This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/PnyApWhBqSkH1XcSr9pQIjfA9bU.roa File: PnyApWhBqSkH1XcSr9pQIjfA9bU.roa (raw, json) Hash identifier: u2tVorDg0eTkm07sz5ei+r+s3xcbReWf672n/fbZuG8= Subject key identifier: 3E:7C:80:A5:68:41:A9:29:07:D5:77:12:AF:DA:50:22:37:C0:F5:B5 Certificate issuer: /CN=fa95ecdaa359a6f8355573d39001baa35874bed2 Certificate serial: 019B78A221802A5300C64F7BB6C0E9C74CBA Authority key identifier: FA:95:EC:DA:A3:59:A6:F8:35:55:73:D3:90:01:BA:A3:58:74:BE:D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/PnyApWhBqSkH1XcSr9pQIjfA9bU.roa Signing time: Thu 01 Jan 2026 08:17:29 +0000 ROA not before: Thu 01 Jan 2026 08:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60111 IP address blocks: 185.157.116.0/22 maxlen: 22 2a07:a680::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.crl rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft rsync://rpki.ripe.net/repository/DEFAULT/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:21:80:2a:53:00:c6:4f:7b:b6:c0:e9:c7:4c:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa95ecdaa359a6f8355573d39001baa35874bed2 Validity Not Before: Jan 1 08:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3e7c80a56841a92907d57712afda502237c0f5b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:fe:a7:b5:13:58:e7:6c:b5:ef:f9:a5:1b:d7: 74:c1:ab:97:13:65:e8:be:35:d7:d1:c9:fd:fa:11: dd:1b:33:33:e4:28:a6:e0:4d:d5:e2:64:4d:b3:67: 38:ec:13:72:9d:d9:20:10:0e:5b:17:45:bf:f4:e8: 96:97:1b:e1:75:96:26:42:1d:64:0a:46:9e:5a:af: 60:7d:02:af:74:2a:9e:ca:6f:01:c6:6f:8d:42:1a: 03:a7:98:7a:0d:2f:ca:ee:25:4b:fc:1d:99:2c:f6: 8a:33:bd:fc:c3:23:b5:5b:f5:ce:d5:df:c7:31:f8: 20:78:ec:2e:3e:fa:64:d2:60:5a:86:af:17:99:94: e9:2f:82:a2:d6:0a:14:7a:b9:3d:ad:41:f3:be:6f: b7:1f:27:94:c4:ce:a4:05:de:d5:2c:70:7e:47:e6: 32:22:ff:6e:57:58:43:cf:76:76:20:66:7e:58:90: 51:1c:87:2f:7f:b9:05:b2:80:cf:f5:60:37:30:ea: a8:a7:ac:73:96:bf:7d:1c:50:e2:e6:71:92:4d:3b: 54:d1:be:cc:45:e4:ca:3d:e5:b1:ad:94:c4:93:e5: bf:90:cb:61:2d:52:a0:3c:67:33:72:c5:98:f7:2d: dc:2d:d4:bb:9c:d3:94:37:7c:ef:6a:64:21:40:a7: 19:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:7C:80:A5:68:41:A9:29:07:D5:77:12:AF:DA:50:22:37:C0:F5:B5 X509v3 Authority Key Identifier: keyid:FA:95:EC:DA:A3:59:A6:F8:35:55:73:D3:90:01:BA:A3:58:74:BE:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/PnyApWhBqSkH1XcSr9pQIjfA9bU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.157.116.0/22 IPv6: 2a07:a680::/29 Signature Algorithm: sha256WithRSAEncryption 