This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/9byo0_23K-pPagHkBEh9rEJVYn4.roa File: 9byo0_23K-pPagHkBEh9rEJVYn4.roa (raw, json) Hash identifier: QnNz0j7vOzWCez4Rl0/thDpiJUI/ItzPOoJw8bCwA4E= Subject key identifier: F5:BC:A8:D3:FD:B7:2B:EA:4F:6A:01:E4:04:48:7D:AC:42:55:62:7E Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c Certificate serial: 019B7B36050648E08B53BF85B60F6AAA22F0 Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/9byo0_23K-pPagHkBEh9rEJVYn4.roa Signing time: Thu 01 Jan 2026 20:18:16 +0000 ROA not before: Thu 01 Jan 2026 20:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34847 IP address blocks: 86.107.76.0/24 maxlen: 24 89.33.119.0/24 maxlen: 24 89.33.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.mft rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:05:06:48:e0:8b:53:bf:85:b6:0f:6a:aa:22:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c Validity Not Before: Jan 1 20:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f5bca8d3fdb72bea4f6a01e404487dac4255627e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:09:77:17:bf:3b:97:5a:9a:8d:1a:f2:72:10: 13:72:3d:59:d7:e1:a0:9e:0d:44:1c:c2:5a:36:b9: 9c:8a:9b:d7:06:d8:c5:a3:6f:1c:12:54:44:c4:a1: 97:bf:4e:a1:b2:bf:5d:8d:4e:c8:42:9c:16:e6:94: 2b:73:c1:ec:b4:db:82:69:34:ef:df:07:e5:a3:34: 87:10:4d:cf:16:62:c3:05:f2:9d:03:82:cf:46:dd: b4:cf:ee:97:a2:b2:c2:be:72:88:0d:7c:e2:01:25: 6e:6b:2a:92:97:4f:f3:b1:4f:87:3d:e9:09:05:5f: 65:38:fe:21:f5:29:83:cc:5e:fc:92:8c:44:b1:61: a3:e0:e8:d1:69:97:8f:72:6c:9c:12:85:65:f6:b6: db:72:fb:54:ac:b9:8d:a2:d1:a2:63:cd:60:8d:52: c6:94:d3:7f:29:b2:96:1c:b5:5f:92:6c:3d:e6:55: fb:48:8e:ee:f5:74:9c:f8:08:06:3d:f3:9c:aa:d2: ec:16:f9:18:ef:fc:db:ca:7c:5d:43:67:48:cb:a5: c2:6b:bf:58:86:9a:fc:36:4c:4b:1d:25:80:1f:4b: a4:33:16:f1:c8:fb:27:19:f7:fd:41:71:9c:0a:c5: 0e:de:ec:4a:dd:41:48:fe:94:7f:3e:7a:a7:70:dc: c1:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:BC:A8:D3:FD:B7:2B:EA:4F:6A:01:E4:04:48:7D:AC:42:55:62:7E X509v3 Authority Key Identifier: keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/9byo0_23K-pPagHkBEh9rEJVYn4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.107.76.0/24 89.33.119.0/24 89.33.244.0/24 Signature Algorithm: sha256WithRSAEncryption a3:31:63:31:d0:50:ab:83:a1:99:63:55:4d:21:cb:85:e0:03: 74:b7:9c:00:62:51:e1:c3:63:be:5f:45:ab:bf:27:f4:d2:de: 