This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/BYe0s7FXiXlINAGnQOyfmi_Xj1c.roa File: BYe0s7FXiXlINAGnQOyfmi_Xj1c.roa (raw, json) Hash identifier: xfpswsroLJUWvvrMN8oPz9wAL6tYlR2h18tqgllbp4A= Subject key identifier: 05:87:B4:B3:B1:57:89:79:48:34:01:A7:40:EC:9F:9A:2F:D7:8F:57 Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4 Certificate serial: 019B77C6ABE0AC597BCF1FDF2C80197BE863 Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/BYe0s7FXiXlINAGnQOyfmi_Xj1c.roa Signing time: Thu 01 Jan 2026 04:17:47 +0000 ROA not before: Thu 01 Jan 2026 04:17:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204848 IP address blocks: 46.8.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:ab:e0:ac:59:7b:cf:1f:df:2c:80:19:7b:e8:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4 Validity Not Before: Jan 1 04:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0587b4b3b1578979483401a740ec9f9a2fd78f57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:55:ec:c8:8c:59:57:aa:fa:84:12:11:b3:e2: 7c:a3:f8:d1:41:40:36:9b:3f:e3:c3:b0:36:1e:22: 7a:3b:2a:03:d8:03:70:70:93:71:c8:be:d7:0a:87: bc:0a:49:e9:28:db:57:22:7f:c0:a0:a1:fa:a4:4e: ed:8b:e1:86:d3:e9:c2:c5:14:d2:8d:7f:f9:1e:44: 1d:a0:d5:84:55:1e:c7:47:0a:9b:e1:18:80:07:a2: 79:eb:9c:6c:78:fb:9a:6b:26:b8:9b:f8:96:07:4d: b9:d9:0c:a8:1e:c6:a3:d1:05:6c:7b:e7:07:5d:0e: 9e:5f:5d:47:e2:b0:0e:f7:38:b3:a5:d0:54:65:5e: 78:cf:5e:e5:1b:57:91:14:f3:c7:a4:77:af:d1:8d: 3f:c0:e0:85:ec:a2:8f:aa:69:9c:93:84:10:79:ab: da:32:25:8f:a8:69:51:ca:e5:a9:bd:75:75:df:90: 0d:00:cb:c1:8c:38:1e:29:8b:ed:f5:0d:de:1e:cb: d0:f2:63:c7:3b:b0:2f:d2:ce:71:6f:09:d0:98:32: 88:05:7d:39:aa:e1:85:73:79:1e:60:eb:f3:9d:54: 04:f9:af:d1:e2:4d:3b:7e:9a:2d:b0:31:dd:65:7e: b1:b2:78:a0:1e:e3:c7:33:d7:7e:0a:aa:5f:a4:e1: 52:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:87:B4:B3:B1:57:89:79:48:34:01:A7:40:EC:9F:9A:2F:D7:8F:57 X509v3 Authority Key Identifier: keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/BYe0s7FXiXlINAGnQOyfmi_Xj1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.8.105.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:38:73:ef:c5:04:49:20:d3:2c:cf:f4:a3:9c:26:e7:94:2e: 85:95:fe:8d:c1:e6:46:7d:a9:5e:0b:a9:1a:73:0a:ee:90:f6: 60:6d:f7:20:5a:63:ec:de:8d:68:62:6e:4b:4b:93:2e:f4:3a: 98:ff:a7:53:6a:67:62:53:1d:7d:26:40:d0:19:94:e0:b3:6a: 8e:34:3d:2f:68:a3:0e:ec:b6:00:8d:b8:75:fd:72:28:cd:64: 99:06:1a:fe:3b:eb:96:c6:71:b0:51:9c:92:1c:ba:e9:60:41: 79:41:ec:6a:24:51:1f:36:30:dd:fa:d1:12:6a:51:1e:a5:9f: 44:93:c0:fa:b0:e0:81:5e:d9:46:e0:61:b3:2b:f4:d8:83:46: 65:19:02:6a:7c:04:e9:07:41:f5:87:12:ac:58:bb:ee:37:87: d7:2b:aa:c5:20:5f:ef:1b:c0:bb:2d:a1:57:5f:52:eb:80:e3: 1f:54:dc:cd:40:a5:3d:b6:18:a6:fd:f9:17:42:51:80:82:16: b8:a3:b0:af:84:cb:fd:fd:15:81:73:35:5f:a7:24:9c:f2:2c: 2e:b6:73:98:c8:33:5c:58:aa:7e:6f:a5:f0:cb:85:cd:08:2a: d0:4c:8f:c7:00:c4:44:a8:72:75:fd:84:94:54:01:1f:57:eb: 46:6a:a7:e6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xqvgrFl7zx/fLIAZe+hjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4NWI4NTc3MDZkYWM1NGUyMGNhMGQxMWJkNjQxNmNiNjM0 MjAzYjQwHhcNMjYwMTAxMDQxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNTg3YjRiM2IxNTc4OTc5NDgzNDAxYTc0MGVjOWY5YTJmZDc4ZjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1XsyIxZV6r6hBIRs+J8o/jRQUA2 mz/jw7A2HiJ6OyoD2ANwcJNxyL7XCoe8CknpKNtXIn/AoKH6pE7ti+GG0+nCxRTS jX/5HkQdoNWEVR7HRwqb4RiAB6J565xsePuaaya4m/iWB0252QyoHsaj0QVse+cH XQ6eX11H4rAO9zizpdBUZV54z17lG1eRFPPHpHev0Y0/wOCF7KKPqmmck4QQeava MiWPqGlRyuWpvXV135ANAMvBjDgeKYvt9Q3eHsvQ8mPHO7Av0s5xbwnQmDKIBX05 quGFc3keYOvznVQE+a/R4k07fpotsDHdZX6xsnigHuPHM9d+CqpfpOFSBwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAWHtLOxV4l5SDQBp0Dsn5ov149XMB8GA1UdIwQY MBaAFIhbhXcG2sVOIMoNEb1kFstjQgO0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMt MTY2OTljOTZkZDVlLzEvQlllMHM3RlhpWGxJTkFHblFPeWZtaV9YajFjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMtMTY2OTljOTZkZDVl LzEvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALghpMA0G CSqGSIb3DQEBCwUAA4IBAQB/OHPvxQRJINMsz/SjnCbnlC6Flf6NweZGfaleC6ka cwrukPZgbfcgWmPs3o1oYm5LS5Mu9DqY/6dTamdiUx19JkDQGZTgs2qOND0vaKMO 7LYAjbh1/XIozWSZBhr+O+uWxnGwUZySHLrpYEF5QexqJFEfNjDd+tESalEepZ9E k8D6sOCBXtlG4GGzK/TYg0ZlGQJqfATpB0H1hxKsWLvuN4fXK6rFIF/vG8C7LaFX X1LrgOMfVNzNQKU9thim/fkXQlGAgha4o7CvhMv9/RWBczVfpySc8iwutnOYyDNc WKp+b6Xwy4XNCCrQTI/HAMREqHJ1/YSUVAEfV+tGaqfm -----END CERTIFICATE-----Generated at Sun Jan 25 22:41:39 2026 by rpki-client