2b:3e:75:8b:5d:ef:25:22:1f:4d:ed:c7:61:37:8f:d0:c8:21: 5d:eb:3e:b5:7d:2e:f6:de:57:9f:99:b0:35:6e:9a:a4:4c:66: e2:be:b3:fc:ef:ec:d6:53:6b:b1:df:aa:ad:d9:59:6c:87:f5: d8:84:45:c9:0b:38:6f:be:0d:31:18:bf:d5:34:99:0c:86:2d: 7a:ca:80:25:64:af:f2:63:5a:c4:6a:57:49:15:72:b8:36:21: 8b:cd:d7:54:dd:55:90:63:2e:28:5a:a7:76:b0:b0:a8:80:44: d4:bf:fa:78:99:97:fb:8d:5d:cb:8d:82:fc:26:3c:2f:a7:41: c9:92:87:7c:3b:36:c2:71:1e:75:aa:65:1d:45:fc:7d:97:5d: c0:72:b5:62:2f:04:5e:ea:c6:f0:12:b1:c4:f5:30:e9:e7:0c: fe:f9:e4:40:73:3b:de:b6:41:91:f9:6c:29:68:00:a3:cc:9f: f7:b6:49:cc:b8:cc:f9:c6:a4:a6:b0:6d:22:f8:9d:8a:2d:49: 57:cd:b7:88:dc:2e:1e:87:13:0b:4f:73:bb:46:94:1d:0d:22: 06:4e:be:9b:ef:8c:1b:a7:1e:70:f7:36:a0:62:09:ba:30:1a: 1b:a5:af:6d:14:0d:df:14:00:aa:c5:20:f9:73:21:a3:64:d4: f0:e7:14:20 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt4oiGAKlMAxk97tsDpx0y6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhOTVlY2RhYTM1OWE2ZjgzNTU1NzNkMzkwMDFiYWEzNTg3 NGJlZDIwHhcNMjYwMTAxMDgxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZTdjODBhNTY4NDFhOTI5MDdkNTc3MTJhZmRhNTAyMjM3YzBmNWI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqv6ntRNY52y17/mlG9d0wauXE2Xo vjXX0cn9+hHdGzMz5Cim4E3V4mRNs2c47BNyndkgEA5bF0W/9OiWlxvhdZYmQh1k CkaeWq9gfQKvdCqeym8Bxm+NQhoDp5h6DS/K7iVL/B2ZLPaKM738wyO1W/XO1d/H MfggeOwuPvpk0mBahq8XmZTpL4Ki1goUerk9rUHzvm+3HyeUxM6kBd7VLHB+R+Yy Iv9uV1hDz3Z2IGZ+WJBRHIcvf7kFsoDP9WA3MOqop6xzlr99HFDi5nGSTTtU0b7M ReTKPeWxrZTEk+W/kMthLVKgPGczcsWY9y3cLdS7nNOUN3zvamQhQKcZswIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFD58gKVoQakpB9V3Eq/aUCI3wPW1MB8GA1UdIwQY MBaAFPqV7NqjWab4NVVz05ABuqNYdL7SMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1wWHMycU5acHZnMVZYUFRrQUc2bzFoMHZ0SS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmUvZGJiNWM3LTk0NjAtNDAwOS04ZTdk LTFjMTdkNTAyZDRkZi8xL1BueUFwV2hCcVNrSDFYY1NyOXBRSWpmQTliVS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYmUvZGJiNWM3LTk0NjAtNDAwOS04ZTdkLTFjMTdkNTAyZDRk Zi8xLzEtcFhzMnFOWnB2ZzFWWFBUa0FHNm8xaDB2dEkuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAK5nXQw DQQCAAIwBwMFAyoHpoAwDQYJKoZIhvcNAQELBQADggEBACs+dYtd7yUiH03tx2E3 j9DIIV3rPrV9LvbeV5+ZsDVumqRMZuK+s/zv7NZTa7Hfqq3ZWWyH9diERckLOG++ DTEYv9U0mQyGLXrKgCVkr/JjWsRqV0kVcrg2IYvN11TdVZBjLihap3awsKiARNS/ +niZl/uNXcuNgvwmPC+nQcmSh3w7NsJxHnWqZR1F/H2XXcBytWIvBF7qxvASscT1 MOnnDP755EBzO962QZH5bCloAKPMn/e2Scy4zPnGpKawbSL4nYotSVfNt4jcLh6H EwtPc7tGlB0NIgZOvpvvjBunHnD3NqBiCbowGhulr20UDd8UAKrFIPlzIaNk1PDn FCA= -----END CERTIFICATE-----Generated at Mon Feb 9 21:01:35 2026 by rpki-client