This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/py_HMXyWowebNygUHQQNEl14tcw.roa File: py_HMXyWowebNygUHQQNEl14tcw.roa (raw, json) Hash identifier: SpOAHtYMxB+W2GTIMsJ28rO0dkeH/t6R4g+TkZmPw4c= Subject key identifier: A7:2F:C7:31:7C:96:A3:07:9B:37:28:14:1D:04:0D:12:5D:78:B5:CC Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Certificate serial: 019B7F14A8E933A36707E645956F1C986CE0 Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/py_HMXyWowebNygUHQQNEl14tcw.roa Signing time: Fri 02 Jan 2026 14:20:18 +0000 ROA not before: Fri 02 Jan 2026 14:20:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19695 IP address blocks: 62.105.192.0/21 maxlen: 24 217.8.208.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 16:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:a8:e9:33:a3:67:07:e6:45:95:6f:1c:98:6c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Validity Not Before: Jan 2 14:20:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a72fc7317c96a3079b3728141d040d125d78b5cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:17:f4:c0:f2:60:5e:c3:3b:5b:ef:84:5d:fb: 23:ad:8a:27:ef:33:48:6c:21:c5:dc:03:8a:07:50: f9:e2:6a:89:a5:60:c2:a8:81:2b:92:57:e2:a9:b4: 98:87:5f:5a:b9:a5:16:51:d7:a5:3a:ff:04:da:cc: bc:92:5c:0c:2a:6c:71:c1:7b:b8:07:d6:a2:2b:a0: 35:de:16:18:b9:17:3d:73:3b:2b:df:ec:4b:e5:c6: 8f:f7:ff:48:54:c3:d3:2f:1f:b7:be:81:e0:72:7c: 2b:ad:11:28:d0:02:c2:92:ac:c8:0d:bd:e3:8f:af: b0:d2:4a:69:b9:e6:61:11:b1:28:e8:1e:fe:07:91: b2:21:b4:05:cf:ba:0a:60:54:de:a7:06:43:1d:72: 00:9e:c5:a7:dc:d6:3b:e1:93:b5:9c:a5:30:d4:29: b3:fc:f8:98:b8:65:b0:f5:1c:40:32:c9:f9:76:65: 4f:70:cb:0b:1e:7b:5a:d7:da:32:bf:c8:01:2b:42: d0:48:a1:1a:ad:ea:16:9a:b6:40:5e:b8:64:94:cd: a7:c8:3e:e8:0e:40:a7:7c:6c:68:60:28:c0:11:2e: 46:4d:a9:35:e0:b5:13:ec:88:0c:da:3f:2f:93:0d: 35:48:c7:a6:78:18:e9:1d:fb:67:ed:7b:bc:68:ed: 4d:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:2F:C7:31:7C:96:A3:07:9B:37:28:14:1D:04:0D:12:5D:78:B5:CC X509v3 Authority Key Identifier: keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/py_HMXyWowebNygUHQQNEl14tcw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.105.192.0/21 217.8.208.0/21 Signature Algorithm: sha256WithRSAEncryption 0d:d5:de:66:24:19:2e:df:4a:c3:32:4b:87:5a:29:74:f8:5e: 4c:0f:f6:8c:9f:ae:98:05:2d:e8:aa:58:6a:42:cd:34:e2:c6: c7:16:94:b3:81:d0:9b:bf:68:83:91:3e:75:2c:ee:65:45:a7: 57:8b:91:25:a9:6b:e2:89:1f:f7:16:2e:28:07:57:ab:d8:e5: d1:40:12:d5:e8:66:26:69:3e:d9:22:17:50:ff:bf:09:44:69: c9:0e:87:56:de:5d:d1:c9:55:8c:ca:7f:83:0a:08:d5:3a:c2: f7:08:21:af:3a:de:8e:df:44:91:dc:f8:d1:49:9e:9e:be:17: ca:86:85:14:ca:51:99:e6:d4:3b:24:a1:de:55:60:02:de:3e: 7d:70:b3:ce:57:40:bc:a6:f7:96:6c:6b:88:67:8b:00:46:10: 94:9d:c0:c9:96:06:68:57:04:14:c8:a0:d7:f5:e4:e5:d9:53: cc:60:68:81:aa:1c:ad:fd:d6:19:a2:76:35:a5:c3:aa:94:33: 4e:41:c0:97:36:57:a8:b0:8b:80:82:df:58:a5:52:dd:a6:5b: 2c:56:cf:1e:fc:12:f9:22:5f:3a:a7:ad:16:03:40:6e:7b:1d: 25:ca:11:0c:17:45:2a:50:8f:c9:2a:7a:11:62:c1:43:ae:e3: 74:46:b1:09 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/FKjpM6NnB+ZFlW8cmGzgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0 NmQxNzEwHhcNMjYwMTAyMTQyMDE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNzJmYzczMTdjOTZhMzA3OWIzNzI4MTQxZDA0MGQxMjVkNzhiNWNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRf0wPJgXsM7W++EXfsjrYon7zNI bCHF3AOKB1D54mqJpWDCqIErklfiqbSYh19auaUWUdelOv8E2sy8klwMKmxxwXu4 B9aiK6A13hYYuRc9czsr3+xL5caP9/9IVMPTLx+3voHgcnwrrREo0ALCkqzIDb3j j6+w0kppueZhEbEo6B7+B5GyIbQFz7oKYFTepwZDHXIAnsWn3NY74ZO1nKUw1Cmz /PiYuGWw9RxAMsn5dmVPcMsLHnta19oyv8gBK0LQSKEareoWmrZAXrhklM2nyD7o DkCnfGxoYCjAES5GTak14LUT7IgM2j8vkw01SMemeBjpHftn7Xu8aO1NxQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKcvxzF8lqMHmzcoFB0EDRJdeLXMMB8GA1UdIwQY MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt MGNmMTA5M2Q0NTQ4LzEvcHlfSE1YeVdvd2ViTnlnVUhRUU5FbDE0dGN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4 LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDPmnAAwQD 2QjQMA0GCSqGSIb3DQEBCwUAA4IBAQAN1d5mJBku30rDMkuHWil0+F5MD/aMn66Y BS3oqlhqQs004sbHFpSzgdCbv2iDkT51LO5lRadXi5ElqWviiR/3Fi4oB1er2OXR QBLV6GYmaT7ZIhdQ/78JRGnJDodW3l3RyVWMyn+DCgjVOsL3CCGvOt6O30SR3PjR SZ6evhfKhoUUylGZ5tQ7JKHeVWAC3j59cLPOV0C8pveWbGuIZ4sARhCUncDJlgZo VwQUyKDX9eTl2VPMYGiBqhyt/dYZonY1pcOqlDNOQcCXNleosIuAgt9YpVLdplss Vs8e/BL5Il86p60WA0Buex0lyhEMF0UqUI/JKnoRYsFDruN0RrEJ -----END CERTIFICATE-----Generated at Tue Jan 13 00:49:15 2026 by rpki-client