This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/f6bbd3-ae27-4dc7-b669-c5263b3303b9/1/PYDato-ASu6UXDdHs5gP0K32nY4.roa File: PYDato-ASu6UXDdHs5gP0K32nY4.roa (raw, json) Hash identifier: yQRUA3xyuLF4WYI3cv0hMQ5bIo4W5JbDMtC9jfgPPDQ= Subject key identifier: 3D:80:DA:B6:8F:80:4A:EE:94:5C:37:47:B3:98:0F:D0:AD:F6:9D:8E Certificate issuer: /CN=9f3f9871536d60bf74bdf69060c90d54107d8e38 Certificate serial: 019B797E441A49634BBDFAC8754B67D495DB Authority key identifier: 9F:3F:98:71:53:6D:60:BF:74:BD:F6:90:60:C9:0D:54:10:7D:8E:38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nz-YcVNtYL90vfaQYMkNVBB9jjg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/f6bbd3-ae27-4dc7-b669-c5263b3303b9/1/PYDato-ASu6UXDdHs5gP0K32nY4.roa Signing time: Thu 01 Jan 2026 12:17:56 +0000 ROA not before: Thu 01 Jan 2026 12:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60111 IP address blocks: 185.254.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/f6bbd3-ae27-4dc7-b669-c5263b3303b9/1/nz-YcVNtYL90vfaQYMkNVBB9jjg.crl rsync://rpki.ripe.net/repository/DEFAULT/23/f6bbd3-ae27-4dc7-b669-c5263b3303b9/1/nz-YcVNtYL90vfaQYMkNVBB9jjg.mft rsync://rpki.ripe.net/repository/DEFAULT/nz-YcVNtYL90vfaQYMkNVBB9jjg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:44:1a:49:63:4b:bd:fa:c8:75:4b:67:d4:95:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f3f9871536d60bf74bdf69060c90d54107d8e38 Validity Not Before: Jan 1 12:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3d80dab68f804aee945c3747b3980fd0adf69d8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:9e:cf:9e:ea:21:72:d7:1a:9f:da:3d:7b:41: 99:ae:cf:a1:08:e2:c8:63:2e:8d:7b:96:94:13:dc: db:3f:7c:ca:6a:a3:1d:2f:eb:7e:35:4f:10:44:66: 33:13:17:cd:54:08:aa:40:e7:c5:00:b8:00:76:4d: a4:0b:fb:97:39:22:88:31:6b:7b:c1:00:f8:10:39: 84:fb:16:58:f6:b0:57:5c:0c:ca:17:1b:b4:e8:b5: 22:80:ab:81:4f:50:b5:00:ab:60:1a:6a:00:7d:23: 70:b4:33:1c:ff:13:55:77:47:7f:10:79:b6:9c:62: bb:69:65:e1:c5:a5:5c:b9:ba:14:01:da:52:b3:5d: 14:a3:6c:e7:82:60:20:8b:ba:f2:85:24:12:fc:e8: bd:fc:ee:43:4c:ce:68:46:61:0a:47:1e:2d:39:69: 8e:a8:68:8c:25:8b:a5:3b:8d:79:97:85:4f:c5:a3: 2d:62:d3:06:8b:a4:b0:58:36:95:ec:59:a0:95:6e: a0:57:d1:98:1e:50:7c:70:0b:49:6a:b4:9a:71:4e: 8d:24:e8:1f:b9:6c:27:ff:42:df:0a:49:0f:85:f6: 22:a8:36:31:f7:d0:d8:88:55:f2:db:70:98:87:4a: b6:2e:fa:f9:1e:0b:ce:b2:07:f6:7b:bc:d4:ec:cd: a1:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:80:DA:B6:8F:80:4A:EE:94:5C:37:47:B3:98:0F:D0:AD:F6:9D:8E X509v3 Authority Key Identifier: keyid:9F:3F:98:71:53:6D:60:BF:74:BD:F6:90:60:C9:0D:54:10:7D:8E:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nz-YcVNtYL90vfaQYMkNVBB9jjg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f6bbd3-ae27-4dc7-b669-c5263b3303b9/1/PYDato-ASu6UXDdHs5gP0K32nY4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f6bbd3-ae27-4dc7-b669-c5263b3303b9/1/nz-YcVNtYL90vfaQYMkNVBB9jjg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.254.128.0/22 