This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/PvyjMnxxCs-iD8nNqvgJP0qyjY8.roa File: PvyjMnxxCs-iD8nNqvgJP0qyjY8.roa (raw, json) Hash identifier: 7iRXsmizHd8Z7h/cdyZGhXFEz1E/csMcQ5uEyt4e7f8= Subject key identifier: 3E:FC:A3:32:7C:71:0A:CF:A2:0F:C9:CD:AA:F8:09:3F:4A:B2:8D:8F Certificate issuer: /CN=ac7670698cfaef2647fbc9a06f7380856e2b3027 Certificate serial: 019B7D5B3E4EC69655F4E47848F3E8E103FB Authority key identifier: AC:76:70:69:8C:FA:EF:26:47:FB:C9:A0:6F:73:80:85:6E:2B:30:27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHZwaYz67yZH-8mgb3OAhW4rMCc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/PvyjMnxxCs-iD8nNqvgJP0qyjY8.roa Signing time: Fri 02 Jan 2026 06:18:10 +0000 ROA not before: Fri 02 Jan 2026 06:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62105 IP address blocks: 137.59.8.0/22 maxlen: 22 185.225.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.crl rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft rsync://rpki.ripe.net/repository/DEFAULT/rHZwaYz67yZH-8mgb3OAhW4rMCc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:3e:4e:c6:96:55:f4:e4:78:48:f3:e8:e1:03:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac7670698cfaef2647fbc9a06f7380856e2b3027 Validity Not Before: Jan 2 06:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3efca3327c710acfa20fc9cdaaf8093f4ab28d8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:66:fb:36:35:51:59:e7:c0:55:28:79:cb:cb: 9c:d2:6d:21:ff:a7:7c:83:17:d7:1e:4a:f4:22:8b: b2:23:7d:40:9a:ba:5d:88:00:2e:16:3a:95:0c:c4: da:ab:37:8a:b0:6e:92:c2:d9:bc:3b:b4:f6:af:89: b2:e3:ea:9a:54:f2:d6:41:84:d2:0b:0a:bc:ac:f7: 35:d8:1e:31:fe:bb:1d:46:ec:a5:79:19:79:90:c5: 7b:81:25:7c:36:d2:77:48:b2:c7:96:68:03:ea:3a: 6c:fc:30:8f:76:26:ba:ff:3f:61:f9:5b:5c:09:18: f0:42:1d:34:8f:95:82:fe:90:99:ba:9a:c3:f3:6e: b4:7b:99:e8:ae:51:8b:17:e8:9b:0b:e4:f2:25:10: 8a:26:9c:ef:96:9e:08:25:1c:3c:b7:14:c7:66:2c: 2e:fb:2a:1f:5b:59:51:19:f9:eb:3d:88:1d:c1:2c: e8:34:a5:b2:6d:0f:6a:68:16:55:65:a2:65:23:fe: 5e:36:99:7e:93:10:fb:bf:08:d6:23:0f:68:82:24: 98:68:cf:79:f7:e9:58:43:bd:c1:cf:5b:b1:aa:2b: 11:b3:c7:e4:2a:09:8d:1e:10:aa:27:23:01:f2:b7: fd:c0:b6:0c:d1:7a:86:64:fd:ef:8a:4a:aa:ae:1f: 19:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:FC:A3:32:7C:71:0A:CF:A2:0F:C9:CD:AA:F8:09:3F:4A:B2:8D:8F X509v3 Authority Key Identifier: keyid:AC:76:70:69:8C:FA:EF:26:47:FB:C9:A0:6F:73:80:85:6E:2B:30:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHZwaYz67yZH-8mgb3OAhW4rMCc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/PvyjMnxxCs-iD8nNqvgJP0qyjY8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 