This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/pYGVbv4voC-r48uG-RyVLygkJXo.roa File: pYGVbv4voC-r48uG-RyVLygkJXo.roa (raw, json) Hash identifier: Xfgs3GY90UOV9OHOemeveUcmPpqz9KE7PoOqb01izow= Subject key identifier: A5:81:95:6E:FE:2F:A0:2F:AB:E3:CB:86:F9:1C:95:2F:28:24:25:7A Certificate issuer: /CN=1ed3d8e29e063b9d2740ab3de6c72255ec8d0557 Certificate serial: 019B7B362A032E21760939C0A3EA40B93210 Authority key identifier: 1E:D3:D8:E2:9E:06:3B:9D:27:40:AB:3D:E6:C7:22:55:EC:8D:05:57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HtPY4p4GO50nQKs95sciVeyNBVc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/pYGVbv4voC-r48uG-RyVLygkJXo.roa Signing time: Thu 01 Jan 2026 20:18:25 +0000 ROA not before: Thu 01 Jan 2026 20:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3300 IP address blocks: 195.206.69.0/24 maxlen: 24 195.206.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.crl rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.mft rsync://rpki.ripe.net/repository/DEFAULT/HtPY4p4GO50nQKs95sciVeyNBVc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:2a:03:2e:21:76:09:39:c0:a3:ea:40:b9:32:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ed3d8e29e063b9d2740ab3de6c72255ec8d0557 Validity Not Before: Jan 1 20:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a581956efe2fa02fabe3cb86f91c952f2824257a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:69:a3:36:de:4b:56:11:d2:43:1d:2c:dd:09: 9f:2a:4e:4a:84:65:75:51:26:47:05:0b:53:7b:6e: e7:10:1a:49:5d:bd:95:10:89:96:1a:eb:91:76:46: 5d:a1:07:27:62:7d:01:d4:5a:7b:ba:62:53:bf:3f: 50:87:35:89:8b:01:8a:23:b5:89:da:2c:df:2e:16: bb:2a:7b:84:20:4c:fb:2c:25:69:fb:d1:46:4c:6f: 4a:8d:68:fb:1d:20:d0:c5:da:db:25:17:ed:60:5c: ad:ae:13:7f:1f:29:a9:a1:c0:3c:c2:37:5c:7b:45: c3:3c:d6:e9:87:0f:a7:8f:60:83:dd:0a:d0:0b:e1: d2:40:62:a9:cf:06:29:b2:ed:eb:47:0a:72:4a:c0: 73:99:0b:0f:e9:e1:ab:5b:44:54:28:27:cf:f8:06: b8:64:ff:34:35:4c:52:78:f9:49:9e:c4:8d:c7:6a: 57:6c:10:e4:81:4f:ad:b1:bf:45:f6:af:fd:3b:34: be:b1:3d:67:87:16:2e:37:ad:16:c7:cb:d8:99:b5: ad:65:72:31:b4:02:d9:96:f1:83:dd:d2:ef:1b:1c: d9:e8:24:6a:0e:c2:a4:4a:a8:95:54:cb:0c:84:c4: fe:3e:61:c2:b0:52:49:e2:04:87:a9:72:7d:97:9f: cd:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:81:95:6E:FE:2F:A0:2F:AB:E3:CB:86:F9:1C:95:2F:28:24:25:7A X509v3 Authority Key Identifier: keyid:1E:D3:D8:E2:9E:06:3B:9D:27:40:AB:3D:E6:C7:22:55:EC:8D:05:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HtPY4p4GO50nQKs95sciVeyNBVc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/pYGVbv4voC-r48uG-RyVLygkJXo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.206.69.0-195.206.70.255 