This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/ef5ed1-bdee-4639-9248-77f84c562a5f/1/mY6-iJVYtOGt8motX-SIkcdCctg.roa File: mY6-iJVYtOGt8motX-SIkcdCctg.roa (raw, json) Hash identifier: g7aaLtcj929tsJ1uCBWQclwxC5qJbCwyOT5p5cGl43U= Subject key identifier: 99:8E:BE:88:95:58:B4:E1:AD:F2:6A:2D:5F:E4:88:91:C7:42:72:D8 Certificate issuer: /CN=3d8012fa14ace7a0c3bd2e82e0a29d9a44bfe290 Certificate serial: 019BB2B9A3FF5479DC24014D2AB32A75469B Authority key identifier: 3D:80:12:FA:14:AC:E7:A0:C3:BD:2E:82:E0:A2:9D:9A:44:BF:E2:90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYAS-hSs56DDvS6C4KKdmkS_4pA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/ef5ed1-bdee-4639-9248-77f84c562a5f/1/mY6-iJVYtOGt8motX-SIkcdCctg.roa Signing time: Mon 12 Jan 2026 15:01:09 +0000 ROA not before: Mon 12 Jan 2026 15:01:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209137 IP address blocks: 5.180.168.0/22 maxlen: 22 5.180.168.0/23 maxlen: 23 5.180.168.0/24 maxlen: 24 5.180.169.0/24 maxlen: 24 5.180.170.0/23 maxlen: 23 5.180.170.0/24 maxlen: 24 5.180.171.0/24 maxlen: 24 185.170.136.0/22 maxlen: 22 185.170.136.0/23 maxlen: 23 185.170.136.0/24 maxlen: 24 185.170.137.0/24 maxlen: 24 185.170.138.0/23 maxlen: 23 185.170.138.0/24 maxlen: 24 185.170.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/ef5ed1-bdee-4639-9248-77f84c562a5f/1/PYAS-hSs56DDvS6C4KKdmkS_4pA.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/ef5ed1-bdee-4639-9248-77f84c562a5f/1/PYAS-hSs56DDvS6C4KKdmkS_4pA.mft rsync://rpki.ripe.net/repository/DEFAULT/PYAS-hSs56DDvS6C4KKdmkS_4pA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b2:b9:a3:ff:54:79:dc:24:01:4d:2a:b3:2a:75:46:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d8012fa14ace7a0c3bd2e82e0a29d9a44bfe290 Validity Not Before: Jan 12 15:01:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=998ebe889558b4e1adf26a2d5fe48891c74272d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:86:65:8d:92:52:c5:03:0a:14:57:ec:db:75: cf:74:c5:89:60:f6:a4:3b:19:2e:0b:eb:cc:4b:a2: 79:3f:0e:5d:fe:86:ad:f0:77:ef:8e:8a:ff:63:81: 92:c3:25:79:56:33:6d:88:68:4e:ed:f7:94:cd:ac: 10:d0:5f:ee:fe:f1:17:e0:3c:c2:d2:02:cd:d1:5d: 9d:e5:42:7c:5d:87:2f:1e:df:2d:83:e4:73:d0:fb: 9e:00:69:33:5d:d2:14:80:b9:91:26:4f:6f:ef:5d: ff:e1:e3:11:3c:53:1b:25:ac:86:af:e8:f4:1d:b4: 49:4b:87:71:ca:56:7c:81:39:b5:b2:1e:ee:a4:fc: 42:55:7c:1d:50:53:c7:85:28:0b:d7:2c:e6:5b:ae: 75:dc:23:a6:16:74:6c:9c:07:b1:ab:da:06:3e:62: a9:a6:e2:7f:17:fb:e7:0d:0b:d4:7c:4d:24:36:07: 5b:20:39:ed:e2:c7:01:65:a7:bb:c0:a6:35:89:86: 4e:93:4a:8a:96:b9:45:c4:8c:7e:2e:f4:4c:e9:67: 5d:11:21:2c:d0:c4:3a:e3:9e:35:21:12:e2:14:fe: ae:a1:e9:fb:7c:a9:35:ce:6b:87:f8:55:36:8c:50: 79:b2:c8:2f:70:90:b2:18:70:b1:f6:19:de:d1:56: c5:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:8E:BE:88:95:58:B4:E1:AD:F2:6A:2D:5F:E4:88:91:C7:42:72:D8 X509v3 Authority Key Identifier: