This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/e9e087-e768-44d8-9ec8-88e4466915f8/1/bwWZGeCQW0Hd1jb04LPvEN_tv4U.roa File: bwWZGeCQW0Hd1jb04LPvEN_tv4U.roa (raw, json) Hash identifier: CRa0+I5ztcID9122/jSOLxqWovtuwyYOYDu7k5cAWuw= Subject key identifier: 6F:05:99:19:E0:90:5B:41:DD:D6:36:F4:E0:B3:EF:10:DF:ED:BF:85 Certificate issuer: /CN=595b243a7233e571c3c173eb8249111906326019 Certificate serial: 019B7BA446570D80D131CF5F6EF113ADE990 Authority key identifier: 59:5B:24:3A:72:33:E5:71:C3:C1:73:EB:82:49:11:19:06:32:60:19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WVskOnIz5XHDwXPrgkkRGQYyYBk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/e9e087-e768-44d8-9ec8-88e4466915f8/1/bwWZGeCQW0Hd1jb04LPvEN_tv4U.roa Signing time: Thu 01 Jan 2026 22:18:42 +0000 ROA not before: Thu 01 Jan 2026 22:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39824 IP address blocks: 46.36.128.0/23 maxlen: 24 46.36.130.0/23 maxlen: 24 46.36.132.0/22 maxlen: 24 46.36.136.0/22 maxlen: 24 46.36.140.0/22 maxlen: 24 46.36.144.0/23 maxlen: 24 46.36.146.0/23 maxlen: 24 46.36.148.0/22 maxlen: 24 46.36.152.0/22 maxlen: 24 46.36.156.0/23 maxlen: 24 46.36.158.0/24 maxlen: 24 46.36.159.0/24 maxlen: 24 62.84.32.0/22 maxlen: 24 62.84.36.0/22 maxlen: 24 62.84.40.0/23 maxlen: 24 62.84.42.0/23 maxlen: 24 62.84.44.0/23 maxlen: 24 62.84.46.0/23 maxlen: 24 62.84.48.0/20 maxlen: 24 79.134.32.0/22 maxlen: 24 79.134.36.0/24 maxlen: 24 79.134.37.0/24 maxlen: 24 79.134.38.0/23 maxlen: 24 79.134.40.0/24 maxlen: 24 79.134.41.0/24 maxlen: 24 79.134.42.0/23 maxlen: 24 79.134.44.0/22 maxlen: 24 80.249.137.0/24 maxlen: 24 80.249.138.0/23 maxlen: 24 80.249.140.0/23 maxlen: 24 80.249.142.0/23 maxlen: 24 80.249.152.0/21 maxlen: 24 81.88.144.0/21 maxlen: 24 81.88.152.0/22 maxlen: 24 81.88.156.0/22 maxlen: 24 109.239.32.0/21 maxlen: 24 109.239.40.0/22 maxlen: 24 109.239.44.0/22 maxlen: 24 185.98.76.0/22 maxlen: 24 185.98.88.0/22 maxlen: 24 185.100.224.0/22 maxlen: 24 185.102.116.0/24 maxlen: 24 185.102.117.0/24 maxlen: 24 185.102.118.0/24 maxlen: 24 185.102.119.0/24 maxlen: 24 185.102.128.0/22 maxlen: 24 185.103.168.0/23 maxlen: 24 185.103.170.0/23 maxlen: 24 185.103.176.0/24 maxlen: 24 185.103.177.0/24 maxlen: 24 185.103.178.0/24 maxlen: 24 185.103.179.0/24 maxlen: 24 185.103.184.0/23 maxlen: 24 185.103.186.0/23 maxlen: 24 185.106.156.0/23 maxlen: 24 185.106.158.0/23 maxlen: 24 212.45.80.0/23 maxlen: 24 212.45.82.0/23 maxlen: 24 212.45.84.0/24 maxlen: 24 212.45.85.0/24 maxlen: 24 212.45.86.0/23 maxlen: 24 212.45.88.0/22 maxlen: 24 212.45.92.0/23 maxlen: 24 212.45.94.0/23 maxlen: 24 213.232.196.0/23 maxlen: 24 213.232.201.0/24 maxlen: 24 213.232.218.0/23 maxlen: 24 213.232.220.0/22 maxlen: 24 