This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/yt6CFw-V3U5aoCOn_JcMCos7lko.roa File: yt6CFw-V3U5aoCOn_JcMCos7lko.roa (raw, json) Hash identifier: 4dGn41RlM/rSdPQpB3kMbUo9n8C7fTI4afh2+uHcN18= Subject key identifier: CA:DE:82:17:0F:95:DD:4E:5A:A0:23:A7:FC:97:0C:0A:8B:3B:96:4A Certificate issuer: /CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7 Certificate serial: 019B2F2E1BDCAFACF5FCEAF77B7D76BD2B79 Authority key identifier: E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/yt6CFw-V3U5aoCOn_JcMCos7lko.roa Signing time: Thu 18 Dec 2025 01:58:29 +0000 ROA not before: Thu 18 Dec 2025 01:58:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 8400 IP address blocks: 5.154.225.0/24 maxlen: 24 31.14.33.0/24 maxlen: 24 37.153.174.0/24 maxlen: 24 37.153.175.0/24 maxlen: 24 46.17.120.0/21 maxlen: 21 46.235.96.0/21 maxlen: 21 62.101.128.0/20 maxlen: 20 62.240.24.0/21 maxlen: 21 77.46.128.0/17 maxlen: 17 79.101.0.0/16 maxlen: 16 79.101.0.0/21 maxlen: 21 79.101.21.0/24 maxlen: 24 87.250.32.0/19 maxlen: 19 89.34.2.0/24 maxlen: 24 89.39.144.0/23 maxlen: 23 89.42.12.0/24 maxlen: 24 89.46.126.0/23 maxlen: 23 89.47.40.0/23 maxlen: 23 91.150.64.0/18 maxlen: 18 91.150.64.0/23 maxlen: 23 91.150.66.0/24 maxlen: 24 91.150.91.0/24 maxlen: 24 92.60.224.0/24 maxlen: 24 92.60.225.0/24 maxlen: 24 92.60.226.0/24 maxlen: 24 92.60.227.0/24 maxlen: 24 92.60.228.0/24 maxlen: 24 92.60.229.0/24 maxlen: 24 92.60.230.0/24 maxlen: 24 92.60.231.0/24 maxlen: 24 92.60.232.0/24 maxlen: 24 92.60.233.0/24 maxlen: 24 92.60.234.0/23 maxlen: 23 92.60.236.0/24 maxlen: 24 92.60.237.0/24 maxlen: 24 92.60.238.0/24 maxlen: 24 92.60.239.0/24 maxlen: 24 92.244.128.0/19 maxlen: 19 93.86.0.0/15 maxlen: 15 93.86.0.0/16 maxlen: 16 93.87.0.0/16 maxlen: 16 93.87.38.0/24 maxlen: 24 93.87.39.0/24 maxlen: 24 93.87.50.0/24 maxlen: 24 93.87.58.0/24 maxlen: 24 93.113.250.0/24 maxlen: 24 93.113.251.0/24 maxlen: 24 94.228.224.0/22 maxlen: 22 94.228.229.0/24 maxlen: 24 94.228.230.0/24 maxlen: 24 94.228.231.0/24 maxlen: 24 94.228.232.0/23 maxlen: 23 94.228.234.0/24 maxlen: 24 94.228.235.0/24 maxlen: 24 94.228.236.0/24 maxlen: 24 94.228.237.0/24 maxlen: 24 94.228.238.0/23 maxlen: 23 109.72.48.0/20 maxlen: 20 109.92.0.0/15 maxlen: 15 109.94.228.0/22 maxlen: 22 109.94.232.0/21 maxlen: 21 109.122.64.0/18 maxlen: 24 109.122.77.0/24 maxlen: 24 109.198.0.0/19 maxlen: 19 176.67.192.0/21 maxlen: 21 176.67.200.0/23 maxlen: 23 176.67.202.0/23 maxlen: 23 176.67.204.0/24 maxlen: 24 176.67.205.0/24 maxlen: 24 176.67.206.0/23 maxlen: 23 176.67.208.0/23 maxlen: 