This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/pyy4chfAGDU6-XM9lG1f_qz5Pd0.roa File: pyy4chfAGDU6-XM9lG1f_qz5Pd0.roa (raw, json) Hash identifier: dj6vcg1vH4BvaosXfQGHiUENeUNRSqwJGLo97TfJGgU= Subject key identifier: A7:2C:B8:72:17:C0:18:35:3A:F9:73:3D:94:6D:5F:FE:AC:F9:3D:DD Certificate issuer: /CN=6cc69c3d7030cec19f8fb66e543bde65595708a2 Certificate serial: 019B7F8421430AB13B97DD8BEDFB83FE3C84 Authority key identifier: 6C:C6:9C:3D:70:30:CE:C1:9F:8F:B6:6E:54:3B:DE:65:59:57:08:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMacPXAwzsGfj7ZuVDveZVlXCKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/pyy4chfAGDU6-XM9lG1f_qz5Pd0.roa Signing time: Fri 02 Jan 2026 16:22:04 +0000 ROA not before: Fri 02 Jan 2026 16:22:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215550 IP address blocks: 185.20.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.crl rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.mft rsync://rpki.ripe.net/repository/DEFAULT/bMacPXAwzsGfj7ZuVDveZVlXCKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:21:43:0a:b1:3b:97:dd:8b:ed:fb:83:fe:3c:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cc69c3d7030cec19f8fb66e543bde65595708a2 Validity Not Before: Jan 2 16:22:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a72cb87217c018353af9733d946d5ffeacf93ddd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:57:7b:f1:31:6e:7b:78:04:7d:05:9e:ea:08: cc:da:f2:4b:8f:61:94:35:24:a0:89:97:1c:ff:a2: f9:f7:88:3d:f7:94:8c:3d:98:88:4c:83:0d:1e:9e: e2:84:96:6d:17:ba:33:7f:10:cc:26:3c:db:fc:58: 97:2b:83:7b:79:60:2e:6b:46:55:cd:1d:70:8d:8f: 97:cb:64:1e:b8:58:b6:f6:2b:a5:2c:b7:5f:5c:03: 94:63:86:62:72:13:03:70:65:58:ab:95:bf:5e:97: b7:91:a6:84:3b:8a:79:07:2f:63:c8:ab:5b:4f:2c: 3b:f6:ef:7a:08:9a:4b:f4:3f:94:96:cc:d5:b2:ba: c8:ac:79:59:0c:3c:60:b9:a7:43:0e:c4:23:17:c0: 40:cf:de:31:5d:77:ac:17:81:1b:75:b5:44:45:c7: 20:e8:9d:88:1c:0c:e3:ec:bb:9c:7f:ef:a6:f8:cf: 15:9b:83:fa:00:5f:2c:d9:08:cd:33:db:32:62:e3: 71:7f:11:38:77:f2:36:8e:0f:44:a3:2a:cb:47:69: ce:9b:84:ce:fa:97:84:93:b7:bc:6f:1b:bf:8b:e0: be:58:74:5e:84:36:56:c8:d3:b5:3c:d6:72:a9:9d: a8:ee:e2:73:28:4b:ee:98:3a:3b:68:21:0b:51:1b: ef:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:2C:B8:72:17:C0:18:35:3A:F9:73:3D:94:6D:5F:FE:AC:F9:3D:DD X509v3 Authority Key Identifier: keyid:6C:C6:9C:3D:70:30:CE:C1:9F:8F:B6:6E:54:3B:DE:65:59:57:08:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMacPXAwzsGfj7ZuVDveZVlXCKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/pyy4chfAGDU6-XM9lG1f_qz5Pd0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.20.7.0/24 