This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/PYWzmSYOo9ATNgcN3fRPebwQl3Q.roa File: PYWzmSYOo9ATNgcN3fRPebwQl3Q.roa (raw, json) Hash identifier: 3u1bgAPgKfqAWtSr7rEwYv5yaXX4xTFybsPUpcBsSug= Subject key identifier: 3D:85:B3:99:26:0E:A3:D0:13:36:07:0D:DD:F4:4F:79:BC:10:97:74 Certificate issuer: /CN=181e4d608152fc244afffba2dc72b851b19b2527 Certificate serial: 019B775904446016D41EF9EF8875EBF0DBED Authority key identifier: 18:1E:4D:60:81:52:FC:24:4A:FF:FB:A2:DC:72:B8:51:B1:9B:25:27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GB5NYIFS_CRK__ui3HK4UbGbJSc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/PYWzmSYOo9ATNgcN3fRPebwQl3Q.roa Signing time: Thu 01 Jan 2026 02:18:01 +0000 ROA not before: Thu 01 Jan 2026 02:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209867 IP address blocks: 86.62.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/GB5NYIFS_CRK__ui3HK4UbGbJSc.crl rsync://rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/GB5NYIFS_CRK__ui3HK4UbGbJSc.mft rsync://rpki.ripe.net/repository/DEFAULT/GB5NYIFS_CRK__ui3HK4UbGbJSc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:04:44:60:16:d4:1e:f9:ef:88:75:eb:f0:db:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=181e4d608152fc244afffba2dc72b851b19b2527 Validity Not Before: Jan 1 02:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3d85b399260ea3d01336070dddf44f79bc109774 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:cd:99:6c:58:40:55:e1:47:33:b1:af:50:20: 9e:76:07:fc:56:e4:84:43:87:85:d7:59:21:18:b3: d2:6d:e7:4c:4e:5f:fd:98:94:a1:6c:d8:6f:99:57: 20:8b:5d:c1:11:a8:75:ba:9f:74:ec:af:7a:89:b2: 5d:d9:0b:bb:43:10:66:ce:56:bb:4e:46:0c:f4:58: 34:ec:ad:a8:bc:fd:a4:3d:d8:fe:3b:25:4f:2d:46: 39:ba:10:b7:9d:5c:b2:3c:b1:69:0d:b0:b4:07:81: b5:3a:a2:42:66:f6:a5:82:47:8f:f3:a4:08:5f:6d: 27:2f:da:3c:17:0f:dc:3d:08:69:03:d3:b7:f9:bb: dc:ed:1a:6e:43:c9:c2:75:af:f8:ae:39:3c:9d:84: 55:3d:84:ad:e4:09:c2:8f:ae:6f:93:fc:31:27:50: b0:34:3f:0e:87:02:32:25:77:ec:d6:db:44:ea:ff: b8:f1:96:bd:52:68:8b:04:a8:88:f9:fa:ab:03:6f: d1:3c:4b:cc:88:19:8d:49:ba:e1:f2:20:4c:d7:26: 2b:b7:d1:2e:b2:e2:72:66:2f:50:9a:cd:15:c1:79: ac:30:21:2b:63:d0:e1:63:fc:da:f4:62:18:74:c8: f0:92:89:b1:16:c3:7f:ec:4e:1e:cb:41:96:6f:5e: 6d:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:85:B3:99:26:0E:A3:D0:13:36:07:0D:DD:F4:4F:79:BC:10:97:74 X509v3 Authority Key Identifier: keyid:18:1E:4D:60:81:52:FC:24:4A:FF:FB:A2:DC:72:B8:51:B1:9B:25:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GB5NYIFS_CRK__ui3HK4UbGbJSc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/PYWzmSYOo9ATNgcN3fRPebwQl3Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/GB5NYIFS_CRK__ui3HK4UbGbJSc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.62.7.0/24 