This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/PYC5VmfJr8R_CWcpbSFGWUPORN8.roa File: PYC5VmfJr8R_CWcpbSFGWUPORN8.roa (raw, json) Hash identifier: ni//q5JfG12C/jFNrjnRjeiKy+Pl48zK6T66mzOL5KA= Subject key identifier: 3D:80:B9:56:67:C9:AF:C4:7F:09:67:29:6D:21:46:59:43:CE:44:DF Certificate issuer: /CN=d76d71d8845d2fe296a46d79176f590d8db4f16a Certificate serial: 019B7AC90A9F279C81D0897519128BDB6B3A Authority key identifier: D7:6D:71:D8:84:5D:2F:E2:96:A4:6D:79:17:6F:59:0D:8D:B4:F1:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/121x2IRdL-KWpG15F29ZDY208Wo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/PYC5VmfJr8R_CWcpbSFGWUPORN8.roa Signing time: Thu 01 Jan 2026 18:19:14 +0000 ROA not before: Thu 01 Jan 2026 18:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21497 IP address blocks: 81.95.176.0/21 maxlen: 21 81.95.184.0/23 maxlen: 23 81.95.186.0/24 maxlen: 24 81.95.188.0/23 maxlen: 23 81.95.190.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.mft rsync://rpki.ripe.net/repository/DEFAULT/121x2IRdL-KWpG15F29ZDY208Wo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:0a:9f:27:9c:81:d0:89:75:19:12:8b:db:6b:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d76d71d8845d2fe296a46d79176f590d8db4f16a Validity Not Before: Jan 1 18:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3d80b95667c9afc47f0967296d21465943ce44df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:42:9b:cb:d8:2e:1d:49:50:de:a9:eb:39:25: 7a:51:f9:ef:d8:d4:a3:aa:b5:0c:39:ed:c3:37:ca: 62:1e:c9:ff:73:67:66:28:38:32:77:ed:aa:9f:51: 62:3e:ac:39:b5:4e:c8:7f:75:d3:86:cb:20:fa:71: 14:a0:ad:b4:6d:1d:dc:7e:7b:83:f8:6d:19:f3:26: 9f:59:2a:d1:a1:d5:b3:af:b9:55:41:24:5d:b3:5e: d1:12:6f:ac:27:de:74:d3:d3:ed:d1:fa:9e:9c:cb: fa:01:82:8a:11:62:f4:63:e3:2b:b8:b0:57:50:47: 72:4c:95:65:a8:61:ee:e1:c4:67:9c:08:9b:ea:2d: f1:c3:d3:be:42:73:44:8c:76:33:85:49:b8:e0:8b: 65:d6:fa:43:14:9b:a9:d5:d2:5f:7f:8d:d4:50:fa: 75:82:f4:12:ec:36:a4:12:15:70:e3:52:5c:7e:e3: 57:5d:53:bb:b3:98:de:29:f1:79:92:63:d7:fa:f8: 34:41:37:a6:41:19:f4:92:7a:cb:3b:be:44:86:bb: 52:9d:96:15:65:2a:ae:6f:5f:06:67:44:8b:14:b5: b4:a3:8c:7d:e8:40:58:c8:2c:6c:41:fc:2c:f0:a5: be:57:6d:c9:82:1b:0e:53:68:37:f0:20:e6:20:78: 47:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:80:B9:56:67:C9:AF:C4:7F:09:67:29:6D:21:46:59:43:CE:44:DF X509v3 Authority Key Identifier: keyid:D7:6D:71:D8:84:5D:2F:E2:96:A4:6D:79:17:6F:59:0D:8D:B4:F1:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/121x2IRdL-KWpG15F29ZDY208Wo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/PYC5VmfJr8R_CWcpbSFGWUPORN8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.95.176.0-81.95.186.255 