0e:c2:03:b1:6e:d3:ae:56:1d:6d:3f:9b:6f:c4:11:f2:98:a4: 7d:20:37:f9:03:41:d7:9c:83:3e:eb:2e:44:f0:47:5e:2e:b3: 84:e5:49:c1:77:cf:a3:29:77:54:2b:1f:cf:39:a8:1e:a6:6e: 22:32:3c:74:85:b1:ec:9c:81:1d:0e:e4:40:14:ac:6f:6c:99: f7:39:12:48:27:54:c7:d9:22:5d:50:aa:25:63:4c:60:75:3f: cd:e8:34:9f:35:50:e8:7a:66:f5:0c:0b:df:28:8c:f1:e4:48: 60:b8:7c:4e:a2:35:77:33:f9:03:ca:43:57:ff:a6:04:ac:8b: 47:4b:d9:25:b9:1d:e0:24:28:11:17:92:b7:b6:a1:db:41:eb: 3b:74:1d:ea:0c:bd:ea:35:fb:95:b6:c5:97:52:bb:59:ec:01: bc:04:19:ec:66:3c:ad:38:dc:6f:03:f6:f2:42:e2:49:36:11: 58:09:36:4d:3c:e6:0d:e2:19:15:82:02:3d:85:11:7f:05:7d: b7:82:31:8b:69:7b:e8:b2:78:3e:07:19:bc:c3:b3:f9:94:21: 93:ba:cc:ad -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt7NgUGSOCLU7+Ftg9qqiLwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkZjEzMmRmMTNlNGJlNTNkODI1MGM4YzQ4NDIwMjY0ZWVm NmMxNGMwHhcNMjYwMTAxMjAxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNWJjYThkM2ZkYjcyYmVhNGY2YTAxZTQwNDQ4N2RhYzQyNTU2MjdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygl3F787l1qajRrychATcj1Z1+Gg ng1EHMJaNrmcipvXBtjFo28cElRExKGXv06hsr9djU7IQpwW5pQrc8HstNuCaTTv 3wflozSHEE3PFmLDBfKdA4LPRt20z+6XorLCvnKIDXziASVuayqSl0/zsU+HPekJ BV9lOP4h9SmDzF78koxEsWGj4OjRaZePcmycEoVl9rbbcvtUrLmNotGiY81gjVLG lNN/KbKWHLVfkmw95lX7SI7u9XSc+AgGPfOcqtLsFvkY7/zbynxdQ2dIy6XCa79Y hpr8NkxLHSWAH0ukMxbxyPsnGff9QXGcCsUO3uxK3UFI/pR/PnqncNzB1QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFPW8qNP9tyvqT2oB5ARIfaxCVWJ+MB8GA1UdIwQY MBaAFH3xMt8T5L5T2CUMjEhCAmTu9sFMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmZFeTN4UGt2bFBZSlF5TVNFSUNaTzcyd1V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9jMzc0OTctNjM3Ni00NjFlLTkzYzYt OTc3ODY3NGVkYzk3LzEvOWJ5bzBfMjNLLXBQYWdIa0JFaDlyRUpWWW40LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9jMzc0OTctNjM3Ni00NjFlLTkzYzYtOTc3ODY3NGVkYzk3 LzEvZmZFeTN4UGt2bFBZSlF5TVNFSUNaTzcyd1V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAVmtMAwQA WSF3AwQAWSH0MA0GCSqGSIb3DQEBCwUAA4IBAQCjMWMx0FCrg6GZY1VNIcuF4AN0 t5wAYlHhw2O+X0Wrvyf00t4OwgOxbtOuVh1tP5tvxBHymKR9IDf5A0HXnIM+6y5E 8EdeLrOE5UnBd8+jKXdUKx/POagepm4iMjx0hbHsnIEdDuRAFKxvbJn3ORJIJ1TH 2SJdUKolY0xgdT/N6DSfNVDoemb1DAvfKIzx5EhguHxOojV3M/kDykNX/6YErItH S9kluR3gJCgRF5K3tqHbQes7dB3qDL3qNfuVtsWXUrtZ7AG8BBnsZjytONxvA/by QuJJNhFYCTZNPOYN4hkVggI9hRF/BX23gjGLaXvosng+Bxm8w7P5lCGTusyt -----END CERTIFICATE-----Generated at Sun Jan 25 21:24:36 2026 by rpki-client