This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/ad5545-f8af-4278-90a5-a3bbc87a77cc/1/Bya8emUs_w4PWzNcCZyRyXJXg78.roa File: Bya8emUs_w4PWzNcCZyRyXJXg78.roa (raw, json) Hash identifier: 2L5zE9wrzPb4cjfo5xD5ODfhbaKtoOMTZNulFsvGdbE= Subject key identifier: 07:26:BC:7A:65:2C:FF:0E:0F:5B:33:5C:09:9C:91:C9:72:57:83:BF Certificate issuer: /CN=f5d901201ff0b1b97ef3d1a72da41e18f0145762 Certificate serial: 019B7EA6FE622233D40D99D2D298F6BE17E0 Authority key identifier: F5:D9:01:20:1F:F0:B1:B9:7E:F3:D1:A7:2D:A4:1E:18:F0:14:57:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9dkBIB_wsbl-89GnLaQeGPAUV2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/ad5545-f8af-4278-90a5-a3bbc87a77cc/1/Bya8emUs_w4PWzNcCZyRyXJXg78.roa Signing time: Fri 02 Jan 2026 12:20:31 +0000 ROA not before: Fri 02 Jan 2026 12:20:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203201 IP address blocks: 212.78.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/ad5545-f8af-4278-90a5-a3bbc87a77cc/1/9dkBIB_wsbl-89GnLaQeGPAUV2I.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/ad5545-f8af-4278-90a5-a3bbc87a77cc/1/9dkBIB_wsbl-89GnLaQeGPAUV2I.mft rsync://rpki.ripe.net/repository/DEFAULT/9dkBIB_wsbl-89GnLaQeGPAUV2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:fe:62:22:33:d4:0d:99:d2:d2:98:f6:be:17:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5d901201ff0b1b97ef3d1a72da41e18f0145762 Validity Not Before: Jan 2 12:20:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0726bc7a652cff0e0f5b335c099c91c9725783bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:f9:96:10:f4:36:92:e0:01:e8:76:1a:1c:14: 2f:d4:05:da:39:78:2e:cd:70:2d:91:ea:d9:d6:52: 6d:f9:76:75:38:19:98:65:e0:cb:6a:8f:aa:7a:fe: ed:56:e3:b0:02:83:a6:42:45:00:12:f6:16:1c:cf: 30:6f:5d:17:12:77:61:67:ea:bd:87:71:31:23:ca: 35:17:eb:67:46:5f:c5:45:a9:82:a0:93:cf:90:02: f9:8a:bc:dc:8a:72:72:56:d2:27:58:59:94:31:70: 95:41:28:c2:ae:62:0c:fd:f2:2a:0f:42:f7:93:ed: fc:9a:2b:e8:fd:69:06:8f:a3:a2:2b:ca:fe:d3:17: 9c:9c:57:3f:46:fa:93:29:ca:c1:1a:2c:2d:6c:a0: a0:83:fe:17:fb:e7:50:d3:22:37:33:05:ba:9c:09: 44:fd:45:cd:5d:d7:57:50:e8:dd:6f:b7:8e:49:36: ac:ca:d9:1f:bf:87:21:2f:8d:c8:96:73:aa:f5:8a: b8:5b:02:80:45:5b:8f:27:81:64:87:81:13:82:61: 94:b7:cc:b4:92:32:ff:88:59:68:4f:57:df:46:75: db:b6:2a:f5:6c:00:91:7f:75:69:ba:ea:df:6c:84: 66:f6:a8:42:06:28:bc:47:5b:b3:a9:3d:b3:65:dd: bd:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:26:BC:7A:65:2C:FF:0E:0F:5B:33:5C:09:9C:91:C9:72:57:83:BF X509v3 Authority Key Identifier: keyid:F5:D9:01:20:1F:F0:B1:B9:7E:F3:D1:A7:2D:A4:1E:18:F0:14:57:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9dkBIB_wsbl-89GnLaQeGPAUV2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ad5545-f8af-4278-90a5-a3bbc87a77cc/1/Bya8emUs_w4PWzNcCZyRyXJXg78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ad5545-f8af-4278-90a5-a3bbc87a77cc/1/9dkBIB_wsbl-89GnLaQeGPAUV2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.78.1.