlen: 24 78.142.24.0/24 maxlen: 24 78.142.30.0/24 maxlen: 24 78.142.31.0/24 maxlen: 24 78.142.33.0/24 maxlen: 24 78.142.34.0/24 maxlen: 24 78.142.47.0/24 maxlen: 24 78.142.48.0/24 maxlen: 24 78.142.60.0/24 maxlen: 24 78.142.63.0/24 maxlen: 24 79.124.0.0/24 maxlen: 24 79.124.15.0/24 maxlen: 24 79.124.20.0/23 maxlen: 23 79.124.23.0/24 maxlen: 24 79.124.24.0/22 maxlen: 24 79.124.28.0/24 maxlen: 24 79.124.47.0/24 maxlen: 24 79.124.50.0/24 maxlen: 24 79.124.51.0/24 maxlen: 24 79.124.53.0/24 maxlen: 24 79.124.73.0/24 maxlen: 24 79.124.74.0/24 maxlen: 24 79.124.76.0/24 maxlen: 24 79.124.79.0/24 maxlen: 24 79.124.82.0/24 maxlen: 24 82.118.224.0/24 maxlen: 24 82.118.236.0/24 maxlen: 24 82.118.238.0/24 maxlen: 24 82.118.244.0/24 maxlen: 24 82.118.246.0/23 maxlen: 23 87.246.2.0/24 maxlen: 24 91.148.131.0/24 maxlen: 24 91.148.140.0/24 maxlen: 24 91.148.149.0/24 maxlen: 24 91.148.160.0/24 maxlen: 24 91.148.168.0/24 maxlen: 24 91.148.169.0/24 maxlen: 24 91.148.187.0/24 maxlen: 24 91.191.216.0/23 maxlen: 24 94.72.145.0/24 maxlen: 24 94.72.148.0/22 maxlen: 24 94.72.158.0/24 maxlen: 24 94.72.159.0/24 maxlen: 24 130.185.224.0/24 maxlen: 24 130.185.226.0/24 maxlen: 24 130.185.229.0/24 maxlen: 24 130.185.235.0/24 maxlen: 24 130.185.236.0/24 maxlen: 24 130.185.237.0/24 maxlen: 24 130.185.248.0/24 maxlen: 24 130.185.250.0/24 maxlen: 24 176.241.176.0/23 maxlen: 24 178.132.80.0/24 maxlen: 24 178.132.81.0/24 maxlen: 24 178.132.82.0/23 maxlen: 24 178.132.84.0/23 maxlen: 24 185.148.160.0/22 maxlen: 22 185.148.162.0/24 maxlen: 24 185.197.152.0/22 maxlen: 24 185.232.156.0/23 maxlen: 24 185.232.159.0/24 maxlen: 24 217.174.148.0/23 maxlen: 24 217.174.148.0/24 maxlen: 24 217.174.149.0/24 maxlen: 24 217.174.150.0/24 maxlen: 24 217.174.152.0/23 maxlen: 24 217.174.152.0/24 maxlen: 24 217.174.153.0/24 maxlen: 24 217.174.154.0/24 maxlen: 24 217.174.159.0/24 maxlen: 24 2a01:8740::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 05:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:a1:57:c6:9a:4e:31:96:d5:49:55:be:b1:a0:0b:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Validity Not Before: Dec 17 14:05:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6070d4fa90becdb44a8b5cb2da5608d742500c00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ef:ec:a4:d0:1f:6d:25:75:11:1f:29:a9:71: d1:dd:ac:a9:61:69:55:9b:88:bc:fb:ce:32:4d:44: 83:e6:8a:36:92:aa:d6:88:e3:dd:9b:74:f4:19:51: dd:7a:68:4a:f6:b5:24:a1:4e:1b:1d:32:bd:b1:92: 7a:b1:75:35:5f:ed:e7:17:2d:74:9a:d6:21:e8:51: 2a:ea:29:af:53:70:31:5a:da:ef:bc:28:53:98:e2: 56:3c:3a:33:6d:54:cd:ac:37:95:53:65:73:89:b9: 