This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/PYGs5J0p8JBdFX98vEEPLsE59bs.roa File: PYGs5J0p8JBdFX98vEEPLsE59bs.roa (raw, json) Hash identifier: rgmJLAQ65ROFFoJ2nPgqxSIskXgIsIRYvAQaiWZwVRk= Subject key identifier: 3D:81:AC:E4:9D:29:F0:90:5D:15:7F:7C:BC:41:0F:2E:C1:39:F5:BB Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B8D876779379F68D499F250D5500F80B2 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/PYGs5J0p8JBdFX98vEEPLsE59bs.roa Signing time: Mon 05 Jan 2026 09:40:19 +0000 ROA not before: Mon 05 Jan 2026 09:40:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 36530 IP address blocks: 82.152.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8d:87:67:79:37:9f:68:d4:99:f2:50:d5:50:0f:80:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 5 09:40:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3d81ace49d29f0905d157f7cbc410f2ec139f5bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:15:a7:1c:95:29:41:2b:6f:27:33:ba:97:43: 88:95:53:bd:5c:fb:9e:f0:18:d9:80:eb:6e:0d:c9: da:2b:74:9b:44:d8:55:35:b0:d3:ba:47:34:ff:f9: 40:18:a6:b9:db:b0:ff:25:d1:f8:94:88:15:c8:05: df:40:6a:96:2d:20:06:89:45:84:d2:84:52:d3:12: f8:ef:78:fe:3e:9c:b3:04:a3:77:5b:02:b4:a9:d9: 5d:76:e7:ae:90:da:eb:a2:54:7b:23:8b:cb:a3:4e: 5c:d2:8f:20:c3:f3:b8:ff:13:97:0e:38:52:05:12: 6e:ae:b4:3c:f2:f8:e2:0f:cf:cf:23:86:94:3c:ef: 27:e5:43:4a:7c:96:c5:7a:9c:3c:a3:c1:b1:fa:5a: 9a:f7:c5:61:5d:70:f7:d0:7f:8c:56:ea:d4:04:d4: 4d:8c:a4:f2:e2:c6:f5:22:2d:be:cc:dc:ff:78:8a: 18:4e:ea:59:db:1f:3d:fc:9c:1b:5f:a2:a2:ce:4f: 05:c6:25:d3:f8:9e:ba:fd:79:1f:94:8e:ea:82:3e: 83:a7:76:15:52:55:65:e6:ba:2d:f1:82:57:31:f2: 26:8e:23:13:1f:1c:49:72:a8:9c:7b:f7:2e:8c:26: 7c:30:53:15:5c:ec:75:9e:ce:62:6a:f9:03:29:80: 1f:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:81:AC:E4:9D:29:F0:90:5D:15:7F:7C:BC:41:0F:2E:C1:39:F5:BB X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/PYGs5J0p8JBdFX98vEEPLsE59bs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.152.142.0/24 Signature Algorithm: sha256WithRSAEncryption a9:88:0c:32:cb:f1:4c:71:06:cc:34:61:07:6a:8e:e9:a5:7a: 3f:d5:09:91:bb:fa:e3:d5:93:a2:2c:8e:63:af:9b:6e:09:8d: 17:18:ea:01:65:41:bb:57:35:6a:6f:4f:97:4b:31:ba:a5:e0: 21:3d:fd:61:e3:af:09:bd:49:a4:2b:05:22:a3:db:03:1b:01: 19:6c:6a:87:91:da:a1:61:5d:ad:63:b3:bd:db:e4:ad:e5:b2: 23:37:5a:c1:48:4c:82:6d:76:43:32:37:00:70:72:46:2a:44: f2:9d:37:ee:d5:e6:4a:30:46:8c:6a:0d:d8:5c:28:49:1c:70: 8c:e4:db:15:08:ec:68:ef:8c:f6:cd:63:fa:5e:ac:60:0b:5e: bc:53:9a:0c:65:25:93:5c:4b:16:42:73:c1:7d:07:af:44:6a: 8b:06:48:3e:2f:cd:f6:f6:5c:fe:a0:0c:99:ac:be:ef:58:90: bd:a8:b7:29:c6:35:92:e6:d4:54:c6:39:01:1f:e5:64:a1:78: de:36:7b:62:26:0c:a2:e8:c0:8e:aa:91:9d:c3:78:6a:bc:43: 40:83:7b:ee:4d:6d:36:e1:c4:b2:62:11:ed:c6:55:c7:69:49: ae:2e:70:06:59:1a:64:11:58:a8:58:9b:c8:18:2c:05:b8:3f: ea:95:fa:33 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZuNh2d5N59o1JnyUNVQD4CyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTA1MDk0MDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZDgxYWNlNDlkMjlmMDkwNWQxNTdmN2NiYzQxMGYyZWMxMzlmNWJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8RWnHJUpQStvJzO6l0OIlVO9XPue 8BjZgOtuDcnaK3SbRNhVNbDTukc0//lAGKa527D/JdH4lIgVyAXfQGqWLSAGiUWE 0oRS0xL473j+PpyzBKN3WwK0qdlddueukNrrolR7I4vLo05c0o8gw/O4/xOXDjhS BRJurrQ88vjiD8/PI4aUPO8n5UNKfJbFepw8o8Gx+lqa98VhXXD30H+MVurUBNRN jKTy4sb1Ii2+zNz/eIoYTupZ2x89/JwbX6Kizk8FxiXT+J66/XkflI7qgj6Dp3YV UlVl5rot8YJXMfImjiMTHxxJcqice/cujCZ8MFMVXOx1ns5iavkDKYAf4QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD2BrOSdKfCQXRV/fLxBDy7BOfW7MB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvUFlHczVKMHA4SkJkRlg5OHZFRVBMc0U1OWJzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUpiOMA0G CSqGSIb3DQEBCwUAA4IBAQCpiAwyy/FMcQbMNGEHao7ppXo/1QmRu/rj1ZOiLI5j r5tuCY0XGOoBZUG7VzVqb0+XSzG6peAhPf1h468JvUmkKwUio9sDGwEZbGqHkdqh YV2tY7O92+St5bIjN1rBSEyCbXZDMjcAcHJGKkTynTfu1eZKMEaMag3YXChJHHCM 5NsVCOxo74z2zWP6XqxgC168U5oMZSWTXEsWQnPBfQevRGqLBkg+L8329lz+oAyZ rL7vWJC9qLcpxjWS5tRUxjkBH+VkoXjeNntiJgyi6MCOqpGdw3hqvENAg3vuTW02 4cSyYhHtxlXHaUmuLnAGWRpkEVioWJvIGCwFuD/qlfoz -----END CERTIFICATE-----Generated at Wed Jan 21 00:38:55 2026 by rpki-client