This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/fc65d8-d183-4737-af81-734cb2cbb3dd/1/BW4bwVhXPDw4rzSQMevzcSQRKfs.roa File: BW4bwVhXPDw4rzSQMevzcSQRKfs.roa (raw, json) Hash identifier: Q1Pxxz9J0e4LzgZJhmknDWkBzY1nDRnnJuEtnZDIv8I= Subject key identifier: 05:6E:1B:C1:58:57:3C:3C:38:AF:34:90:31:EB:F3:71:24:11:29:FB Certificate issuer: /CN=8d1b5809c6c54c9f1c4e8cb3bec41da02c03d764 Certificate serial: 019C0E58FBA6759FEFD70E4F8E97F44C1114 Authority key identifier: 8D:1B:58:09:C6:C5:4C:9F:1C:4E:8C:B3:BE:C4:1D:A0:2C:03:D7:64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRtYCcbFTJ8cToyzvsQdoCwD12Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/fc65d8-d183-4737-af81-734cb2cbb3dd/1/BW4bwVhXPDw4rzSQMevzcSQRKfs.roa Signing time: Fri 30 Jan 2026 10:00:38 +0000 ROA not before: Fri 30 Jan 2026 10:00:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203828 IP address blocks: 185.122.144.0/24 maxlen: 24 185.122.145.0/24 maxlen: 24 185.122.147.0/24 maxlen: 24 2a0a:1a80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/fc65d8-d183-4737-af81-734cb2cbb3dd/1/jRtYCcbFTJ8cToyzvsQdoCwD12Q.crl rsync://rpki.ripe.net/repository/DEFAULT/08/fc65d8-d183-4737-af81-734cb2cbb3dd/1/jRtYCcbFTJ8cToyzvsQdoCwD12Q.mft rsync://rpki.ripe.net/repository/DEFAULT/jRtYCcbFTJ8cToyzvsQdoCwD12Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:0e:58:fb:a6:75:9f:ef:d7:0e:4f:8e:97:f4:4c:11:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d1b5809c6c54c9f1c4e8cb3bec41da02c03d764 Validity Not Before: Jan 30 10:00:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=056e1bc158573c3c38af349031ebf371241129fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1f:fd:64:a7:ab:19:20:ab:f6:37:20:48:c5: 7f:e7:1c:f3:3f:1d:b0:0c:79:e5:e5:16:6f:35:cb: 0c:6f:8d:5c:43:a9:32:a4:a8:3f:4f:2f:cc:cf:48: 0c:4e:a2:01:a0:2a:08:96:8f:56:9f:72:cd:69:cf: e4:40:19:4a:2c:19:54:48:83:d3:36:a8:13:fa:cb: ff:3f:9f:4e:f7:44:7d:59:15:b2:61:34:f8:78:8f: 03:fa:07:64:74:14:20:d0:ff:54:c8:0d:7e:09:5d: 2a:a6:15:88:0c:d4:c6:ae:8f:f2:85:ad:fc:75:7f: dd:5d:96:30:db:8d:a0:8e:35:4b:7e:6e:05:65:83: 25:d3:54:02:aa:a2:6d:2e:56:b2:d0:34:83:6a:30: 21:ee:76:d4:86:00:05:ed:6e:73:80:a8:1d:57:11: d1:d2:65:28:64:50:c4:47:34:86:1b:f9:1e:37:60: 5a:69:34:94:c1:fc:b2:1a:0f:9b:2c:c8:dd:dc:a3: f5:63:cf:51:0a:ca:7d:eb:92:ec:e5:c8:c1:46:8c: 6f:6a:84:e7:e7:f3:b1:68:33:9e:7b:45:e2:02:19: a6:c4:6b:93:28:dd:d3:f0:67:a4:96:ae:50:2e:95: 75:f7:1f:e7:c2:88:a2:a5:59:02:24:e0:ca:e7:63: e6:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:6E:1B:C1:58:57:3C:3C:38:AF:34:90:31:EB:F3:71:24:11:29:FB X509v3 Authority Key Identifier: keyid:8D:1B:58:09:C6:C5:4C:9F:1C:4E:8C:B3:BE:C4:1D:A0:2C:03:D7:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRtYCcbFTJ8cToyzvsQdoCwD12Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/fc65d8-d183-4737-af81-734cb2cbb3dd/1/BW4bwVhXPDw4rzSQMevzcSQRKfs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/fc65d8-d183-4737-af81-734cb2cbb3dd/1/jRtYCcbFTJ8cToyzvsQdoCwD12Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.122.144.0/23 