This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/PyWCYQsc-RXqOD6ZcPJVeLZsTb0.roa File: PyWCYQsc-RXqOD6ZcPJVeLZsTb0.roa (raw, json) Hash identifier: So755h/YppAq4z9zJnxXyj3ozNgia1MYJ3MvAVJ9wDU= Subject key identifier: 3F:25:82:61:0B:1C:F9:15:EA:38:3E:99:70:F2:55:78:B6:6C:4D:BD Certificate issuer: /CN=9b415a03059fb295a4b96c9ce5eadb58fe98fa86 Certificate serial: 019B7CEE5439C39CA3477F2D294764C53E31 Authority key identifier: 9B:41:5A:03:05:9F:B2:95:A4:B9:6C:9C:E5:EA:DB:58:FE:98:FA:86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m0FaAwWfspWkuWyc5erbWP6Y-oY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/PyWCYQsc-RXqOD6ZcPJVeLZsTb0.roa Signing time: Fri 02 Jan 2026 04:19:12 +0000 ROA not before: Fri 02 Jan 2026 04:19:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1267 IP address blocks: 185.54.32.0/24 maxlen: 24 185.54.33.0/24 maxlen: 24 185.54.34.0/24 maxlen: 24 185.54.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.mft rsync://rpki.ripe.net/repository/DEFAULT/m0FaAwWfspWkuWyc5erbWP6Y-oY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:54:39:c3:9c:a3:47:7f:2d:29:47:64:c5:3e:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b415a03059fb295a4b96c9ce5eadb58fe98fa86 Validity Not Before: Jan 2 04:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3f2582610b1cf915ea383e9970f25578b66c4dbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a7:0d:38:60:58:74:74:50:ee:4a:57:f6:97: f0:f1:23:cd:a2:2e:e6:f4:07:46:2e:8a:5c:93:e9: 0a:ba:ef:79:d3:7a:4e:ab:9c:d7:ba:37:4b:86:63: b5:57:b5:f0:3e:e0:a5:74:68:24:04:21:d2:e5:60: f1:24:57:1f:19:0a:26:70:3b:3e:f9:87:58:fd:c0: 1f:c1:76:18:b7:9a:8b:77:c1:74:6a:08:95:a5:fa: c1:b6:36:3c:94:42:49:fc:51:0b:07:be:80:90:08: 30:ba:86:e2:24:ed:b4:9e:90:42:18:77:c0:89:4d: cb:66:8f:65:e6:25:4e:f4:ee:95:51:40:4c:ad:e6: 95:04:b1:45:72:20:0f:9a:cb:dd:4b:2c:5f:52:4c: d3:4c:36:71:e6:ab:c1:26:99:73:94:f8:c6:cc:36: ac:64:86:b7:89:69:de:b9:04:c1:85:44:c9:76:8e: 6c:8f:5f:12:11:e1:08:be:8c:1f:19:ff:1b:d2:ad: 62:33:f4:78:da:b7:c9:c8:60:06:4b:ba:af:90:ce: 36:0c:fd:66:39:8a:dc:b4:eb:c4:96:83:96:d1:2d: 22:ed:f1:15:7e:ce:2c:83:83:18:5f:5b:8f:1f:ca: de:51:19:fc:01:00:a5:e0:86:56:41:73:83:70:af: 5b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:25:82:61:0B:1C:F9:15:EA:38:3E:99:70:F2:55:78:B6:6C:4D:BD X509v3 Authority Key Identifier: keyid:9B:41:5A:03:05:9F:B2:95:A4:B9:6C:9C:E5:EA:DB:58:FE:98:FA:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m0FaAwWfspWkuWyc5erbWP6Y-oY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/PyWCYQsc-RXqOD6ZcPJVeLZsTb0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.54.32.0/22 