137.59.8.0/22 185.225.36.0/22 Signature Algorithm: sha256WithRSAEncryption 6e:6b:5d:72:b3:d4:37:9e:a6:0c:ce:be:12:72:e2:4c:1d:84: 48:2d:a7:f7:de:fe:c8:66:4a:8c:56:d9:3e:7d:6d:43:a9:cb: a7:e5:56:55:98:3c:1f:22:d0:f5:8a:36:ce:47:00:8e:16:01: ce:97:ce:74:01:a5:f6:e5:94:4a:5d:6c:a7:e3:5c:85:5b:27: 33:ab:6a:f5:f3:a5:35:0c:d1:7d:d2:b0:50:a1:70:42:00:27: 28:b3:b3:b3:4a:10:57:46:a3:d0:54:ab:f3:b9:ae:57:b2:0c: cc:a7:65:44:70:7e:05:62:7f:ea:29:8c:c8:e0:57:22:9f:14: 25:5a:97:a6:76:6a:34:a4:a9:cd:52:ae:93:08:51:b2:95:ec: 1a:79:c1:fc:d1:e4:27:3a:a9:3e:51:d6:14:42:a3:c1:f2:2c: 13:3c:9a:91:a7:fe:28:e2:f4:d1:1e:52:24:0c:d2:0b:d2:5a: a1:69:b3:ca:b5:f3:c1:90:1e:01:bb:14:9f:d0:e5:c9:d9:24: 91:ee:8d:11:71:7d:89:61:76:85:07:f8:81:23:db:bd:b6:8d: 07:b9:29:cd:8e:b8:f4:0d:ea:0a:08:5f:89:19:e5:05:69:a3: 1b:44:71:e9:d8:fe:80:b7:fe:5a:19:e9:4d:4e:ad:11:73:89: 48:9c:fa:95 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9Wz5OxpZV9OR4SPPo4QP7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjNzY3MDY5OGNmYWVmMjY0N2ZiYzlhMDZmNzM4MDg1NmUy YjMwMjcwHhcNMjYwMTAyMDYxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZWZjYTMzMjdjNzEwYWNmYTIwZmM5Y2RhYWY4MDkzZjRhYjI4ZDhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomb7NjVRWefAVSh5y8uc0m0h/6d8 gxfXHkr0IouyI31AmrpdiAAuFjqVDMTaqzeKsG6Swtm8O7T2r4my4+qaVPLWQYTS Cwq8rPc12B4x/rsdRuyleRl5kMV7gSV8NtJ3SLLHlmgD6jps/DCPdia6/z9h+Vtc CRjwQh00j5WC/pCZuprD8260e5norlGLF+ibC+TyJRCKJpzvlp4IJRw8txTHZiwu +yofW1lRGfnrPYgdwSzoNKWybQ9qaBZVZaJlI/5eNpl+kxD7vwjWIw9ogiSYaM95 9+lYQ73Bz1uxqisRs8fkKgmNHhCqJyMB8rf9wLYM0XqGZP3vikqqrh8ZqQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFD78ozJ8cQrPog/Jzar4CT9Kso2PMB8GA1UdIwQY MBaAFKx2cGmM+u8mR/vJoG9zgIVuKzAnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckhad2FZejY3eVpILThtZ2IzT0FoVzRyTUNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC82OGY2NTEtZjNhNi00MjUyLTlmYWYt OWUwNDQwOTJiODI2LzEvUHZ5ak1ueHhDcy1pRDhuTnF2Z0pQMHF5alk4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC82OGY2NTEtZjNhNi00MjUyLTlmYWYtOWUwNDQwOTJiODI2 LzEvckhad2FZejY3eVpILThtZ2IzT0FoVzRyTUNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCiTsIAwQC ueEkMA0GCSqGSIb3DQEBCwUAA4IBAQBua11ys9Q3nqYMzr4ScuJMHYRILaf33v7I ZkqMVtk+fW1Dqcun5VZVmDwfItD1ijbORwCOFgHOl850AaX25ZRKXWyn41yFWycz q2r186U1DNF90rBQoXBCACcos7OzShBXRqPQVKvzua5XsgzMp2VEcH4FYn/qKYzI 4FcinxQlWpemdmo0pKnNUq6TCFGylewaecH80eQnOqk+UdYUQqPB8iwTPJqRp/4o 4vTRHlIkDNIL0lqhabPKtfPBkB4BuxSf0OXJ2SSR7o0RcX2JYXaFB/iBI9u9to0H uSnNjrj0DeoKCF+JGeUFaaMbRHHp2P6At/5aGelNTq0Rc4lInPqV -----END CERTIFICATE-----Generated at Mon Feb 9 18:44:56 2026 by rpki-client