23 176.67.210.0/24 maxlen: 24 176.67.211.0/24 maxlen: 24 176.67.212.0/23 maxlen: 23 176.67.214.0/24 maxlen: 24 176.67.215.0/24 maxlen: 24 176.67.216.0/24 maxlen: 24 176.67.217.0/24 maxlen: 24 176.67.218.0/24 maxlen: 24 176.67.219.0/24 maxlen: 24 176.67.220.0/24 maxlen: 24 176.67.221.0/24 maxlen: 24 176.67.222.0/24 maxlen: 24 176.67.223.0/24 maxlen: 24 178.17.16.0/21 maxlen: 21 178.17.24.0/22 maxlen: 22 178.17.28.0/23 maxlen: 23 178.17.30.0/24 maxlen: 24 178.17.31.0/24 maxlen: 24 178.79.0.0/18 maxlen: 18 178.79.16.0/23 maxlen: 23 178.220.0.0/15 maxlen: 15 178.222.0.0/16 maxlen: 16 178.223.0.0/17 maxlen: 17 178.223.128.0/18 maxlen: 18 178.223.192.0/19 maxlen: 19 178.237.208.0/20 maxlen: 20 178.250.136.0/21 maxlen: 21 185.10.140.0/22 maxlen: 22 185.26.172.0/22 maxlen: 22 185.27.128.0/24 maxlen: 24 185.27.129.0/24 maxlen: 24 185.27.130.0/23 maxlen: 23 185.34.92.0/22 maxlen: 22 185.36.255.0/24 maxlen: 24 185.71.88.0/22 maxlen: 22 185.103.136.0/22 maxlen: 22 185.112.20.0/22 maxlen: 22 185.157.104.0/22 maxlen: 22 185.179.136.0/22 maxlen: 22 185.190.152.0/22 maxlen: 22 188.215.30.0/24 maxlen: 24 188.240.88.0/24 maxlen: 24 188.240.200.0/24 maxlen: 24 188.240.201.0/24 maxlen: 24 195.178.32.0/19 maxlen: 19 195.252.82.0/24 maxlen: 24 195.252.88.0/24 maxlen: 24 195.252.92.0/22 maxlen: 22 212.62.59.0/24 maxlen: 24 212.200.0.0/16 maxlen: 16 212.200.0.0/17 maxlen: 17 212.200.0.0/21 maxlen: 21 212.200.8.0/22 maxlen: 22 212.200.12.0/23 maxlen: 23 212.200.45.0/24 maxlen: 24 212.200.50.0/24 maxlen: 24 212.200.51.0/24 maxlen: 24 212.200.52.0/24 maxlen: 24 212.200.123.0/24 maxlen: 24 212.200.128.0/17 maxlen: 17 212.200.128.0/18 maxlen: 18 212.200.132.0/24 maxlen: 24 212.200.192.0/19 maxlen: 19 212.200.224.0/24 maxlen: 24 212.200.225.0/24 maxlen: 24 212.200.226.0/23 maxlen: 23 212.200.228.0/22 maxlen: 22 212.200.232.0/21 maxlen: 21 212.200.240.0/20 maxlen: 20 213.196.96.0/20 maxlen: 20 2a00:e90::/32 maxlen: 32 2a00:8720::/32 maxlen: 32 2a01:b800::/32 maxlen: 32 2a02:61a0::/32 maxlen: 32 2a03:fc40::/32 maxlen: 32 2a04:1dc0::/29 maxlen: 29 2a06:5b00::/29 maxlen: 29 2a06:63c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.mft rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:2e:1b:dc:af:ac:f5:fc:ea:f7:7b:7d:76:bd:2b:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7 Validity Not Before: Dec 18 01:58:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=cade82170f95dd4e5aa023a7fc970c0a8b3b964a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:e4:2b:42:d0:96:11:3a:0c:4e:f4:a2:9a:c6: 53:fb:6d:8b:66:ae:a3:4a:25:ef:f5:30:d0:1f:58: 