This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/BYJeOMTp9VHrWuoMjPnGgfKwrc0.roa File: BYJeOMTp9VHrWuoMjPnGgfKwrc0.roa (raw, json) Hash identifier: BFrY9/6iplAYN4CNa21BmE/m83H1ufk5TI5FpOMq62I= Subject key identifier: 05:82:5E:38:C4:E9:F5:51:EB:5A:EA:0C:8C:F9:C6:81:F2:B0:AD:CD Certificate issuer: /CN=a4e7205f5d41257a6bb95f900eec0a1123e75164 Certificate serial: 019B7DCA1075203C90D6D5B062B0489DCD73 Authority key identifier: A4:E7:20:5F:5D:41:25:7A:6B:B9:5F:90:0E:EC:0A:11:23:E7:51:64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOcgX11BJXpruV-QDuwKESPnUWQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/BYJeOMTp9VHrWuoMjPnGgfKwrc0.roa Signing time: Fri 02 Jan 2026 08:19:13 +0000 ROA not before: Fri 02 Jan 2026 08:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48854 IP address blocks: 46.36.204.0/22 maxlen: 22 46.36.208.0/21 maxlen: 21 77.243.128.0/20 maxlen: 20 80.70.0.0/23 maxlen: 23 80.70.6.0/23 maxlen: 23 80.70.6.0/24 maxlen: 24 80.70.7.0/24 maxlen: 24 81.95.240.0/20 maxlen: 20 81.95.249.0/24 maxlen: 24 89.188.72.0/21 maxlen: 21 91.197.248.0/22 maxlen: 22 91.217.201.0/24 maxlen: 24 93.191.152.0/21 maxlen: 21 93.191.152.0/22 maxlen: 22 93.191.156.0/24 maxlen: 24 93.191.157.0/24 maxlen: 24 93.191.158.0/24 maxlen: 24 94.143.8.0/21 maxlen: 21 94.231.96.0/20 maxlen: 20 94.231.103.0/24 maxlen: 24 109.71.56.0/21 maxlen: 21 178.251.0.0/21 maxlen: 21 178.251.1.0/24 maxlen: 24 185.20.204.0/22 maxlen: 22 185.20.205.0/24 maxlen: 24 185.20.206.0/23 maxlen: 23 185.21.40.0/22 maxlen: 22 185.25.140.0/24 maxlen: 24 185.25.141.0/24 maxlen: 24 185.25.142.0/24 maxlen: 24 185.25.143.0/24 maxlen: 24 185.134.28.0/22 maxlen: 22 185.154.240.0/22 maxlen: 22 185.221.36.0/22 maxlen: 22 185.223.24.0/22 maxlen: 22 185.235.52.0/22 maxlen: 22 185.235.52.0/24 maxlen: 24 193.239.96.0/22 maxlen: 22 194.150.112.0/22 maxlen: 22 195.69.128.0/22 maxlen: 22 195.178.14.0/23 maxlen: 23 212.97.132.0/22 maxlen: 22 212.97.140.0/22 maxlen: 22 212.97.140.0/24 maxlen: 24 212.97.141.0/24 maxlen: 24 212.97.142.0/24 maxlen: 24 212.97.143.0/24 maxlen: 24 212.237.248.0/23 maxlen: 23 217.61.236.0/22 maxlen: 22 2a02:2338::/32 maxlen: 48 2a02:2339::/36 maxlen: 36 2a02:2339:4000::/34 maxlen: 48 2a03:2740::/47 maxlen: 48 2a06:eac0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.mft rsync://rpki.ripe.net/repository/DEFAULT/pOcgX11BJXpruV-QDuwKESPnUWQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:10:75:20:3c:90:d6:d5:b0:62:b0:48:9d:cd:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4e7205f5d41257a6bb95f900eec0a1123e75164 