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:57:a7:e3:61:73:5b:44:ff:2f:b0:e7:5c:13:1f:cb:54:cc: 1c:3a:f0:01:93:b6:41:ac:78:bf:26:8b:cf:48:26:f7:2a:df: f2:62:2c:1d:f3:67:9d:82:92:59:95:78:d5:07:be:39:b0:31: 84:73:b2:8e:30:d8:18:0d:d1:43:1b:0f:52:ab:1a:cc:4f:d7: 3a:84:73:ce:14:b0:9d:84:4e:9f:9b:09:e8:57:e1:23:cf:13: c3:92:9f:21:0b:2b:cf:6b:19:c9:50:d9:b7:11:e6:33:ad:cb: 72:78:5c:18:e4:8d:77:13:60:e2:1e:31:7e:1a:24:1c:e4:02: c6:2b:f8:5b:95:77:9f:36:20:c7:03:d8:d4:a1:b7:cf:60:e6: 3f:93:40:10:a1:e9:14:ec:86:23:f0:1f:54:8e:bd:f8:d7:20: a8:b4:94:e3:7c:bf:08:38:40:47:9f:8d:eb:0a:24:fe:bb:89: ae:c0:ab:16:ca:b6:be:f8:a1:75:d6:06:26:f2:55:b6:de:e6: cb:1c:e1:c2:28:45:aa:81:55:f4:4b:6e:83:15:df:d6:d9:48: c2:d3:d8:5f:28:58:71:55:e9:05:4c:c4:6a:a7:80:35:33:b4: b2:3b:b4:09:fc:27:1d:72:a7:0e:79:19:17:72:fd:e5:f9:51: 2c:1e:8a:66 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pv5iIjPUDZnS0pj2vhfgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1ZDkwMTIwMWZmMGIxYjk3ZWYzZDFhNzJkYTQxZTE4ZjAx NDU3NjIwHhcNMjYwMTAyMTIyMDMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNzI2YmM3YTY1MmNmZjBlMGY1YjMzNWMwOTljOTFjOTcyNTc4M2JmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3/mWEPQ2kuAB6HYaHBQv1AXaOXgu zXAtkerZ1lJt+XZ1OBmYZeDLao+qev7tVuOwAoOmQkUAEvYWHM8wb10XEndhZ+q9 h3ExI8o1F+tnRl/FRamCoJPPkAL5irzcinJyVtInWFmUMXCVQSjCrmIM/fIqD0L3 k+38mivo/WkGj6OiK8r+0xecnFc/RvqTKcrBGiwtbKCgg/4X++dQ0yI3MwW6nAlE /UXNXddXUOjdb7eOSTasytkfv4chL43IlnOq9Yq4WwKARVuPJ4Fkh4ETgmGUt8y0 kjL/iFloT1ffRnXbtir1bACRf3VpuurfbIRm9qhCBii8R1uzqT2zZd29EwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAcmvHplLP8OD1szXAmckclyV4O/MB8GA1UdIwQY MBaAFPXZASAf8LG5fvPRpy2kHhjwFFdiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWRrQklCX3dzYmwtODlHbkxhUWVHUEFVVjJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9hZDU1NDUtZjhhZi00Mjc4LTkwYTUt YTNiYmM4N2E3N2NjLzEvQnlhOGVtVXNfdzRQV3pOY0NaeVJ5WEpYZzc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS9hZDU1NDUtZjhhZi00Mjc4LTkwYTUtYTNiYmM4N2E3N2Nj LzEvOWRrQklCX3dzYmwtODlHbkxhUWVHUEFVVjJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1E4BMA0G CSqGSIb3DQEBCwUAA4IBAQA8V6fjYXNbRP8vsOdcEx/LVMwcOvABk7ZBrHi/JovP SCb3Kt/yYiwd82edgpJZlXjVB745sDGEc7KOMNgYDdFDGw9SqxrMT9c6hHPOFLCd hE6fmwnoV+EjzxPDkp8hCyvPaxnJUNm3EeYzrctyeFwY5I13E2DiHjF+GiQc5ALG K/hblXefNiDHA9jUobfPYOY/k0AQoekU7IYj8B9Ujr341yCotJTjfL8IOEBHn43r CiT+u4muwKsWyra++KF11gYm8lW23ubLHOHCKEWqgVX0S26DFd/W2UjC09hfKFhx VekFTMRqp4A1M7SyO7QJ/CcdcqcOeRkXcv3l+VEsHopm -----END CERTIFICATE-----Generated at Mon Jan 26 10:53:48 2026 by rpki-client