This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/40079b-fcaa-46d9-8161-66a6c80d26a5/1/By9XwpaaIZ1vbKoC0EMkQI8xFME.roa File: By9XwpaaIZ1vbKoC0EMkQI8xFME.roa (raw, json) Hash identifier: rVTno30bTxW1UXGkTngYyYx+U1Aa9CBafc0WRSX3D0M= Subject key identifier: 07:2F:57:C2:96:9A:21:9D:6F:6C:AA:02:D0:43:24:40:8F:31:14:C1 Certificate issuer: /CN=9f24064f95331cf1f315dc50de4db05ff95aa410 Certificate serial: 019B775964300DEEF05AA56E41D9A1477307 Authority key identifier: 9F:24:06:4F:95:33:1C:F1:F3:15:DC:50:DE:4D:B0:5F:F9:5A:A4:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyQGT5UzHPHzFdxQ3k2wX_lapBA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/40079b-fcaa-46d9-8161-66a6c80d26a5/1/By9XwpaaIZ1vbKoC0EMkQI8xFME.roa Signing time: Thu 01 Jan 2026 02:18:25 +0000 ROA not before: Thu 01 Jan 2026 02:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44462 IP address blocks: 81.21.112.0/20 maxlen: 24 185.178.0.0/22 maxlen: 24 2a0a:4d80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/40079b-fcaa-46d9-8161-66a6c80d26a5/1/nyQGT5UzHPHzFdxQ3k2wX_lapBA.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/40079b-fcaa-46d9-8161-66a6c80d26a5/1/nyQGT5UzHPHzFdxQ3k2wX_lapBA.mft rsync://rpki.ripe.net/repository/DEFAULT/nyQGT5UzHPHzFdxQ3k2wX_lapBA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:64:30:0d:ee:f0:5a:a5:6e:41:d9:a1:47:73:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f24064f95331cf1f315dc50de4db05ff95aa410 Validity Not Before: Jan 1 02:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=072f57c2969a219d6f6caa02d04324408f3114c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:2f:41:2f:d0:6a:82:be:d0:6d:30:8e:a8:37: b5:93:16:35:00:3a:5e:bc:26:eb:99:80:96:b7:e7: 9a:c9:0e:e2:54:07:06:76:97:4c:e2:1c:bc:f3:f4: dc:57:49:c4:b7:7d:0a:cc:e6:0f:f3:2a:51:64:de: 56:3f:27:75:18:d7:36:43:4a:2e:4f:ca:ed:36:ba: c0:5a:78:bb:18:59:e5:70:f4:fc:14:ac:0c:b8:34: be:a4:d6:e0:b8:71:52:0e:b7:67:3b:57:73:0e:a7: d1:7d:3b:3b:2e:9a:15:69:1f:60:aa:64:9f:dc:47: 6f:30:f4:44:4e:87:f5:92:be:e2:ea:99:dc:97:2c: 11:24:68:98:5a:bd:94:3e:df:a5:d9:19:cf:7c:cd: 80:c1:12:66:58:98:74:b4:66:d9:01:f4:ee:94:93: 4e:f2:b8:e8:f0:12:ca:6f:8f:55:f0:36:7e:9a:ea: 69:3c:d9:39:23:05:49:9c:27:9f:e5:3b:3a:5d:1e: 62:d2:2a:0a:20:ac:1f:60:b6:42:c9:fa:2d:60:7d: 0c:a8:72:09:00:1c:15:a9:50:4f:ce:8a:47:11:44: 3d:f5:b7:6a:5c:4b:a4:05:e9:09:f0:40:56:93:44: 5b:d2:cd:75:00:76:9b:44:b1:e8:a9:48:a0:d6:45: 62:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:2F:57:C2:96:9A:21:9D:6F:6C:AA:02:D0:43:24:40:8F:31:14:C1 X509v3 Authority Key Identifier: keyid:9F:24:06:4F:95:33:1C:F1:F3:15:DC:50:DE:4D:B0:5F:F9:5A:A4:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyQGT5UzHPHzFdxQ3k2wX_lapBA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/40079b-fcaa-46d9-8161-66a6c80d26a5/1/By9XwpaaIZ1vbKoC0EMkQI8xFME.