This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/BYsn1N5gP2JO3UfQxO-E-V2e0co.roa File: BYsn1N5gP2JO3UfQxO-E-V2e0co.roa (raw, json) Hash identifier: 6igu0zYuxX+N38bsBkkYKxt8Fvp/P+aUhF4rJG443fk= Subject key identifier: 05:8B:27:D4:DE:60:3F:62:4E:DD:47:D0:C4:EF:84:F9:5D:9E:D1:CA Certificate issuer: /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Certificate serial: 019B7C12F73BAC392E14919D35F737D1CDCD Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/BYsn1N5gP2JO3UfQxO-E-V2e0co.roa Signing time: Fri 02 Jan 2026 00:19:36 +0000 ROA not before: Fri 02 Jan 2026 00:19:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201971 IP address blocks: 139.28.204.0/24 maxlen: 24 139.28.207.0/24 maxlen: 24 217.145.236.0/24 maxlen: 24 217.145.238.0/24 maxlen: 24 217.145.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 06:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:f7:3b:ac:39:2e:14:91:9d:35:f7:37:d1:cd:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Validity Not Before: Jan 2 00:19:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=058b27d4de603f624edd47d0c4ef84f95d9ed1ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e8:ed:f5:46:c0:5e:3c:59:75:f0:5d:fa:a0: f6:84:50:8a:de:23:46:95:c6:52:e5:c4:87:11:bc: 64:ef:90:d8:bb:91:74:0b:05:94:08:58:c5:9d:3f: 02:c3:57:ea:1c:56:72:60:95:9c:0f:d1:25:1e:dd: 1b:6a:19:2b:3f:cd:c1:6e:12:12:9f:ea:75:ea:a2: 48:d8:18:50:1f:ac:f7:b2:62:86:3c:5a:04:3a:ff: 86:aa:28:db:72:78:b0:ee:2d:9b:bd:fd:c5:fe:c6: 26:c8:7c:d9:95:fa:6a:21:ee:a9:af:6e:ea:e2:88: 69:ce:5d:8e:96:97:9e:62:e9:d9:36:db:ff:fc:c4: 7e:98:a6:72:b4:4b:d8:14:71:2e:83:c0:6a:9b:7b: b6:d6:9c:9f:bd:00:90:78:cb:e5:d7:a5:5f:bc:46: 51:85:4a:19:f6:b4:99:bf:68:09:7d:96:8b:24:d6: 9b:61:2b:fa:1d:89:9e:b3:d5:df:83:80:e4:85:bf: f0:54:74:0d:67:1d:a5:17:c6:91:eb:bd:7e:15:b6: 20:95:f7:16:b7:f2:b0:30:a6:91:8b:74:bd:c5:f9: f6:4e:95:e4:93:ac:f9:78:53:a4:12:ef:34:b3:82: 8e:f2:40:88:86:6a:5b:c6:3d:56:fb:d3:f7:8b:2b: 79:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:8B:27:D4:DE:60:3F:62:4E:DD:47:D0:C4:EF:84:F9:5D:9E:D1:CA X509v3 Authority Key Identifier: keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/BYsn1N5gP2JO3UfQxO-E-V2e0co.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.28.204.0/24 139.28.207.0/24 217.145.236.0/24 217.145.238.0/23 Signature Algorithm: sha256WithRSAEncryption 10:4f:3a:2e:68:45:f0:b1:00:5b:4d:35:e1:50:21:d7:b9:70: f3:99:21:ed:38:d5:66:cd:6b:b2:ab:80:6b:87:d8:86:f5:83: b8:de:99:b9:c8:c4:73:52:62:36:cb:9e:33:1e:7e:d9:53:15: e2:c3:7e:60:45:6d:27:86:ac:aa:b3:6f:c2:8a:f6:7c:9e:13: 31:20:a0:89:f7:98:31:9e:6e:31:a6:f2:69:4d:18:b4:20:4d: bb:a1:44:3e:bd:19:5b:7f:91:3f:60:b9:3f:ff:0e:8d:f0:20: 67:5f:f6:33:a3:e9:34:5e:46:b1:d6:26:e2:48:00:13:6d:71: 28:5d:4d:ae:8a:8d:45:30:83:83:25:b0:75:46:61:da:e3:9e: ef:8e:f2:67:cd:06:32:6d:24:a3:46:28:90:b5:40:1f:b5:17: 49:ad:28:8b:6b:52:65:35:ab:76:7c:65:84:65:db:29:b0:8f: 27:33:4c:57:9e:8e:3f:61:fc:c0:b0:7b:37:49:d3:0b:a7:41: ce:e2:1c:7f:0f:1c:e1:e3:4f:c7:c0:64:63:1c:87:d4:fe:01: c5:f2:1f:7a:83:8e:d1:cf:e0:29:9d:16:d9:ad:31:0b:f4:0d: 18:e5:c1:a6:a4:d5:69:30:d7:fc:5b:31:2c:d2:3f:6f:21:2b: f6:53:82:09 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt8Evc7rDkuFJGdNfc30c3NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNzdlNmI5MjViM2I3YTdhYmI5Mjg4NWQ1NWQ3MzNkYzVm YTYyZDIwHhcNMjYwMTAyMDAxOTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNThiMjdkNGRlNjAzZjYyNGVkZDQ3ZDBjNGVmODRmOTVkOWVkMWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuejt9UbAXjxZdfBd+qD2hFCK3iNG lcZS5cSHEbxk75DYu5F0CwWUCFjFnT8Cw1fqHFZyYJWcD9ElHt0bahkrP83BbhIS n+p16qJI2BhQH6z3smKGPFoEOv+Gqijbcniw7i2bvf3F/sYmyHzZlfpqIe6pr27q 4ohpzl2OlpeeYunZNtv//MR+mKZytEvYFHEug8Bqm3u21pyfvQCQeMvl16VfvEZR hUoZ9rSZv2gJfZaLJNabYSv6HYmes9Xfg4Dkhb/wVHQNZx2lF8aR671+FbYglfcW t/KwMKaRi3S9xfn2TpXkk6z5eFOkEu80s4KO8kCIhmpbxj1W+9P3iyt5PQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFAWLJ9TeYD9iTt1H0MTvhPldntHKMB8GA1UdIwQY MBaAFO135rkls7enq7kohdVdcz3F+mLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMt OTI4MTlkZThhMDM2LzEvQllzbjFONWdQMkpPM1VmUXhPLUUtVjJlMGNvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMtOTI4MTlkZThhMDM2 LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAixzMAwQA ixzPAwQA2ZHsAwQB2ZHuMA0GCSqGSIb3DQEBCwUAA4IBAQAQTzouaEXwsQBbTTXh UCHXuXDzmSHtONVmzWuyq4Brh9iG9YO43pm5yMRzUmI2y54zHn7ZUxXiw35gRW0n hqyqs2/CivZ8nhMxIKCJ95gxnm4xpvJpTRi0IE27oUQ+vRlbf5E/YLk//w6N8CBn X/Yzo+k0Xkax1ibiSAATbXEoXU2uio1FMIODJbB1RmHa457vjvJnzQYybSSjRiiQ tUAftRdJrSiLa1JlNat2fGWEZdspsI8nM0xXno4/YfzAsHs3SdMLp0HO4hx/Dxzh 40/HwGRjHIfU/gHF8h96g47Rz+ApnRbZrTEL9A0Y5cGmpNVpMNf8WzEs0j9vISv2 U4IJ -----END CERTIFICATE-----Generated at Wed Jan 7 15:55:54 2026 by rpki-client