This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/BYtnuImtTGdi14Pvw9xlRKAL65k.roa File: BYtnuImtTGdi14Pvw9xlRKAL65k.roa (raw, json) Hash identifier: hUoeJXbJ5fZg7WKvqap5HxU1pLmROBa7LXCxisf4SP4= Subject key identifier: 05:8B:67:B8:89:AD:4C:67:62:D7:83:EF:C3:DC:65:44:A0:0B:EB:99 Certificate issuer: /CN=255876412d20fbb6cab823481782ac47703b4404 Certificate serial: 019B7B36C90F6777B1C94A703DDC166EB386 Authority key identifier: 25:58:76:41:2D:20:FB:B6:CA:B8:23:48:17:82:AC:47:70:3B:44:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/BYtnuImtTGdi14Pvw9xlRKAL65k.roa Signing time: Thu 01 Jan 2026 20:19:06 +0000 ROA not before: Thu 01 Jan 2026 20:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209861 IP address blocks: 2a01:ffc6:8000::/34 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.crl rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft rsync://rpki.ripe.net/repository/DEFAULT/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:c9:0f:67:77:b1:c9:4a:70:3d:dc:16:6e:b3:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=255876412d20fbb6cab823481782ac47703b4404 Validity Not Before: Jan 1 20:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=058b67b889ad4c6762d783efc3dc6544a00beb99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:07:85:42:fc:dc:56:94:9f:34:27:62:e1:94: 4c:9d:1b:43:df:ec:d8:e5:d1:5b:22:28:ea:59:a8: 65:ec:c7:cb:35:59:f0:39:85:b7:7b:99:c3:f8:26: a5:04:11:bc:88:b4:96:a4:da:be:dd:d4:73:58:d8: 66:a6:16:e8:77:65:02:71:a1:55:3c:19:4c:c7:2d: 39:03:f1:80:03:c6:d1:5f:0f:70:50:a8:52:53:95: ef:f9:94:ca:88:cd:7b:31:60:09:d5:d8:f3:f6:31: 82:55:b2:b3:7d:33:60:61:57:d5:44:cf:e4:3d:65: bb:8f:a7:cb:02:06:2d:9f:6d:e6:9e:21:0d:87:db: 93:da:9a:ff:04:a2:c4:ba:38:ca:92:27:82:62:a1: 17:f0:a8:82:39:56:bb:aa:4f:29:d7:c8:66:a5:99: be:aa:24:29:87:30:b5:e1:7a:87:46:00:86:c6:36: 0c:c0:94:8f:54:78:4e:06:54:4a:49:1e:ab:97:9c: 16:34:32:70:0d:03:af:88:8c:d7:e1:6a:b1:67:4c: c7:65:1a:6b:28:7c:a9:0a:a3:aa:84:3d:ac:36:4f: d7:ce:f9:4e:23:f6:af:c0:c4:79:6a:05:f6:b3:05: 86:f2:c4:c7:f5:71:48:1e:41:c9:e9:ad:97:80:e3: f0:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:8B:67:B8:89:AD:4C:67:62:D7:83:EF:C3:DC:65:44:A0:0B:EB:99 X509v3 Authority Key Identifier: keyid:25:58:76:41:2D:20:FB:B6:CA:B8:23:48:17:82:AC:47:70:3B:44:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/BYtnuImtTGdi14Pvw9xlRKAL65k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:ffc6:8000::/34 Signature Algorithm: sha256WithRSAEncryption 