This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/ByyzWxM12G0BPucLG6JiwdJtgEE.roa File: ByyzWxM12G0BPucLG6JiwdJtgEE.roa (raw, json) Hash identifier: 4G2lH2XdNKPJSfTS1f9mdoy30Er7U9NNS0wrRk3c+sc= Subject key identifier: 07:2C:B3:5B:13:35:D8:6D:01:3E:E7:0B:1B:A2:62:C1:D2:6D:80:41 Certificate issuer: /CN=62d03888a405e61b87d1706f933b366a86fb4295 Certificate serial: 019B7E39022D67655F41C7A41CF328F9F3AB Authority key identifier: 62:D0:38:88:A4:05:E6:1B:87:D1:70:6F:93:3B:36:6A:86:FB:42:95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YtA4iKQF5huH0XBvkzs2aob7QpU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/ByyzWxM12G0BPucLG6JiwdJtgEE.roa Signing time: Fri 02 Jan 2026 10:20:23 +0000 ROA not before: Fri 02 Jan 2026 10:20:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207138 IP address blocks: 185.164.216.0/24 maxlen: 24 185.164.217.0/24 maxlen: 24 185.164.218.0/24 maxlen: 24 185.164.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.mft rsync://rpki.ripe.net/repository/DEFAULT/YtA4iKQF5huH0XBvkzs2aob7QpU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:02:2d:67:65:5f:41:c7:a4:1c:f3:28:f9:f3:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62d03888a405e61b87d1706f933b366a86fb4295 Validity Not Before: Jan 2 10:20:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=072cb35b1335d86d013ee70b1ba262c1d26d8041 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f9:b3:8e:ec:1f:15:71:00:84:c2:5e:36:62: 2b:97:62:e4:cb:d8:65:66:f3:c9:23:f5:17:7b:28: 56:cd:7a:b0:0f:db:d8:fe:a4:f2:34:b3:9c:13:55: 5c:4a:68:ee:79:a1:36:9a:97:05:7a:8d:81:03:cb: 30:53:75:cc:ce:0a:91:0e:b3:65:6a:8b:f6:84:4f: 7e:53:fe:d2:ba:54:22:87:02:50:51:6e:a7:62:bd: 12:0b:36:46:96:7c:71:e9:c7:18:24:3d:62:34:ea: dd:83:cb:af:36:6c:ad:f1:a9:18:87:39:39:53:6c: e4:02:05:fd:71:ca:55:03:8b:4d:af:69:6d:e0:31: a5:f6:28:2f:a4:f3:25:1a:70:06:44:13:ab:6a:98: bf:16:97:91:03:33:8d:9e:e4:af:77:08:cb:e1:f9: 59:95:7b:8f:da:1e:51:b4:ae:db:66:5b:07:ea:f8: 3d:a3:72:9c:1e:91:7f:5b:6b:15:1d:f1:2b:e3:40: d9:57:e0:22:f3:15:65:0e:81:68:01:f0:50:65:b4: 2b:e6:30:25:8e:b7:ca:1f:93:d4:3b:8d:0b:84:db: 73:e0:fc:d5:f7:77:d8:84:3a:6c:ef:ab:13:cf:f2: 47:ff:00:02:d0:fc:5d:7b:bf:76:f8:e2:91:bb:4b: 70:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:2C:B3:5B:13:35:D8:6D:01:3E:E7:0B:1B:A2:62:C1:D2:6D:80:41 X509v3 Authority Key Identifier: keyid:62:D0:38:88:A4:05:E6:1B:87:D1:70:6F:93:3B:36:6A:86:FB:42:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YtA4iKQF5huH0XBvkzs2aob7QpU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/ByyzWxM12G0BPucLG6JiwdJtgEE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.164.216.0/22 