Signature Algorithm: sha256WithRSAEncryption 94:c5:f2:3b:8f:5e:f3:78:ee:dc:01:33:97:ed:6e:c1:d4:9c: 9b:e9:24:ff:47:ec:8b:11:09:40:4e:16:17:51:17:2c:08:c3: d9:b2:4e:7a:0a:9a:12:9c:5c:b0:8e:82:bc:d5:4e:2d:37:41: 9a:59:fd:ec:f1:b0:3e:24:3b:08:e5:9b:13:b8:9b:e8:2c:0d: 07:9f:d3:e2:5c:c5:b1:01:96:9c:b3:80:81:54:23:b3:b2:ea: 03:9e:39:ee:8f:19:26:11:3d:ab:b3:f8:20:9a:e4:49:25:85: 6f:ad:fb:b1:52:7d:c0:e8:74:2c:c8:42:25:9d:c6:6c:f7:62: 1d:a8:78:61:d2:04:14:9a:9f:b8:13:c5:92:a8:ec:4c:1a:ee: d1:cb:65:31:40:7c:18:ec:db:ae:4e:85:73:56:5c:f6:b0:d1: f8:a0:54:62:ee:9e:f1:c0:20:2f:5c:26:d1:d9:c9:57:75:b7: ed:01:7a:44:3e:63:ff:da:78:24:e1:de:a3:d4:a9:53:0f:72: cc:77:4d:25:29:2b:a2:d6:79:05:7a:c1:f9:eb:bc:a0:d3:83: 64:e2:a9:f8:a8:86:fc:58:35:1e:24:bb:50:98:7e:b9:9a:c7: db:c3:c0:37:b5:27:f1:d3:99:77:ea:8a:df:95:87:5f:d5:f4: 1d:4e:93:2e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WQREYBbUHvnviHXr8NvtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4MWU0ZDYwODE1MmZjMjQ0YWZmZmJhMmRjNzJiODUxYjE5 YjI1MjcwHhcNMjYwMTAxMDIxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZDg1YjM5OTI2MGVhM2QwMTMzNjA3MGRkZGY0NGY3OWJjMTA5Nzc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoM2ZbFhAVeFHM7GvUCCedgf8VuSE Q4eF11khGLPSbedMTl/9mJShbNhvmVcgi13BEah1up907K96ibJd2Qu7QxBmzla7 TkYM9Fg07K2ovP2kPdj+OyVPLUY5uhC3nVyyPLFpDbC0B4G1OqJCZvalgkeP86QI X20nL9o8Fw/cPQhpA9O3+bvc7RpuQ8nCda/4rjk8nYRVPYSt5AnCj65vk/wxJ1Cw ND8OhwIyJXfs1ttE6v+48Za9UmiLBKiI+fqrA2/RPEvMiBmNSbrh8iBM1yYrt9Eu suJyZi9Qms0VwXmsMCErY9DhY/za9GIYdMjwkomxFsN/7E4ey0GWb15t9QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD2Fs5kmDqPQEzYHDd30T3m8EJd0MB8GA1UdIwQY MBaAFBgeTWCBUvwkSv/7otxyuFGxmyUnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0I1TllJRlNfQ1JLX191aTNISzRVYkdiSlNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85MjE3ZjktODEzZC00N2FmLWFkNjIt MzIyMDhkNTQ0YTg0LzEvUFlXem1TWU9vOUFUTmdjTjNmUlBlYndRbDNRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85MjE3ZjktODEzZC00N2FmLWFkNjItMzIyMDhkNTQ0YTg0 LzEvR0I1TllJRlNfQ1JLX191aTNISzRVYkdiSlNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVj4HMA0G CSqGSIb3DQEBCwUAA4IBAQCUxfI7j17zeO7cATOX7W7B1Jyb6ST/R+yLEQlAThYX URcsCMPZsk56CpoSnFywjoK81U4tN0GaWf3s8bA+JDsI5ZsTuJvoLA0Hn9PiXMWx AZacs4CBVCOzsuoDnjnujxkmET2rs/ggmuRJJYVvrfuxUn3A6HQsyEIlncZs92Id qHhh0gQUmp+4E8WSqOxMGu7Ry2UxQHwY7NuuToVzVlz2sNH4oFRi7p7xwCAvXCbR 2clXdbftAXpEPmP/2ngk4d6j1KlTD3LMd00lKSui1nkFesH567yg04Nk4qn4qIb8 WDUeJLtQmH65msfbw8A3tSfx05l36orflYdf1fQdTpMu -----END CERTIFICATE-----Generated at Tue Feb 10 00:09:15 2026 by rpki-client