This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/PKYw-eZEzQNrOovkMIOID6kPu5g.roa File: PKYw-eZEzQNrOovkMIOID6kPu5g.roa (raw, json) Hash identifier: CAOXiOcVk96zpJFNWaRrMbvyB0Kjprfs/tXqbC7lysk= Subject key identifier: 3C:A6:30:F9:E6:44:CD:03:6B:3A:8B:E4:30:83:88:0F:A9:0F:BB:98 Certificate issuer: /CN=7d9656d5867b43ce506445290bba705722260586 Certificate serial: 019B7F84AB373CF1DC3D70EF5C95049601AE Authority key identifier: 7D:96:56:D5:86:7B:43:CE:50:64:45:29:0B:BA:70:57:22:26:05:86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fZZW1YZ7Q85QZEUpC7pwVyImBYY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/PKYw-eZEzQNrOovkMIOID6kPu5g.roa Signing time: Fri 02 Jan 2026 16:22:39 +0000 ROA not before: Fri 02 Jan 2026 16:22:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12859 IP address blocks: 91.230.244.0/23 maxlen: 24 91.233.105.0/24 maxlen: 24 194.33.112.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/fZZW1YZ7Q85QZEUpC7pwVyImBYY.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/fZZW1YZ7Q85QZEUpC7pwVyImBYY.mft rsync://rpki.ripe.net/repository/DEFAULT/fZZW1YZ7Q85QZEUpC7pwVyImBYY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:ab:37:3c:f1:dc:3d:70:ef:5c:95:04:96:01:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d9656d5867b43ce506445290bba705722260586 Validity Not Before: Jan 2 16:22:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3ca630f9e644cd036b3a8be43083880fa90fbb98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:3c:89:da:b5:9e:2e:9b:cb:f5:23:c9:f9:a7: f3:bf:14:3f:14:fe:65:a0:aa:c7:2f:90:ba:1a:9b: cf:91:45:35:87:6f:ff:b9:aa:a1:44:02:44:0d:43: 3e:6a:a7:70:9f:b1:2c:8f:20:ed:25:de:c7:5e:e9: 02:c7:c3:5a:6e:a8:4d:83:1b:c5:68:87:b7:8c:76: 30:b2:83:c7:90:83:c4:c7:52:db:15:fe:53:e4:77: 4f:8e:1d:c7:58:e7:50:23:ad:e4:5d:94:ee:c0:01: 0d:8c:10:89:32:fc:e3:45:50:2c:72:ae:ca:94:1e: 46:d3:c0:27:dd:31:79:c2:d8:34:64:9f:2c:d1:47: a5:0a:70:88:89:55:27:f7:2e:fd:d5:0c:a2:fe:93: 0a:8f:14:91:a5:49:58:64:9f:21:18:d8:fe:d3:7b: 23:63:9f:17:36:2a:99:c5:cc:f6:18:a1:fc:2a:f8: bd:ee:b1:3e:1a:00:e7:6d:89:63:ea:e8:73:eb:ae: bd:68:4e:6c:42:25:21:5a:8d:56:76:f5:20:42:da: ff:c9:ff:65:79:3e:de:ca:43:9d:62:e2:08:91:4f: ab:2f:17:08:de:ca:ca:a1:b1:ce:e6:e1:06:2b:16: 9e:b0:fd:a2:c1:65:cd:81:33:1c:33:0a:f1:4b:6f: 93:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:A6:30:F9:E6:44:CD:03:6B:3A:8B:E4:30:83:88:0F:A9:0F:BB:98 X509v3 Authority Key Identifier: keyid:7D:96:56:D5:86:7B:43:CE:50:64:45:29:0B:BA:70:57:22:26:05:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fZZW1YZ7Q85QZEUpC7pwVyImBYY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/PKYw-eZEzQNrOovkMIOID6kPu5g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/fZZW1YZ7Q85QZEUpC7pwVyImBYY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.230.244.0/23 