Signature Algorithm: sha256WithRSAEncryption a6:f4:48:f2:46:fa:51:f5:12:bb:da:e2:18:65:25:23:59:c8: 3a:d0:94:d6:b2:63:a5:58:ec:f8:71:33:32:96:a3:46:e8:26: db:dd:51:3d:39:7d:de:d7:13:56:27:55:7c:38:b9:8a:f2:95: 32:a5:7b:30:34:5d:8d:3b:0f:14:48:83:df:75:ae:69:1d:d4: 02:2d:b9:1c:27:8d:90:af:16:8d:5e:85:88:39:4b:b0:0f:ec: 00:00:a5:93:32:42:4b:a6:d9:18:c3:3f:39:1e:2f:13:95:b9: ee:86:e3:2d:b5:78:3a:23:5e:33:cb:93:25:e2:65:1b:56:5f: e2:a5:08:3e:a1:a3:48:81:45:61:de:dc:05:79:38:df:63:e1: 4c:ee:64:f0:72:40:eb:3f:ae:ef:8d:93:82:eb:6c:34:1a:fd: 25:42:e5:44:b0:4f:48:4f:49:6f:57:da:9a:de:91:a8:0d:df: 70:ef:56:6f:9b:e3:e1:91:de:bb:e1:3a:a8:eb:00:76:4c:e5: 56:f8:3d:04:91:9c:43:d3:eb:69:fa:b9:24:a7:1f:85:0d:6f: d6:fa:64:0f:58:bf:cb:46:87:ac:75:c1:f0:fb:18:68:8b:e3: c3:87:dc:94:b4:99:e7:d6:86:29:63:06:29:26:51:d1:ca:6b: 20:4f:dd:5a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hCFDCrE7l92L7fuD/jyEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjYzY5YzNkNzAzMGNlYzE5ZjhmYjY2ZTU0M2JkZTY1NTk1 NzA4YTIwHhcNMjYwMTAyMTYyMjA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNzJjYjg3MjE3YzAxODM1M2FmOTczM2Q5NDZkNWZmZWFjZjkzZGRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Fd78TFue3gEfQWe6gjM2vJLj2GU NSSgiZcc/6L594g995SMPZiITIMNHp7ihJZtF7ozfxDMJjzb/FiXK4N7eWAua0ZV zR1wjY+Xy2QeuFi29iulLLdfXAOUY4ZichMDcGVYq5W/Xpe3kaaEO4p5By9jyKtb Tyw79u96CJpL9D+UlszVsrrIrHlZDDxguadDDsQjF8BAz94xXXesF4EbdbVERccg 6J2IHAzj7Lucf++m+M8Vm4P6AF8s2QjNM9syYuNxfxE4d/I2jg9EoyrLR2nOm4TO +peEk7e8bxu/i+C+WHRehDZWyNO1PNZyqZ2o7uJzKEvumDo7aCELURvvZwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKcsuHIXwBg1OvlzPZRtX/6s+T3dMB8GA1UdIwQY MBaAFGzGnD1wMM7Bn4+2blQ73mVZVwiiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYk1hY1BYQXd6c0dmajdadVZEdmVaVmxYQ0tJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS85Y2E1OGUtOWUzMi00MjhmLTg0MTEt MWFlYjZhNGU0NWFkLzEvcHl5NGNoZkFHRFU2LVhNOWxHMWZfcXo1UGQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS85Y2E1OGUtOWUzMi00MjhmLTg0MTEtMWFlYjZhNGU0NWFk LzEvYk1hY1BYQXd6c0dmajdadVZEdmVaVmxYQ0tJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuRQHMA0G CSqGSIb3DQEBCwUAA4IBAQCm9EjyRvpR9RK72uIYZSUjWcg60JTWsmOlWOz4cTMy lqNG6Cbb3VE9OX3e1xNWJ1V8OLmK8pUypXswNF2NOw8USIPfda5pHdQCLbkcJ42Q rxaNXoWIOUuwD+wAAKWTMkJLptkYwz85Hi8TlbnuhuMttXg6I14zy5Ml4mUbVl/i pQg+oaNIgUVh3twFeTjfY+FM7mTwckDrP67vjZOC62w0Gv0lQuVEsE9IT0lvV9qa 3pGoDd9w71Zvm+Phkd674Tqo6wB2TOVW+D0EkZxD0+tp+rkkpx+FDW/W+mQPWL/L RoesdcHw+xhoi+PDh9yUtJnn1oYpYwYpJlHRymsgT91a -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:12 2026 by rpki-client