Signature Algorithm: sha256WithRSAEncryption b0:2c:25:70:0d:8c:28:cb:73:9f:55:07:a0:d1:9b:21:68:90: 86:76:74:c1:1c:41:f8:e7:fb:9c:35:1a:f6:68:79:e2:69:e0: 96:36:78:b4:7b:ab:99:3f:18:49:61:a2:e5:a2:2f:79:35:8b: ae:c4:83:da:14:cb:98:94:eb:74:ab:9e:35:88:2a:6f:22:8c: b3:59:f1:3b:77:a5:b2:63:f9:7c:a0:7e:58:63:6d:16:0b:24: 39:89:f2:03:fe:bc:7c:9a:a6:4b:fc:28:d7:5e:c8:39:04:5b: 77:44:60:68:46:3f:77:3f:1c:ca:f3:6d:c0:20:aa:6a:42:03: 86:63:bd:dd:a3:ce:77:33:65:08:b9:3b:1a:cc:72:e0:77:19: 7b:31:d6:f4:98:b3:10:a3:48:72:04:f8:45:48:c7:61:41:70: 7e:f6:91:5a:83:f5:d3:ec:b1:b7:0d:69:cd:7f:05:c8:64:d8: fa:92:13:62:ec:65:56:eb:8b:c2:57:50:0e:6b:8f:09:65:e2: b1:42:80:cc:33:54:81:37:5b:dc:d9:d0:62:f4:47:f5:c3:16: 7c:da:ea:c6:d2:e7:73:a8:f6:57:14:40:e6:27:28:9d:fd:e4: fe:57:db:ca:ae:97:b5:cc:49:26:f4:b3:7b:71:42:b0:29:9a: 00:2b:4c:96 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fkQaSWNLvfrIdUtn1JXbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmM2Y5ODcxNTM2ZDYwYmY3NGJkZjY5MDYwYzkwZDU0MTA3 ZDhlMzgwHhcNMjYwMTAxMTIxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZDgwZGFiNjhmODA0YWVlOTQ1YzM3NDdiMzk4MGZkMGFkZjY5ZDhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZ7Pnuohctcan9o9e0GZrs+hCOLI Yy6Ne5aUE9zbP3zKaqMdL+t+NU8QRGYzExfNVAiqQOfFALgAdk2kC/uXOSKIMWt7 wQD4EDmE+xZY9rBXXAzKFxu06LUigKuBT1C1AKtgGmoAfSNwtDMc/xNVd0d/EHm2 nGK7aWXhxaVcuboUAdpSs10Uo2zngmAgi7ryhSQS/Oi9/O5DTM5oRmEKRx4tOWmO qGiMJYulO415l4VPxaMtYtMGi6SwWDaV7FmglW6gV9GYHlB8cAtJarSacU6NJOgf uWwn/0LfCkkPhfYiqDYx99DYiFXy23CYh0q2Lvr5HgvOsgf2e7zU7M2h2QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD2A2raPgErulFw3R7OYD9Ct9p2OMB8GA1UdIwQY MBaAFJ8/mHFTbWC/dL32kGDJDVQQfY44MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnotWWNWTnRZTDkwdmZhUVlNa05WQkI5ampnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9mNmJiZDMtYWUyNy00ZGM3LWI2Njkt YzUyNjNiMzMwM2I5LzEvUFlEYXRvLUFTdTZVWERkSHM1Z1AwSzMyblk0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9mNmJiZDMtYWUyNy00ZGM3LWI2NjktYzUyNjNiMzMwM2I5 LzEvbnotWWNWTnRZTDkwdmZhUVlNa05WQkI5ampnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuf6AMA0G CSqGSIb3DQEBCwUAA4IBAQCwLCVwDYwoy3OfVQeg0ZshaJCGdnTBHEH45/ucNRr2 aHniaeCWNni0e6uZPxhJYaLloi95NYuuxIPaFMuYlOt0q541iCpvIoyzWfE7d6Wy Y/l8oH5YY20WCyQ5ifID/rx8mqZL/CjXXsg5BFt3RGBoRj93PxzK823AIKpqQgOG Y73do853M2UIuTsazHLgdxl7Mdb0mLMQo0hyBPhFSMdhQXB+9pFag/XT7LG3DWnN fwXIZNj6khNi7GVW64vCV1AOa48JZeKxQoDMM1SBN1vc2dBi9Ef1wxZ82urG0udz qPZXFEDmJyid/eT+V9vKrpe1zEkm9LN7cUKwKZoAK0yW -----END CERTIFICATE-----Generated at Mon Feb 9 20:09:08 2026 by rpki-client