Validity Not Before: Jan 2 08:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=05825e38c4e9f551eb5aea0c8cf9c681f2b0adcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:42:63:07:8c:df:4f:00:52:93:84:b2:f3:06: 86:78:8d:0f:fa:17:94:75:41:0d:8a:63:18:05:ad: 2b:88:a2:c1:5f:37:50:fe:3e:8f:18:8e:d4:d4:6f: 47:38:1d:43:c0:ac:4a:28:d6:f1:3c:38:87:b1:0f: 8e:e4:3a:bd:82:57:c4:8a:36:af:a7:07:a4:75:f3: 56:57:64:56:3a:a8:6b:56:11:db:8b:7b:2b:42:68: f8:a3:86:bb:88:7c:79:ab:3a:6f:ba:81:3a:17:1d: 9e:81:ae:39:be:21:d4:d6:2c:74:45:9b:5f:a4:40: 88:52:e0:b9:e8:8e:3b:f4:98:34:3f:f2:69:9e:21: 1b:5a:93:37:2a:b2:c2:f2:f8:65:17:56:16:dc:eb: de:5a:35:5f:6f:1f:f4:13:a7:2a:65:1a:6f:02:ce: ba:9e:e6:25:19:62:e0:07:92:be:a3:2e:3d:81:c1: 94:07:48:4e:d8:11:58:cd:58:31:bc:51:5e:c7:dc: b4:f7:bd:12:75:56:ab:0d:99:87:25:1d:e8:33:35: d7:61:36:4a:22:1b:74:06:88:bc:93:d9:84:8c:11: f5:b9:16:b9:22:ec:63:7d:c8:de:f6:c5:dd:0e:57: 3b:b0:ca:b2:54:16:d4:5c:35:29:10:74:92:53:79: bc:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:82:5E:38:C4:E9:F5:51:EB:5A:EA:0C:8C:F9:C6:81:F2:B0:AD:CD X509v3 Authority Key Identifier: keyid:A4:E7:20:5F:5D:41:25:7A:6B:B9:5F:90:0E:EC:0A:11:23:E7:51:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOcgX11BJXpruV-QDuwKESPnUWQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/BYJeOMTp9VHrWuoMjPnGgfKwrc0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.36.204.0-46.36.215.255 77.243.128.0/20 80.70.0.0/23 80.70.6.0/23 81.95.240.0/20 89.188.72.0/21 91.197.248.0/22 91.217.201.0/24 93.191.152.0/21 94.143.8.0/21 94.231.96.0/20 109.71.56.0/21 178.251.0.0/21 185.20.204.0/22 185.21.40.0/22 185.25.140.0/22 185.134.28.0/22 185.154.240.0/22 185.221.36.0/22 185.223.24.0/22 185.235.52.0/22 193.239.96.0/22 194.150.112.0/22 195.69.128.0/22 195.178.14.0/23 212.97.132.0/22 212.97.140.0/22 212.237.248.0/23 217.61.236.0/22 IPv6: 2a02:2338::-2a02:2339:fff:ffff:ffff:ffff:ffff:ffff 2a02:2339:4000::/34 2a03:2740::/47 2a06:eac0::/29 Signature Algorithm: sha256WithRSAEncryption 66:c3:ba:c3:65:b7:75:b4:8b:d8:7d:e7:c9:6a:d9:54:be:ed: 09:e0:14:5d:18:dd:ec:a5:4d:d3:ae:50:43:35:c2:61:4d:19: aa:c2:fa:28:85:1b:fe:6f:10:cc:ec:54:7e:f6:2e:81:c9:f5: 04:14:08:28:92:12:19:82:1c:9a:df:c2:cb:4e:a8:32:55:af: cc:cb:a5:d3:f9:48:b9:6d:c2:73:a7:6b:a1:51:24:9d:41:cb: 6e:6b:8d:a8:fa:3f:f5:2d:a2:5e:fe:64:ed:e0:75:44:bf:f8: 75:2d:83:aa:17:77:67:c6:f9:8f:9e:eb:14:d0:51:60:bd:44: 