This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/Byn6OSWWsLdWzXRnQIjdqfvNBzQ.roa File: Byn6OSWWsLdWzXRnQIjdqfvNBzQ.roa (raw, json) Hash identifier: RlGj782fpYNYniyqNH2FaqPK+IsY/g2PSUKbR69pmh4= Subject key identifier: 07:29:FA:39:25:96:B0:B7:56:CD:74:67:40:88:DD:A9:FB:CD:07:34 Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e Certificate serial: 019B7FF2AF849567F9E150B1A63B4B829FBB Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/Byn6OSWWsLdWzXRnQIjdqfvNBzQ.roa Signing time: Fri 02 Jan 2026 18:22:49 +0000 ROA not before: Fri 02 Jan 2026 18:22:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212238 IP address blocks: 2a0f:9bc0::/32 maxlen: 32 2a0f:9bc1::/32 maxlen: 32 2a0f:9bc2::/32 maxlen: 32 2a0f:9bc3::/32 maxlen: 32 2a0f:9bc4::/32 maxlen: 32 2a0f:9bc5::/32 maxlen: 32 2a0f:9bc6::/32 maxlen: 32 2a0f:9bc7::/32 maxlen: 32 2a13:1300::/32 maxlen: 32 2a13:1301::/32 maxlen: 32 2a13:1302::/32 maxlen: 32 2a13:1303::/32 maxlen: 32 2a13:1304::/32 maxlen: 32 2a13:1305::/32 maxlen: 32 2a13:1306::/32 maxlen: 32 2a13:1307::/32 maxlen: 32 2a13:be40::/32 maxlen: 32 2a13:be41::/32 maxlen: 32 2a13:be42::/32 maxlen: 32 2a13:be43::/32 maxlen: 32 2a13:be44::/32 maxlen: 32 2a13:be45::/32 maxlen: 32 2a13:be46::/32 maxlen: 32 2a13:be47::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 15:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:af:84:95:67:f9:e1:50:b1:a6:3b:4b:82:9f:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e Validity Not Before: Jan 2 18:22:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0729fa392596b0b756cd74674088dda9fbcd0734 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:f8:2f:98:dd:c7:9b:82:89:04:40:0d:cc:2c: ef:f0:55:c1:f6:8e:0d:aa:8f:e5:e1:9b:f7:03:e8: e2:28:19:1c:fc:44:e3:38:bf:e6:17:c9:12:a2:9d: 29:1e:b3:55:d7:e3:09:e2:23:a1:fe:17:5b:40:55: 27:50:bd:33:a0:86:f1:68:4a:db:5c:16:fb:a1:71: 56:b6:fa:68:b8:52:a7:bc:7f:64:14:95:09:25:88: a6:f8:75:78:a3:87:9c:34:69:d3:d8:a7:bf:10:ab: db:39:2a:3e:bc:e6:2e:30:77:56:ba:e8:c7:ce:c0: d1:6f:57:11:78:07:8f:69:0a:57:22:56:80:41:aa: 4d:2a:31:8c:30:50:1d:6c:a5:c6:4f:e1:54:d8:95: 25:7e:e6:36:8b:74:ce:cb:6a:f6:11:1d:ca:69:a6: 57:86:bf:35:ae:76:ee:66:eb:2f:a1:2a:e0:96:54: 0f:6a:fa:ad:56:35:01:9e:93:80:70:95:4b:0a:17: 13:99:ba:bb:46:52:79:2e:0a:24:d8:26:01:45:2b: 0f:1c:c2:38:7b:e3:f8:22:1f:eb:46:e0:b0:74:db: 0e:9b:c1:5d:1b:73:af:bf:99:90:3d:33:de:e7:3e: ab:d0:80:02:71:d7:8c:4f:8a:c9:65:da:40:42:f7: 86:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:29:FA:39:25:96:B0:B7:56:CD:74:67:40:88:DD:A9:FB:CD:07:34 X509v3 Authority Key Identifier: keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/Byn6OSWWsLdWzXRnQIjdqfvNBzQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:9bc0::/29 