This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/PYDaQdvsTgkqrbuj3tZOVTtUmUA.roa File: PYDaQdvsTgkqrbuj3tZOVTtUmUA.roa (raw, json) Hash identifier: H/8+GgNdJOZH+P5jx7Yl7IzwfogX3Vj/jZBL/Jyz7y8= Subject key identifier: 3D:80:DA:41:DB:EC:4E:09:2A:AD:BB:A3:DE:D6:4E:55:3B:54:99:40 Certificate issuer: /CN=04560bea392eaf69208ab705ef405cf78684176b Certificate serial: 019B7F13D8740FB475BA9DAD280E2787DE2D Authority key identifier: 04:56:0B:EA:39:2E:AF:69:20:8A:B7:05:EF:40:5C:F7:86:84:17:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BFYL6jkur2kgircF70Bc94aEF2s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/PYDaQdvsTgkqrbuj3tZOVTtUmUA.roa Signing time: Fri 02 Jan 2026 14:19:25 +0000 ROA not before: Fri 02 Jan 2026 14:19:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 185.173.184.0/24 maxlen: 24 185.173.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/BFYL6jkur2kgircF70Bc94aEF2s.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/BFYL6jkur2kgircF70Bc94aEF2s.mft rsync://rpki.ripe.net/repository/DEFAULT/BFYL6jkur2kgircF70Bc94aEF2s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 02:03:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:d8:74:0f:b4:75:ba:9d:ad:28:0e:27:87:de:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04560bea392eaf69208ab705ef405cf78684176b Validity Not Before: Jan 2 14:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3d80da41dbec4e092aadbba3ded64e553b549940 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:fb:d2:b6:0e:64:66:a7:39:32:82:f0:94:88: 07:aa:5e:fc:9f:15:c9:ef:e1:2b:0f:45:5d:28:5a: 58:63:ac:40:b9:dd:cf:0f:99:31:f2:cc:4a:7d:81: 9b:8e:de:59:51:ef:b3:39:be:d4:ae:0d:4c:73:f5: a0:8a:75:0d:eb:3c:1a:22:d8:bc:04:47:75:b6:c0: 42:5a:2a:0f:af:15:57:fc:4e:cb:69:ac:08:7d:a7: 20:11:1b:36:e1:7a:56:62:01:8e:66:bb:76:69:8b: 8f:56:a8:d9:45:65:05:d4:dd:36:38:35:3a:fc:8a: 4d:3a:bd:c6:72:74:61:3b:0c:8f:d3:07:80:9b:54: 78:a5:8d:f5:cf:ec:f2:85:35:ee:97:6d:ee:38:1b: 50:62:dc:73:96:80:54:e0:d9:69:bd:53:31:48:17: af:1c:3e:ba:b3:82:23:13:3a:71:d6:3d:38:b1:7d: 28:1a:5f:af:d4:87:4e:5a:3c:0b:15:e0:b1:63:c1: 9d:31:85:20:94:93:ed:2b:a5:4f:dc:e8:cd:9f:6c: ab:32:51:62:09:c5:9b:98:40:48:ee:38:9b:c1:0b: f4:9c:09:e4:1b:5d:30:20:6a:0d:89:28:83:3e:04: 82:73:03:f5:36:c5:25:7c:2b:07:27:eb:c5:ad:37: 64:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:80:DA:41:DB:EC:4E:09:2A:AD:BB:A3:DE:D6:4E:55:3B:54:99:40 X509v3 Authority Key Identifier: keyid:04:56:0B:EA:39:2E:AF:69:20:8A:B7:05:EF:40:5C:F7:86:84:17:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BFYL6jkur2kgircF70Bc94aEF2s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/PYDaQdvsTgkqrbuj3tZOVTtUmUA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/BFYL6jkur2kgircF70Bc94aEF2s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.173.184.0/23 