This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/a2a6ad-b15f-4734-b59e-664a9926f333/1/SU9PYRAM665DV-tMHEvPHcVEgsI.roa File: SU9PYRAM665DV-tMHEvPHcVEgsI.roa (raw, json) Hash identifier: jeXeTXBC5h2fT2fI75NdT9H4uSbQgepZnNzAOw/Te8I= Subject key identifier: 49:4F:4F:61:10:0C:EB:AE:43:57:EB:4C:1C:4B:CF:1D:C5:44:82:C2 Certificate issuer: /CN=c5450afa73f0b87a420028c2b2a48cce0fe92b0a Certificate serial: 019B7834A60523C9F12F393FAAFDEBF0DE07 Authority key identifier: C5:45:0A:FA:73:F0:B8:7A:42:00:28:C2:B2:A4:8C:CE:0F:E9:2B:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xUUK-nPwuHpCACjCsqSMzg_pKwo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/a2a6ad-b15f-4734-b59e-664a9926f333/1/SU9PYRAM665DV-tMHEvPHcVEgsI.roa Signing time: Thu 01 Jan 2026 06:17:54 +0000 ROA not before: Thu 01 Jan 2026 06:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201263 IP address blocks: 147.229.255.0/24 maxlen: 24 2001:67c:1223::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/a2a6ad-b15f-4734-b59e-664a9926f333/1/xUUK-nPwuHpCACjCsqSMzg_pKwo.crl rsync://rpki.ripe.net/repository/DEFAULT/29/a2a6ad-b15f-4734-b59e-664a9926f333/1/xUUK-nPwuHpCACjCsqSMzg_pKwo.mft rsync://rpki.ripe.net/repository/DEFAULT/xUUK-nPwuHpCACjCsqSMzg_pKwo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:a6:05:23:c9:f1:2f:39:3f:aa:fd:eb:f0:de:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5450afa73f0b87a420028c2b2a48cce0fe92b0a Validity Not Before: Jan 1 06:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=494f4f61100cebae4357eb4c1c4bcf1dc54482c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:4c:4b:77:96:53:50:90:c0:1b:6a:0c:a9:2e: 49:f5:cb:d1:c9:be:18:0a:00:5a:c1:52:7b:6b:d8: c4:e7:7f:18:d6:65:ee:0d:fd:e6:47:b6:24:82:72: 2a:1a:41:0d:79:bf:47:18:4e:2f:70:79:be:4c:0b: 56:e5:50:3d:27:45:ef:e7:30:9e:69:0c:5f:36:63: ea:3f:40:3a:68:f6:7f:f6:23:12:92:23:19:50:29: 30:74:7c:4d:c5:d2:47:ce:cc:89:08:84:5e:d1:ee: 4a:74:bb:0a:0b:2b:fa:e5:54:cd:54:65:72:d8:d4: 51:72:ff:e8:e9:b6:11:ea:10:96:be:c9:a3:f3:84: e3:f9:96:49:bb:ac:9b:73:d2:9b:3a:8b:70:89:3a: af:70:02:78:3d:83:66:2f:75:b7:d6:f9:99:03:9e: 21:37:69:c5:f9:c0:f1:27:55:2f:73:71:cc:a3:83: 0b:6f:d1:0e:9e:cb:4e:78:17:b0:5b:08:d8:58:09: 0d:36:6d:51:f6:02:d4:f3:60:82:8f:b4:32:34:2b: 0c:ea:ad:a2:4b:81:1e:6d:be:c1:d2:ed:16:4d:a6: 70:d9:8b:e7:32:8a:34:84:2d:d0:9b:46:09:18:ec: 97:ea:43:6d:0b:a3:05:b4:cb:b6:38:2f:40:e4:f2: 64:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:4F:4F:61:10:0C:EB:AE:43:57:EB:4C:1C:4B:CF:1D:C5:44:82:C2 X509v3 Authority Key Identifier: keyid:C5:45:0A:FA:73:F0:B8:7A:42:00:28:C2:B2:A4:8C:CE:0F:E9:2B:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xUUK-nPwuHpCACjCsqSMzg_pKwo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a2a6ad-b15f-4734-b59e-664a9926f333/1/SU9PYRAM665DV-tMHEvPHcVEgsI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a2a6ad-b15f-4734-b59e-664a9926f333/1/xUUK-nPwuHpCACjCsqSMzg_pKwo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.229.255.0/24 