This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/bwBmVyl84zrBlwd4Q25f9oREUfU.roa File: bwBmVyl84zrBlwd4Q25f9oREUfU.roa (raw, json) Hash identifier: jqUyab5K9ON+3zVbv/Ee0Mq7W08EoLfyHtO0TsK7rSc= Subject key identifier: 6F:00:66:57:29:7C:E3:3A:C1:97:07:78:43:6E:5F:F6:84:44:51:F5 Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db Certificate serial: 019B791085A7C3180DCEFA9DF249B651F1D6 Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/bwBmVyl84zrBlwd4Q25f9oREUfU.roa Signing time: Thu 01 Jan 2026 10:18:04 +0000 ROA not before: Thu 01 Jan 2026 10:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42962 IP address blocks: 194.163.80.0/22 maxlen: 24 195.180.150.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 12:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:85:a7:c3:18:0d:ce:fa:9d:f2:49:b6:51:f1:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db Validity Not Before: Jan 1 10:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6f006657297ce33ac1970778436e5ff6844451f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c0:4b:42:63:4f:93:73:57:24:ca:ef:f5:65: d7:60:40:aa:78:51:35:6d:5d:0d:e0:9f:b6:00:1d: 34:fc:8a:fc:2e:bc:7e:36:e1:97:ec:c3:b3:92:42: 12:cb:ca:1a:e6:28:17:f0:30:b6:65:b5:eb:26:58: 84:a4:cf:5b:ad:fe:81:49:eb:1a:87:46:7f:96:d8: 6f:85:02:cb:23:61:8e:d3:47:a3:fa:0a:86:8b:1d: 9e:dc:1d:24:5d:50:04:41:e6:0a:3f:a1:a3:16:e6: e0:2c:c8:f4:06:3e:3e:12:c0:a3:19:13:06:53:c5: 57:26:4f:74:48:2f:59:3c:33:c5:e9:6d:62:dc:9c: b6:8e:b8:13:1f:b9:db:32:dc:0e:7a:19:d1:8a:1d: 15:3f:04:24:41:f3:4c:28:7f:03:3d:41:79:e3:68: 14:2a:06:69:e4:de:a3:52:f0:91:fb:89:09:c0:10: c2:2a:05:de:7b:f7:17:e3:72:d6:1e:32:d6:79:a1: 67:8a:82:42:ae:b3:07:36:37:92:b3:87:70:d2:0c: 94:9b:20:5f:e6:93:3c:07:0a:2a:f5:6e:20:c8:03: ec:78:57:1e:d7:5b:0d:01:06:37:7a:0b:ec:bf:be: cf:06:e9:fd:b1:80:a5:61:e7:6b:e4:47:dc:13:06: 0a:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:00:66:57:29:7C:E3:3A:C1:97:07:78:43:6E:5F:F6:84:44:51:F5 X509v3 Authority Key Identifier: keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/bwBmVyl84zrBlwd4Q25f9oREUfU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.163.80.0/22 195.180.150.0/23 Signature Algorithm: sha256WithRSAEncryption 76:e8:3d:07:6e:92:45:db:89:c1:50:62:8a:14:3d:08:bc:64: 37:2b:6c:1b:b8:97:27:55:a1:01:74:4a:47:14:4a:77:ca:0a: 6e:95:ca:fb:e6:63:78:32:d1:d7:d4:8a:b5:66:ba:f6:2f:a3: f4:01:cc:22:1e:35:1c:7f:ec:2d:e0:81:e7:bd:bd:3a:d1:29: 6f:6e:48:5a:bb:48:df:5a:eb:a6:e1:2a:d7:36:6e:2a:8b:0a: 5a:5a:a1:61:be:ef:b5:5f:35:c0:c2:c0:5a:eb:f8:50:5b:20: 41:6b:ba:a7:fe:d1:7f:d6:29:69:d0:89:e9:de:70:3d:35:45: bd:30:95:4b:c8:d8:8d:db:eb:54:eb:37:6e:89:ae:d3:0d:fd: 1b:fb:66:20:3c:48:cf:ef:d9:f1:94:82:9a:b4:70:43:e8:13: 78:ee:c1:6f:4f:68:e7:34:26:47:ff:a5:4c:5d:5f:07:ea:2d: 49:fe:ff:64:f0:27:e0:0a:41:db:5e:b3:21:f9:a6:b3:e0:64: e2:f3:20:ac:7b:fe:35:c6:2e:01:85:d5:93:e9:bf:8e:18:4f: 1e:3d:1f:d4:12:99:da:10:33:2a:42:8e:20:91:04:91:cb:38: 60:cc:bc:19:2f:fe:8b:fb:30:09:dc:46:d5:af:eb:57:de:bb: d5:55:96:6f -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5EIWnwxgNzvqd8km2UfHWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NDcwMTc1NjRjNzExYmNiZDU3NjgwYTBkZmQwMGYyYTVk MDk5ZGIwHhcNMjYwMTAxMTAxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZjAwNjY1NzI5N2NlMzNhYzE5NzA3Nzg0MzZlNWZmNjg0NDQ1MWY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsBLQmNPk3NXJMrv9WXXYECqeFE1 bV0N4J+2AB00/Ir8Lrx+NuGX7MOzkkISy8oa5igX8DC2ZbXrJliEpM9brf6BSesa h0Z/lthvhQLLI2GO00ej+gqGix2e3B0kXVAEQeYKP6GjFubgLMj0Bj4+EsCjGRMG U8VXJk90SC9ZPDPF6W1i3Jy2jrgTH7nbMtwOehnRih0VPwQkQfNMKH8DPUF542gU KgZp5N6jUvCR+4kJwBDCKgXee/cX43LWHjLWeaFnioJCrrMHNjeSs4dw0gyUmyBf 5pM8Bwoq9W4gyAPseFce11sNAQY3egvsv77PBun9sYClYedr5EfcEwYKOQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFG8AZlcpfOM6wZcHeENuX/aERFH1MB8GA1UdIwQY MBaAFNdHAXVkxxG8vVdoCg39APKl0JnbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTBjQmRXVEhFYnk5VjJnS0RmMEE4cVhRbWRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9iYTIzNjItMGNjNS00OWJkLWE1MjIt NGYwZThjZTExYTdkLzEvYndCbVZ5bDg0enJCbHdkNFEyNWY5b1JFVWZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9iYTIzNjItMGNjNS00OWJkLWE1MjItNGYwZThjZTExYTdk LzEvMTBjQmRXVEhFYnk5VjJnS0RmMEE4cVhRbWRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCwqNQAwQB w7SWMA0GCSqGSIb3DQEBCwUAA4IBAQB26D0HbpJF24nBUGKKFD0IvGQ3K2wbuJcn VaEBdEpHFEp3ygpulcr75mN4MtHX1Iq1Zrr2L6P0AcwiHjUcf+wt4IHnvb060Slv bkhau0jfWuum4SrXNm4qiwpaWqFhvu+1XzXAwsBa6/hQWyBBa7qn/tF/1ilp0Inp 3nA9NUW9MJVLyNiN2+tU6zduia7TDf0b+2YgPEjP79nxlIKatHBD6BN47sFvT2jn NCZH/6VMXV8H6i1J/v9k8CfgCkHbXrMh+aaz4GTi8yCse/41xi4BhdWT6b+OGE8e PR/UEpnaEDMqQo4gkQSRyzhgzLwZL/6L+zAJ3EbVr+tX3rvVVZZv -----END CERTIFICATE-----Generated at Wed Jan 21 18:44:48 2026 by rpki-client