This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/PywyNlB44gLPYW5vXMgh906mhtw.roa File: PywyNlB44gLPYW5vXMgh906mhtw.roa (raw, json) Hash identifier: WAe4m2qa5iC778ZEpY8A1QVk8TVQhRMz0NOhO+i7Y+8= Subject key identifier: 3F:2C:32:36:50:78:E2:02:CF:61:6E:6F:5C:C8:21:F7:4E:A6:86:DC Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Certificate serial: 019B77C69E9896FECD87548FB15E015D15D3 Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/PywyNlB44gLPYW5vXMgh906mhtw.roa Signing time: Thu 01 Jan 2026 04:17:43 +0000 ROA not before: Thu 01 Jan 2026 04:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214080 IP address blocks: 84.232.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 21:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:9e:98:96:fe:cd:87:54:8f:b1:5e:01:5d:15:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Validity Not Before: Jan 1 04:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3f2c32365078e202cf616e6f5cc821f74ea686dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ad:36:d8:2d:a0:ab:45:1f:0c:8e:23:43:de: 57:f3:04:ff:27:21:21:d7:75:6c:7b:f8:b5:30:04: 20:25:2a:50:18:b5:3a:fe:a6:f3:8d:d9:98:0e:ef: 34:b7:2b:38:8f:c8:4d:22:b8:ee:db:90:cf:25:aa: 57:69:f9:a5:1f:e5:33:61:f5:8d:aa:4e:b3:3b:5d: 10:c5:97:1f:99:f0:e8:1b:c9:07:eb:33:e0:3b:3b: e1:73:63:85:85:fd:d9:69:0a:2e:17:86:09:0b:7f: 1a:68:4f:10:ee:c3:cb:d2:8c:93:3a:49:dc:4e:ea: a1:3e:2b:e5:a1:ec:8b:36:ac:d9:a2:81:f3:6f:bd: fa:2a:5c:c1:1c:e2:df:c4:22:f8:fc:d3:43:cb:b8: 56:bf:61:c7:68:ac:cb:ea:78:3a:ec:ef:1d:3f:b8: 5d:57:a5:2a:b0:6b:a2:00:6d:e7:f4:57:4a:e9:59: b9:b9:6c:2b:15:05:da:85:7c:87:9d:48:28:2b:c9: 08:95:a7:75:a0:0e:58:fd:f4:6f:77:b9:d2:96:3e: 82:82:51:43:f9:08:4d:0c:f7:02:8c:0b:b6:a4:68: 9e:05:cf:73:b7:88:df:9e:a5:68:34:68:68:bd:b9: f6:4b:8e:65:81:76:5d:b4:2c:e0:7f:d1:a5:74:1a: cc:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:2C:32:36:50:78:E2:02:CF:61:6E:6F:5C:C8:21:F7:4E:A6:86:DC X509v3 Authority Key Identifier: keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/PywyNlB44gLPYW5vXMgh906mhtw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.232.71.0/24 Signature Algorithm: sha256WithRSAEncryption a1:31:27:e3:6e:2b:ff:e3:bf:23:17:6b:0d:21:8d:28:fc:95: 97:eb:27:96:31:fe:e6:ea:66:1d:b6:32:a6:9b:c3:cf:61:92: 61:b9:9e:55:1a:c1:27:f0:ff:35:21:d3:4e:10:e2:43:21:e8: d5:84:20:c3:2d:d5:e5:84:4a:34:d4:bb:85:eb:4c:67:4a:23: 5d:46:2d:45:35:4f:04:3a:c5:a5:bb:13:75:b6:af:1f:c0:e5: d1:4f:d1:c4:51:19:b8:7f:c4:77:20:8f:2e:4f:f8:00:b3:5f: 5f:87:fd:8d:76:ac:4c:4a:06:c5:2a:e3:8e:27:37:fe:37:89: 84:0f:36:12:cd:c2:eb:34:07:3f:e0:a4:98:08:29:56:a9:c3: 8c:95:15:6b:08:c8:70:2c:3f:88:3b:c1:5b:a1:ee:81:9e:c2: ab:49:2a:84:d6:62:aa:74:f2:f5:ba:0d:1f:e1:a3:cf:0b:86: b3:3d:0e:21:b9:70:bc:c7:6f:59:f9:26:d7:f3:59:7b:dc:f9: 21:67:0f:55:16:78:ee:d6:be:e2:7c:97:ba:5e:1a:64:3b:27: d8:0a:f4:c5:cb:29:b7:c6:66:cc:a7:37:72:c3:27:45:69:93: d7:21:5f:5a:f8:ef:52:ee:c8:90:06:0e:52:a6:93:7e:bd:17: 5e:09:87:b9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xp6Ylv7Nh1SPsV4BXRXTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYWYxN2IwMDE1ZGJiN2NkOTkyZjI2Y2RmZjAxYzRlMjYy MGI3M2UwHhcNMjYwMTAxMDQxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZjJjMzIzNjUwNzhlMjAyY2Y2MTZlNmY1Y2M4MjFmNzRlYTY4NmRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArq022C2gq0UfDI4jQ95X8wT/JyEh 13Vse/i1MAQgJSpQGLU6/qbzjdmYDu80tys4j8hNIrju25DPJapXafmlH+UzYfWN qk6zO10QxZcfmfDoG8kH6zPgOzvhc2OFhf3ZaQouF4YJC38aaE8Q7sPL0oyTOknc TuqhPivloeyLNqzZooHzb736KlzBHOLfxCL4/NNDy7hWv2HHaKzL6ng67O8dP7hd V6UqsGuiAG3n9FdK6Vm5uWwrFQXahXyHnUgoK8kIlad1oA5Y/fRvd7nSlj6CglFD +QhNDPcCjAu2pGieBc9zt4jfnqVoNGhovbn2S45lgXZdtCzgf9GldBrMWwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD8sMjZQeOICz2Fub1zIIfdOpobcMB8GA1UdIwQY MBaAFNqvF7ABXbt82ZLybN/wHE4mILc+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAt Y2YwNmQxOTgzYmExLzEvUHl3eU5sQjQ0Z0xQWVc1dlhNZ2g5MDZtaHR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAtY2YwNmQxOTgzYmEx LzEvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVOhHMA0G CSqGSIb3DQEBCwUAA4IBAQChMSfjbiv/478jF2sNIY0o/JWX6yeWMf7m6mYdtjKm m8PPYZJhuZ5VGsEn8P81IdNOEOJDIejVhCDDLdXlhEo01LuF60xnSiNdRi1FNU8E OsWluxN1tq8fwOXRT9HEURm4f8R3II8uT/gAs19fh/2NdqxMSgbFKuOOJzf+N4mE DzYSzcLrNAc/4KSYCClWqcOMlRVrCMhwLD+IO8Fboe6BnsKrSSqE1mKqdPL1ug0f 4aPPC4azPQ4huXC8x29Z+SbX81l73PkhZw9VFnju1r7ifJe6XhpkOyfYCvTFyym3 xmbMpzdywydFaZPXIV9a+O9S7siQBg5SppN+vRdeCYe5 -----END CERTIFICATE-----Generated at Sun Jan 25 07:16:56 2026 by rpki-client