This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/byYdndR2-UpKWfsbIJpAPk5ErgQ.roa File: byYdndR2-UpKWfsbIJpAPk5ErgQ.roa (raw, json) Hash identifier: m10EC4hL/QUKzv4ov2ULfCGgvmTNmpYxVben5IauXFY= Subject key identifier: 6F:26:1D:9D:D4:76:F9:4A:4A:59:FB:1B:20:9A:40:3E:4E:44:AE:04 Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d Certificate serial: 019B7C12F8F5C626FB461B56AC154EACF058 Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/byYdndR2-UpKWfsbIJpAPk5ErgQ.roa Signing time: Fri 02 Jan 2026 00:19:36 +0000 ROA not before: Fri 02 Jan 2026 00:19:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50734 IP address blocks: 194.209.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.mft rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:f8:f5:c6:26:fb:46:1b:56:ac:15:4e:ac:f0:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d Validity Not Before: Jan 2 00:19:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6f261d9dd476f94a4a59fb1b209a403e4e44ae04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:df:65:8a:e3:72:43:79:ac:71:e8:5a:12:10: e5:8c:d3:21:9d:24:5d:69:39:e5:66:a5:df:e0:92: d8:8a:24:10:af:ca:7a:d2:00:f1:47:b4:1f:92:4b: 3d:06:6a:a0:b0:1f:4a:41:99:e9:8d:15:17:af:e7: 1e:e5:56:79:0c:1e:62:32:27:85:44:fc:4a:da:23: a6:62:46:2f:71:1e:8d:14:68:ff:24:f9:6d:1f:ed: e9:fe:db:7b:c4:16:18:f1:43:11:05:f7:1b:c9:cb: 26:8f:65:1b:01:ea:3b:f2:e8:49:36:95:5b:da:a6: a9:84:02:a4:e4:7c:21:31:89:2d:13:05:ed:af:ac: e2:21:60:08:10:1c:23:8c:38:4f:e3:77:3a:c2:c5: d9:32:b2:ad:d7:b1:66:0e:73:b2:38:1d:fa:49:5e: f0:85:7a:9e:97:30:e4:00:0b:47:f6:96:47:08:ff: cb:ce:4a:6a:eb:a5:02:a7:72:28:f2:b1:1d:a9:55: 08:43:62:82:85:1a:44:d3:08:74:19:a5:57:2a:4a: f0:26:88:ff:f0:74:0b:d1:67:69:4d:77:e1:8d:c4: b4:e4:16:7f:17:e0:ad:00:2f:38:85:6c:53:cd:72: 1d:4e:5c:55:6c:30:e1:52:38:2e:d8:36:a3:d6:ef: 2a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:26:1D:9D:D4:76:F9:4A:4A:59:FB:1B:20:9A:40:3E:4E:44:AE:04 X509v3 Authority Key Identifier: keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/byYdndR2-UpKWfsbIJpAPk5ErgQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.209.78.0/24 Signature Algorithm: sha256WithRSAEncryption 17:5b:8e:9a:85:04:f1:06:0e:cd:73:c4:4b:cc:d3:00:7a:b0: 0f:62:fd:93:a1:7a:fb:d1:71:df:c7:40:6f:dd:ba:b9:24:5e: 9a:ee:55:2f:b1:6f:c8:9e:84:6f:5f:70:95:cd:07:20:b4:92: ae:a2:35:b4:fc:d2:6f:df:60:1e:f5:df:3b:56:0d:2b:31:61: 1e:09:2a:b0:7b:d3:84:3b:3f:52:d4:ed:84:62:e0:26:46:9f: 6c:d0:33:ce:2e:65:df:41:50:75:c4:36:bf:7c:07:52:ca:3d: 0c:9f:41:7b:59:96:ac:8b:19:6a:f7:21:39:fb:7c:c0:2b:eb: bf:60:de:4c:01:0b:47:90:47:ae:01:a3:cf:76:88:8e:28:fe: 48:bd:6a:f9:3a:1a:45:87:e5:46:aa:1d:13:d7:72:e4:dd:fc: 9e:1b:95:77:bf:da:da:2d:fc:d1:63:d9:c1:08:25:c6:f2:28: ca:a0:d6:91:17:3e:5c:60:fa:e8:c2:6b:3c:c5:3b:9c:12:c7: 18:59:18:ca:cc:3c:dc:40:cc:08:44:9b:4d:d8:b8:73:e9:f9: 69:1e:15:f9:59:b1:25:80:62:ef:9d:f1:29:29:c9:4e:db:4c: cd:82:d6:3b:4a:6b:6d:43:31:6f:1f:9d:8e:db:bb:ac:a2:93: fe:3a:32:a8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8Evj1xib7RhtWrBVOrPBYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2NjNmM2RiMTUyZTA1NWFjMTQ1YmRiYjQyOWUwMTg2NTQy MDRjOGQwHhcNMjYwMTAyMDAxOTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZjI2MWQ5ZGQ0NzZmOTRhNGE1OWZiMWIyMDlhNDAzZTRlNDRhZTA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA099liuNyQ3mscehaEhDljNMhnSRd aTnlZqXf4JLYiiQQr8p60gDxR7Qfkks9BmqgsB9KQZnpjRUXr+ce5VZ5DB5iMieF RPxK2iOmYkYvcR6NFGj/JPltH+3p/tt7xBYY8UMRBfcbycsmj2UbAeo78uhJNpVb 2qaphAKk5HwhMYktEwXtr6ziIWAIEBwjjDhP43c6wsXZMrKt17FmDnOyOB36SV7w hXqelzDkAAtH9pZHCP/Lzkpq66UCp3Io8rEdqVUIQ2KChRpE0wh0GaVXKkrwJoj/ 8HQL0WdpTXfhjcS05BZ/F+CtAC84hWxTzXIdTlxVbDDhUjgu2Daj1u8qWwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG8mHZ3UdvlKSln7GyCaQD5ORK4EMB8GA1UdIwQY MBaAFCZj89sVLgVawUW9u0KeAYZUIEyNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUt YmQxOTI2NzZjOWJiLzEvYnlZZG5kUjItVXBLV2ZzYklKcEFQazVFcmdRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUtYmQxOTI2NzZjOWJi LzEvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwtFOMA0G CSqGSIb3DQEBCwUAA4IBAQAXW46ahQTxBg7Nc8RLzNMAerAPYv2ToXr70XHfx0Bv 3bq5JF6a7lUvsW/InoRvX3CVzQcgtJKuojW0/NJv32Ae9d87Vg0rMWEeCSqwe9OE Oz9S1O2EYuAmRp9s0DPOLmXfQVB1xDa/fAdSyj0Mn0F7WZasixlq9yE5+3zAK+u/ YN5MAQtHkEeuAaPPdoiOKP5IvWr5OhpFh+VGqh0T13Lk3fyeG5V3v9raLfzRY9nB CCXG8ijKoNaRFz5cYProwms8xTucEscYWRjKzDzcQMwIRJtN2Lhz6flpHhX5WbEl gGLvnfEpKclO20zNgtY7SmttQzFvH52O27usopP+OjKo -----END CERTIFICATE-----Generated at Mon Jan 26 17:44:19 2026 by rpki-client