Signature Algorithm: sha256WithRSAEncryption 14:7e:e3:cd:dc:71:8b:76:22:30:93:cf:0f:ae:62:73:cb:bf: 5d:b1:06:b3:6d:69:ef:4f:78:99:bb:f3:b6:4a:31:3e:0b:db: 41:07:07:1e:67:39:fe:58:4a:bd:76:df:15:bc:41:79:d1:7c: 9c:a1:46:b2:3f:71:a7:c0:fb:d6:45:a3:26:ae:46:a4:b6:a7: f2:d4:58:99:f3:07:a9:46:f9:83:08:90:76:63:02:97:e2:ea: cd:85:81:32:49:27:70:d6:43:ba:04:7b:b8:c6:ea:e6:f0:be: 69:5b:31:ed:85:1e:72:3b:f5:b2:1f:db:5a:49:94:2f:8a:46: e1:83:4c:fd:51:d3:48:8d:29:0f:8c:dd:ce:ec:8d:35:c9:44: 6f:43:8f:79:18:f0:9d:6d:87:39:b7:e2:0f:4f:04:b3:21:30: 91:2f:3a:4e:b2:ed:38:5d:c6:d6:c5:f5:46:cc:ec:60:b6:c2: bf:00:00:63:71:ce:96:4a:ea:2a:70:db:28:1d:d5:07:64:50: 24:66:85:c2:db:8d:4e:b2:ba:fd:5d:d0:08:45:0e:55:d8:c5: 05:de:05:8a:f3:60:6c:9d:e0:38:0e:44:5a:f0:ea:30:6e:8f: 8d:b4:5c:4c:a0:69:f0:74:7f:73:23:29:5e:79:40:ec:10:43: 0b:b7:f9:52 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87lQ5w5yjR38tKUdkxT4xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliNDE1YTAzMDU5ZmIyOTVhNGI5NmM5Y2U1ZWFkYjU4ZmU5 OGZhODYwHhcNMjYwMTAyMDQxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZjI1ODI2MTBiMWNmOTE1ZWEzODNlOTk3MGYyNTU3OGI2NmM0ZGJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqcNOGBYdHRQ7kpX9pfw8SPNoi7m 9AdGLopck+kKuu9503pOq5zXujdLhmO1V7XwPuCldGgkBCHS5WDxJFcfGQomcDs+ +YdY/cAfwXYYt5qLd8F0agiVpfrBtjY8lEJJ/FELB76AkAgwuobiJO20npBCGHfA iU3LZo9l5iVO9O6VUUBMreaVBLFFciAPmsvdSyxfUkzTTDZx5qvBJplzlPjGzDas ZIa3iWneuQTBhUTJdo5sj18SEeEIvowfGf8b0q1iM/R42rfJyGAGS7qvkM42DP1m OYrctOvEloOW0S0i7fEVfs4sg4MYX1uPH8reURn8AQCl4IZWQXODcK9b/QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD8lgmELHPkV6jg+mXDyVXi2bE29MB8GA1UdIwQY MBaAFJtBWgMFn7KVpLlsnOXq21j+mPqGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTBGYUF3V2ZzcFdrdVd5YzVlcmJXUDZZLW9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy84NTYxMmEtZGUzMy00MzRiLTg0NzEt MTgwMWI1NDRiOWZlLzEvUHlXQ1lRc2MtUlhxT0Q2WmNQSlZlTFpzVGIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy84NTYxMmEtZGUzMy00MzRiLTg0NzEtMTgwMWI1NDRiOWZl LzEvbTBGYUF3V2ZzcFdrdVd5YzVlcmJXUDZZLW9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuTYgMA0G CSqGSIb3DQEBCwUAA4IBAQAUfuPN3HGLdiIwk88PrmJzy79dsQazbWnvT3iZu/O2 SjE+C9tBBwceZzn+WEq9dt8VvEF50XycoUayP3GnwPvWRaMmrkaktqfy1FiZ8wep RvmDCJB2YwKX4urNhYEySSdw1kO6BHu4xurm8L5pWzHthR5yO/WyH9taSZQvikbh g0z9UdNIjSkPjN3O7I01yURvQ495GPCdbYc5t+IPTwSzITCRLzpOsu04XcbWxfVG zOxgtsK/AABjcc6WSuoqcNsoHdUHZFAkZoXC241Osrr9XdAIRQ5V2MUF3gWK82Bs neA4DkRa8Oowbo+NtFxMoGnwdH9zIyleeUDsEEMLt/lS -----END CERTIFICATE-----Generated at Sun Jan 25 13:29:38 2026 by rpki-client