48:dc:81:28:69:82:61:74:6c:0d:6c:6f:75:38:82: 1a:53:b5:da:6c:71:a1:63:73:b6:9d:fe:eb:e3:e4: f5:2f:64:6c:4c:b9:46:d4:1b:8a:f7:9d:3a:4c:30: 8c:8d:f1:df:08:e5:32:93:04:72:9c:bf:06:c8:2c: 9b:96:2a:1e:3e:36:37:db:91:9f:c4:a7:aa:7f:4f: 59:80:16:e2:c6:dd:9a:84:8e:12:14:07:63:05:bb: a9:4b:f3:fa:af:20:2d:30:05:a0:2a:be:a0:58:b6: c8:de:2f:b3:e6:f3:c5:15:f7:52:c6:ef:f3:38:09: 7b:43:93:74:ad:80:a0:65:cc:7d:14:eb:91:24:f0: 34:81:54:a4:be:44:b6:f2:7b:fe:13:f0:4f:63:6a: af:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:70:D4:FA:90:BE:CD:B4:4A:8B:5C:B2:DA:56:08:D7:42:50:0C:00 X509v3 Authority Key Identifier: keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/YHDU-pC-zbRKi1yy2lYI10JQDAA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.104.168.0/23 5.104.174.0/24 46.253.134.0/24 77.76.0.0/24 77.76.8.0/24 77.76.10.0/23 78.128.0.0/24 78.128.8.0/24 78.128.41.0/24 78.128.43.0/24 78.128.60.0/24 78.128.67.0/24 78.128.72.0/24 78.128.76.0/24 78.128.79.0/24 78.128.81.0/24 78.128.92.0/24 78.128.94.0/24 78.128.96.0/24 78.128.98.0/24 78.128.106.0-78.128.109.255 78.142.1.0/24 78.142.4.0/23 78.142.17.0/24 78.142.20.0/24 78.142.24.0/24 78.142.30.0/23 78.142.33.0-78.142.34.255 78.142.47.0-78.142.48.255 78.142.60.0/24 78.142.63.0/24 79.124.0.0/24 79.124.15.0/24 79.124.20.0/23 79.124.23.0-79.124.28.255 79.124.47.0/24 79.124.50.0/23 79.124.53.0/24 79.124.73.0-79.124.74.255 79.124.76.0/24 79.124.79.0/24 79.124.82.0/24 82.118.224.0/24 82.118.236.0/24 82.118.238.0/24 82.118.244.0/24 82.118.246.0/23 87.246.2.0/24 91.148.131.0/24 91.148.140.0/24 91.148.149.0/24 91.148.160.0/24 91.148.168.0/23 91.148.187.0/24 91.191.216.0/23 94.72.145.0/24 94.72.148.0/22 94.72.158.0/23 130.185.224.0/24 130.185.226.0/24 130.185.229.0/24 130.185.235.0-130.185.237.255 130.185.248.0/24 130.185.250.0/24 176.241.176.0/23 178.132.80.0-178.132.85.255 185.148.160.0/22 185.197.152.0/22 185.232.156.0/23 185.232.159.0/24 217.174.148.0-217.174.150.255 217.174.152.0-217.174.154.255 217.174.159.0/24 IPv6: 2a01:8740::/32 Signature Algorithm: sha256WithRSAEncryption 6c:a7:43:d1:be:0a:01:d6:bf:6b:83:11:bd:78:99:aa:7e:7f: 1c:73:00:97:32:74:87:78:5d:3d:fe:50:79:a6:31:6c:96:14: 61:90:1b:78:49:24:97:5c:77:27:e6:31:15:a8:e2:0a:e6:0c: c5:48:e9:35:14:01:cb:f3:db:be:f2:1d:40:f0:c3:a2:16:8a: fa:4c:7c:92:5f:2c:e0:78:44:57:56:6c:3e:73:82:2d:e9:84: 52:5d:b0:d9:5e:5b:90:49:f6:7a:97:ab:36:16:66:33:2d:fe: 6d:94:2d:a6:38:4d:a3:34:f7:42:b2:e3:4c:38:b5:15:bb:ab: 56:ee:ce:0e:e7:53:47:6f:89:2b:99:6a:8e:e3:b9:2b:57:cc: eb:2a:90:88:41:19:08:ad:e8:ff:3d:5b:75:e4:59:a8:fb:9e: 