This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/BWIxZ78uKyw4vY-xhhwszjKA1Gg.roa File: BWIxZ78uKyw4vY-xhhwszjKA1Gg.roa (raw, json) Hash identifier: DJhZH5ULKuTFx2qZjif4i5VCgjFcTYiLUvWNXLkT1QQ= Subject key identifier: 05:62:31:67:BF:2E:2B:2C:38:BD:8F:B1:86:1C:2C:CE:32:80:D4:68 Certificate issuer: /CN=614ca0d09bbd05f4b8a8ac30a329f6715110758c Certificate serial: 019B797E21EC1ADC9276CCED70850C74FC64 Authority key identifier: 61:4C:A0:D0:9B:BD:05:F4:B8:A8:AC:30:A3:29:F6:71:51:10:75:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/BWIxZ78uKyw4vY-xhhwszjKA1Gg.roa Signing time: Thu 01 Jan 2026 12:17:47 +0000 ROA not before: Thu 01 Jan 2026 12:17:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210513 IP address blocks: 62.3.56.0/24 maxlen: 24 80.173.228.0/23 maxlen: 23 185.65.255.0/24 maxlen: 24 2a12:100::/29 maxlen: 29 2a12:100:10::/48 maxlen: 48 2a12:100:11::/48 maxlen: 48 2a12:100:12::/48 maxlen: 48 2a12:100:13::/48 maxlen: 48 2a12:100:14::/48 maxlen: 48 2a12:100:15::/48 maxlen: 48 2a12:100:16::/48 maxlen: 48 2a12:100:17::/48 maxlen: 48 2a12:100:18::/48 maxlen: 48 2a12:100:19::/48 maxlen: 48 2a12:100:1a::/48 maxlen: 48 2a12:100:1b::/48 maxlen: 48 2a12:100:1c::/48 maxlen: 48 2a12:100:1d::/48 maxlen: 48 2a12:100:1e::/48 maxlen: 48 2a12:100:1f::/48 maxlen: 48 2a12:100:20::/48 maxlen: 48 2a12:100:21::/48 maxlen: 48 2a12:100:22::/48 maxlen: 48 2a12:100:23::/48 maxlen: 48 2a12:100:24::/48 maxlen: 48 2a12:100:25::/48 maxlen: 48 2a12:100:26::/48 maxlen: 48 2a12:100:27::/48 maxlen: 48 2a12:100:28::/48 maxlen: 48 2a12:100:29::/48 maxlen: 48 2a12:100:2a::/48 maxlen: 48 2a12:100:2b::/48 maxlen: 48 2a12:100:2c::/48 maxlen: 48 2a12:100:2d::/48 maxlen: 48 2a12:100:2e::/48 maxlen: 48 2a12:100:2f::/48 maxlen: 48 2a12:100:30::/48 maxlen: 48 2a12:100:31::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.crl rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:21:ec:1a:dc:92:76:cc:ed:70:85:0c:74:fc:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=614ca0d09bbd05f4b8a8ac30a329f6715110758c Validity Not Before: Jan 1 12:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=05623167bf2e2b2c38bd8fb1861c2cce3280d468 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b3:dc:b7:ca:18:fa:50:44:1e:f9:bd:7a:ac: cf:0e:59:d4:37:ab:f9:5b:77:47:8b:d4:f6:52:36: 5a:00:85:67:46:6b:9b:e1:16:8e:6e:df:28:e4:af: 82:86:86:a6:cc:a9:16:cb:97:d1:99:12:0a:ab:45: ce:6d:83:e8:44:2f:20:c9:b6:f5:43:fe:6a:d1:47: 1a:08:9e:af:b7:9a:75:80:11:16:3a:62:bf:60:fb: cd:02:e4:27:2d:60:e7:23:4f:b0:c0:28:8a:39:ba: 3e:a0:3d:64:6d:55:6a:6c:d2:06:b9:dd:b3:ad:31: 30:ed:ff:bf:8f:4b:5c:ca:da:f5:35:68:5e:34:a9: bc:f5:8f:7c:6f:6e:d3:a0:49:81:d5:ce:46:77:e6: 54:91:9b:e4:6b:d4:9e:8d:e9:ee:07:7b:ce:86:7c: 0e:52:00:a5:89:94:96:12:52:b1:59:f9:19:99:ad: d0:a3:f3:80:93:35:e6:73:01:d1:74:a9:b8:39:fb: 4d:c6:4e:06:33:d6:d1:a7:63:46:79:2c:17:f7:1c: 1b:b8:a8:90:be:c6:c4:e6:e7:3b:a7:5e:df:df:88: b1:a9:c0:81:61:1b:8c:cf:11:a1:8c:a2:ab:17:f0: 2a:1f:77:e7:02:db:ce:8a:bc:54:f0:09:d0:76:52: 82:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:62:31:67:BF:2E:2B:2C:38:BD:8F:B1:86:1C:2C:CE:32:80:D4:68 X509v3 Authority Key Identifier: keyid:61:4C:A0:D0:9B:BD:05:F4:B8:A8:AC:30:A3:29:F6:71:51:10:75:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/BWIxZ78uKyw4vY-xhhwszjKA1Gg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.3.56.0/24 80.173.228.0/23 185.65.255.0/24 IPv6: 2a12:100::/29 Signature Algorithm: sha256WithRSAEncryption 14:b3:63:19:28:58:e1:ce:c5:df:15:10:d7:ab:ad:23:fe:52: 66:27:52:2f:49:3f:2f:0f:28:95:c2:d6:e7:6e:73:c4:3a:27: 31:db:aa:ed:c7:2f:49:a0:3f:0a:d8:e3:66:df:3a:ee:c3:75: b9:d7:4d:33:f0:18:78:d7:fb:5c:dd:74:d9:ee:38:ba:08:00: ff:65:96:4b:ab:66:65:52:2f:53:83:d5:91:82:0e:a8:45:88: 7a:d8:7c:53:01:ff:af:74:fe:2b:c8:c1:59:32:5a:10:34:8f: 4b:dc:35:b0:39:e8:82:2f:60:6a:75:8e:a8:96:e7:bc:20:39: af:3e:cd:15:92:58:5f:1f:ec:00:65:17:da:a6:cc:3d:ee:d7: 47:b1:f2:42:66:87:b7:d6:4d:44:c3:88:f3:c4:97:d6:df:6d: c1:93:e4:22:9e:d4:dc:50:fc:4c:f6:48:80:15:a7:0d:e7:b0: 0f:c6:fd:1d:98:5f:e9:1e:de:58:62:a1:64:7d:4d:5e:9d:c2: a1:da:a3:28:da:2a:4a:b5:66:f6:b0:8d:d2:05:e6:6f:1b:f1: 6b:9e:8a:91:9f:8d:5b:22:4e:39:2e:ab:f8:7b:bb:65:9b:62: 5b:96:c3:e0:b5:3f:11:cd:f6:e3:81:05:80:b6:e6:53:72:61: f0:90:bd:44 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt5fiHsGtySdsztcIUMdPxkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxNGNhMGQwOWJiZDA1ZjRiOGE4YWMzMGEzMjlmNjcxNTEx MDc1OGMwHhcNMjYwMTAxMTIxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNTYyMzE2N2JmMmUyYjJjMzhiZDhmYjE4NjFjMmNjZTMyODBkNDY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLPct8oY+lBEHvm9eqzPDlnUN6v5 W3dHi9T2UjZaAIVnRmub4RaObt8o5K+ChoamzKkWy5fRmRIKq0XObYPoRC8gybb1 Q/5q0UcaCJ6vt5p1gBEWOmK/YPvNAuQnLWDnI0+wwCiKObo+oD1kbVVqbNIGud2z rTEw7f+/j0tcytr1NWheNKm89Y98b27ToEmB1c5Gd+ZUkZvka9SejenuB3vOhnwO UgCliZSWElKxWfkZma3Qo/OAkzXmcwHRdKm4OftNxk4GM9bRp2NGeSwX9xwbuKiQ vsbE5uc7p17f34ixqcCBYRuMzxGhjKKrF/AqH3fnAtvOirxU8AnQdlKCGwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFAViMWe/LissOL2PsYYcLM4ygNRoMB8GA1UdIwQY MBaAFGFMoNCbvQX0uKisMKMp9nFREHWMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVV5ZzBKdTlCZlM0cUt3d295bjJjVkVRZFl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS80Nzg2YzItMTFhMS00OGE0LWJhODAt Nzk0NDk3NjU5OWQ4LzEvQldJeFo3OHVLeXc0dlkteGhod3N6aktBMUdnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS80Nzg2YzItMTFhMS00OGE0LWJhODAtNzk0NDk3NjU5OWQ4 LzEvWVV5ZzBKdTlCZlM0cUt3d295bjJjVkVRZFl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQAPgM4AwQB UK3kAwQAuUH/MA0EAgACMAcDBQMqEgEAMA0GCSqGSIb3DQEBCwUAA4IBAQAUs2MZ KFjhzsXfFRDXq60j/lJmJ1IvST8vDyiVwtbnbnPEOicx26rtxy9JoD8K2ONm3zru w3W5100z8Bh41/tc3XTZ7ji6CAD/ZZZLq2ZlUi9Tg9WRgg6oRYh62HxTAf+vdP4r yMFZMloQNI9L3DWwOeiCL2BqdY6olue8IDmvPs0VklhfH+wAZRfapsw97tdHsfJC Zoe31k1Ew4jzxJfW323Bk+QintTcUPxM9kiAFacN57APxv0dmF/pHt5YYqFkfU1e ncKh2qMo2ipKtWb2sI3SBeZvG/FrnoqRn41bIk45Lqv4e7tlm2JblsPgtT8Rzfbj gQWAtuZTcmHwkL1E -----END CERTIFICATE-----Generated at Tue Jan 20 04:47:37 2026 by rpki-client