81.95.188.0/22 Signature Algorithm: sha256WithRSAEncryption 3c:4d:a1:f7:52:6a:94:b5:bd:f5:c1:48:7c:d0:14:17:23:dd: 96:3f:c6:c4:b8:30:ec:f8:5c:10:42:7b:75:78:d3:dc:c4:af: 5b:44:ad:26:e7:d6:9f:1b:d2:e6:62:2f:40:ba:1b:58:b5:3d: cc:93:25:b5:e7:ea:f6:91:51:e2:ca:c5:34:d0:d2:42:09:8c: 89:3b:41:95:fd:e9:1e:45:4e:d2:89:14:d4:84:59:cc:1a:33: 93:9d:5d:6a:0e:fe:1f:34:13:f3:c7:42:64:33:58:b1:40:b4: 14:81:f3:26:2f:8f:39:f9:01:13:e9:91:4e:4d:4c:ec:f7:c6: db:35:fc:3e:3a:44:d8:ee:0a:a6:0a:7d:79:ce:bc:51:a7:a1: 92:2b:14:ec:9e:61:21:3e:b2:f4:3f:6b:2c:8f:99:1b:e8:40: 10:4a:1d:ac:49:a9:8e:0e:01:7a:e4:b2:5c:23:63:83:de:1c: 88:02:c5:44:d6:d3:96:97:96:e5:37:b0:8b:68:87:83:94:00: 72:cd:40:e0:9a:3f:0d:f2:6c:cb:0c:aa:a9:10:67:60:e4:2d: 06:c1:72:f4:b3:9a:71:4a:d5:4a:5e:2a:6a:44:f2:4a:b7:16: 04:6b:49:c8:45:ff:5e:49:72:c4:9b:bd:6b:0d:e7:55:d3:65: b0:fe:1b:6d -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt6yQqfJ5yB0Il1GRKL22s6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NmQ3MWQ4ODQ1ZDJmZTI5NmE0NmQ3OTE3NmY1OTBkOGRi NGYxNmEwHhcNMjYwMTAxMTgxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZDgwYjk1NjY3YzlhZmM0N2YwOTY3Mjk2ZDIxNDY1OTQzY2U0NGRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUKby9guHUlQ3qnrOSV6Ufnv2NSj qrUMOe3DN8piHsn/c2dmKDgyd+2qn1FiPqw5tU7If3XThssg+nEUoK20bR3cfnuD +G0Z8yafWSrRodWzr7lVQSRds17REm+sJ95009Pt0fqenMv6AYKKEWL0Y+MruLBX UEdyTJVlqGHu4cRnnAib6i3xw9O+QnNEjHYzhUm44Itl1vpDFJup1dJff43UUPp1 gvQS7DakEhVw41JcfuNXXVO7s5jeKfF5kmPX+vg0QTemQRn0knrLO75EhrtSnZYV ZSqub18GZ0SLFLW0o4x96EBYyCxsQfws8KW+V23JghsOU2g38CDmIHhHrQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFD2AuVZnya/EfwlnKW0hRllDzkTfMB8GA1UdIwQY MBaAFNdtcdiEXS/ilqRteRdvWQ2NtPFqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTIxeDJJUmRMLUtXcEcxNUYyOVpEWTIwOFdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9lYzMxMDYtZTdiZi00Mjk5LWFlMTIt ZGJkOTFiMTExODQ0LzEvUFlDNVZtZkpyOFJfQ1djcGJTRkdXVVBPUk44LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9lYzMxMDYtZTdiZi00Mjk5LWFlMTItZGJkOTFiMTExODQ0 LzEvMTIxeDJJUmRMLUtXcEcxNUYyOVpEWTIwOFdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBARRX7AD BABRX7oDBAJRX7wwDQYJKoZIhvcNAQELBQADggEBADxNofdSapS1vfXBSHzQFBcj 3ZY/xsS4MOz4XBBCe3V409zEr1tErSbn1p8b0uZiL0C6G1i1PcyTJbXn6vaRUeLK xTTQ0kIJjIk7QZX96R5FTtKJFNSEWcwaM5OdXWoO/h80E/PHQmQzWLFAtBSB8yYv jzn5ARPpkU5NTOz3xts1/D46RNjuCqYKfXnOvFGnoZIrFOyeYSE+svQ/ayyPmRvo QBBKHaxJqY4OAXrkslwjY4PeHIgCxUTW05aXluU3sItoh4OUAHLNQOCaPw3ybMsM qqkQZ2DkLQbBcvSzmnFK1UpeKmpE8kq3FgRrSchF/15JcsSbvWsN51XTZbD+G20= -----END CERTIFICATE-----Generated at Mon Jan 26 21:04:45 2026 by rpki-client