3b:6b:2f:25:4f:44:17:fb:18:04:7b:d0:7f:aa:c1:c0:25:4e: ee:76:d4:6a:1f:a8:f7:1a:0e:ca:f3:02:8f:e4:2c:e0:c9:7b: 4f:05:bc:e3:05:3b:0c:97:ba:34:8d:d3:7d:1b:c5:f9:f5:4e: fa:73:66:8e:bd:dd:8a:d2:1f:bf:f8:e4:07:c4:2b:13:80:1e: 3c:c5:99:c3:9b:73:7c:e0:f5:fe:84:f3:58:01:4d:05:08:70: 84:5c:02:2c -----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgISAZssoVfGmk4xltVJVb6xoAu8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNWVhYzY0ZWE0ODAyZTY4MjQ2ODZmN2MwZDIwMWYyYzg1 Y2IyYWEwHhcNMjUxMjE3MTQwNTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MDcwZDRmYTkwYmVjZGI0NGE4YjVjYjJkYTU2MDhkNzQyNTAwYzAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+/spNAfbSV1ER8pqXHR3aypYWlV m4i8+84yTUSD5oo2kqrWiOPdm3T0GVHdemhK9rUkoU4bHTK9sZJ6sXU1X+3nFy10 mtYh6FEq6imvU3AxWtrvvChTmOJWPDozbVTNrDeVU2VziblI3IEoaYJhdGwNbG91 OIIaU7XabHGhY3O2nf7r4+T1L2RsTLlG1BuK9506TDCMjfHfCOUykwRynL8GyCyb lioePjY325GfxKeqf09ZgBbixt2ahI4SFAdjBbupS/P6ryAtMAWgKr6gWLbI3i+z 5vPFFfdSxu/zOAl7Q5N0rYCgZcx9FOuRJPA0gVSkvkS28nv+E/BPY2qvIQIDAQAB o4IEGjCCBBYwHQYDVR0OBBYEFGBw1PqQvs20SotcstpWCNdCUAwAMB8GA1UdIwQY MBaAFMNerGTqSALmgkaG98DSAfLIXLKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMt ZGFjYjVmMzU2ZWEzLzEvWUhEVS1wQy16YlJLaTF5eTJsWUkxMEpRREFBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMtZGFjYjVmMzU2ZWEz LzEvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIICLgYIKwYBBQUHAQcBAf8EggIdMIICGTCCAgYEAgABMIIB /gMEAQVoqAMEAAVorgMEAC79hgMEAE1MAAMEAE1MCAMEAU1MCgMEAE6AAAMEAE6A CAMEAE6AKQMEAE6AKwMEAE6APAMEAE6AQwMEAE6ASAMEAE6ATAMEAE6ATwMEAE6A UQMEAE6AXAMEAE6AXgMEAE6AYAMEAE6AYjAMAwQBToBqAwQBToBsAwQATo4BAwQB To4EAwQATo4RAwQATo4UAwQATo4YAwQBTo4eMAwDBABOjiEDBABOjiIwDAMEAE6O LwMEAE6OMAMEAE6OPAMEAE6OPwMEAE98AAMEAE98DwMEAU98FDAMAwQAT3wXAwQA T3wcAwQAT3wvAwQBT3wyAwQAT3w1MAwDBABPfEkDBABPfEoDBABPfEwDBABPfE8D BABPfFIDBABSduADBABSduwDBABSdu4DBABSdvQDBAFSdvYDBABX9gIDBABblIMD BABblIwDBABblJUDBABblKADBAFblKgDBABblLsDBAFbv9gDBABeSJEDBAJeSJQD BAFeSJ4DBACCueADBACCueIDBACCueUwDAMEAIK56wMEAYK57AMEAIK5+AMEAIK5 +gMEAbDxsDAMAwQEsoRQAwQBsoRUAwQCuZSgAwQCucWYAwQBueicAwQAueifMAwD BALZrpQDBADZrpYwDAMEA9mumAMEANmumgMEANmunzANBAIAAjAHAwUAKgGHQDAN BgkqhkiG9w0BAQsFAAOCAQEAbKdD0b4KAda/a4MRvXiZqn5/HHMAlzJ0h3hdPf5Q eaYxbJYUYZAbeEkkl1x3J+YxFajiCuYMxUjpNRQBy/PbvvIdQPDDohaK+kx8kl8s 4HhEV1ZsPnOCLemEUl2w2V5bkEn2eperNhZmMy3+bZQtpjhNozT3QrLjTDi1Fbur Vu7ODudTR2+JK5lqjuO5K1fM6yqQiEEZCK3o/z1bdeRZqPueO2svJU9EF/sYBHvQ f6rBwCVO7nbUah+o9xoOyvMCj+Qs4Ml7TwW84wU7DJe6NI3TfRvF+fVO+nNmjr3d itIfv/jkB8QrE4AePMWZw5tzfOD1/oTzWAFNBQhwhFwCLA== -----END CERTIFICATE-----Generated at Sat Dec 20 11:47:21 2025 by rpki-client