91.233.105.0/24 194.33.112.0/23 Signature Algorithm: sha256WithRSAEncryption 24:58:62:b9:8c:1f:66:8c:0c:4a:2f:92:0b:ab:70:7b:17:a5: 59:aa:46:73:9e:99:d1:ff:15:b4:f2:f9:2f:85:60:6b:c9:12: 21:db:a4:c2:1f:59:7c:16:99:e9:fb:e2:57:b2:12:08:5c:1b: 46:ed:ce:2b:19:fe:82:b3:8b:6f:02:40:a9:8e:56:8a:0f:7f: 2e:b4:24:6a:ff:6b:d5:1c:75:1b:cc:f5:44:9a:6b:c8:1d:f1: d4:5f:e3:55:f4:6f:d6:d0:66:37:30:02:55:53:50:ca:57:17: 60:a0:16:38:2e:fb:36:04:73:48:0a:af:7a:aa:0a:80:a7:c8: 13:f1:2d:02:4a:78:9e:7f:dd:20:54:d6:37:51:7d:b0:22:7b: f7:6b:84:f1:80:5c:7a:42:09:92:1f:39:1b:ec:3f:98:0f:2d: de:e1:87:c2:ea:e3:dc:0d:7d:bb:1a:5a:c8:ef:20:b6:29:44: d3:d1:bf:d2:cc:43:ff:93:81:88:7a:22:94:3d:64:cd:21:ab: 40:bc:aa:20:c2:82:b8:39:f7:31:99:89:bd:38:1c:a2:a8:99: fd:c1:79:6e:21:23:fe:e1:79:38:73:77:a9:22:2e:25:79:7d: 42:e5:d8:92:8d:dd:bd:7f:20:ec:81:66:43:eb:b3:7e:49:01: 44:26:89:c4 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/hKs3PPHcPXDvXJUElgGuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkOTY1NmQ1ODY3YjQzY2U1MDY0NDUyOTBiYmE3MDU3MjIy NjA1ODYwHhcNMjYwMTAyMTYyMjM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzY2E2MzBmOWU2NDRjZDAzNmIzYThiZTQzMDgzODgwZmE5MGZiYjk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTyJ2rWeLpvL9SPJ+afzvxQ/FP5l oKrHL5C6GpvPkUU1h2//uaqhRAJEDUM+aqdwn7EsjyDtJd7HXukCx8NabqhNgxvF aIe3jHYwsoPHkIPEx1LbFf5T5HdPjh3HWOdQI63kXZTuwAENjBCJMvzjRVAscq7K lB5G08An3TF5wtg0ZJ8s0UelCnCIiVUn9y791Qyi/pMKjxSRpUlYZJ8hGNj+03sj Y58XNiqZxcz2GKH8Kvi97rE+GgDnbYlj6uhz6669aE5sQiUhWo1WdvUgQtr/yf9l eT7eykOdYuIIkU+rLxcI3srKobHO5uEGKxaesP2iwWXNgTMcMwrxS2+T6wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFDymMPnmRM0DazqL5DCDiA+pD7uYMB8GA1UdIwQY MBaAFH2WVtWGe0POUGRFKQu6cFciJgWGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlpaVzFZWjdRODVRWkVVcEM3cHdWeUltQllZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9iMGYzMWQtYjRiZi00NTBkLTlhY2Qt MGE2YjUzNmM0Mzk0LzEvUEtZdy1lWkV6UU5yT292a01JT0lENmtQdTVnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS9iMGYzMWQtYjRiZi00NTBkLTlhY2QtMGE2YjUzNmM0Mzk0 LzEvZlpaVzFZWjdRODVRWkVVcEM3cHdWeUltQllZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBW+b0AwQA W+lpAwQBwiFwMA0GCSqGSIb3DQEBCwUAA4IBAQAkWGK5jB9mjAxKL5ILq3B7F6VZ qkZznpnR/xW08vkvhWBryRIh26TCH1l8Fpnp++JXshIIXBtG7c4rGf6Cs4tvAkCp jlaKD38utCRq/2vVHHUbzPVEmmvIHfHUX+NV9G/W0GY3MAJVU1DKVxdgoBY4Lvs2 BHNICq96qgqAp8gT8S0CSnief90gVNY3UX2wInv3a4TxgFx6QgmSHzkb7D+YDy3e 4YfC6uPcDX27GlrI7yC2KUTT0b/SzEP/k4GIeiKUPWTNIatAvKogwoK4OfcxmYm9 OByiqJn9wXluISP+4Xk4c3epIi4leX1C5diSjd29fyDsgWZD67N+SQFEJonE -----END CERTIFICATE-----Generated at Sun Jan 25 18:07:25 2026 by rpki-client