This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/78f82d-0bb9-43de-9810-1ca7a0b6ac9a/1/PYRVlO-jN4cauhkJtjiu69BHf7g.roa File: PYRVlO-jN4cauhkJtjiu69BHf7g.roa (raw, json) Hash identifier: KzLhCQkDAQ9keU3NpLY3q6k73UjDZ8YfyF1YN3DhJDg= Subject key identifier: 3D:84:55:94:EF:A3:37:87:1A:BA:19:09:B6:38:AE:EB:D0:47:7F:B8 Certificate issuer: /CN=8329c9138758dfe8ba1235ee0ec7d9b6589f4b27 Certificate serial: 019B7B3676E3C58D10A181B18318CC959972 Authority key identifier: 83:29:C9:13:87:58:DF:E8:BA:12:35:EE:0E:C7:D9:B6:58:9F:4B:27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gynJE4dY3-i6EjXuDsfZtlifSyc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/78f82d-0bb9-43de-9810-1ca7a0b6ac9a/1/PYRVlO-jN4cauhkJtjiu69BHf7g.roa Signing time: Thu 01 Jan 2026 20:18:45 +0000 ROA not before: Thu 01 Jan 2026 20:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209567 IP address blocks: 185.69.3.0/24 maxlen: 24 194.2.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/78f82d-0bb9-43de-9810-1ca7a0b6ac9a/1/gynJE4dY3-i6EjXuDsfZtlifSyc.crl rsync://rpki.ripe.net/repository/DEFAULT/96/78f82d-0bb9-43de-9810-1ca7a0b6ac9a/1/gynJE4dY3-i6EjXuDsfZtlifSyc.mft rsync://rpki.ripe.net/repository/DEFAULT/gynJE4dY3-i6EjXuDsfZtlifSyc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:76:e3:c5:8d:10:a1:81:b1:83:18:cc:95:99:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8329c9138758dfe8ba1235ee0ec7d9b6589f4b27 Validity Not Before: Jan 1 20:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3d845594efa337871aba1909b638aeebd0477fb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ac:49:72:7e:89:c9:8b:91:ab:ab:01:60:5a: 94:bd:65:fb:6f:18:65:26:e7:d7:b3:c6:3a:53:8c: 44:3a:07:01:14:b1:46:1f:71:36:45:de:7a:ac:49: 02:82:b6:60:77:26:f4:7b:68:2d:20:f3:3a:ae:e5: 6a:3e:c4:d3:03:61:c7:bc:84:a1:55:fe:da:bd:de: bc:d4:19:dc:12:67:0e:9d:f6:00:93:63:75:c5:93: 9c:37:14:3d:bd:d5:a6:fa:b0:b8:a4:de:c5:5d:c3: 2d:ed:12:c0:fe:ea:c3:67:fb:dc:5a:c7:e8:4a:f2: 70:08:aa:24:53:0e:87:19:60:ad:e3:45:6f:a6:e2: 46:1a:29:c0:18:72:29:96:87:4a:83:f2:b2:88:48: 51:7f:88:20:b1:ad:0c:0b:94:f8:73:e6:46:de:d2: f1:21:aa:e7:53:bf:e7:04:10:fa:de:2e:71:c7:ad: 65:e5:9c:c6:62:d5:67:a9:aa:a8:64:c8:8c:28:fe: 6e:67:2f:c8:c8:69:89:9f:f0:84:b2:46:18:e2:7c: c9:ed:9e:ce:47:91:86:9d:ca:8b:2c:b5:df:2c:8c: d4:9a:66:27:e8:20:2d:8d:50:5f:c9:4d:ce:e8:66: b8:5a:2f:c1:a3:60:14:c4:80:5f:fc:e0:cc:2f:9a: 7a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:84:55:94:EF:A3:37:87:1A:BA:19:09:B6:38:AE:EB:D0:47:7F:B8 X509v3 Authority Key Identifier: keyid:83:29:C9:13:87:58:DF:E8:BA:12:35:EE:0E:C7:D9:B6:58:9F:4B:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gynJE4dY3-i6EjXuDsfZtlifSyc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/78f82d-0bb9-43de-9810-1ca7a0b6ac9a/1/PYRVlO-jN4cauhkJtjiu69BHf7g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/78f82d-0bb9-43de-9810-1ca7a0b6ac9a/1/gynJE4dY3-i6EjXuDsfZtlifSyc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.69.3.0/24 