2f:d3:ab:05:11:6e:3e:48:4e:a5:ad:ad:c2:3e:a8: 98:2d:33:fd:20:a9:f4:a1:86:be:c3:cf:93:e1:72: 56:6f:cd:40:71:5c:ca:34:00:b8:26:b5:b6:53:b4: 38:24:e6:a4:8c:9a:66:e1:31:7b:91:02:85:6b:09: 93:3b:76:7d:ba:73:b3:05:f5:d8:d9:30:3b:0f:f0: 43:88:a3:e8:0e:32:de:bf:dd:fc:cf:55:7e:9a:c2: e3:87:a9:b9:b2:76:9e:ea:33:5c:fe:37:78:e4:e6: 44:51:be:24:f6:97:c8:0e:38:7e:e7:fc:fa:11:94: 03:20:39:ff:9b:30:6e:36:99:74:ef:cb:63:95:67: 53:f4:47:60:0c:73:35:25:86:43:96:c4:99:eb:02: e5:2f:8e:e6:9b:af:da:a8:14:65:cf:11:14:49:56: f2:ce:f7:43:e7:fc:fd:cd:e6:5d:0e:73:98:7f:5e: 5c:2b:c4:06:b4:3d:ae:71:53:7d:84:bb:bd:ea:2f: 7d:3e:d2:82:9d:3d:77:b7:8a:73:3f:56:1e:2b:89: 3b:fe:d4:cc:04:7f:6b:6a:31:7a:2e:8c:c0:a4:2f: dd:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:DE:82:17:0F:95:DD:4E:5A:A0:23:A7:FC:97:0C:0A:8B:3B:96:4A X509v3 Authority Key Identifier: keyid:E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/yt6CFw-V3U5aoCOn_JcMCos7lko.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.154.225.0/24 31.14.33.0/24 37.153.174.0/23 46.17.120.0/21 46.235.96.0/21 62.101.128.0/20 62.240.24.0/21 77.46.128.0/17 79.101.0.0/16 87.250.32.0/19 89.34.2.0/24 89.39.144.0/23 89.42.12.0/24 89.46.126.0/23 89.47.40.0/23 91.150.64.0/18 92.60.224.0/20 92.244.128.0/19 93.86.0.0/15 93.113.250.0/23 94.228.224.0/22 94.228.229.0-94.228.239.255 109.72.48.0/20 109.92.0.0/15 109.94.228.0-109.94.239.255 109.122.64.0/18 109.198.0.0/19 176.67.192.0/19 178.17.16.0/20 178.79.0.0/18 178.220.0.0-178.223.223.255 178.237.208.0/20 178.250.136.0/21 185.10.140.0/22 185.26.172.0/22 185.27.128.0/22 185.34.92.0/22 185.36.255.0/24 185.71.88.0/22 185.103.136.0/22 185.112.20.0/22 185.157.104.0/22 185.179.136.0/22 185.190.152.0/22 188.215.30.0/24 188.240.88.0/24 188.240.200.0/23 195.178.32.0/19 195.252.82.0/24 195.252.88.0/24 195.252.92.0/22 212.62.59.0/24 212.200.0.0/16 213.196.96.0/20 IPv6: 2a00:e90::/32 2a00:8720::/32 2a01:b800::/32 2a02:61a0::/32 2a03:fc40::/32 2a04:1dc0::/29 2a06:5b00::/29 2a06:63c0::/29 Signature Algorithm: sha256WithRSAEncryption 7b:48:a2:9e:86:85:48:28:a3:f0:a4:48:d8:5e:41:5e:0c:cc: df:08:1a:e2:7f:28:b2:1f:77:81:ad:b2:ad:97:b1:67:a8:3f: e2:99:63:8c:5e:c3:e8:05:91:0d:6d:b7:b7:ce:be:e7:a0:d7: b4:9b:40:26:4f:b6:29:21:b8:1c:23:05:bc:33:92:66:39:59: 9f:cd:22:9c:6e:43:95:93:51:ee:67:9a:f5:3e:e7:f3:e5:d2: b0:d9:d7:2a:06:18:65:02:c4:fd:39:a9:6d:a4:b3:28:a2:7e: e6:7c:9b:2b:df:e6:f1:b0:ad:38:10:f2:99:b5:9f:97:52:ef: 3a:ae:92:74:c2:a3:f4:71:7a:e3:0f:72:e6:98:2e:90:5a:5b: b9:4d:76:ae:77:7b:4f:8a:13:c0:9c:9e:07:36:2b:d2:02:cd: 