This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/97be50-2ce6-4e2b-a3e7-1a6ac98ac6f9/1/PYuODH0zBuvAiK-JKuXaExSuhvY.roa File: PYuODH0zBuvAiK-JKuXaExSuhvY.roa (raw, json) Hash identifier: j4fDEw0K8kYxrAUmB58fcgklFQjA7X3SeZOjGCv6B9g= Subject key identifier: 3D:8B:8E:0C:7D:33:06:EB:C0:88:AF:89:2A:E5:DA:13:14:AE:86:F6 Certificate issuer: /CN=be3364bc38f75b18d6f6eef203209f71c2768d85 Certificate serial: 019B7AC816BB82491C5831DB644E8A30D438 Authority key identifier: BE:33:64:BC:38:F7:5B:18:D6:F6:EE:F2:03:20:9F:71:C2:76:8D:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vjNkvDj3WxjW9u7yAyCfccJ2jYU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/97be50-2ce6-4e2b-a3e7-1a6ac98ac6f9/1/PYuODH0zBuvAiK-JKuXaExSuhvY.roa Signing time: Thu 01 Jan 2026 18:18:11 +0000 ROA not before: Thu 01 Jan 2026 18:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203203 IP address blocks: 185.179.84.0/22 maxlen: 22 185.179.84.0/24 maxlen: 24 185.179.85.0/24 maxlen: 24 185.179.86.0/24 maxlen: 24 185.179.87.0/24 maxlen: 24 185.232.228.0/22 maxlen: 24 2a0a:7e80::/29 maxlen: 29 2a0a:7e80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/97be50-2ce6-4e2b-a3e7-1a6ac98ac6f9/1/vjNkvDj3WxjW9u7yAyCfccJ2jYU.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/97be50-2ce6-4e2b-a3e7-1a6ac98ac6f9/1/vjNkvDj3WxjW9u7yAyCfccJ2jYU.mft rsync://rpki.ripe.net/repository/DEFAULT/vjNkvDj3WxjW9u7yAyCfccJ2jYU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:16:bb:82:49:1c:58:31:db:64:4e:8a:30:d4:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be3364bc38f75b18d6f6eef203209f71c2768d85 Validity Not Before: Jan 1 18:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3d8b8e0c7d3306ebc088af892ae5da1314ae86f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:32:87:f1:df:bf:f4:63:72:54:ef:ae:fe:bf: 9e:30:c5:0a:5a:96:fd:d9:88:82:5b:89:f4:42:ef: f2:1d:6c:06:41:93:99:e5:ed:5f:2b:42:11:ab:ed: 47:e6:4e:13:15:55:7d:12:2c:f3:d0:de:bc:e3:47: 2d:e6:ab:99:47:d0:3e:fb:e7:1b:05:69:aa:b4:11: 59:73:4e:95:4a:38:85:9f:f0:2b:60:e5:b7:22:c0: bd:43:7a:4d:f2:e9:46:ce:92:5a:f6:f8:f4:1d:65: 4a:0b:3e:39:71:a5:74:c6:af:ee:bc:8a:9b:bd:49: 82:cb:aa:81:8f:cc:90:b1:85:8e:8f:1b:6c:20:88: b6:69:b1:86:d0:fa:cd:13:94:3d:84:c2:78:ca:dc: 9a:81:a8:73:73:41:9d:5f:5a:01:ce:b2:a5:29:a6: 71:88:94:f1:9e:58:f4:8a:2a:9d:eb:9a:c7:79:9e: 04:97:ee:16:c7:78:44:88:bb:1e:f9:db:8a:b9:50: 9b:b2:30:87:9b:1a:ab:84:ea:a7:18:8d:cb:f6:83: 38:f5:21:4c:e6:53:36:9d:1b:e7:86:c9:6f:1a:7c: 42:90:47:ff:62:bf:5b:13:e8:f8:e3:87:0d:2a:2a: 92:4c:3d:e5:06:9b:38:25:a9:55:f8:cc:db:c7:e7: 42:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:8B:8E:0C:7D:33:06:EB:C0:88:AF:89:2A:E5:DA:13:14:AE:86:F6 X509v3 Authority Key Identifier: keyid:BE:33:64:BC:38:F7:5B:18:D6:F6:EE:F2:03:20:9F:71:C2:76:8D:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vjNkvDj3WxjW9u7yAyCfccJ2jYU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/97be50-2ce6-4e2b-a3e7-1a6ac98ac6f9/1/PYuODH0zBuvAiK-JKuXaExSuhvY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/97be50-2ce6-4e2b-a3e7-1a6ac98ac6f9/1/vjNkvDj3WxjW9u7yAyCfccJ2jYU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.179.84.0/22 185.232.228.0/22 IPv6: 2a0a:7e80::/29 Signature Algorithm: sha256WithRSAEncryption 90:7b:95:53:bd:05:aa:18:cd:94:7e:3d:95:52:ea:91:0d:61: d0:32:c9:17:9a:02:9f:43:43:c1:b3:95:de:ae:36:74:40:22: e8:2d:51:77:7e:c8:f6:20:16:c1:36:47:7a:c6:2e:c9:5f:67: 31:7e:13:0d:68:47:40:8b:86:6b:c8:8e:c4:ed:1f:0f:5e:f1: 53:29:02:5a:e4:2d:01:ec:d1:44:0e:59:e6:b8:b9:0e:1f:75: 48:0a:96:61:39:7a:e8:0b:c7:bb:55:ad:d6:40:48:ad:6e:72: 4a:0a:04:78:8b:cb:de:c7:03:8c:63:91:a2:01:ba:39:d6:52: dd:ee:db:27:bd:12:53:3d:c3:95:e5:0b:11:4b:c3:5f:6d:82: df:24:6e:ec:3f:cf:32:a0:30:29:ed:ab:a2:39:aa:7c:41:9b: b2:a0:7d:9b:ac:2b:62:58:e6:78:33:20:12:07:31:15:41:86: 05:df:49:c9:57:9a:d4:8f:35:93:84:de:69:86:1e:3f:f9:66: f4:99:cc:42:7f:75:cf:6d:bd:8c:f3:93:ff:d2:ee:20:64:ca: dc:cd:ca:88:19:66:72:f2:fd:f9:e0:36:d0:44:3d:64:e0:29: c2:26:f5:8a:5a:7a:fd:36:08:98:ce:01:2c:81:37:d1:94:0d: 4a:f5:f8:d5 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt6yBa7gkkcWDHbZE6KMNQ4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlMzM2NGJjMzhmNzViMThkNmY2ZWVmMjAzMjA5ZjcxYzI3 NjhkODUwHhcNMjYwMTAxMTgxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZDhiOGUwYzdkMzMwNmViYzA4OGFmODkyYWU1ZGExMzE0YWU4NmY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDKH8d+/9GNyVO+u/r+eMMUKWpb9 2YiCW4n0Qu/yHWwGQZOZ5e1fK0IRq+1H5k4TFVV9Eizz0N6840ct5quZR9A+++cb BWmqtBFZc06VSjiFn/ArYOW3IsC9Q3pN8ulGzpJa9vj0HWVKCz45caV0xq/uvIqb vUmCy6qBj8yQsYWOjxtsIIi2abGG0PrNE5Q9hMJ4ytyagahzc0GdX1oBzrKlKaZx iJTxnlj0iiqd65rHeZ4El+4Wx3hEiLse+duKuVCbsjCHmxqrhOqnGI3L9oM49SFM 5lM2nRvnhslvGnxCkEf/Yr9bE+j444cNKiqSTD3lBps4JalV+Mzbx+dCXwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFD2Ljgx9MwbrwIiviSrl2hMUrob2MB8GA1UdIwQY MBaAFL4zZLw491sY1vbu8gMgn3HCdo2FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmpOa3ZEajNXeGpXOXU3eUF5Q2ZjY0oyallVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy85N2JlNTAtMmNlNi00ZTJiLWEzZTct MWE2YWM5OGFjNmY5LzEvUFl1T0RIMHpCdXZBaUstSkt1WGFFeFN1aHZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy85N2JlNTAtMmNlNi00ZTJiLWEzZTctMWE2YWM5OGFjNmY5 LzEvdmpOa3ZEajNXeGpXOXU3eUF5Q2ZjY0oyallVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCubNUAwQC uejkMA0EAgACMAcDBQMqCn6AMA0GCSqGSIb3DQEBCwUAA4IBAQCQe5VTvQWqGM2U fj2VUuqRDWHQMskXmgKfQ0PBs5XerjZ0QCLoLVF3fsj2IBbBNkd6xi7JX2cxfhMN aEdAi4ZryI7E7R8PXvFTKQJa5C0B7NFEDlnmuLkOH3VICpZhOXroC8e7Va3WQEit bnJKCgR4i8vexwOMY5GiAbo51lLd7tsnvRJTPcOV5QsRS8NfbYLfJG7sP88yoDAp 7auiOap8QZuyoH2brCtiWOZ4MyASBzEVQYYF30nJV5rUjzWThN5phh4/+Wb0mcxC f3XPbb2M85P/0u4gZMrczcqIGWZy8v354DbQRD1k4CnCJvWKWnr9NgiYzgEsgTfR lA1K9fjV -----END CERTIFICATE-----Generated at Mon Jan 26 05:14:55 2026 by rpki-client