This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/py8kH9n_2-OnxW6spEMi6oEGK_w.roa File: py8kH9n_2-OnxW6spEMi6oEGK_w.roa (raw, json) Hash identifier: GsXp7eLTo1qCtBBCoDFQgU12gK3EvVtwUdWIN2dH9CY= Subject key identifier: A7:2F:24:1F:D9:FF:DB:E3:A7:C5:6E:AC:A4:43:22:EA:81:06:2B:FC Certificate issuer: /CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea Certificate serial: 019B7834469699430606DD73FAB85F2F83B0 Authority key identifier: D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/py8kH9n_2-OnxW6spEMi6oEGK_w.roa Signing time: Thu 01 Jan 2026 06:17:30 +0000 ROA not before: Thu 01 Jan 2026 06:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216127 IP address blocks: 93.185.156.0/24 maxlen: 24 93.185.158.0/24 maxlen: 24 93.185.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:46:96:99:43:06:06:dd:73:fa:b8:5f:2f:83:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea Validity Not Before: Jan 1 06:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a72f241fd9ffdbe3a7c56eaca44322ea81062bfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:95:a6:31:ee:16:25:9e:6c:f9:92:a5:54:ae: 6d:1d:ce:85:43:cc:3e:47:7b:aa:50:2b:2a:5e:78: 8e:65:c7:3f:19:69:1d:5f:11:c5:74:7a:32:df:92: b1:15:92:61:3b:4e:a0:d2:e8:de:de:9d:4e:68:fe: 1d:46:c2:86:ac:80:e3:e1:ad:66:22:6e:2c:66:fe: 85:2f:c8:07:8f:8a:45:03:f5:88:31:b9:33:d1:09: 27:73:ec:a2:a8:c2:1b:e0:e7:53:66:6f:9f:45:4a: cb:66:d6:41:d0:b0:67:e2:a6:9c:e8:5a:bf:30:e6: 13:b7:22:1d:33:cd:de:11:93:fc:62:b0:ce:d7:be: 46:0f:2b:69:43:83:c2:83:1e:6e:cf:04:31:30:4c: ad:1d:e3:64:75:c5:4e:a7:21:56:50:54:f6:3c:bc: 6b:d3:5e:47:66:9d:58:9d:06:61:29:04:ac:10:f4: a7:76:22:1e:d2:94:0e:2f:86:c7:60:b0:0b:55:87: ce:f2:2a:49:74:2e:d1:7a:34:3c:23:b2:41:c5:e3: 9e:4f:0b:dc:50:e5:0b:84:fd:2a:91:1b:51:65:2f: c8:8b:ce:08:ed:77:02:fc:bd:9f:b4:27:c3:85:5f: 57:68:08:6d:3d:3a:ad:09:bb:56:6c:40:34:3d:2b: 97:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:2F:24:1F:D9:FF:DB:E3:A7:C5:6E:AC:A4:43:22:EA:81:06:2B:FC X509v3 Authority Key Identifier: keyid:D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/py8kH9n_2-OnxW6spEMi6oEGK_w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.185.156.0/24 93.185.158.0/23 Signature Algorithm: sha256WithRSAEncryption 6a:f2:5d:57:be:79:6b:dd:b4:36:b3:3c:ee:d0:fa:de:54:bc: 5e:a4:f3:8f:c7:cf:08:18:8a:e5:ad:0d:bc:fc:2c:00:d6:c2: 2a:f6:9a:3a:b6:08:84:31:ac:96:08:58:0e:30:02:d9:cf:ba: fd:a2:f6:26:75:d2:7b:8f:6b:56:e6:7a:e1:c3:33:05:af:9f: 31:63:b4:b4:18:24:e6:7a:d1:ce:52:57:3b:80:14:0d:a4:83: 86:fa:db:35:35:f1:3a:0c:86:82:0f:2c:9f:12:3e:0d:71:c2: 78:e8:3b:5a:fd:44:d2:b7:53:58:48:e3:19:fd:bc:b9:a7:00: ae:27:fd:9a:62:8d:73:e4:8d:7f:55:af:71:6b:99:53:16:87: 04:2b:01:d1:40:fa:6c:04:39:bb:b2:a2:b6:93:d8:b5:0b:c0: 87:01:45:21:6c:b5:f6:cd:41:75:b3:d5:47:fe:e2:a5:3b:9a: 95:e3:db:f1:d4:e2:24:c9:6b:22:fc:8d:bc:c2:62:97:3a:a6: f0:ed:a0:9a:dd:51:b9:f2:17:17:c0:9f:9a:d5:60:2b:6e:3b: b3:e7:dc:22:d4:74:20:d0:50:86:e7:7b:2e:54:56:00:0a:90: ee:cc:81:72:08:4a:8c:a8:9e:2d:31:60:d8:2c:9f:80:77:1f: 6b:10:09:47 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4NEaWmUMGBt1z+rhfL4OwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzZTk3MDMzYTM2YWE5YmNjMGMyZjE2N2U2MjBkN2NhMTQ5 M2NiZWEwHhcNMjYwMTAxMDYxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNzJmMjQxZmQ5ZmZkYmUzYTdjNTZlYWNhNDQzMjJlYTgxMDYyYmZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJWmMe4WJZ5s+ZKlVK5tHc6FQ8w+ R3uqUCsqXniOZcc/GWkdXxHFdHoy35KxFZJhO06g0uje3p1OaP4dRsKGrIDj4a1m Im4sZv6FL8gHj4pFA/WIMbkz0Qknc+yiqMIb4OdTZm+fRUrLZtZB0LBn4qac6Fq/ MOYTtyIdM83eEZP8YrDO175GDytpQ4PCgx5uzwQxMEytHeNkdcVOpyFWUFT2PLxr 015HZp1YnQZhKQSsEPSndiIe0pQOL4bHYLALVYfO8ipJdC7RejQ8I7JBxeOeTwvc UOULhP0qkRtRZS/Ii84I7XcC/L2ftCfDhV9XaAhtPTqtCbtWbEA0PSuX4QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKcvJB/Z/9vjp8VurKRDIuqBBiv8MB8GA1UdIwQY MBaAFNPpcDOjaqm8wMLxZ+Yg18oUk8vqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMt ZGJmOWQ0MWYxNzk4LzEvcHk4a0g5bl8yLU9ueFc2c3BFTWk2b0VHS193LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMtZGJmOWQ0MWYxNzk4 LzEvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXbmcAwQB XbmeMA0GCSqGSIb3DQEBCwUAA4IBAQBq8l1Xvnlr3bQ2szzu0PreVLxepPOPx88I GIrlrQ28/CwA1sIq9po6tgiEMayWCFgOMALZz7r9ovYmddJ7j2tW5nrhwzMFr58x Y7S0GCTmetHOUlc7gBQNpIOG+ts1NfE6DIaCDyyfEj4NccJ46Dta/UTSt1NYSOMZ /by5pwCuJ/2aYo1z5I1/Va9xa5lTFocEKwHRQPpsBDm7sqK2k9i1C8CHAUUhbLX2 zUF1s9VH/uKlO5qV49vx1OIkyWsi/I28wmKXOqbw7aCa3VG58hcXwJ+a1WArbjuz 59wi1HQg0FCG53suVFYACpDuzIFyCEqMqJ4tMWDYLJ+Adx9rEAlH -----END CERTIFICATE-----Generated at Sun Jan 25 18:05:14 2026 by rpki-client