keyid:3D:80:12:FA:14:AC:E7:A0:C3:BD:2E:82:E0:A2:9D:9A:44:BF:E2:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYAS-hSs56DDvS6C4KKdmkS_4pA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ef5ed1-bdee-4639-9248-77f84c562a5f/1/mY6-iJVYtOGt8motX-SIkcdCctg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ef5ed1-bdee-4639-9248-77f84c562a5f/1/PYAS-hSs56DDvS6C4KKdmkS_4pA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.180.168.0/22 185.170.136.0/22 Signature Algorithm: sha256WithRSAEncryption 07:76:18:0c:44:a8:0a:10:8c:f3:e2:fa:8e:08:5d:86:f4:04: fb:59:f2:0b:59:5f:45:3c:a7:73:a8:a8:8d:e5:c6:da:bb:48: 25:04:26:7f:71:f1:c1:3a:a2:f2:08:30:9f:25:36:2b:5b:81: e4:87:75:23:e4:c1:0b:a8:c1:e4:73:78:7f:d2:6f:2d:12:4b: a7:ed:a0:ea:f0:06:7b:0c:10:1a:59:23:b6:1c:d6:2e:51:6d: 0a:d1:0b:e3:13:9c:98:88:b4:82:5f:06:b2:4c:24:90:1d:ab: 35:47:ae:b8:00:11:ef:35:2a:7b:d7:55:00:3c:1b:ae:45:eb: 24:eb:d8:52:09:55:08:55:f0:a7:5a:73:6c:f3:a3:8f:bf:6c: 96:46:39:12:57:1e:58:98:c1:a2:73:88:db:61:27:52:4c:04: be:ec:9d:a9:c4:c8:e7:2f:11:38:de:50:4a:ef:4e:d1:7e:a2: 36:ca:37:76:f8:5c:96:33:50:97:4b:78:39:08:7d:6a:3b:53: 29:23:16:27:cb:30:1d:ef:e4:53:b9:db:70:be:4f:00:5c:76: 23:8a:7d:95:fa:1d:8f:ff:d1:b7:45:77:8d:ee:e3:8b:bc:95: 9e:f3:8e:da:1d:82:6a:22:7d:22:f7:83:7e:cb:64:09:2e:5a: 9d:83:89:a6 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZuyuaP/VHncJAFNKrMqdUabMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkODAxMmZhMTRhY2U3YTBjM2JkMmU4MmUwYTI5ZDlhNDRi ZmUyOTAwHhcNMjYwMTEyMTUwMTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OThlYmU4ODk1NThiNGUxYWRmMjZhMmQ1ZmU0ODg5MWM3NDI3MmQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1oZljZJSxQMKFFfs23XPdMWJYPak OxkuC+vMS6J5Pw5d/oat8Hfvjor/Y4GSwyV5VjNtiGhO7feUzawQ0F/u/vEX4DzC 0gLN0V2d5UJ8XYcvHt8tg+Rz0PueAGkzXdIUgLmRJk9v713/4eMRPFMbJayGr+j0 HbRJS4dxylZ8gTm1sh7upPxCVXwdUFPHhSgL1yzmW6513COmFnRsnAexq9oGPmKp puJ/F/vnDQvUfE0kNgdbIDnt4scBZae7wKY1iYZOk0qKlrlFxIx+LvRM6WddESEs 0MQ64541IRLiFP6uoen7fKk1zmuH+FU2jFB5ssgvcJCyGHCx9hne0VbFxQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJmOvoiVWLThrfJqLV/kiJHHQnLYMB8GA1UdIwQY MBaAFD2AEvoUrOegw70uguCinZpEv+KQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFlBUy1oU3M1NkREdlM2QzRLS2Rta1NfNHBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9lZjVlZDEtYmRlZS00NjM5LTkyNDgt NzdmODRjNTYyYTVmLzEvbVk2LWlKVll0T0d0OG1vdFgtU0lrY2RDY3RnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy9lZjVlZDEtYmRlZS00NjM5LTkyNDgtNzdmODRjNTYyYTVm LzEvUFlBUy1oU3M1NkREdlM2QzRLS2Rta1NfNHBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCBbSoAwQC uaqIMA0GCSqGSIb3DQEBCwUAA4IBAQAHdhgMRKgKEIzz4vqOCF2G9AT7WfILWV9F PKdzqKiN5cbau0glBCZ/cfHBOqLyCDCfJTYrW4Hkh3Uj5MELqMHkc3h/0m8tEkun 7aDq8AZ7DBAaWSO2HNYuUW0K0QvjE5yYiLSCXwayTCSQHas1R664ABHvNSp711UA PBuuResk69hSCVUIVfCnWnNs86OPv2yWRjkSVx5YmMGic4jbYSdSTAS+7J2pxMjn LxE43lBK707RfqI2yjd2+FyWM1CXS3g5CH1qO1MpIxYnyzAd7+RTudtwvk8AXHYj in2V+h2P/9G3RXeN7uOLvJWe847aHYJqIn0i94N+y2QJLlqdg4mm -----END CERTIFICATE-----Generated at Tue Feb 10 02:47:13 2026 by rpki-client