This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/nyYsyw_puc-6G9sAkIDHBW-qklo.roa File: nyYsyw_puc-6G9sAkIDHBW-qklo.roa (raw, json) Hash identifier: r1YY5k2s3y2JyRlqz7YZwgJSL6r2URPlvPPK7VlHG6o= Subject key identifier: 9F:26:2C:CB:0F:E9:B9:CF:BA:1B:DB:00:90:80:C7:05:6F:AA:92:5A Certificate issuer: /CN=1a5a22dbc8dbd2d7248deaff47e3390f77fb4b0b Certificate serial: 019B7DCA8EC4F9CAD392E4A860EC169FA528 Authority key identifier: 1A:5A:22:DB:C8:DB:D2:D7:24:8D:EA:FF:47:E3:39:0F:77:FB:4B:0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gloi28jb0tckjer_R-M5D3f7Sws.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/nyYsyw_puc-6G9sAkIDHBW-qklo.roa Signing time: Fri 02 Jan 2026 08:19:45 +0000 ROA not before: Fri 02 Jan 2026 08:19:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215063 IP address blocks: 80.73.48.0/20 maxlen: 20 95.130.64.0/21 maxlen: 21 2a04:8080::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/Gloi28jb0tckjer_R-M5D3f7Sws.crl rsync://rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/Gloi28jb0tckjer_R-M5D3f7Sws.mft rsync://rpki.ripe.net/repository/DEFAULT/Gloi28jb0tckjer_R-M5D3f7Sws.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:8e:c4:f9:ca:d3:92:e4:a8:60:ec:16:9f:a5:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a5a22dbc8dbd2d7248deaff47e3390f77fb4b0b Validity Not Before: Jan 2 08:19:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9f262ccb0fe9b9cfba1bdb009080c7056faa925a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:29:52:a8:e1:a8:b3:a0:03:08:87:d2:81:3f: ca:d6:01:76:a4:07:ce:52:3a:35:cc:f7:5c:66:e3: a7:d7:2a:8a:65:f2:3b:96:0a:7e:0d:66:01:58:1a: 40:34:5e:22:c6:ee:5c:ba:ed:51:76:55:4f:69:5f: 08:c7:0b:71:93:e5:c5:03:48:dc:56:9c:45:9a:5d: d9:a5:67:a7:b6:2b:9e:0c:6e:8b:56:1a:b7:35:86: fc:d6:84:42:4e:7c:60:2f:21:69:88:13:81:4c:b3: 3b:3c:7d:3b:85:ce:78:b8:ad:5d:07:8e:18:71:7e: f1:e1:e2:f7:3e:d4:42:8c:d0:9c:44:00:90:1c:e1: c4:7d:a0:70:b6:72:90:35:a3:1f:0b:1b:e6:33:c9: 7c:cc:90:a5:bc:d1:8d:8f:97:88:8e:60:ce:d5:e3: e0:0f:e3:d2:61:79:f2:56:f3:eb:e2:cc:8c:c5:9d: c7:ba:0c:36:cf:fd:71:ea:3d:ec:46:1b:a1:dc:c7: da:2e:9a:88:92:2e:f5:73:24:ae:76:2f:36:30:ed: cb:a5:79:8b:14:c6:ca:ac:99:d0:2b:7c:bd:82:ef: 83:6d:fa:1b:c7:3c:d3:4a:07:d5:8b:ad:66:2a:f4: b2:3f:fd:3e:20:de:a8:a8:72:bf:a8:38:5b:c4:e7: 39:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:26:2C:CB:0F:E9:B9:CF:BA:1B:DB:00:90:80:C7:05:6F:AA:92:5A X509v3 Authority Key Identifier: keyid:1A:5A:22:DB:C8:DB:D2:D7:24:8D:EA:FF:47:E3:39:0F:77:FB:4B:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gloi28jb0tckjer_R-M5D3f7Sws.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/nyYsyw_puc-6G9sAkIDHBW-qklo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/Gloi28jb0tckjer_R-M5D3f7Sws.