Signature Algorithm: sha256WithRSAEncryption 58:1e:8b:ea:18:2b:ed:7e:fc:d0:aa:8c:f6:15:a0:01:3e:cf: 73:c8:0d:8d:94:81:db:76:4d:56:5a:a6:86:be:c2:a5:89:f1: 76:e1:04:4e:e6:5f:f6:53:7e:0a:e5:25:85:96:f3:4a:b8:f7: de:97:ef:aa:dc:03:a4:fb:8f:29:26:35:32:83:59:e1:5e:39: 6a:d2:41:56:53:a4:7e:63:95:45:bf:7d:0b:47:b5:a3:d7:5c: a8:e4:d8:d7:58:76:eb:ee:cf:07:f8:cf:74:25:e8:9e:06:59: 46:45:dd:a0:73:e2:47:da:95:49:42:f3:79:cb:e7:a1:9d:91: 3b:9d:c5:8e:b0:22:b8:6d:35:e5:e3:7d:82:bc:8e:ea:e2:37: 91:3d:0b:4a:f9:93:5d:82:46:bb:e4:86:c5:dd:2d:d9:fe:29: 9e:87:52:f7:b7:d8:d2:6d:d1:cb:d8:67:ef:31:11:d4:b5:92: 94:45:d1:a7:cc:bf:0b:71:f5:7c:59:89:e6:ec:c9:83:a5:d9: 60:78:3c:4f:2a:5c:11:77:69:13:23:42:c5:1f:1d:55:69:0d: 21:46:28:84:6c:38:dc:86:71:f3:0e:f5:ed:d3:c5:4c:9e:02: ef:59:07:22:ff:85:c9:ee:38:ed:1e:f7:11:9c:36:02:be:44: aa:72:3f:8e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OQItZ2VfQcekHPMo+fOrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZDAzODg4YTQwNWU2MWI4N2QxNzA2ZjkzM2IzNjZhODZm YjQyOTUwHhcNMjYwMTAyMTAyMDIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNzJjYjM1YjEzMzVkODZkMDEzZWU3MGIxYmEyNjJjMWQyNmQ4MDQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPmzjuwfFXEAhMJeNmIrl2Lky9hl ZvPJI/UXeyhWzXqwD9vY/qTyNLOcE1VcSmjueaE2mpcFeo2BA8swU3XMzgqRDrNl aov2hE9+U/7SulQihwJQUW6nYr0SCzZGlnxx6ccYJD1iNOrdg8uvNmyt8akYhzk5 U2zkAgX9ccpVA4tNr2lt4DGl9igvpPMlGnAGRBOrapi/FpeRAzONnuSvdwjL4flZ lXuP2h5RtK7bZlsH6vg9o3KcHpF/W2sVHfEr40DZV+Ai8xVlDoFoAfBQZbQr5jAl jrfKH5PUO40LhNtz4PzV93fYhDps76sTz/JH/wAC0Pxde792+OKRu0twyQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAcss1sTNdhtAT7nCxuiYsHSbYBBMB8GA1UdIwQY MBaAFGLQOIikBeYbh9Fwb5M7NmqG+0KVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXRBNGlLUUY1aHVIMFhCdmt6czJhb2I3UXBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9iZjUxZmYtNWMzNi00NWIyLTkxYzUt NGQ2ODVhY2E4Mjc5LzEvQnl5eld4TTEyRzBCUHVjTEc2Sml3ZEp0Z0VFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9iZjUxZmYtNWMzNi00NWIyLTkxYzUtNGQ2ODVhY2E4Mjc5 LzEvWXRBNGlLUUY1aHVIMFhCdmt6czJhb2I3UXBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuaTYMA0G CSqGSIb3DQEBCwUAA4IBAQBYHovqGCvtfvzQqoz2FaABPs9zyA2NlIHbdk1WWqaG vsKlifF24QRO5l/2U34K5SWFlvNKuPfel++q3AOk+48pJjUyg1nhXjlq0kFWU6R+ Y5VFv30LR7Wj11yo5NjXWHbr7s8H+M90JeieBllGRd2gc+JH2pVJQvN5y+ehnZE7 ncWOsCK4bTXl432CvI7q4jeRPQtK+ZNdgka75IbF3S3Z/imeh1L3t9jSbdHL2Gfv MRHUtZKURdGnzL8LcfV8WYnm7MmDpdlgeDxPKlwRd2kTI0LFHx1VaQ0hRiiEbDjc hnHzDvXt08VMngLvWQci/4XJ7jjtHvcRnDYCvkSqcj+O -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:24 2026 by rpki-client