IPv6: 2001:67c:1223::/48 Signature Algorithm: sha256WithRSAEncryption 46:9e:ff:71:5e:34:5c:30:92:da:57:57:be:aa:b9:20:15:ce: 9b:b6:f4:4f:1b:f5:85:ee:de:35:6b:13:27:1a:b3:86:86:2b: af:11:65:67:4a:5f:b2:3f:aa:cb:b9:ce:a7:ca:cd:25:89:da: 2b:52:d8:fe:95:3a:79:00:3b:42:22:0d:7c:a0:9d:1e:05:4f: 69:a0:80:68:19:25:80:c1:7d:0f:5e:39:7f:4c:91:65:c0:e0: 00:e9:7b:2d:58:a6:ec:79:48:90:75:0e:91:0f:bf:fb:77:57: ef:8c:aa:cb:64:3a:05:f8:63:41:29:ca:7c:56:fd:dc:78:1c: 83:7e:cb:c2:78:28:07:78:56:e0:87:23:55:a5:73:6e:cb:22: 87:bf:22:71:8f:9d:48:54:99:9c:1d:44:a1:5c:2f:f9:d5:a9: 57:94:2e:4d:0f:8b:1b:09:14:6d:7d:fb:7f:27:16:84:c5:98: a5:39:e6:ea:6a:d9:d8:4e:06:d7:09:05:54:2e:86:18:81:ba: 4d:9b:94:a5:f7:1b:3d:c7:74:81:d2:6e:f8:7c:cf:c7:de:78: c2:e9:6b:83:e9:22:e6:23:4b:cc:56:c2:ea:52:68:af:b7:df: 5f:01:b5:d9:fa:7c:32:5e:06:d3:13:7c:50:c9:18:31:ab:30: 5a:97:b5:4d -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt4NKYFI8nxLzk/qv3r8N4HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1NDUwYWZhNzNmMGI4N2E0MjAwMjhjMmIyYTQ4Y2NlMGZl OTJiMGEwHhcNMjYwMTAxMDYxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OTRmNGY2MTEwMGNlYmFlNDM1N2ViNGMxYzRiY2YxZGM1NDQ4MmMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0kxLd5ZTUJDAG2oMqS5J9cvRyb4Y CgBawVJ7a9jE538Y1mXuDf3mR7YkgnIqGkENeb9HGE4vcHm+TAtW5VA9J0Xv5zCe aQxfNmPqP0A6aPZ/9iMSkiMZUCkwdHxNxdJHzsyJCIRe0e5KdLsKCyv65VTNVGVy 2NRRcv/o6bYR6hCWvsmj84Tj+ZZJu6ybc9KbOotwiTqvcAJ4PYNmL3W31vmZA54h N2nF+cDxJ1Uvc3HMo4MLb9EOnstOeBewWwjYWAkNNm1R9gLU82CCj7QyNCsM6q2i S4Eebb7B0u0WTaZw2YvnMoo0hC3Qm0YJGOyX6kNtC6MFtMu2OC9A5PJkjwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFElPT2EQDOuuQ1frTBxLzx3FRILCMB8GA1UdIwQY MBaAFMVFCvpz8Lh6QgAowrKkjM4P6SsKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFVVSy1uUHd1SHBDQUNqQ3NxU016Z19wS3dvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9hMmE2YWQtYjE1Zi00NzM0LWI1OWUt NjY0YTk5MjZmMzMzLzEvU1U5UFlSQU02NjVEVi10TUhFdlBIY1ZFZ3NJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9hMmE2YWQtYjE1Zi00NzM0LWI1OWUtNjY0YTk5MjZmMzMz LzEveFVVSy1uUHd1SHBDQUNqQ3NxU016Z19wS3dvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAk+X/MA8E AgACMAkDBwAgAQZ8EiMwDQYJKoZIhvcNAQELBQADggEBAEae/3FeNFwwktpXV76q uSAVzpu29E8b9YXu3jVrEycas4aGK68RZWdKX7I/qsu5zqfKzSWJ2itS2P6VOnkA O0IiDXygnR4FT2mggGgZJYDBfQ9eOX9MkWXA4ADpey1Ypux5SJB1DpEPv/t3V++M qstkOgX4Y0EpynxW/dx4HIN+y8J4KAd4VuCHI1Wlc27LIoe/InGPnUhUmZwdRKFc L/nVqVeULk0PixsJFG19+38nFoTFmKU55upq2dhOBtcJBVQuhhiBuk2blKX3Gz3H dIHSbvh8z8feeMLpa4PpIuYjS8xWwupSaK+3318Btdn6fDJeBtMTfFDJGDGrMFqX tU0= -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:43 2026 by rpki-client