185.122.147.0/24 IPv6: 2a0a:1a80::/29 Signature Algorithm: sha256WithRSAEncryption 73:b7:ce:11:e6:6e:fe:32:ce:99:d3:7b:1f:49:1c:7a:89:73: e3:f9:3d:f1:f9:f7:26:54:92:59:be:93:82:40:26:ec:e1:10: 9c:ea:72:07:a2:56:2d:c2:3f:dc:a3:de:ab:cf:1b:c5:c2:7c: 7f:52:88:64:37:f9:6d:3a:4a:d1:35:db:c5:8b:cd:84:ed:a9: a6:96:20:fd:80:fb:3d:bb:be:bd:d5:d6:d2:5f:97:ba:1c:e5: c0:77:dc:ad:39:d0:29:c1:a1:dc:76:4a:4b:8c:d7:29:39:e8: 24:de:07:7b:4a:a5:63:96:c3:b3:2d:e7:07:aa:cf:36:17:7e: e6:63:c4:03:8e:80:20:d1:a8:d0:0e:a4:42:7b:61:96:86:5a: 9e:1f:4e:3b:d8:a4:4e:0f:1c:06:c0:cf:93:10:c2:6e:0c:a3: 34:0f:9e:bd:5b:65:60:d3:79:05:aa:9b:23:4d:bf:34:cf:61: f9:bf:4f:08:22:f2:d5:2a:ac:e1:5e:19:0a:1d:51:24:44:06: ea:3d:c4:a2:af:6e:af:c1:22:62:bb:55:c0:42:19:e9:50:9c: d5:07:54:1c:39:29:00:dd:f6:03:46:a8:c8:c7:f3:df:06:7c: 81:74:e5:f7:c6:5e:eb:1d:cd:83:19:a8:33:22:df:68:c5:d5: 40:91:95:c3 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZwOWPumdZ/v1w5Pjpf0TBEUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkMWI1ODA5YzZjNTRjOWYxYzRlOGNiM2JlYzQxZGEwMmMw M2Q3NjQwHhcNMjYwMTMwMTAwMDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNTZlMWJjMTU4NTczYzNjMzhhZjM0OTAzMWViZjM3MTI0MTEyOWZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArx/9ZKerGSCr9jcgSMV/5xzzPx2w DHnl5RZvNcsMb41cQ6kypKg/Ty/Mz0gMTqIBoCoIlo9Wn3LNac/kQBlKLBlUSIPT NqgT+sv/P59O90R9WRWyYTT4eI8D+gdkdBQg0P9UyA1+CV0qphWIDNTGro/yha38 dX/dXZYw242gjjVLfm4FZYMl01QCqqJtLlay0DSDajAh7nbUhgAF7W5zgKgdVxHR 0mUoZFDERzSGG/keN2BaaTSUwfyyGg+bLMjd3KP1Y89RCsp965Ls5cjBRoxvaoTn 5/OxaDOee0XiAhmmxGuTKN3T8Geklq5QLpV19x/nwoiipVkCJODK52Pm1wIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFAVuG8FYVzw8OK80kDHr83EkESn7MB8GA1UdIwQY MBaAFI0bWAnGxUyfHE6Ms77EHaAsA9dkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalJ0WUNjYkZUSjhjVG95enZzUWRvQ3dEMTJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9mYzY1ZDgtZDE4My00NzM3LWFmODEt NzM0Y2IyY2JiM2RkLzEvQlc0YndWaFhQRHc0cnpTUU1ldnpjU1FSS2ZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9mYzY1ZDgtZDE4My00NzM3LWFmODEtNzM0Y2IyY2JiM2Rk LzEvalJ0WUNjYkZUSjhjVG95enZzUWRvQ3dEMTJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBuXqQAwQA uXqTMA0EAgACMAcDBQMqChqAMA0GCSqGSIb3DQEBCwUAA4IBAQBzt84R5m7+Ms6Z 03sfSRx6iXPj+T3x+fcmVJJZvpOCQCbs4RCc6nIHolYtwj/co96rzxvFwnx/Uohk N/ltOkrRNdvFi82E7ammliD9gPs9u7691dbSX5e6HOXAd9ytOdApwaHcdkpLjNcp Oegk3gd7SqVjlsOzLecHqs82F37mY8QDjoAg0ajQDqRCe2GWhlqeH0472KRODxwG wM+TEMJuDKM0D569W2Vg03kFqpsjTb80z2H5v08IIvLVKqzhXhkKHVEkRAbqPcSi r26vwSJiu1XAQhnpUJzVB1QcOSkA3fYDRqjIx/PfBnyBdOX3xl7rHc2DGagzIt9o xdVAkZXD -----END CERTIFICATE-----Generated at Mon Feb 9 19:39:16 2026 by rpki-client