This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/026914-1612-45f4-acdf-2acb9d17c11c/1/bYnmxW1SSsOpZ_UdEnwHgLbPMLE.roa File: bYnmxW1SSsOpZ_UdEnwHgLbPMLE.roa (raw, json) Hash identifier: xTGg5NX2D1kbyIr1y0FxLhbgTth/OEV0XdRYTihXaZU= Subject key identifier: 6D:89:E6:C5:6D:52:4A:C3:A9:67:F5:1D:12:7C:07:80:B6:CF:30:B1 Certificate issuer: /CN=ca3348abf173d2774c8942008cadf6d6012a3d52 Certificate serial: 019B7EA4DD397EFE2464B061FDEE38B4F58F Authority key identifier: CA:33:48:AB:F1:73:D2:77:4C:89:42:00:8C:AD:F6:D6:01:2A:3D:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjNIq_Fz0ndMiUIAjK321gEqPVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/026914-1612-45f4-acdf-2acb9d17c11c/1/bYnmxW1SSsOpZ_UdEnwHgLbPMLE.roa Signing time: Fri 02 Jan 2026 12:18:12 +0000 ROA not before: Fri 02 Jan 2026 12:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216417 IP address blocks: 46.29.32.0/24 maxlen: 24 2a04:5040:6001::/48 maxlen: 48 2a04:5040:6002::/48 maxlen: 48 2a04:5040:6003::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/026914-1612-45f4-acdf-2acb9d17c11c/1/yjNIq_Fz0ndMiUIAjK321gEqPVI.crl rsync://rpki.ripe.net/repository/DEFAULT/31/026914-1612-45f4-acdf-2acb9d17c11c/1/yjNIq_Fz0ndMiUIAjK321gEqPVI.mft rsync://rpki.ripe.net/repository/DEFAULT/yjNIq_Fz0ndMiUIAjK321gEqPVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:dd:39:7e:fe:24:64:b0:61:fd:ee:38:b4:f5:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca3348abf173d2774c8942008cadf6d6012a3d52 Validity Not Before: Jan 2 12:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6d89e6c56d524ac3a967f51d127c0780b6cf30b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:d3:d9:b4:36:23:4e:ff:48:61:c2:70:fa:1b: 54:36:dd:f4:8d:20:82:00:65:5f:da:71:8c:ac:b2: dc:c9:74:33:11:e3:1d:ba:f8:f8:d8:d1:90:59:68: cc:fb:d3:be:8c:ca:64:bd:0a:bf:ce:dc:75:44:88: e7:9b:16:7a:b1:e6:c8:fd:25:18:3f:d0:57:35:ed: bb:07:4a:57:8c:a9:8c:e3:c7:a2:ee:54:4d:2c:c5: 2e:4a:b3:18:89:7b:b1:a3:af:90:4f:51:a3:aa:97: c7:8a:e3:28:ad:08:d1:30:a7:d3:29:cb:47:8b:3f: 98:fc:46:08:76:a1:63:1b:4c:cd:4d:cd:79:8f:bb: 1c:ca:1f:55:27:7f:d8:37:d3:80:b3:f1:98:df:48: 0b:ca:d3:72:bb:91:0a:6e:95:fb:a9:41:c1:f2:9f: bb:f7:12:63:f7:62:fa:d9:11:69:9d:35:35:95:30: da:39:ed:0c:4d:24:39:a7:6b:76:a0:da:8b:98:1e: da:72:8e:fe:5d:ef:4d:4a:02:c4:7f:ab:c3:1e:c8: 62:66:1b:8d:82:66:d3:13:23:f3:5a:67:51:95:7c: 33:ea:d9:af:65:58:0a:89:1b:8d:53:f1:c6:92:a1: f2:ec:f8:ca:d4:bf:3f:e7:18:11:a8:8e:39:32:46: d7:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:89:E6:C5:6D:52:4A:C3:A9:67:F5:1D:12:7C:07:80:B6:CF:30:B1 X509v3 Authority Key Identifier: keyid:CA:33:48:AB:F1:73:D2:77:4C:89:42:00:8C:AD:F6:D6:01:2A:3D:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjNIq_Fz0ndMiUIAjK321gEqPVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/026914-1612-45f4-acdf-2acb9d17c11c/1/bYnmxW1SSsOpZ_UdEnwHgLbPMLE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/026914-1612-45f4-acdf-2acb9d17c11c/1/yjNIq_Fz0ndMiUIAjK321gEqPVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.29.32.0/24 