213.232.224.0/24 maxlen: 24 213.232.230.0/23 maxlen: 24 213.232.242.0/23 maxlen: 24 213.232.244.0/24 maxlen: 24 213.232.246.0/23 maxlen: 24 2a06:1a00::/29 maxlen: 34 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/e9e087-e768-44d8-9ec8-88e4466915f8/1/WVskOnIz5XHDwXPrgkkRGQYyYBk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/e9e087-e768-44d8-9ec8-88e4466915f8/1/WVskOnIz5XHDwXPrgkkRGQYyYBk.mft rsync://rpki.ripe.net/repository/DEFAULT/WVskOnIz5XHDwXPrgkkRGQYyYBk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:46:57:0d:80:d1:31:cf:5f:6e:f1:13:ad:e9:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=595b243a7233e571c3c173eb8249111906326019 Validity Not Before: Jan 1 22:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6f059919e0905b41ddd636f4e0b3ef10dfedbf85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e5:dc:48:87:f4:23:93:05:05:ef:a6:d6:26: 47:7e:d5:a6:1f:e1:9d:5e:2c:0e:13:fd:cd:29:89: 27:9b:06:9f:96:dd:10:54:f9:fe:ee:1b:8e:e3:33: ea:c4:b4:4a:70:ef:53:bb:f2:08:4a:7e:4c:5c:38: b3:9e:04:c9:66:ff:62:80:d3:10:95:32:80:b6:ab: 73:89:8a:a4:6c:a7:89:60:c3:6a:0e:e4:e3:d6:a7: 4c:33:4a:24:ec:ec:53:14:04:de:59:32:f6:c1:70: 89:12:99:32:48:35:88:64:f6:81:30:f2:0e:52:3e: 5b:2a:dc:36:ff:30:5a:8e:3c:ba:c7:aa:05:59:25: e1:c6:26:bc:65:88:68:de:33:af:60:38:fa:d6:28: f5:c7:a2:e5:a8:ab:84:fc:c5:8c:ee:06:e8:2e:90: 42:3d:40:26:f0:fe:cf:48:6d:72:28:01:cb:01:88: 5f:6b:6a:76:5c:a2:89:34:d4:26:e7:68:a1:79:6b: 82:57:4a:0a:c8:7e:08:b3:47:25:ef:d2:98:44:c6: 8b:6d:64:64:6f:0a:21:03:6b:22:8a:ba:fb:5c:23: 59:5d:6c:6f:58:83:ff:8a:74:80:dd:56:97:6d:1d: 31:05:02:0e:3b:a2:72:13:a7:1b:85:4a:cd:01:40: 3f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:05:99:19:E0:90:5B:41:DD:D6:36:F4:E0:B3:EF:10:DF:ED:BF:85 X509v3 Authority Key Identifier: keyid:59:5B:24:3A:72:33:E5:71:C3:C1:73:EB:82:49:11:19:06:32:60:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVskOnIz5XHDwXPrgkkRGQYyYBk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e9e087-e768-44d8-9ec8-88e4466915f8/1/bwWZGeCQW0Hd1jb04LPvEN_tv4U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e9e087-e768-44d8-9ec8-88e4466915f8/1/WVskOnIz5XHDwXPrgkkRGQYyYBk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.36.128.0/19 62.84.32.0/19 79.134.32.0/20 80.249.137.0-80.249.143.255 80.249.152.0/21 81.88.144.0/20 109.239.32.0/20 185.98.76.0/22 185.98.88.0/22 185.100.224.0/22 185.102.116.0/22 185.102.128.0/22 185.103.168.0/22 185.103.176.0/22 185.103.184.0/22 185.106.156.0/22 212.45.80.0/20 213.232.196.0/23 213.232.201.0/24 213.232.218.0-213.232.224.255 213.232.230.0/23 213.232.242.0-213.232.244.255 213.232.246.0/23 IPv6: 2a06:1a00::/29 Signature Algorithm: sha256WithRSAEncryption 33:b1:5f:ad:f5:59:0b:80:85:a3:d0:d2:87:05:57:9d:0b:e1: 