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.73.48.0/20 95.130.64.0/21 IPv6: 2a04:8080::/29 Signature Algorithm: sha256WithRSAEncryption 3d:02:dc:08:26:ec:ac:2c:86:9c:14:af:13:c8:ef:59:fa:67: 37:46:82:d8:95:e3:28:43:cd:0c:51:b0:78:08:5c:53:1e:04: d3:97:2d:77:4b:fa:95:a8:96:ce:ce:32:55:6b:23:58:e4:2c: 34:d2:a0:f4:53:32:c8:58:29:ae:54:30:99:d9:21:c7:30:71: 60:14:66:d4:0e:de:66:47:1f:5d:1e:56:48:6e:bf:a4:3a:4f: a1:91:ba:27:05:f1:29:69:6c:5f:be:5b:1e:89:bb:78:aa:93: 42:f1:6b:c5:8a:4c:30:1d:4d:d5:34:87:97:16:b2:d2:bc:6e: 38:a2:37:4b:43:b5:01:66:dc:a3:4d:b3:de:8c:15:f2:fb:fc: ad:51:98:60:11:f3:dd:10:9b:73:95:f2:2c:d5:f6:e8:43:a5: 96:84:03:2d:7c:ab:1e:ad:68:d0:45:6e:46:66:7c:49:31:da: 56:28:ed:b4:b0:3a:d2:c8:56:7d:5a:01:94:47:20:e9:88:ec: 48:3e:0a:30:4a:49:a5:89:c4:7c:b1:5d:4c:1b:79:2f:e6:93: 5d:c3:b8:b0:50:a6:c1:39:3d:3a:34:ec:c7:29:44:51:26:df: 1f:53:ff:fc:08:12:8a:fb:af:60:e4:5f:c9:8b:3b:04:99:1b: 7f:ff:9e:43 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt9yo7E+crTkuSoYOwWn6UoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhNWEyMmRiYzhkYmQyZDcyNDhkZWFmZjQ3ZTMzOTBmNzdm YjRiMGIwHhcNMjYwMTAyMDgxOTQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZjI2MmNjYjBmZTliOWNmYmExYmRiMDA5MDgwYzcwNTZmYWE5MjVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuClSqOGos6ADCIfSgT/K1gF2pAfO Ujo1zPdcZuOn1yqKZfI7lgp+DWYBWBpANF4ixu5cuu1RdlVPaV8Ixwtxk+XFA0jc VpxFml3ZpWentiueDG6LVhq3NYb81oRCTnxgLyFpiBOBTLM7PH07hc54uK1dB44Y cX7x4eL3PtRCjNCcRACQHOHEfaBwtnKQNaMfCxvmM8l8zJClvNGNj5eIjmDO1ePg D+PSYXnyVvPr4syMxZ3Hugw2z/1x6j3sRhuh3MfaLpqIki71cySudi82MO3LpXmL FMbKrJnQK3y9gu+DbfobxzzTSgfVi61mKvSyP/0+IN6oqHK/qDhbxOc5PwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFJ8mLMsP6bnPuhvbAJCAxwVvqpJaMB8GA1UdIwQY MBaAFBpaItvI29LXJI3q/0fjOQ93+0sLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2xvaTI4amIwdGNramVyX1ItTTVEM2Y3U3dzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8xOTIyYzktNDk0OS00MDU1LWE2NmUt MTVkMzI3MDliZDBmLzEvbnlZc3l3X3B1Yy02RzlzQWtJREhCVy1xa2xvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS8xOTIyYzktNDk0OS00MDU1LWE2NmUtMTVkMzI3MDliZDBm LzEvR2xvaTI4amIwdGNramVyX1ItTTVEM2Y3U3dzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQEUEkwAwQD X4JAMA0EAgACMAcDBQMqBICAMA0GCSqGSIb3DQEBCwUAA4IBAQA9AtwIJuysLIac FK8TyO9Z+mc3RoLYleMoQ80MUbB4CFxTHgTTly13S/qVqJbOzjJVayNY5Cw00qD0 UzLIWCmuVDCZ2SHHMHFgFGbUDt5mRx9dHlZIbr+kOk+hkbonBfEpaWxfvlseibt4 qpNC8WvFikwwHU3VNIeXFrLSvG44ojdLQ7UBZtyjTbPejBXy+/ytUZhgEfPdEJtz lfIs1fboQ6WWhAMtfKserWjQRW5GZnxJMdpWKO20sDrSyFZ9WgGURyDpiOxIPgow SkmlicR8sV1MG3kv5pNdw7iwUKbBOT06NOzHKURRJt8fU//8CBKK+69g5F/JizsE mRt//55D -----END CERTIFICATE-----Generated at Tue Jan 27 03:54:34 2026 by rpki-client