IPv6: 2a04:5040:6001::-2a04:5040:6003:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption a0:d0:41:b7:e4:70:28:d6:82:40:4d:0e:ad:e5:af:1f:9b:29: 2f:c6:df:27:86:2a:38:17:97:bc:52:0d:ee:e9:5c:ae:3e:7c: 78:52:41:1a:69:57:78:8b:fd:eb:1e:55:6b:6a:07:be:82:3f: f2:75:2a:4f:a9:e7:e7:dc:c9:5c:0c:71:c2:a2:b7:99:09:9d: c1:78:f3:89:c0:37:cd:8a:e7:1d:ca:bd:1e:cd:4e:b8:c9:64: 23:c6:9a:92:2c:a7:ea:9c:5b:d1:fa:50:34:b2:e2:e6:25:c9: c7:7a:ea:19:d6:09:8d:5d:ef:04:be:26:84:e9:91:72:2f:dd: 2e:4e:a0:b7:27:6e:c0:c8:38:07:d5:d8:d3:ec:4e:d9:3d:27: e7:e3:a6:95:e0:5b:11:21:10:f7:50:16:97:0f:41:6e:a5:cb: 3f:f2:fe:c1:bb:a4:5e:93:00:fc:23:30:72:c0:59:2d:cc:80: d0:b0:08:4b:9a:19:13:c2:48:79:11:9a:ad:2a:1f:18:a2:f4: e1:62:78:18:c5:c1:42:90:a2:9f:14:b0:64:21:36:38:d5:f5: f1:5d:20:30:76:a0:fb:01:18:7e:6f:20:9f:92:99:f0:3c:9f: ef:88:b6:69:1f:bb:7e:32:e8:3a:93:32:62:ff:59:b4:87:7e: e9:1c:f6:5d -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt+pN05fv4kZLBh/e44tPWPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhMzM0OGFiZjE3M2QyNzc0Yzg5NDIwMDhjYWRmNmQ2MDEy YTNkNTIwHhcNMjYwMTAyMTIxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZDg5ZTZjNTZkNTI0YWMzYTk2N2Y1MWQxMjdjMDc4MGI2Y2YzMGIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNPZtDYjTv9IYcJw+htUNt30jSCC AGVf2nGMrLLcyXQzEeMduvj42NGQWWjM+9O+jMpkvQq/ztx1RIjnmxZ6sebI/SUY P9BXNe27B0pXjKmM48ei7lRNLMUuSrMYiXuxo6+QT1GjqpfHiuMorQjRMKfTKctH iz+Y/EYIdqFjG0zNTc15j7scyh9VJ3/YN9OAs/GY30gLytNyu5EKbpX7qUHB8p+7 9xJj92L62RFpnTU1lTDaOe0MTSQ5p2t2oNqLmB7aco7+Xe9NSgLEf6vDHshiZhuN gmbTEyPzWmdRlXwz6tmvZVgKiRuNU/HGkqHy7PjK1L8/5xgRqI45MkbXbQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFG2J5sVtUkrDqWf1HRJ8B4C2zzCxMB8GA1UdIwQY MBaAFMozSKvxc9J3TIlCAIyt9tYBKj1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWpOSXFfRnowbmRNaVVJQWpLMzIxZ0VxUFZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8wMjY5MTQtMTYxMi00NWY0LWFjZGYt MmFjYjlkMTdjMTFjLzEvYllubXhXMVNTc09wWl9VZEVud0hnTGJQTUxFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS8wMjY5MTQtMTYxMi00NWY0LWFjZGYtMmFjYjlkMTdjMTFj LzEveWpOSXFfRnowbmRNaVVJQWpLMzIxZ0VxUFZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAMBAIAATAGAwQALh0gMBoE AgACMBQwEgMHACoEUEBgAQMHAioEUEBgADANBgkqhkiG9w0BAQsFAAOCAQEAoNBB t+RwKNaCQE0OreWvH5spL8bfJ4YqOBeXvFIN7ulcrj58eFJBGmlXeIv96x5Va2oH voI/8nUqT6nn59zJXAxxwqK3mQmdwXjzicA3zYrnHcq9Hs1OuMlkI8aakiyn6pxb 0fpQNLLi5iXJx3rqGdYJjV3vBL4mhOmRci/dLk6gtyduwMg4B9XY0+xO2T0n5+Om leBbESEQ91AWlw9BbqXLP/L+wbukXpMA/CMwcsBZLcyA0LAIS5oZE8JIeRGarSof GKL04WJ4GMXBQpCinxSwZCE2ONX18V0gMHag+wEYfm8gn5KZ8Dyf74i2aR+7fjLo OpMyYv9ZtId+6Rz2XQ== -----END CERTIFICATE-----Generated at Mon Feb 9 23:46:02 2026 by rpki-client