81:da:26:4d:5f:98:bb:75:6c:7c:5f:8e:67:9d:31:d3:0c:49: 6f:e7:cd:6a:d1:e7:21:5f:9d:3e:44:1e:7c:e9:55:37:50:7c: 67:47:7b:4f:eb:c0:db:a9:9d:72:27:47:d3:b3:01:7b:41:f9: d6:35:b9:53:e7:16:e4:24:7a:f3:6d:61:0e:1b:35:e4:59:c8: 29:d6:5d:ad:0b:ea:51:ea:12:2c:eb:33:fe:73:e0:8c:bf:65: 65:f1:82:77 -----BEGIN CERTIFICATE----- MIIGmDCCBYCgAwIBAgISAZsvLhvcr6z1/Or3e312vSt5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5YjEzMjBmYmMyNGQ2ZjQzNjZjYjY0ZmNmNWVkMmQ3YjFi NmJkZjcwHhcNMjUxMjE4MDE1ODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYWRlODIxNzBmOTVkZDRlNWFhMDIzYTdmYzk3MGMwYThiM2I5NjRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1OQrQtCWEToMTvSimsZT+22LZq6j SiXv9TDQH1gv06sFEW4+SE6lra3CPqiYLTP9IKn0oYa+w8+T4XJWb81AcVzKNAC4 JrW2U7Q4JOakjJpm4TF7kQKFawmTO3Z9unOzBfXY2TA7D/BDiKPoDjLev938z1V+ msLjh6m5snae6jNc/jd45OZEUb4k9pfIDjh+5/z6EZQDIDn/mzBuNpl078tjlWdT 9EdgDHM1JYZDlsSZ6wLlL47mm6/aqBRlzxEUSVbyzvdD5/z9zeZdDnOYf15cK8QG tD2ucVN9hLu96i99PtKCnT13t4pzP1YeK4k7/tTMBH9rajF6LozApC/dgQIDAQAB o4IDpDCCA6AwHQYDVR0OBBYEFMreghcPld1OWqAjp/yXDAqLO5ZKMB8GA1UdIwQY MBaAFOmxMg+8JNb0Nmy2T89e0textr33MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmJFeUQ3d2sxdlEyYkxaUHoxN1MxN0cydmZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9kZjFjYjUtNWY0OC00NmEwLWE3NmUt ZDNlMjgwMGJkNjQwLzEveXQ2Q0Z3LVYzVTVhb0NPbl9KY01Db3M3bGtvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC9kZjFjYjUtNWY0OC00NmEwLWE3NmUtZDNlMjgwMGJkNjQw LzEvNmJFeUQ3d2sxdlEyYkxaUHoxN1MxN0cydmZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBuAYIKwYBBQUHAQcBAf8EggGnMIIBozCCAV8EAgABMIIB VwMEAAWa4QMEAB8OIQMEASWZrgMEAy4ReAMEAy7rYAMEBD5lgAMEAz7wGAMEB00u gAMDAE9lAwQFV/ogAwQAWSICAwQBWSeQAwQAWSoMAwQBWS5+AwQBWS8oAwQGW5ZA AwQEXDzgAwQFXPSAAwMBXVYDBAFdcfoDBAJe5OAwDAMEAF7k5QMEBF7k4AMEBG1I MAMDAW1cMAwDBAJtXuQDBARtXuADBAZtekADBAVtxgADBAWwQ8ADBASyERADBAay TwAwCwMDArLcAwQFst/AAwQEsu3QAwQDsvqIAwQCuQqMAwQCuRqsAwQCuRuAAwQC uSJcAwQAuST/AwQCuUdYAwQCuWeIAwQCuXAUAwQCuZ1oAwQCubOIAwQCub6YAwQA vNceAwQAvPBYAwQBvPDIAwQFw7IgAwQAw/xSAwQAw/xYAwQCw/xcAwQA1D47AwMA 1MgDBATVxGAwPgQCAAIwOAMFACoADpADBQAqAIcgAwUAKgG4AAMFACoCYaADBQAq A/xAAwUDKgQdwAMFAyoGWwADBQMqBmPAMA0GCSqGSIb3DQEBCwUAA4IBAQB7SKKe hoVIKKPwpEjYXkFeDMzfCBrifyiyH3eBrbKtl7FnqD/imWOMXsPoBZENbbe3zr7n oNe0m0AmT7YpIbgcIwW8M5JmOVmfzSKcbkOVk1HuZ5r1Pufz5dKw2dcqBhhlAsT9 OaltpLMoon7mfJsr3+bxsK04EPKZtZ+XUu86rpJ0wqP0cXrjD3LmmC6QWlu5TXau d3tPihPAnJ4HNivSAs2B2iZNX5i7dWx8X45nnTHTDElv581q0echX50+RB586VU3 UHxnR3tP68DbqZ1yJ0fTswF7QfnWNblT5xbkJHrzbWEOGzXkWcgp1l2tC+pR6hIs 6zP+c+CMv2Vl8YJ3 -----END CERTIFICATE-----Generated at Sat Dec 20 21:26:49 2025 by rpki-client