This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/bwOIwRe-t7R54b9v9np6_kJQ_dE.roa File: bwOIwRe-t7R54b9v9np6_kJQ_dE.roa (raw, json) Hash identifier: Q1d3WN659RXAKPuHuKTKUTC5odQwSZ9Vh4CW0Um2Opc= Subject key identifier: 6F:03:88:C1:17:BE:B7:B4:79:E1:BF:6F:F6:7A:7A:FE:42:50:FD:D1 Certificate issuer: /CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046 Certificate serial: 019B7B364AA509CFD1E4397F68783611D16F Authority key identifier: 7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/bwOIwRe-t7R54b9v9np6_kJQ_dE.roa Signing time: Thu 01 Jan 2026 20:18:34 +0000 ROA not before: Thu 01 Jan 2026 20:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29802 IP address blocks: 45.87.48.0/22 maxlen: 22 45.91.164.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.mft rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 14:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:4a:a5:09:cf:d1:e4:39:7f:68:78:36:11:d1:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046 Validity Not Before: Jan 1 20:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6f0388c117beb7b479e1bf6ff67a7afe4250fdd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:0f:e0:c5:ba:71:ce:ee:28:bb:e6:15:b9:81: cd:9b:a1:35:22:09:c3:5e:35:45:62:ac:5a:54:31: e1:35:ac:4d:be:1c:27:1b:a9:14:6a:7c:6c:31:c6: fa:bc:8a:de:df:bd:cd:35:97:3f:27:b9:76:2d:69: a6:2b:d2:a6:aa:85:af:02:76:68:2c:b9:df:e2:e3: e8:67:e4:8e:b3:34:2b:77:81:af:50:fb:48:13:0d: f2:a8:69:4d:43:f8:71:70:bf:8e:87:c3:fd:ee:2d: a4:aa:87:78:e3:de:4a:24:0c:18:5c:bf:b6:72:6f: 22:62:e9:a1:53:9b:68:45:58:e0:df:2b:d9:33:94: a1:dc:e8:87:35:f4:c3:5d:d3:82:c5:75:90:3c:d8: ed:c2:f0:d3:94:d2:37:8a:5f:e7:b4:3f:a3:c2:c0: a5:fa:f4:45:24:2e:42:68:3e:0c:4c:ec:2d:ac:f2: 51:32:6f:aa:e2:b5:5e:e2:2a:4b:00:f3:12:2d:26: ea:c4:da:f9:0d:fd:9a:e2:fd:85:7b:26:64:5e:62: 26:13:c0:94:16:e5:66:cd:14:5c:13:5c:70:be:3a: 19:f5:3c:f2:0a:95:56:58:a1:6a:31:98:3a:07:5e: b9:38:78:4d:3a:e5:87:f7:98:7e:a4:9a:41:47:58: 02:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:03:88:C1:17:BE:B7:B4:79:E1:BF:6F:F6:7A:7A:FE:42:50:FD:D1 X509v3 Authority Key Identifier: keyid:7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/bwOIwRe-t7R54b9v9np6_kJQ_dE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.87.48.0/22 45.91.164.0/22 Signature Algorithm: sha256WithRSAEncryption 06:86:07:76:1d:34:c5:4d:4d:3c:89:32:63:c4:87:4c:01:ec: 47:28:c6:03:6b:17:95:d4:9b:69:0a:c1:3f:00:1c:ee:99:6d: 6f:56:6f:7b:6d:c5:38:0f:1e:53:0c:7e:d3:df:b4:c8:0a:49: 84:21:35:5e:0d:b7:b4:6d:75:d1:a8:13:c6:8a:5b:28:e6:90: ff:b0:5a:20:f7:64:e2:2f:f2:99:c2:ff:49:f1:89:8e:08:47: 96:27:f9:e5:8c:10:3d:dd:14:85:83:65:03:d0:ff:20:26:44: dc:23:41:4e:b0:f5:91:77:cf:e4:50:2c:30:a3:70:91:fe:7a: e4:1c:6f:c2:9f:ad:95:b9:56:f0:c4:59:cd:1b:68:2e:31:f3: 51:3d:12:8b:80:d4:70:ca:ab:dc:ae:a7:40:52:fc:89:a4:59: 22:a1:b6:58:4b:73:03:58:eb:4b:0b:1e:e5:21:a4:36:00:aa: 96:96:77:f9:e1:d6:39:08:50:57:71:92:17:d7:32:91:20:50: 4f:c3:d9:75:47:42:72:ec:58:91:3d:ea:22:53:93:92:68:12: c7:50:c8:65:9f:13:a5:10:59:8b:a7:af:0c:4c:0b:f5:70:75: ae:c6:c1:1b:46:0c:b1:57:e9:4d:02:78:bc:9c:d0:10:ad:6f: ef:b1:7f:d5 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7NkqlCc/R5Dl/aHg2EdFvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjYTY0M2JiMzk5YzZkODdhZGM0YzdjYmE1ZDJiNzJmYmQw MGQwNDYwHhcNMjYwMTAxMjAxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZjAzODhjMTE3YmViN2I0NzllMWJmNmZmNjdhN2FmZTQyNTBmZGQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmA/gxbpxzu4ou+YVuYHNm6E1IgnD XjVFYqxaVDHhNaxNvhwnG6kUanxsMcb6vIre373NNZc/J7l2LWmmK9KmqoWvAnZo LLnf4uPoZ+SOszQrd4GvUPtIEw3yqGlNQ/hxcL+Oh8P97i2kqod4495KJAwYXL+2 cm8iYumhU5toRVjg3yvZM5Sh3OiHNfTDXdOCxXWQPNjtwvDTlNI3il/ntD+jwsCl +vRFJC5CaD4MTOwtrPJRMm+q4rVe4ipLAPMSLSbqxNr5Df2a4v2FeyZkXmImE8CU FuVmzRRcE1xwvjoZ9TzyCpVWWKFqMZg6B165OHhNOuWH95h+pJpBR1gCWwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFG8DiMEXvre0eeG/b/Z6ev5CUP3RMB8GA1UdIwQY MBaAFHymQ7s5nG2HrcTHy6XSty+9ANBGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZktaRHV6bWNiWWV0eE1mTHBkSzNMNzBBMEVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9jMDMwMWQtNTgwMS00YWM2LWI1MDMt NDRlYTY0NzIxYzllLzEvYndPSXdSZS10N1I1NGI5djlucDZfa0pRX2RFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi9jMDMwMWQtNTgwMS00YWM2LWI1MDMtNDRlYTY0NzIxYzll LzEvZktaRHV6bWNiWWV0eE1mTHBkSzNMNzBBMEVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLVcwAwQC LVukMA0GCSqGSIb3DQEBCwUAA4IBAQAGhgd2HTTFTU08iTJjxIdMAexHKMYDaxeV 1JtpCsE/ABzumW1vVm97bcU4Dx5TDH7T37TICkmEITVeDbe0bXXRqBPGilso5pD/ sFog92TiL/KZwv9J8YmOCEeWJ/nljBA93RSFg2UD0P8gJkTcI0FOsPWRd8/kUCww o3CR/nrkHG/Cn62VuVbwxFnNG2guMfNRPRKLgNRwyqvcrqdAUvyJpFkiobZYS3MD WOtLCx7lIaQ2AKqWlnf54dY5CFBXcZIX1zKRIFBPw9l1R0Jy7FiRPeoiU5OSaBLH UMhlnxOlEFmLp68MTAv1cHWuxsEbRgyxV+lNAni8nNAQrW/vsX/V -----END CERTIFICATE-----Generated at Sat Jan 24 00:28:16 2026 by rpki-client