194.2.75.0/24 Signature Algorithm: sha256WithRSAEncryption 88:d4:20:f4:fc:a0:50:63:b2:2c:9f:a5:53:46:69:7e:ea:05: 34:a4:fb:7d:6d:dc:78:bb:db:d1:ea:44:ea:c5:a7:1e:9a:bb: 91:94:54:30:59:bb:f2:c5:43:bc:02:ae:a1:b5:44:31:73:03: 77:3e:38:28:38:cb:e8:b2:2d:e4:64:51:25:84:9c:72:68:3f: bc:aa:e3:a0:ac:3d:e0:3d:85:66:f3:a5:da:9b:6c:e5:f6:55: 6f:b3:63:37:f9:5e:1a:2b:14:07:3f:9e:c0:3f:02:9a:d6:3f: bb:14:18:1f:29:3e:ac:7f:47:1a:69:12:86:0a:6f:78:b9:cf: 70:1f:3e:56:5d:0c:ca:f6:16:a5:28:b8:2a:29:a2:86:1d:a7: 2b:dd:5c:1c:fa:2a:ae:5f:c6:e7:d6:8c:73:bb:86:18:45:98: 6b:3a:9a:0c:43:c4:8e:07:d4:6a:5a:eb:ed:9f:81:26:39:f0: 4b:9e:e5:7b:14:22:30:1c:30:1a:4c:ad:73:b5:72:e2:9f:1d: 0c:81:02:f9:6a:f8:24:9c:04:1e:56:7a:2f:d4:55:96:70:64: 0d:65:3c:ec:46:a2:7f:ae:06:fc:c7:56:09:f3:95:94:da:d3: d3:07:96:c2:f9:95:58:6f:0e:ec:b1:f1:4d:26:b9:6d:39:d6: 62:3c:f6:8a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7NnbjxY0QoYGxgxjMlZlyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzMjljOTEzODc1OGRmZThiYTEyMzVlZTBlYzdkOWI2NTg5 ZjRiMjcwHhcNMjYwMTAxMjAxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZDg0NTU5NGVmYTMzNzg3MWFiYTE5MDliNjM4YWVlYmQwNDc3ZmI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKxJcn6JyYuRq6sBYFqUvWX7bxhl JufXs8Y6U4xEOgcBFLFGH3E2Rd56rEkCgrZgdyb0e2gtIPM6ruVqPsTTA2HHvISh Vf7avd681BncEmcOnfYAk2N1xZOcNxQ9vdWm+rC4pN7FXcMt7RLA/urDZ/vcWsfo SvJwCKokUw6HGWCt40VvpuJGGinAGHIplodKg/KyiEhRf4ggsa0MC5T4c+ZG3tLx IarnU7/nBBD63i5xx61l5ZzGYtVnqaqoZMiMKP5uZy/IyGmJn/CEskYY4nzJ7Z7O R5GGncqLLLXfLIzUmmYn6CAtjVBfyU3O6Ga4Wi/Bo2AUxIBf/ODML5p6DQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFD2EVZTvozeHGroZCbY4ruvQR3+4MB8GA1UdIwQY MBaAFIMpyROHWN/ouhI17g7H2bZYn0snMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3luSkU0ZFkzLWk2RWpYdURzZlp0bGlmU3ljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni83OGY4MmQtMGJiOS00M2RlLTk4MTAt MWNhN2EwYjZhYzlhLzEvUFlSVmxPLWpONGNhdWhrSnRqaXU2OUJIZjdnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni83OGY4MmQtMGJiOS00M2RlLTk4MTAtMWNhN2EwYjZhYzlh LzEvZ3luSkU0ZFkzLWk2RWpYdURzZlp0bGlmU3ljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuUUDAwQA wgJLMA0GCSqGSIb3DQEBCwUAA4IBAQCI1CD0/KBQY7Isn6VTRml+6gU0pPt9bdx4 u9vR6kTqxacemruRlFQwWbvyxUO8Aq6htUQxcwN3PjgoOMvosi3kZFElhJxyaD+8 quOgrD3gPYVm86Xam2zl9lVvs2M3+V4aKxQHP57APwKa1j+7FBgfKT6sf0caaRKG Cm94uc9wHz5WXQzK9halKLgqKaKGHacr3Vwc+iquX8bn1oxzu4YYRZhrOpoMQ8SO B9RqWuvtn4EmOfBLnuV7FCIwHDAaTK1ztXLinx0MgQL5avgknAQeVnov1FWWcGQN ZTzsRqJ/rgb8x1YJ85WU2tPTB5bC+ZVYbw7ssfFNJrltOdZiPPaK -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:18 2026 by rpki-client