Signature Algorithm: sha256WithRSAEncryption 3a:b6:3e:3c:91:86:af:19:d5:01:84:a3:c0:d6:d0:9f:4b:64: df:3b:fd:ee:2f:d2:37:89:30:dd:15:04:06:ef:29:f5:f6:00: 19:ea:16:e0:5e:aa:08:cb:a2:68:9a:52:db:b2:e7:f1:4e:6d: 9c:da:19:e9:3e:03:5c:69:fe:a2:81:d7:fc:ba:b9:a3:cd:3b: 74:44:ad:17:ee:b1:33:69:bc:98:94:4c:d9:f5:56:87:f9:87: bf:29:55:6d:db:26:5e:7b:8e:10:79:c1:b0:ce:68:0e:be:a4: 0e:dd:3b:f5:64:35:4a:42:8b:81:84:6d:66:d4:13:e3:6f:60: 17:d0:10:ba:d0:df:59:ee:27:78:c1:ba:bd:de:14:1b:d3:38: e5:34:c1:23:48:ec:a4:d5:ca:40:67:53:c2:96:f9:22:26:89: 22:6c:aa:8a:71:36:c3:ca:f9:97:54:55:62:27:de:9c:f6:bd: cf:00:c0:9c:ff:27:a7:11:6f:50:53:30:5f:5d:18:e5:00:9e: e0:a0:a2:5f:62:f4:e8:25:24:e6:2d:7d:f0:d4:78:f3:a6:2e: fb:ef:2e:8e:a6:df:e3:ee:1f:4c:1a:62:a8:f7:94:14:a0:f1: b6:50:e1:34:f4:b7:98:b9:9e:df:f5:58:3f:41:e2:c3:28:25: df:d0:ec:58 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt7NioDLiF2CTnAo+pAuTIQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlZDNkOGUyOWUwNjNiOWQyNzQwYWIzZGU2YzcyMjU1ZWM4 ZDA1NTcwHhcNMjYwMTAxMjAxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNTgxOTU2ZWZlMmZhMDJmYWJlM2NiODZmOTFjOTUyZjI4MjQyNTdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWmjNt5LVhHSQx0s3QmfKk5KhGV1 USZHBQtTe27nEBpJXb2VEImWGuuRdkZdoQcnYn0B1Fp7umJTvz9QhzWJiwGKI7WJ 2izfLha7KnuEIEz7LCVp+9FGTG9KjWj7HSDQxdrbJRftYFytrhN/HympocA8wjdc e0XDPNbphw+nj2CD3QrQC+HSQGKpzwYpsu3rRwpySsBzmQsP6eGrW0RUKCfP+Aa4 ZP80NUxSePlJnsSNx2pXbBDkgU+tsb9F9q/9OzS+sT1nhxYuN60Wx8vYmbWtZXIx tALZlvGD3dLvGxzZ6CRqDsKkSqiVVMsMhMT+PmHCsFJJ4gSHqXJ9l5/NLwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFKWBlW7+L6Avq+PLhvkclS8oJCV6MB8GA1UdIwQY MBaAFB7T2OKeBjudJ0CrPebHIlXsjQVXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHRQWTRwNEdPNTBuUUtzOTVzY2lWZXlOQlZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi80ZDljODMtZjk2MC00OGFjLWJiZjUt OWRjYTVjYzgwZGQ5LzEvcFlHVmJ2NHZvQy1yNDh1Ry1SeVZMeWdrSlhvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi80ZDljODMtZjk2MC00OGFjLWJiZjUtOWRjYTVjYzgwZGQ5 LzEvSHRQWTRwNEdPNTBuUUtzOTVzY2lWZXlOQlZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADDzkUD BADDzkYwDQYJKoZIhvcNAQELBQADggEBADq2PjyRhq8Z1QGEo8DW0J9LZN87/e4v 0jeJMN0VBAbvKfX2ABnqFuBeqgjLomiaUtuy5/FObZzaGek+A1xp/qKB1/y6uaPN O3RErRfusTNpvJiUTNn1Vof5h78pVW3bJl57jhB5wbDOaA6+pA7dO/VkNUpCi4GE bWbUE+NvYBfQELrQ31nuJ3jBur3eFBvTOOU0wSNI7KTVykBnU8KW+SImiSJsqopx NsPK+ZdUVWIn3pz2vc8AwJz/J6cRb1BTMF9dGOUAnuCgol9i9OglJOYtffDUePOm LvvvLo6m3+PuH0waYqj3lBSg8bZQ4TT0t5i5nt/1WD9B4sMoJd/Q7Fg= -----END CERTIFICATE-----Generated at Sun Jan 25 20:31:15 2026 by rpki-client