6a:c1:3d:03:6d:59:b3:b8:db:a9:1b:95:85:18:cc:ef:bb:02: c7:be:7d:a3:97:8c:70:94:76:4d:59:9e:a3:ee:95:7a:6b:3d: 89:00:9e:a8:30:25:62:cd:86:fb:cd:c2:c5:0c:ab:27:1b:b1: 7e:60:78:e6:cd:bf:ab:0c:2e:8f:a3:5a:4f:37:77:1e:bc:88: 3a:39:72:d8:28:01:7b:21:de:5d:63:04:13:4b:21:32:9f:cf: e3:e6:a2:0c:11:17:ea:a7:75:15:af:58:2c:14:06:18:53:35: eb:ee:50:4b:07:20:48:d9:a3:37:37:73:38:ff:49:b0:a6:80: 4b:62:e4:7a:51:75:31:7b:5a:08:45:37:8e:47:8e:c9:45:b4: 89:80:85:b2:60:02:02:be:a0:80:e9:01:26:02:d1:f0:b0:ff: 27:f7:a6:a8:ac:59:f8:3d:bc:f9:14:64:f2:0d:de:60:e2:c0: e7:7b:c9:7c:0b:a5:1a:a8:6c:5f:50:1d:0a:cf:45:21:72:ae: dd:73:9f:3f:3e:65:a4:0a:51:e1:65:f6:b0:5f:6b:53:2a:be: 96:b8:8f:f5:2b:aa:13:52:d8:17:67:95:be:52:36:54:95:34: d3:6e:a4:32 -----BEGIN CERTIFICATE----- MIIFrTCCBJWgAwIBAgISAZt7pEZXDYDRMc9fbvETremQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5NWIyNDNhNzIzM2U1NzFjM2MxNzNlYjgyNDkxMTE5MDYz MjYwMTkwHhcNMjYwMTAxMjIxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZjA1OTkxOWUwOTA1YjQxZGRkNjM2ZjRlMGIzZWYxMGRmZWRiZjg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOXcSIf0I5MFBe+m1iZHftWmH+Gd XiwOE/3NKYknmwaflt0QVPn+7huO4zPqxLRKcO9Tu/IISn5MXDizngTJZv9igNMQ lTKAtqtziYqkbKeJYMNqDuTj1qdMM0ok7OxTFATeWTL2wXCJEpkySDWIZPaBMPIO Uj5bKtw2/zBajjy6x6oFWSXhxia8ZYho3jOvYDj61ij1x6LlqKuE/MWM7gboLpBC PUAm8P7PSG1yKAHLAYhfa2p2XKKJNNQm52iheWuCV0oKyH4Is0cl79KYRMaLbWRk bwohA2siirr7XCNZXWxvWIP/inSA3VaXbR0xBQIOO6JyE6cbhUrNAUA//QIDAQAB o4ICuTCCArUwHQYDVR0OBBYEFG8FmRngkFtB3dY29OCz7xDf7b+FMB8GA1UdIwQY MBaAFFlbJDpyM+Vxw8Fz64JJERkGMmAZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1Zza09uSXo1WEhEd1hQcmdra1JHUVl5WUJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9lOWUwODctZTc2OC00NGQ4LTllYzgt ODhlNDQ2NjkxNWY4LzEvYndXWkdlQ1FXMEhkMWpiMDRMUHZFTl90djRVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9lOWUwODctZTc2OC00NGQ4LTllYzgtODhlNDQ2NjkxNWY4 LzEvV1Zza09uSXo1WEhEd1hQcmdra1JHUVl5WUJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHOBggrBgEFBQcBBwEB/wSBvjCBuzCBqQQCAAEwgaIDBAUu JIADBAU+VCADBARPhiAwDAMEAFD5iQMEBFD5gAMEA1D5mAMEBFFYkAMEBG3vIAME ArliTAMEArliWAMEArlk4AMEArlmdAMEArlmgAMEArlnqAMEArlnsAMEArlnuAME ArlqnAMEBNQtUAMEAdXoxAMEANXoyTAMAwQB1ejaAwQA1ejgAwQB1ejmMAwDBAHV 6PIDBADV6PQDBAHV6PYwDQQCAAIwBwMFAyoGGgAwDQYJKoZIhvcNAQELBQADggEB ADOxX631WQuAhaPQ0ocFV50L4WrBPQNtWbO426kblYUYzO+7Ase+faOXjHCUdk1Z nqPulXprPYkAnqgwJWLNhvvNwsUMqycbsX5geObNv6sMLo+jWk83dx68iDo5ctgo AXsh3l1jBBNLITKfz+PmogwRF+qndRWvWCwUBhhTNevuUEsHIEjZozc3czj/SbCm gEti5HpRdTF7WghFN45HjslFtImAhbJgAgK+oIDpASYC0fCw/yf3pqisWfg9vPkU ZPIN3mDiwOd7yXwLpRqobF9QHQrPRSFyrt1znz8+ZaQKUeFl9rBfa1Mqvpa4j/Ur qhNS2Bdnlb5SNlSVNNNupDI= -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:39 2026 by rpki-client