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/40079b-fcaa-46d9-8161-66a6c80d26a5/1/nyQGT5UzHPHzFdxQ3k2wX_lapBA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.21.112.0/20 185.178.0.0/22 IPv6: 2a0a:4d80::/29 Signature Algorithm: sha256WithRSAEncryption 81:c3:ba:6e:81:67:9f:37:50:3a:85:64:74:66:ab:9a:f1:db: 47:c4:87:96:db:2d:0b:2f:a6:a7:8a:a5:2c:a4:c1:01:04:eb: 81:71:be:57:32:09:a8:cc:43:3c:d1:67:d8:41:db:36:d9:40: 54:37:d3:0a:f9:7f:26:fd:50:7d:f1:60:b5:0b:4d:2d:d4:3f: 13:7b:41:c1:13:93:e8:79:58:2f:27:95:58:bb:19:9f:64:d3: 77:08:2d:cc:d2:cf:56:ea:bc:bf:36:88:71:cf:71:c4:ab:1f: de:b9:73:fd:f1:7e:e7:3c:15:2e:bb:38:a0:e8:65:30:a2:c2: f4:3b:aa:d7:b7:17:bc:9d:b1:32:e3:1a:f8:5b:85:06:a5:6e: 38:be:ac:e2:ea:21:00:51:4c:e4:ac:58:72:98:87:f3:ef:b5: b6:8a:52:bc:37:36:3b:c8:83:bf:75:9c:d6:28:29:c2:26:3b: d0:b6:a2:02:d2:4d:9e:19:18:0d:34:22:98:82:d8:c7:51:30: 24:3b:c2:28:f7:d0:c3:8c:40:16:7c:74:18:ae:a3:5c:6a:d8: 0f:52:37:6c:4a:fb:98:7c:0b:f7:17:0d:b9:3b:ae:72:c1:a5: bb:37:f0:0e:b0:5b:4c:e2:d9:7c:2c:be:34:dc:42:f6:c7:86: b2:ad:22:83 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt3WWQwDe7wWqVuQdmhR3MHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmMjQwNjRmOTUzMzFjZjFmMzE1ZGM1MGRlNGRiMDVmZjk1 YWE0MTAwHhcNMjYwMTAxMDIxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNzJmNTdjMjk2OWEyMTlkNmY2Y2FhMDJkMDQzMjQ0MDhmMzExNGMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzy9BL9Bqgr7QbTCOqDe1kxY1ADpe vCbrmYCWt+eayQ7iVAcGdpdM4hy88/TcV0nEt30KzOYP8ypRZN5WPyd1GNc2Q0ou T8rtNrrAWni7GFnlcPT8FKwMuDS+pNbguHFSDrdnO1dzDqfRfTs7LpoVaR9gqmSf 3EdvMPRETof1kr7i6pnclywRJGiYWr2UPt+l2RnPfM2AwRJmWJh0tGbZAfTulJNO 8rjo8BLKb49V8DZ+muppPNk5IwVJnCef5Ts6XR5i0ioKIKwfYLZCyfotYH0MqHIJ ABwVqVBPzopHEUQ99bdqXEukBekJ8EBWk0Rb0s11AHabRLHoqUig1kViCwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFAcvV8KWmiGdb2yqAtBDJECPMRTBMB8GA1UdIwQY MBaAFJ8kBk+VMxzx8xXcUN5NsF/5WqQQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnlRR1Q1VXpIUEh6RmR4UTNrMndYX2xhcEJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi80MDA3OWItZmNhYS00NmQ5LTgxNjEt NjZhNmM4MGQyNmE1LzEvQnk5WHdwYWFJWjF2YktvQzBFTWtRSTh4Rk1FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi80MDA3OWItZmNhYS00NmQ5LTgxNjEtNjZhNmM4MGQyNmE1 LzEvbnlRR1Q1VXpIUEh6RmR4UTNrMndYX2xhcEJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQEURVwAwQC ubIAMA0EAgACMAcDBQMqCk2AMA0GCSqGSIb3DQEBCwUAA4IBAQCBw7pugWefN1A6 hWR0Zqua8dtHxIeW2y0LL6aniqUspMEBBOuBcb5XMgmozEM80WfYQds22UBUN9MK +X8m/VB98WC1C00t1D8Te0HBE5PoeVgvJ5VYuxmfZNN3CC3M0s9W6ry/Nohxz3HE qx/euXP98X7nPBUuuzig6GUwosL0O6rXtxe8nbEy4xr4W4UGpW44vqzi6iEAUUzk rFhymIfz77W2ilK8NzY7yIO/dZzWKCnCJjvQtqIC0k2eGRgNNCKYgtjHUTAkO8Io 99DDjEAWfHQYrqNcatgPUjdsSvuYfAv3Fw25O65ywaW7N/AOsFtM4tl8LL403EL2 x4ayrSKD -----END CERTIFICATE-----Generated at Tue Feb 10 01:44:27 2026 by rpki-client