This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/bec19c-5b94-401f-b138-fc421621fe08/1/BYWS08eTtraOfHT_fVMPk7guHlM.roa File: BYWS08eTtraOfHT_fVMPk7guHlM.roa (raw, json) Hash identifier: 6Kz4FXMCjQe6WKeTUwsv4um5M7VGGcIVhgjpiTRZk6E= Subject key identifier: 05:85:92:D3:C7:93:B6:B6:8E:7C:74:FF:7D:53:0F:93:B8:2E:1E:53 Certificate issuer: /CN=d28c3886c6ef5227c246224cc894a84a53bcf51a Certificate serial: 019B7C11EC644F20F7B63DC33DBBBA2A72F3 Authority key identifier: D2:8C:38:86:C6:EF:52:27:C2:46:22:4C:C8:94:A8:4A:53:BC:F5:1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ow4hsbvUifCRiJMyJSoSlO89Ro.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/bec19c-5b94-401f-b138-fc421621fe08/1/BYWS08eTtraOfHT_fVMPk7guHlM.roa Signing time: Fri 02 Jan 2026 00:18:27 +0000 ROA not before: Fri 02 Jan 2026 00:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12480 IP address blocks: 194.143.156.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/bec19c-5b94-401f-b138-fc421621fe08/1/0ow4hsbvUifCRiJMyJSoSlO89Ro.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/bec19c-5b94-401f-b138-fc421621fe08/1/0ow4hsbvUifCRiJMyJSoSlO89Ro.mft rsync://rpki.ripe.net/repository/DEFAULT/0ow4hsbvUifCRiJMyJSoSlO89Ro.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:ec:64:4f:20:f7:b6:3d:c3:3d:bb:ba:2a:72:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d28c3886c6ef5227c246224cc894a84a53bcf51a Validity Not Before: Jan 2 00:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=058592d3c793b6b68e7c74ff7d530f93b82e1e53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:14:1b:47:f9:e8:76:4f:bb:0a:c9:a7:dc:5c: 56:25:fe:ba:17:ad:4a:49:b2:c3:c2:3e:c4:53:d9: 21:93:3a:aa:45:12:bf:08:88:a5:48:37:71:2e:29: 5e:70:d6:61:a5:17:e0:e1:9c:db:65:8d:d7:af:e9: f2:6e:4c:28:19:ae:ec:0c:27:07:ff:28:12:9e:07: de:c3:44:16:e1:6d:1a:cd:f0:62:57:fb:d7:06:a3: a6:f0:73:5b:8e:37:d7:f1:eb:06:3c:c3:11:2c:9c: 30:62:7f:cb:16:6b:8b:e7:47:fe:65:21:dc:f6:e5: 3d:6f:1a:7c:85:dc:71:91:4e:fe:68:1e:fb:1e:4f: ef:e2:bb:74:8f:d6:a1:91:4e:61:9b:87:af:74:93: ab:3d:f0:35:81:d1:ab:10:6b:0e:1f:e2:ad:a3:0e: 0a:6e:7b:9a:92:e5:b1:da:8f:2c:66:d3:00:9f:80: 5a:92:3c:4f:b5:57:5b:06:83:5a:63:5d:02:7c:3c: f6:2a:9b:fb:2b:11:22:22:43:73:8e:0c:53:a4:1c: 3e:b8:1e:51:ab:51:2f:a3:d6:8d:78:c3:82:57:87: f7:c1:cd:6d:5d:1c:5e:ae:64:b5:45:43:16:f0:0c: de:7a:29:40:55:64:79:e7:52:b6:97:f2:85:e7:46: b5:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:85:92:D3:C7:93:B6:B6:8E:7C:74:FF:7D:53:0F:93:B8:2E:1E:53 X509v3 Authority Key Identifier: keyid:D2:8C:38:86:C6:EF:52:27:C2:46:22:4C:C8:94:A8:4A:53:BC:F5:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ow4hsbvUifCRiJMyJSoSlO89Ro.