This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/PYSOuEJKXfFv96PrgahNaZWMo90.roa File: PYSOuEJKXfFv96PrgahNaZWMo90.roa (raw, json) Hash identifier: 1YHoKoxpfqieDN1YXiLCsR8fSH3v1YL6XK2N4m5fa+I= Subject key identifier: 3D:84:8E:B8:42:4A:5D:F1:6F:F7:A3:EB:81:A8:4D:69:95:8C:A3:DD Certificate issuer: /CN=f84a65599afb9d8727c3db947effbae2e5b853d1 Certificate serial: 019B7758BF00D29729B040845813340613F3 Authority key identifier: F8:4A:65:59:9A:FB:9D:87:27:C3:DB:94:7E:FF:BA:E2:E5:B8:53:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-EplWZr7nYcnw9uUfv-64uW4U9E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/PYSOuEJKXfFv96PrgahNaZWMo90.roa Signing time: Thu 01 Jan 2026 02:17:43 +0000 ROA not before: Thu 01 Jan 2026 02:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207498 IP address blocks: 212.6.41.0/24 maxlen: 24 2a0d:9b00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.crl rsync://rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.mft rsync://rpki.ripe.net/repository/DEFAULT/1-EplWZr7nYcnw9uUfv-64uW4U9E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:bf:00:d2:97:29:b0:40:84:58:13:34:06:13:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f84a65599afb9d8727c3db947effbae2e5b853d1 Validity Not Before: Jan 1 02:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3d848eb8424a5df16ff7a3eb81a84d69958ca3dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:7d:4a:f0:a9:20:06:ce:d7:c1:12:31:8f:3b: ef:73:d4:0c:70:6b:c6:52:05:59:a3:64:93:1c:bb: 1f:24:90:99:d5:ad:84:4b:e1:87:b3:31:e0:5a:26: b7:20:3f:23:74:3c:c0:19:51:94:d8:90:71:8c:57: cd:90:2e:3a:04:da:0d:48:66:a0:d9:83:f5:52:65: b3:ac:4a:2f:11:38:ca:78:14:f0:32:d2:b0:b1:5b: 00:b4:8d:2a:3f:1a:c7:85:62:71:20:22:9a:05:d7: 21:77:6c:90:f1:44:06:b0:86:1c:07:8a:36:64:90: 30:1c:35:f6:80:0d:38:06:99:c6:1b:5e:4c:ba:15: 09:e7:b9:70:d9:fd:64:af:f5:2a:07:b8:f0:1c:ec: 38:94:54:83:4a:78:69:81:c4:b9:07:75:24:c8:a9: 17:e7:c5:17:91:d7:f8:08:fe:25:ea:7e:89:28:cc: 55:4d:bc:35:65:b4:0c:81:0c:c3:60:5f:72:44:7a: ff:e1:fd:de:d0:4f:3a:54:46:ba:29:2c:0d:fb:38: 74:b5:9c:52:eb:e9:1c:74:7d:4d:2a:78:fe:08:d1: 0a:f0:ba:e3:be:f4:3d:68:a3:7f:d9:b7:d3:61:4d: 32:ce:fa:57:25:87:dd:42:c4:ac:5f:9e:79:ad:e8: 6f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:84:8E:B8:42:4A:5D:F1:6F:F7:A3:EB:81:A8:4D:69:95:8C:A3:DD X509v3 Authority Key Identifier: keyid:F8:4A:65:59:9A:FB:9D:87:27:C3:DB:94:7E:FF:BA:E2:E5:B8:53:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-EplWZr7nYcnw9uUfv-64uW4U9E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/PYSOuEJKXfFv96PrgahNaZWMo90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.6.41.0/24 