Signature Algorithm: sha256WithRSAEncryption 0b:d9:58:48:21:58:6b:ee:b7:40:bc:2c:db:a0:ba:3f:78:a5: 55:d0:53:76:dd:34:2c:4e:2e:79:50:6a:af:96:40:81:ab:84: 11:b7:3f:45:ec:6a:ff:4f:2a:d8:8c:cf:f6:77:29:d1:dc:bd: 58:99:b7:da:59:6d:a2:22:c7:c6:ae:1c:ec:3d:39:c8:a4:f5: c8:db:4f:5b:28:fe:18:1d:d0:5b:51:87:ed:1f:f2:2a:68:0c: 4e:e8:69:51:2d:0e:71:d1:cd:e7:3c:d9:c5:8f:f3:32:f1:a1: 88:98:ba:ff:65:e7:de:06:5e:e3:32:f1:69:7e:a8:b5:2c:8d: 6a:0b:d9:64:0e:61:a2:a3:b4:b1:ca:76:b3:3d:4b:4a:dc:df: 06:a4:c8:ed:89:3b:6e:5a:4d:0f:36:0c:15:95:fe:78:1f:07: 92:02:0d:5f:2e:36:09:c2:31:ca:93:1b:39:bd:63:7e:bd:0d: f9:1d:6e:ec:96:76:de:55:b0:b0:53:48:92:cb:51:2f:2b:8d: 15:ba:31:37:a5:2c:b5:6a:62:ac:ff:0a:55:8c:b6:62:01:6d: a3:cb:d7:1a:4b:29:55:59:a9:09:09:3e:dc:b1:8a:0b:cf:df: 33:08:90:51:88:d0:00:fe:04:c8:df:60:7b:d3:4d:9c:78:74: aa:dc:f6:ae -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/E9h0D7R1up2tKA4nh94tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0NTYwYmVhMzkyZWFmNjkyMDhhYjcwNWVmNDA1Y2Y3ODY4 NDE3NmIwHhcNMjYwMTAyMTQxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZDgwZGE0MWRiZWM0ZTA5MmFhZGJiYTNkZWQ2NGU1NTNiNTQ5OTQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4vvStg5kZqc5MoLwlIgHql78nxXJ 7+ErD0VdKFpYY6xAud3PD5kx8sxKfYGbjt5ZUe+zOb7Urg1Mc/WginUN6zwaIti8 BEd1tsBCWioPrxVX/E7LaawIfacgERs24XpWYgGOZrt2aYuPVqjZRWUF1N02ODU6 /IpNOr3GcnRhOwyP0weAm1R4pY31z+zyhTXul23uOBtQYtxzloBU4NlpvVMxSBev HD66s4IjEzpx1j04sX0oGl+v1IdOWjwLFeCxY8GdMYUglJPtK6VP3OjNn2yrMlFi CcWbmEBI7jibwQv0nAnkG10wIGoNiSiDPgSCcwP1NsUlfCsHJ+vFrTdkBQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD2A2kHb7E4JKq27o97WTlU7VJlAMB8GA1UdIwQY MBaAFARWC+o5Lq9pIIq3Be9AXPeGhBdrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkZZTDZqa3VyMmtnaXJjRjcwQmM5NGFFRjJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9jZTRhNGUtYjFhMy00NWY0LWEyN2Mt ZTFhY2EwMTA2MmZmLzEvUFlEYVFkdnNUZ2txcmJ1ajN0Wk9WVHRVbVVBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi9jZTRhNGUtYjFhMy00NWY0LWEyN2MtZTFhY2EwMTA2MmZm LzEvQkZZTDZqa3VyMmtnaXJjRjcwQmM5NGFFRjJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBua24MA0G CSqGSIb3DQEBCwUAA4IBAQAL2VhIIVhr7rdAvCzboLo/eKVV0FN23TQsTi55UGqv lkCBq4QRtz9F7Gr/TyrYjM/2dynR3L1YmbfaWW2iIsfGrhzsPTnIpPXI209bKP4Y HdBbUYftH/IqaAxO6GlRLQ5x0c3nPNnFj/My8aGImLr/ZefeBl7jMvFpfqi1LI1q C9lkDmGio7SxynazPUtK3N8GpMjtiTtuWk0PNgwVlf54HweSAg1fLjYJwjHKkxs5 vWN+vQ35HW7slnbeVbCwU0iSy1EvK40VujE3pSy1amKs/wpVjLZiAW2jy9caSylV WakJCT7csYoLz98zCJBRiNAA/gTI32B7002ceHSq3Pau -----END CERTIFICATE-----Generated at Sat Jan 17 06:45:58 2026 by rpki-client