0d:45:81:a3:eb:96:bd:73:dd:f3:8f:71:93:18:2d:fe:58:b3: d6:d1:fe:90:18:37:18:47:d7:85:dd:32:50:e2:2e:87:6b:47: 23:21:9e:30:8e:fb:3b:d7:36:25:75:ef:d2:4e:39:dc:d9:d2: cd:4e:4f:ce:c9:1d:1a:38:9c:d4:2b:de:13:9c:4f:60:3d:4f: 93:bc:81:8a:3a:7a:9d:cc:45:bc:19:35:55:e7:1f:d6:3a:90: 29:77:1a:34:ef:45:b5:36:e1:ca:2a:a1:6b:3b:4f:f5:92:58: 05:cf:d5:bb:02:4b:44:13:b0:45:49:4e:93:bd:0a:b6:fc:7a: 69:43:a4:40:83:27:80:a1:47:6b:8b:ae:de:a4:b4:05:a8:fb: 37:26:74:13:db:f1:16:a3:d5:d3:82:dd:96:a1:7c:80:41:69: 1f:cd:72:5b:7a:bf:70:3c:80:c7:9b:6b:94:cf:dc:6a:50:07: 2e:bb:a7:5a:4e:5b:78:17:8b:58:20:06:bc:a8:fb:cc:6b:a5: b6:b7:0e:67:2b:42:92:5c:90:da:ea:e6:41:0f:81:58:1b:6e: 53:3c:ce:f2:f9:0f:29:5f:ed:98:0b:6e:2c:ed:1d:5c:43:d2: 44:12:81:f2:b4:ae:77:ed:29:04:2c:e7:8a:89:dc:fd:f4:1e: 50:51:8a:1c -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt7NskPZ3exyUpwPdwWbrOGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1NTg3NjQxMmQyMGZiYjZjYWI4MjM0ODE3ODJhYzQ3NzAz YjQ0MDQwHhcNMjYwMTAxMjAxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNThiNjdiODg5YWQ0YzY3NjJkNzgzZWZjM2RjNjU0NGEwMGJlYjk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3QeFQvzcVpSfNCdi4ZRMnRtD3+zY 5dFbIijqWahl7MfLNVnwOYW3e5nD+CalBBG8iLSWpNq+3dRzWNhmphbod2UCcaFV PBlMxy05A/GAA8bRXw9wUKhSU5Xv+ZTKiM17MWAJ1djz9jGCVbKzfTNgYVfVRM/k PWW7j6fLAgYtn23mniENh9uT2pr/BKLEujjKkieCYqEX8KiCOVa7qk8p18hmpZm+ qiQphzC14XqHRgCGxjYMwJSPVHhOBlRKSR6rl5wWNDJwDQOviIzX4WqxZ0zHZRpr KHypCqOqhD2sNk/XzvlOI/avwMR5agX2swWG8sTH9XFIHkHJ6a2XgOPwVwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFAWLZ7iJrUxnYteD78PcZUSgC+uZMB8GA1UdIwQY MBaAFCVYdkEtIPu2yrgjSBeCrEdwO0QEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlZoMlFTMGctN2JLdUNOSUY0S3NSM0E3UkFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9kZDA2MmEtMTMxOS00MDE5LWE1NTEt ODc2YzdmY2E0YjM0LzEvQll0bnVJbXRUR2RpMTRQdnc5eGxSS0FMNjVrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9kZDA2MmEtMTMxOS00MDE5LWE1NTEtODc2YzdmY2E0YjM0 LzEvSlZoMlFTMGctN2JLdUNOSUY0S3NSM0E3UkFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGKgH/xoAw DQYJKoZIhvcNAQELBQADggEBAA1FgaPrlr1z3fOPcZMYLf5Ys9bR/pAYNxhH14Xd MlDiLodrRyMhnjCO+zvXNiV179JOOdzZ0s1OT87JHRo4nNQr3hOcT2A9T5O8gYo6 ep3MRbwZNVXnH9Y6kCl3GjTvRbU24coqoWs7T/WSWAXP1bsCS0QTsEVJTpO9Crb8 emlDpECDJ4ChR2uLrt6ktAWo+zcmdBPb8Raj1dOC3ZahfIBBaR/Nclt6v3A8gMeb a5TP3GpQBy67p1pOW3gXi1ggBryo+8xrpba3DmcrQpJckNrq5kEPgVgbblM8zvL5 Dylf7ZgLbiztHVxD0kQSgfK0rnftKQQs54qJ3P30HlBRihw= -----END CERTIFICATE-----Generated at Sun Jan 25 10:20:39 2026 by rpki-client