This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/aa5d8b-3ec9-4176-83e1-bcbfb217bc8f/1/PymsuRY-XU_JjC-s7g8jov_R8Hc.roa File: PymsuRY-XU_JjC-s7g8jov_R8Hc.roa (raw, json) Hash identifier: eIduQ26VHE0PdG7zgjOYFtz0rV5pDOwOAUDByNGlGR4= Subject key identifier: 3F:29:AC:B9:16:3E:5D:4F:C9:8C:2F:AC:EE:0F:23:A2:FF:D1:F0:77 Certificate issuer: /CN=9155641a07b1e455b7892b92d80d60912391b20d Certificate serial: 019B7F15D793F0BBF6DF1CCE36C2831EF80F Authority key identifier: 91:55:64:1A:07:B1:E4:55:B7:89:2B:92:D8:0D:60:91:23:91:B2:0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kVVkGgex5FW3iSuS2A1gkSORsg0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/aa5d8b-3ec9-4176-83e1-bcbfb217bc8f/1/PymsuRY-XU_JjC-s7g8jov_R8Hc.roa Signing time: Fri 02 Jan 2026 14:21:36 +0000 ROA not before: Fri 02 Jan 2026 14:21:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51146 IP address blocks: 91.203.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/aa5d8b-3ec9-4176-83e1-bcbfb217bc8f/1/kVVkGgex5FW3iSuS2A1gkSORsg0.crl rsync://rpki.ripe.net/repository/DEFAULT/46/aa5d8b-3ec9-4176-83e1-bcbfb217bc8f/1/kVVkGgex5FW3iSuS2A1gkSORsg0.mft rsync://rpki.ripe.net/repository/DEFAULT/kVVkGgex5FW3iSuS2A1gkSORsg0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:d7:93:f0:bb:f6:df:1c:ce:36:c2:83:1e:f8:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9155641a07b1e455b7892b92d80d60912391b20d Validity Not Before: Jan 2 14:21:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3f29acb9163e5d4fc98c2facee0f23a2ffd1f077 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:de:08:00:14:2e:2a:96:b1:46:ca:29:ab:c2: b6:66:c4:07:99:69:54:de:61:47:ed:26:e7:c8:d1: 8e:a3:08:ff:63:34:31:bb:4a:12:ef:f7:44:1c:dd: c7:24:43:f5:2c:b7:b9:57:92:a4:75:cd:a3:e2:45: 83:9d:37:7d:5b:d5:d0:cf:93:54:01:c0:48:c9:36: 03:49:15:2a:b8:d5:2f:34:0d:83:3e:76:f6:4e:c5: 6a:a6:12:e8:7d:8d:7b:36:d3:84:7d:4f:f1:5b:6c: dd:1e:30:92:ab:c7:fe:d6:4a:21:ef:58:60:ab:cc: ea:bf:fc:85:4e:e1:65:4f:12:d6:6a:2c:96:88:f2: ec:1b:01:f4:cf:1e:30:c0:81:c7:fa:54:07:8d:76: 2b:22:19:49:2c:0c:08:7b:f3:8d:55:21:c9:43:f9: a2:8c:11:a6:17:7d:a4:0f:d7:ce:8b:7f:87:8d:fc: 29:28:ad:e4:e8:78:e0:84:0f:f0:28:64:8f:06:84: a7:cc:9c:af:30:70:75:88:ce:f2:fb:75:b1:2b:1c: 53:fd:7b:fc:42:f7:fe:15:ad:cf:00:14:75:c1:91: 79:ec:63:0f:43:3f:e3:b2:22:83:9e:5b:7f:b2:f3: 5f:2b:68:16:d3:e8:97:62:fd:8e:aa:4f:5e:e2:3f: 07:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:29:AC:B9:16:3E:5D:4F:C9:8C:2F:AC:EE:0F:23:A2:FF:D1:F0:77 X509v3 Authority Key Identifier: keyid:91:55:64:1A:07:B1:E4:55:B7:89:2B:92:D8:0D:60:91:23:91:B2:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kVVkGgex5FW3iSuS2A1gkSORsg0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/aa5d8b-3ec9-4176-83e1-bcbfb217bc8f/1/PymsuRY-XU_JjC-s7g8jov_R8Hc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/aa5d8b-3ec9-4176-83e1-bcbfb217bc8f/1/kVVkGgex5FW3iSuS2A1gkSORsg0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.203.156.0/22 