2a13:1300::/29 2a13:be40::/29 Signature Algorithm: sha256WithRSAEncryption 50:20:18:11:6a:69:dd:f8:5b:89:91:7d:a3:17:b8:74:c4:49: 13:f1:d8:fa:26:a8:48:b5:9b:03:0c:b2:ae:96:be:08:3d:24: 09:d9:89:58:15:03:e3:07:c8:87:49:08:8c:1f:79:c7:26:ce: 4a:39:0f:8d:fe:a9:32:22:c2:cd:40:c5:23:70:ac:e6:d3:ba: 31:ee:11:48:60:9b:0c:f5:94:ec:a6:63:5f:a0:f2:8e:83:e7: f6:0a:8c:a3:d0:3e:35:1b:13:95:98:14:fb:7d:14:62:d9:21: c9:f7:49:93:7b:a2:53:6e:8f:5e:2a:0e:16:5e:25:00:6f:03: 23:46:77:17:5f:65:80:98:33:a5:aa:22:fd:93:ee:9b:b2:cd: f3:4a:69:9b:22:0e:cf:9e:2a:65:28:a9:49:e5:9e:ef:dc:11: 8a:f1:f5:96:b8:b2:a7:cf:6f:4a:75:08:a5:0a:44:5c:29:46: ea:07:2f:7f:c3:c2:35:6d:1b:ff:73:c0:3c:a4:a5:8c:11:ee: 52:b6:35:6d:76:9a:5b:21:dc:ee:55:79:66:c0:a3:b3:3b:42: 23:3a:cb:5d:5f:84:7e:35:bb:ac:ae:1e:86:b5:05:2a:92:58: 62:19:fc:74:6f:37:4f:5d:19:c3:17:f7:c5:17:27:c1:4b:18: 60:df:57:37 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/8q+ElWf54VCxpjtLgp+7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4YWQ2MGRhNTI2NzFlOTA4M2NmMzk4NjRlY2EyYWEyMzI0 MWJlOWUwHhcNMjYwMTAyMTgyMjQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNzI5ZmEzOTI1OTZiMGI3NTZjZDc0Njc0MDg4ZGRhOWZiY2QwNzM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3PgvmN3Hm4KJBEANzCzv8FXB9o4N qo/l4Zv3A+jiKBkc/ETjOL/mF8kSop0pHrNV1+MJ4iOh/hdbQFUnUL0zoIbxaErb XBb7oXFWtvpouFKnvH9kFJUJJYim+HV4o4ecNGnT2Ke/EKvbOSo+vOYuMHdWuujH zsDRb1cReAePaQpXIlaAQapNKjGMMFAdbKXGT+FU2JUlfuY2i3TOy2r2ER3KaaZX hr81rnbuZusvoSrgllQPavqtVjUBnpOAcJVLChcTmbq7RlJ5Lgok2CYBRSsPHMI4 e+P4Ih/rRuCwdNsOm8FdG3Ovv5mQPTPe5z6r0IACcdeMT4rJZdpAQveGkwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFAcp+jkllrC3Vs10Z0CI3an7zQc0MB8GA1UdIwQY MBaAFFitYNpSZx6Qg885hk7KKqIyQb6eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0sxZzJsSm5IcENEenptR1Rzb3FvakpCdnA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy83YTE5ODgtMjczNi00OWRjLWE5MDct MTFiM2NmM2ZkNGUxLzEvQnluNk9TV1dzTGRXelhSblFJamRxZnZOQnpRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy83YTE5ODgtMjczNi00OWRjLWE5MDctMTFiM2NmM2ZkNGUx LzEvV0sxZzJsSm5IcENEenptR1Rzb3FvakpCdnA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAbBAIAAjAVAwUDKg+bwAMF AyoTEwADBQMqE75AMA0GCSqGSIb3DQEBCwUAA4IBAQBQIBgRamnd+FuJkX2jF7h0 xEkT8dj6JqhItZsDDLKulr4IPSQJ2YlYFQPjB8iHSQiMH3nHJs5KOQ+N/qkyIsLN QMUjcKzm07ox7hFIYJsM9ZTspmNfoPKOg+f2Coyj0D41GxOVmBT7fRRi2SHJ90mT e6JTbo9eKg4WXiUAbwMjRncXX2WAmDOlqiL9k+6bss3zSmmbIg7PniplKKlJ5Z7v 3BGK8fWWuLKnz29KdQilCkRcKUbqBy9/w8I1bRv/c8A8pKWMEe5StjVtdppbIdzu VXlmwKOzO0IjOstdX4R+Nbusrh6GtQUqklhiGfx0bzdPXRnDF/fFFyfBSxhg31c3 -----END CERTIFICATE-----Generated at Mon Jan 19 20:21:54 2026 by rpki-client