This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ByeONhKPbtfcZIgmOWUkHqOuix4.roa File: ByeONhKPbtfcZIgmOWUkHqOuix4.roa (raw, json) Hash identifier: ttWur3O9+40ydS2Ly4OWefpaqA3EaxZKhb2MJiO/Prk= Subject key identifier: 07:27:8E:36:12:8F:6E:D7:DC:64:88:26:39:65:24:1E:A3:AE:8B:1E Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c Certificate serial: 019B7B361026582A2695CF9CF44E4995DB30 Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ByeONhKPbtfcZIgmOWUkHqOuix4.roa Signing time: Thu 01 Jan 2026 20:18:19 +0000 ROA not before: Thu 01 Jan 2026 20:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58174 IP address blocks: 85.204.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.mft rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:10:26:58:2a:26:95:cf:9c:f4:4e:49:95:db:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c Validity Not Before: Jan 1 20:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=07278e36128f6ed7dc6488263965241ea3ae8b1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:f7:cb:a7:c0:9b:2d:f0:52:51:52:ce:94:13: 14:46:ca:11:2a:e1:30:64:d3:2c:65:0a:23:26:f5: 00:ed:83:2c:d1:27:b0:9c:d9:eb:0f:56:f3:cc:12: 02:71:63:9a:dd:c7:4c:b0:1c:1c:49:dc:87:f2:2a: 1a:02:7a:fc:58:35:b5:43:78:c4:ed:3f:92:c5:84: ce:00:c8:08:d1:74:9c:1b:c5:27:3a:2f:38:12:43: 02:5b:89:51:e7:26:82:c6:01:56:1d:2b:e5:7d:aa: 6f:46:e0:fb:ff:8f:a1:a0:37:44:02:90:8b:5e:75: 29:1d:9e:23:ca:27:d0:f1:f3:81:c1:22:f6:5a:57: aa:2e:1a:29:27:92:51:21:24:a6:db:85:b8:be:d2: d0:81:9b:c9:76:42:93:46:87:8a:c9:3e:c5:73:b6: bb:40:f3:67:7a:2c:74:57:11:ec:ac:1d:aa:a6:df: f2:3c:17:e8:77:fd:c8:33:0d:1f:fe:8c:5d:ef:3d: a0:14:80:7a:72:f1:2e:9c:d5:d0:66:ec:d9:f5:2b: db:f5:5f:fa:f3:2f:7f:d3:00:cf:be:80:de:d2:12: 33:b8:98:b1:c1:05:df:cd:02:a6:14:f5:27:0d:a2: 7b:22:1d:bd:14:69:14:df:37:e9:b7:bd:41:27:c0: fd:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:27:8E:36:12:8F:6E:D7:DC:64:88:26:39:65:24:1E:A3:AE:8B:1E X509v3 Authority Key Identifier: keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ByeONhKPbtfcZIgmOWUkHqOuix4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.204.68.0/24 Signature Algorithm: sha256WithRSAEncryption 10:45:6f:c1:f4:82:f4:99:ab:d3:3e:be:a5:a7:bf:8d:c9:17: ae:57:a3:47:df:d1:7f:05:2f:27:53:64:3e:bd:a9:78:95:32: 4c:95:48:06:49:3d:68:8b:1a:e9:6e:42:31:e3:8f:69:85:e5: 87:84:af:b3:71:13:30:be:ce:95:7a:81:aa:60:f4:4d:d9:1c: de:06:3c:70:f4:6a:8f:db:10:19:5d:e8:8c:2c:e8:d5:9e:04: 3d:01:7b:48:79:5e:40:e0:19:2c:e9:36:f3:a4:73:8e:2b:5d: 02:45:8a:b3:4c:91:d1:80:85:5d:e4:3f:39:8c:1a:ba:2a:9d: 84:d0:be:20:f8:3c:49:10:25:0b:a2:09:18:02:1c:d8:eb:01: 89:db:22:89:a2:0d:a6:72:3f:7d:23:cf:0a:5e:e6:7e:1f:fd: aa:42:4c:52:7e:77:4f:ad:b1:26:1e:9e:05:66:f8:53:89:dc: a1:ec:c5:23:a9:13:71:57:72:93:36:ea:e6:de:88:4e:9e:17: e9:9d:b8:61:7b:f8:8d:9a:11:68:cb:40:a9:22:85:29:09:6f: d6:86:62:ca:2a:43:a1:7a:eb:2a:a4:e1:1f:8d:79:d5:cc:75: 3b:58:2d:e4:98:57:ae:70:3e:7a:69:57:5a:0d:4f:f5:1d:0d: 97:54:c2:09 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NhAmWComlc+c9E5JldswMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkZjEzMmRmMTNlNGJlNTNkODI1MGM4YzQ4NDIwMjY0ZWVm NmMxNGMwHhcNMjYwMTAxMjAxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNzI3OGUzNjEyOGY2ZWQ3ZGM2NDg4MjYzOTY1MjQxZWEzYWU4YjFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2vfLp8CbLfBSUVLOlBMURsoRKuEw ZNMsZQojJvUA7YMs0SewnNnrD1bzzBICcWOa3cdMsBwcSdyH8ioaAnr8WDW1Q3jE 7T+SxYTOAMgI0XScG8UnOi84EkMCW4lR5yaCxgFWHSvlfapvRuD7/4+hoDdEApCL XnUpHZ4jyifQ8fOBwSL2WleqLhopJ5JRISSm24W4vtLQgZvJdkKTRoeKyT7Fc7a7 QPNneix0VxHsrB2qpt/yPBfod/3IMw0f/oxd7z2gFIB6cvEunNXQZuzZ9Svb9V/6 8y9/0wDPvoDe0hIzuJixwQXfzQKmFPUnDaJ7Ih29FGkU3zfpt71BJ8D9bwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAcnjjYSj27X3GSIJjllJB6jroseMB8GA1UdIwQY MBaAFH3xMt8T5L5T2CUMjEhCAmTu9sFMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmZFeTN4UGt2bFBZSlF5TVNFSUNaTzcyd1V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9jMzc0OTctNjM3Ni00NjFlLTkzYzYt OTc3ODY3NGVkYzk3LzEvQnllT05oS1BidGZjWklnbU9XVWtIcU91aXg0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9jMzc0OTctNjM3Ni00NjFlLTkzYzYtOTc3ODY3NGVkYzk3 LzEvZmZFeTN4UGt2bFBZSlF5TVNFSUNaTzcyd1V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVcxEMA0G CSqGSIb3DQEBCwUAA4IBAQAQRW/B9IL0mavTPr6lp7+NyReuV6NH39F/BS8nU2Q+ val4lTJMlUgGST1oixrpbkIx449pheWHhK+zcRMwvs6VeoGqYPRN2RzeBjxw9GqP 2xAZXeiMLOjVngQ9AXtIeV5A4Bks6TbzpHOOK10CRYqzTJHRgIVd5D85jBq6Kp2E 0L4g+DxJECULogkYAhzY6wGJ2yKJog2mcj99I88KXuZ+H/2qQkxSfndPrbEmHp4F ZvhTidyh7MUjqRNxV3KTNurm3ohOnhfpnbhhe/iNmhFoy0CpIoUpCW/WhmLKKkOh eusqpOEfjXnVzHU7WC3kmFeucD56aVdaDU/1HQ2XVMIJ -----END CERTIFICATE-----Generated at Sun Jan 25 21:20:52 2026 by rpki-client