Signature Algorithm: sha256WithRSAEncryption c4:86:1c:0f:45:1a:85:4a:0c:09:9d:4c:d0:a9:f0:26:33:43: af:7f:87:78:59:39:dd:c4:c3:87:30:6f:5a:1b:f2:d6:06:5d: ad:20:fe:3f:bc:5f:b6:6f:9b:95:23:2d:35:aa:2b:da:2e:71: d2:c6:aa:19:e2:a0:aa:b6:83:cc:e3:5a:9f:cd:7e:5e:18:d0: c6:cc:7f:22:11:8a:b4:e4:ac:20:f0:a8:b7:76:bc:04:4e:6a: db:76:c9:76:40:df:41:62:63:cc:7d:fa:85:99:29:62:7b:fb: 29:38:62:51:27:02:fa:38:14:78:93:ec:8b:aa:7a:99:19:df: 8f:19:6c:1e:1a:e1:8f:4d:68:5d:e7:58:1d:fd:9d:50:c3:19: 80:3d:bf:68:90:52:80:7f:23:bf:71:5a:6e:81:c7:d2:43:42: e4:55:60:dc:a8:76:d6:de:3c:8a:74:ea:1b:2a:f5:ef:b1:61: 37:bb:b6:50:29:64:92:37:af:87:b8:2a:36:6d:4e:fd:a7:b4: df:c8:9f:ad:6a:ef:2a:63:53:0d:83:24:9c:0c:cd:61:95:7f: d0:60:63:e8:fb:4c:f1:ab:09:4e:11:c0:6b:25:be:6b:d2:42: e3:f4:a3:87:f3:14:ca:8b:85:a3:84:38:db:72:d1:06:e1:df: 12:a8:f0:e3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FdeT8Lv23xzONsKDHvgPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxNTU2NDFhMDdiMWU0NTViNzg5MmI5MmQ4MGQ2MDkxMjM5 MWIyMGQwHhcNMjYwMTAyMTQyMTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZjI5YWNiOTE2M2U1ZDRmYzk4YzJmYWNlZTBmMjNhMmZmZDFmMDc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArN4IABQuKpaxRsopq8K2ZsQHmWlU 3mFH7SbnyNGOowj/YzQxu0oS7/dEHN3HJEP1LLe5V5Kkdc2j4kWDnTd9W9XQz5NU AcBIyTYDSRUquNUvNA2DPnb2TsVqphLofY17NtOEfU/xW2zdHjCSq8f+1koh71hg q8zqv/yFTuFlTxLWaiyWiPLsGwH0zx4wwIHH+lQHjXYrIhlJLAwIe/ONVSHJQ/mi jBGmF32kD9fOi3+HjfwpKK3k6HjghA/wKGSPBoSnzJyvMHB1iM7y+3WxKxxT/Xv8 Qvf+Fa3PABR1wZF57GMPQz/jsiKDnlt/svNfK2gW0+iXYv2Oqk9e4j8HDQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD8prLkWPl1PyYwvrO4PI6L/0fB3MB8GA1UdIwQY MBaAFJFVZBoHseRVt4krktgNYJEjkbINMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1ZWa0dnZXg1RlczaVN1UzJBMWdrU09Sc2cwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9hYTVkOGItM2VjOS00MTc2LTgzZTEt YmNiZmIyMTdiYzhmLzEvUHltc3VSWS1YVV9KakMtczdnOGpvdl9SOEhjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni9hYTVkOGItM2VjOS00MTc2LTgzZTEtYmNiZmIyMTdiYzhm LzEva1ZWa0dnZXg1RlczaVN1UzJBMWdrU09Sc2cwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW8ucMA0G CSqGSIb3DQEBCwUAA4IBAQDEhhwPRRqFSgwJnUzQqfAmM0Ovf4d4WTndxMOHMG9a G/LWBl2tIP4/vF+2b5uVIy01qivaLnHSxqoZ4qCqtoPM41qfzX5eGNDGzH8iEYq0 5Kwg8Ki3drwETmrbdsl2QN9BYmPMffqFmSlie/spOGJRJwL6OBR4k+yLqnqZGd+P GWweGuGPTWhd51gd/Z1QwxmAPb9okFKAfyO/cVpugcfSQ0LkVWDcqHbW3jyKdOob KvXvsWE3u7ZQKWSSN6+HuCo2bU79p7TfyJ+tau8qY1MNgyScDM1hlX/QYGPo+0zx qwlOEcBrJb5r0kLj9KOH8xTKi4WjhDjbctEG4d8SqPDj -----END CERTIFICATE-----Generated at Tue Feb 10 04:27:46 2026 by rpki-client