3f:0c:98:67:8e:61:5c:d7:80:98:7f:d9:c5:08:81:23:ed:51: e9:28:ef:83:8d:79:9d:2b:fe:11:ac:ed:35:1b:0e:89:41:0f: c3:21:10:e2:d0:7e:18:28:62:05:c8:64:09:e1:24:fc:ce:f7: bc:80:0b:41:90:e9:61:41:d6:0a:52:79:e9:7d:af:49:9a:ba: d4:5a:40:bd:53:a5:5d:1e:54:39:24:8a:89:b1:fb:6e:c9:18: 7b:8d:8c:a4:08:54:22:7a:b2:1d:28:40:6c:e7:8b:20:32:36: dd:90:70:d6:b6:f4:63:1d:4f:69:0e:e5:39:19:ff:14:7c:94: 86:65:25:b7 -----BEGIN CERTIFICATE----- MIIF5DCCBMygAwIBAgISAZt9yhB1IDyQ1tWwYrBInc1zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0ZTcyMDVmNWQ0MTI1N2E2YmI5NWY5MDBlZWMwYTExMjNl NzUxNjQwHhcNMjYwMTAyMDgxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNTgyNWUzOGM0ZTlmNTUxZWI1YWVhMGM4Y2Y5YzY4MWYyYjBhZGNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEJjB4zfTwBSk4Sy8waGeI0P+heU dUENimMYBa0riKLBXzdQ/j6PGI7U1G9HOB1DwKxKKNbxPDiHsQ+O5Dq9glfEijav pwekdfNWV2RWOqhrVhHbi3srQmj4o4a7iHx5qzpvuoE6Fx2ega45viHU1ix0RZtf pECIUuC56I479Jg0P/JpniEbWpM3KrLC8vhlF1YW3OveWjVfbx/0E6cqZRpvAs66 nuYlGWLgB5K+oy49gcGUB0hO2BFYzVgxvFFex9y0970SdVarDZmHJR3oMzXXYTZK Iht0Boi8k9mEjBH1uRa5Iuxjfcje9sXdDlc7sMqyVBbUXDUpEHSSU3m86wIDAQAB o4IC8DCCAuwwHQYDVR0OBBYEFAWCXjjE6fVR61rqDIz5xoHysK3NMB8GA1UdIwQY MBaAFKTnIF9dQSV6a7lfkA7sChEj51FkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcE9jZ1gxMUJKWHBydVYtUUR1d0tFU1BuVVdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9mNzYxYmQtNWMzYS00ZDJmLThjZDkt M2U1OWNlNDQ1YjFjLzEvQllKZU9NVHA5VkhyV3VvTWpQbkdnZkt3cmMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9mNzYxYmQtNWMzYS00ZDJmLThjZDktM2U1OWNlNDQ1YjFj LzEvcE9jZ1gxMUJKWHBydVYtUUR1d0tFU1BuVVdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBBAYIKwYBBQUHAQcBAf8EgfQwgfEwgb0EAgABMIG2MAwD BAIuJMwDBAMuJNADBARN84ADBAFQRgADBAFQRgYDBARRX/ADBANZvEgDBAJbxfgD BABb2ckDBANdv5gDBANejwgDBARe52ADBANtRzgDBAOy+wADBAK5FMwDBAK5FSgD BAK5GYwDBAK5hhwDBAK5mvADBAK53SQDBAK53xgDBAK56zQDBALB72ADBALClnAD BALDRYADBAHDsg4DBALUYYQDBALUYYwDBAHU7fgDBALZPewwLwQCAAIwKTAPAwUD KgIjOAMGBCoCIzkAAwYGKgIjOUADBwEqAydAAAADBQMqBurAMA0GCSqGSIb3DQEB CwUAA4IBAQBmw7rDZbd1tIvYfefJatlUvu0J4BRdGN3spU3TrlBDNcJhTRmqwvoo hRv+bxDM7FR+9i6ByfUEFAgokhIZghya38LLTqgyVa/My6XT+Ui5bcJzp2uhUSSd Qctua42o+j/1LaJe/mTt4HVEv/h1LYOqF3dnxvmPnusU0FFgvUQ/DJhnjmFc14CY f9nFCIEj7VHpKO+DjXmdK/4RrO01Gw6JQQ/DIRDi0H4YKGIFyGQJ4ST8zve8gAtB kOlhQdYKUnnpfa9JmrrUWkC9U6VdHlQ5JIqJsftuyRh7jYykCFQierIdKEBs54sg MjbdkHDWtvRjHU9pDuU5Gf8UfJSGZSW3 -----END CERTIFICATE-----Generated at Mon Jan 26 05:05:25 2026 by rpki-client