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/bec19c-5b94-401f-b138-fc421621fe08/1/BYWS08eTtraOfHT_fVMPk7guHlM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/bec19c-5b94-401f-b138-fc421621fe08/1/0ow4hsbvUifCRiJMyJSoSlO89Ro.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.143.156.0/23 Signature Algorithm: sha256WithRSAEncryption 86:c9:99:03:fd:41:d8:ba:0b:30:77:11:9e:67:b2:f1:af:0b: df:0a:c3:3e:bd:7a:b6:05:2b:c5:9e:79:a1:ff:d3:97:d2:28: b7:fa:f4:e8:45:86:a6:b2:25:2f:48:15:8b:c4:4e:14:d0:7c: 7f:20:12:5d:07:d0:55:eb:ef:5d:4f:0d:59:f1:b4:ca:45:cb: 0d:51:2b:39:15:3e:bd:a8:89:80:2e:0d:69:3f:54:d7:fc:c1: f2:74:7c:88:6b:70:6b:44:04:1f:6e:f9:83:8b:97:15:dc:49: b7:ca:1d:3a:3d:3d:a5:18:d7:eb:31:62:db:8a:79:07:c8:95: 10:20:b9:bf:d1:b5:4b:b7:34:4a:e9:11:be:6e:bc:ff:c4:5b: 39:08:ac:d0:46:73:8c:51:f6:a3:a3:2c:e8:70:c2:37:01:95: ac:42:d7:ef:ff:06:f7:59:38:ab:96:82:2b:1d:77:68:16:8e: 90:2b:99:09:8e:e0:3e:92:8c:79:1e:c6:22:aa:bb:75:ca:e9: 0e:d1:6f:48:e8:44:0f:96:9a:b1:2e:f9:46:8e:ae:81:c3:ce: c6:85:60:96:47:63:05:4a:02:ce:48:48:90:34:3c:ef:15:00: 28:f0:28:c8:a3:3c:6f:2a:04:22:b8:20:75:81:5d:7f:f7:2d: 1e:c4:82:8b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EexkTyD3tj3DPbu6KnLzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyOGMzODg2YzZlZjUyMjdjMjQ2MjI0Y2M4OTRhODRhNTNi Y2Y1MWEwHhcNMjYwMTAyMDAxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNTg1OTJkM2M3OTNiNmI2OGU3Yzc0ZmY3ZDUzMGY5M2I4MmUxZTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3BQbR/nodk+7Csmn3FxWJf66F61K SbLDwj7EU9khkzqqRRK/CIilSDdxLilecNZhpRfg4ZzbZY3Xr+nybkwoGa7sDCcH /ygSngfew0QW4W0azfBiV/vXBqOm8HNbjjfX8esGPMMRLJwwYn/LFmuL50f+ZSHc 9uU9bxp8hdxxkU7+aB77Hk/v4rt0j9ahkU5hm4evdJOrPfA1gdGrEGsOH+Ktow4K bnuakuWx2o8sZtMAn4BakjxPtVdbBoNaY10CfDz2Kpv7KxEiIkNzjgxTpBw+uB5R q1Evo9aNeMOCV4f3wc1tXRxermS1RUMW8AzeeilAVWR551K2l/KF50a1UwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAWFktPHk7a2jnx0/31TD5O4Lh5TMB8GA1UdIwQY MBaAFNKMOIbG71InwkYiTMiUqEpTvPUaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMG93NGhzYnZVaWZDUmlKTXlKU29TbE84OVJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC9iZWMxOWMtNWI5NC00MDFmLWIxMzgt ZmM0MjE2MjFmZTA4LzEvQllXUzA4ZVR0cmFPZkhUX2ZWTVBrN2d1SGxNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC9iZWMxOWMtNWI5NC00MDFmLWIxMzgtZmM0MjE2MjFmZTA4 LzEvMG93NGhzYnZVaWZDUmlKTXlKU29TbE84OVJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwo+cMA0G CSqGSIb3DQEBCwUAA4IBAQCGyZkD/UHYugswdxGeZ7LxrwvfCsM+vXq2BSvFnnmh /9OX0ii3+vToRYamsiUvSBWLxE4U0Hx/IBJdB9BV6+9dTw1Z8bTKRcsNUSs5FT69 qImALg1pP1TX/MHydHyIa3BrRAQfbvmDi5cV3Em3yh06PT2lGNfrMWLbinkHyJUQ ILm/0bVLtzRK6RG+brz/xFs5CKzQRnOMUfajoyzocMI3AZWsQtfv/wb3WTirloIr HXdoFo6QK5kJjuA+kox5HsYiqrt1yukO0W9I6EQPlpqxLvlGjq6Bw87GhWCWR2MF SgLOSEiQNDzvFQAo8CjIozxvKgQiuCB1gV1/9y0exIKL -----END CERTIFICATE-----Generated at Sun Jan 25 16:53:42 2026 by rpki-client