This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/PUYBt3EvzWm6QM2OI0SM1D5m1qY.roa File: PUYBt3EvzWm6QM2OI0SM1D5m1qY.roa (raw, json) Hash identifier: tkkFt1Gf0WZmv2nn4kPhqy9uMCNjjS6CTqfk578Y+hc= Subject key identifier: 3D:46:01:B7:71:2F:CD:69:BA:40:CD:8E:23:44:8C:D4:3E:66:D6:A6 Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f Certificate serial: 019B7F1600E486766DAF4C929BA9C7917D64 Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/PUYBt3EvzWm6QM2OI0SM1D5m1qY.roa Signing time: Fri 02 Jan 2026 14:21:47 +0000 ROA not before: Fri 02 Jan 2026 14:21:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 178.239.127.0/24 maxlen: 24 185.95.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:16:00:e4:86:76:6d:af:4c:92:9b:a9:c7:91:7d:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f Validity Not Before: Jan 2 14:21:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3d4601b7712fcd69ba40cd8e23448cd43e66d6a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:58:27:21:d6:03:35:f4:f3:91:06:5c:c3:95: fb:05:d9:88:7a:a4:5f:08:dc:d4:ff:92:f7:65:b0: 89:2c:34:c6:1b:da:bc:c9:71:14:b6:3b:c6:96:e3: c1:1e:55:e7:4b:9f:b3:72:37:c3:f6:ed:25:35:68: 61:bf:85:50:65:8e:04:59:3b:22:b7:aa:76:6a:ce: e9:ef:79:f8:a2:c0:de:39:66:cb:5a:61:73:ee:5a: a1:ac:f7:c1:6c:a2:c9:e0:13:ac:cb:ce:64:e1:9b: 99:a7:03:8d:96:a4:e0:37:ce:b9:37:bc:90:1f:03: 79:3d:88:7d:5d:fe:28:f2:a9:0f:b4:fc:bc:5a:1d: 9f:97:cd:55:61:7e:36:b3:8e:03:4e:69:f3:6a:4d: a4:b4:c3:8b:05:0d:49:6b:b4:4f:5d:22:62:a4:61: cb:08:be:63:d8:a2:1d:62:75:67:3a:f0:91:d6:8e: 2c:54:30:5b:08:22:de:99:39:cb:3d:f5:39:45:f6: 96:5d:5a:ff:14:d8:c9:cd:c3:c7:20:e0:a5:eb:95: 25:e3:94:a2:bb:35:48:49:6a:77:cf:b8:8d:2c:f3: ef:a7:bc:c5:25:13:c8:ba:8b:df:12:f5:23:e5:6b: 04:3d:fb:3f:35:9b:53:63:69:98:97:15:b1:1a:44: ae:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:46:01:B7:71:2F:CD:69:BA:40:CD:8E:23:44:8C:D4:3E:66:D6:A6 X509v3 Authority Key Identifier: keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/PUYBt3EvzWm6QM2OI0SM1D5m1qY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.239.127.0/24 185.95.158.0/24 Signature Algorithm: sha256WithRSAEncryption 25:39:fa:3f:08:8e:ff:40:92:2b:03:1e:0b:14:e2:81:aa:e5: 43:f1:72:72:bc:23:2b:04:1a:2e:f1:60:f5:60:7a:f6:34:2c: 75:01:d2:f2:00:e7:d2:bc:37:99:df:56:11:64:c5:fa:c8:10: 5f:fd:a0:1e:b9:63:9d:f9:82:f5:a8:ca:2c:ee:1e:76:5f:91: 51:9d:de:10:d1:37:6a:df:78:33:d0:37:bc:22:06:7c:53:de: 73:bd:f4:6f:92:88:9c:e7:26:5b:bb:9f:89:e4:8b:ce:30:8f: 67:70:db:aa:f6:39:4a:37:aa:98:32:a8:2b:69:86:1a:49:f0: 72:3b:2b:cc:ca:89:e8:73:37:b4:87:80:76:45:ae:f7:f4:30: ff:02:82:dd:40:b8:15:16:a9:4e:18:64:bf:31:cc:6e:60:f2: f3:dc:2c:59:36:55:11:d0:7d:f3:dd:4e:0b:fd:b7:69:9f:45: 9d:94:b0:ec:b9:99:e1:92:de:87:70:cf:50:30:41:c4:8a:2f: 58:03:38:ad:9b:87:de:7d:80:3e:fc:c6:2e:e3:00:03:4a:fc: 21:67:30:14:10:6c:cf:a7:1b:d0:b9:aa:12:60:5f:5d:6c:0b: 91:4a:0c:0f:1d:7f:12:cd:e8:d4:7e:14:d7:12:c0:ba:79:7f: b8:e2:82:b4 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/FgDkhnZtr0ySm6nHkX1kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZDJkYWZmMWM1YmI2MWEwYWM4YjNjYWVhZDRiOGExZmEy ODRkMGYwHhcNMjYwMTAyMTQyMTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZDQ2MDFiNzcxMmZjZDY5YmE0MGNkOGUyMzQ0OGNkNDNlNjZkNmE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1gnIdYDNfTzkQZcw5X7BdmIeqRf CNzU/5L3ZbCJLDTGG9q8yXEUtjvGluPBHlXnS5+zcjfD9u0lNWhhv4VQZY4EWTsi t6p2as7p73n4osDeOWbLWmFz7lqhrPfBbKLJ4BOsy85k4ZuZpwONlqTgN865N7yQ HwN5PYh9Xf4o8qkPtPy8Wh2fl81VYX42s44DTmnzak2ktMOLBQ1Ja7RPXSJipGHL CL5j2KIdYnVnOvCR1o4sVDBbCCLemTnLPfU5RfaWXVr/FNjJzcPHIOCl65Ul45Si uzVISWp3z7iNLPPvp7zFJRPIuovfEvUj5WsEPfs/NZtTY2mYlxWxGkSuvwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFD1GAbdxL81pukDNjiNEjNQ+ZtamMB8GA1UdIwQY MBaAFCnS2v8cW7YaCsizyurUuKH6KE0PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3Zjgt NGY1N2Q5Y2Y1Y2FhLzEvUFVZQnQzRXZ6V202UU0yT0kwU00xRDVtMXFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3ZjgtNGY1N2Q5Y2Y1Y2Fh LzEvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAsu9/AwQA uV+eMA0GCSqGSIb3DQEBCwUAA4IBAQAlOfo/CI7/QJIrAx4LFOKBquVD8XJyvCMr BBou8WD1YHr2NCx1AdLyAOfSvDeZ31YRZMX6yBBf/aAeuWOd+YL1qMos7h52X5FR nd4Q0Tdq33gz0De8IgZ8U95zvfRvkoic5yZbu5+J5IvOMI9ncNuq9jlKN6qYMqgr aYYaSfByOyvMyonocze0h4B2Ra739DD/AoLdQLgVFqlOGGS/McxuYPLz3CxZNlUR 0H3z3U4L/bdpn0WdlLDsuZnhkt6HcM9QMEHEii9YAzitm4fefYA+/MYu4wADSvwh ZzAUEGzPpxvQuaoSYF9dbAuRSgwPHX8SzejUfhTXEsC6eX+44oK0 -----END CERTIFICATE-----Generated at Wed Jan 7 23:51:45 2026 by rpki-client