IPv6: 2a0d:9b00::/32 Signature Algorithm: sha256WithRSAEncryption 8a:ec:56:ac:ca:67:30:b5:c2:0b:62:c9:54:4c:f1:3c:85:52: 4e:08:87:f8:c0:71:f9:65:e8:31:fa:7a:bf:21:5b:2b:4b:dd: 75:53:99:2c:99:a1:f0:78:e9:8c:be:de:96:9c:d9:42:f9:2b: 39:fd:2a:75:85:3d:f5:62:5c:44:e7:64:b3:fb:b1:91:3d:1c: f7:b6:b2:91:1a:32:d8:a5:35:aa:7b:06:ce:e2:99:f9:55:6d: af:a9:86:67:f3:d6:5f:b0:8c:d4:f0:3a:fe:e9:cf:03:bc:9b: 3e:5b:f6:b8:78:9d:44:e1:a4:07:dc:35:e5:b8:ba:68:ad:ac: d3:e8:b8:72:c2:82:05:93:9c:4a:3a:5f:60:00:34:f2:23:34: 2c:39:f9:c8:54:1d:bd:42:76:57:33:79:c1:d4:9a:ca:60:70: d7:a7:8e:f1:d6:9c:a6:fd:73:80:80:6f:21:b9:2f:5d:db:c6: 27:c7:0f:c4:10:98:6d:41:ba:9e:9b:3f:ea:bc:10:9c:55:68: fc:29:ed:cf:27:42:26:c6:ed:4d:95:a9:f5:c4:0a:e8:21:9f: 1a:d9:5d:21:8b:c9:e8:60:b4:d9:b4:9a:13:21:49:78:93:3d: f1:60:fb:b0:16:1a:c0:99:8f:42:26:d5:10:e7:3e:84:6b:61: 27:8d:c5:35 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt3WL8A0pcpsECEWBM0BhPzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4NGE2NTU5OWFmYjlkODcyN2MzZGI5NDdlZmZiYWUyZTVi ODUzZDEwHhcNMjYwMTAxMDIxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZDg0OGViODQyNGE1ZGYxNmZmN2EzZWI4MWE4NGQ2OTk1OGNhM2RkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0X1K8KkgBs7XwRIxjzvvc9QMcGvG UgVZo2STHLsfJJCZ1a2ES+GHszHgWia3ID8jdDzAGVGU2JBxjFfNkC46BNoNSGag 2YP1UmWzrEovETjKeBTwMtKwsVsAtI0qPxrHhWJxICKaBdchd2yQ8UQGsIYcB4o2 ZJAwHDX2gA04BpnGG15MuhUJ57lw2f1kr/UqB7jwHOw4lFSDSnhpgcS5B3UkyKkX 58UXkdf4CP4l6n6JKMxVTbw1ZbQMgQzDYF9yRHr/4f3e0E86VEa6KSwN+zh0tZxS 6+kcdH1NKnj+CNEK8LrjvvQ9aKN/2bfTYU0yzvpXJYfdQsSsX555rehvdQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFD2EjrhCSl3xb/ej64GoTWmVjKPdMB8GA1UdIwQY MBaAFPhKZVma+52HJ8PblH7/uuLluFPRMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1FcGxXWnI3blljbnc5dVVmdi02NHVXNFU5RS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDEvNTY1N2M4LTUwMzctNDhjZC04ZGI1 LTgxMTVkZjMxNzIzNS8xL1BZU091RUpLWGZGdjk2UHJnYWhOYVpXTW85MC5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNDEvNTY1N2M4LTUwMzctNDhjZC04ZGI1LTgxMTVkZjMxNzIz NS8xLzEtRXBsV1pyN25ZY253OXVVZnYtNjR1VzRVOUUuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBADUBikw DQQCAAIwBwMFACoNmwAwDQYJKoZIhvcNAQELBQADggEBAIrsVqzKZzC1wgtiyVRM 8TyFUk4Ih/jAcfll6DH6er8hWytL3XVTmSyZofB46Yy+3pac2UL5Kzn9KnWFPfVi XETnZLP7sZE9HPe2spEaMtilNap7Bs7imflVba+phmfz1l+wjNTwOv7pzwO8mz5b 9rh4nUThpAfcNeW4umitrNPouHLCggWTnEo6X2AANPIjNCw5+chUHb1CdlczecHU mspgcNenjvHWnKb9c4CAbyG5L13bxifHD8QQmG1Bup6bP+q8EJxVaPwp7c8nQibG 7U2VqfXECughnxrZXSGLyehgtNm0mhMhSXiTPfFg+7AWGsCZj0Im1RDnPoRrYSeN xTU= -----END CERTIFICATE-----Generated at Mon Feb 9 20:05:19 2026 by rpki-client