This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/byxTcbn0R_ABtndiznyuziTHgi8.roa File: byxTcbn0R_ABtndiznyuziTHgi8.roa (raw, json) Hash identifier: T2sYxuovHiigJvci2db9Vhz7uwGqQKQmouYx6Ud5yM0= Subject key identifier: 6F:2C:53:71:B9:F4:47:F0:01:B6:77:62:CE:7C:AE:CE:24:C7:82:2F Certificate issuer: /CN=1a7f036e2592391fb45a3dd33caf0b07956973cf Certificate serial: 019B7EA7051DE9249BD9745A99DE38F4A420 Authority key identifier: 1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/byxTcbn0R_ABtndiznyuziTHgi8.roa Signing time: Fri 02 Jan 2026 12:20:33 +0000 ROA not before: Fri 02 Jan 2026 12:20:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9304 IP address blocks: 2.59.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 Jan 2026 23:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:05:1d:e9:24:9b:d9:74:5a:99:de:38:f4:a4:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a7f036e2592391fb45a3dd33caf0b07956973cf Validity Not Before: Jan 2 12:20:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6f2c5371b9f447f001b67762ce7caece24c7822f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:89:c6:04:ce:f0:94:53:f9:73:2e:52:08:0f: df:c9:2b:07:89:f6:fb:9e:c2:84:c5:53:c7:f3:23: b2:81:d1:e1:30:b8:84:2d:64:c5:81:ca:24:f4:3a: 35:e7:d2:e6:1c:ba:02:db:5b:79:23:53:08:a7:97: d6:fd:ab:c2:9d:eb:5e:19:47:ab:c5:16:0f:4b:39: 6d:b7:d6:1e:46:ce:72:a0:bb:64:48:c7:d6:6e:df: 1d:1d:c7:8a:14:ae:7d:97:37:43:82:bd:d6:74:ee: 54:eb:37:f8:cc:22:c2:f6:92:11:21:9a:0d:f2:8f: 92:2d:76:8c:fd:7f:b7:b7:21:86:c7:ce:cb:fc:ba: 3e:0c:2c:2d:d6:ea:c8:6b:8f:b4:91:37:97:4b:07: 55:22:df:5c:8d:5c:00:9c:96:2e:49:0b:fe:ef:32: 8d:33:82:1d:b9:e2:0d:d3:c6:cd:e7:1a:db:b5:41: 40:7a:c4:94:9d:d4:de:78:6c:a9:61:d1:53:f4:d8: a8:14:c7:84:bc:16:e6:02:53:66:92:c3:39:83:c1: f5:11:71:25:8b:81:6e:b4:10:f0:4e:e2:49:ea:42: 07:96:95:92:66:f7:44:8e:84:76:66:c9:b5:d9:8f: 28:f4:0e:6c:9f:51:e7:ad:68:b5:3c:cc:9a:f2:84: f6:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:2C:53:71:B9:F4:47:F0:01:B6:77:62:CE:7C:AE:CE:24:C7:82:2F X509v3 Authority Key Identifier: keyid:1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/byxTcbn0R_ABtndiznyuziTHgi8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.59.180.0/24 Signature Algorithm: sha256WithRSAEncryption 28:99:e6:a4:54:9c:83:10:75:20:6b:44:8a:9d:ca:42:ee:52: d7:a2:f5:81:d0:57:be:25:49:88:cc:c1:8f:d4:04:36:e2:ae: 47:52:b9:0a:c0:03:72:4c:b1:5b:5c:b4:00:5f:a1:f0:25:12: 5d:c9:7f:9b:c4:55:61:ec:73:70:16:a8:57:9e:7a:18:b8:78: b9:be:f6:9e:1e:43:2b:a3:fb:25:93:02:da:65:04:ed:76:32: d0:6b:99:c3:d0:88:f5:4f:1c:df:00:b4:1c:97:e7:8e:63:33: 48:85:0d:29:6b:96:f6:84:d8:bb:51:30:23:7c:fb:97:3d:66: 12:88:cb:3a:22:4c:b8:47:e5:a7:be:9a:ee:bc:33:e1:0a:e3: 84:bc:a5:a7:1a:6c:5a:51:28:e0:ab:5d:54:a4:b9:f1:3d:ef: db:09:05:58:d6:b8:fd:a3:74:90:e9:8d:b9:02:f7:f3:ef:ce: 70:e5:a9:8f:85:58:d2:e5:d1:80:ce:b7:76:a2:1d:70:16:8c: 37:c6:88:78:5f:ea:e2:4b:93:20:51:87:2d:51:a5:f1:07:26: bf:1c:d9:28:84:12:45:e2:54:e7:10:3b:fe:5e:b5:fb:2d:e6: 3d:6a:0a:29:57:c5:d9:49:56:6c:4c:1d:4c:58:80:7b:86:d8: dd:f3:73:4a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pwUd6SSb2XRamd449KQgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhN2YwMzZlMjU5MjM5MWZiNDVhM2RkMzNjYWYwYjA3OTU2 OTczY2YwHhcNMjYwMTAyMTIyMDMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZjJjNTM3MWI5ZjQ0N2YwMDFiNjc3NjJjZTdjYWVjZTI0Yzc4MjJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4nGBM7wlFP5cy5SCA/fySsHifb7 nsKExVPH8yOygdHhMLiELWTFgcok9Do159LmHLoC21t5I1MIp5fW/avCneteGUer xRYPSzltt9YeRs5yoLtkSMfWbt8dHceKFK59lzdDgr3WdO5U6zf4zCLC9pIRIZoN 8o+SLXaM/X+3tyGGx87L/Lo+DCwt1urIa4+0kTeXSwdVIt9cjVwAnJYuSQv+7zKN M4IdueIN08bN5xrbtUFAesSUndTeeGypYdFT9NioFMeEvBbmAlNmksM5g8H1EXEl i4FutBDwTuJJ6kIHlpWSZvdEjoR2Zsm12Y8o9A5sn1HnrWi1PMya8oT2KQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG8sU3G59EfwAbZ3Ys58rs4kx4IvMB8GA1UdIwQY MBaAFBp/A24lkjkftFo90zyvCweVaXPPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8yNGJlMWEtMTZkYS00ODFjLThiY2It MzQwZDYyNWM2ZGJhLzEvYnl4VGNibjBSX0FCdG5kaXpueXV6aVRIZ2k4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC8yNGJlMWEtMTZkYS00ODFjLThiY2ItMzQwZDYyNWM2ZGJh LzEvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAAju0MA0G CSqGSIb3DQEBCwUAA4IBAQAomeakVJyDEHUga0SKncpC7lLXovWB0Fe+JUmIzMGP 1AQ24q5HUrkKwANyTLFbXLQAX6HwJRJdyX+bxFVh7HNwFqhXnnoYuHi5vvaeHkMr o/slkwLaZQTtdjLQa5nD0Ij1TxzfALQcl+eOYzNIhQ0pa5b2hNi7UTAjfPuXPWYS iMs6Iky4R+WnvpruvDPhCuOEvKWnGmxaUSjgq11UpLnxPe/bCQVY1rj9o3SQ6Y25 Avfz785w5amPhVjS5dGAzrd2oh1wFow3xoh4X+riS5MgUYctUaXxBya/HNkohBJF 4lTnEDv+XrX7LeY9agopV8XZSVZsTB1MWIB7htjd83NK -----END CERTIFICATE-----Generated at Mon Jan 5 05:03:52 2026 by rpki-client