This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/BWSDCyaaYztqf8x04OxukY8CPY4.roa File: BWSDCyaaYztqf8x04OxukY8CPY4.roa (raw, json) Hash identifier: U38FUPvoykxIjgiJPRxBdZlYvPSwyO1mNNGTzXNpiZU= Subject key identifier: 05:64:83:0B:26:9A:63:3B:6A:7F:CC:74:E0:EC:6E:91:8F:02:3D:8E Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9 Certificate serial: 019B78A34664CA98E013F5EB25BEF3D96B3E Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/BWSDCyaaYztqf8x04OxukY8CPY4.roa Signing time: Thu 01 Jan 2026 08:18:44 +0000 ROA not before: Thu 01 Jan 2026 08:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 55201 IP address blocks: 91.186.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:46:64:ca:98:e0:13:f5:eb:25:be:f3:d9:6b:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9 Validity Not Before: Jan 1 08:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0564830b269a633b6a7fcc74e0ec6e918f023d8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:f7:ec:22:a9:93:0c:7b:c9:e1:4a:a3:9f:a9: 5e:04:3f:db:b9:49:c3:58:ea:cb:24:29:21:47:c7: 9e:4c:61:d0:5f:8f:c9:a9:72:88:ec:63:df:a8:a2: 87:62:82:70:54:de:fe:a6:9b:fc:49:a8:22:e7:c9: 90:cc:f6:7e:10:f9:8a:05:48:94:9b:cd:9d:1d:17: 92:fc:55:27:a9:7a:d8:17:e7:2a:62:c6:6c:47:c9: 0a:7e:bf:bb:a2:25:2f:8a:bd:73:bf:fa:02:d1:a9: 89:21:ac:1e:e2:b7:76:52:65:c8:5c:56:c5:46:dd: 69:a7:25:6a:5c:e6:5c:fc:e9:7a:40:58:74:8f:e9: a9:cc:e3:da:32:82:88:5f:0c:ed:55:d5:0c:46:d8: b7:2f:06:c0:a0:e3:bc:83:9e:73:12:d0:21:f0:c2: c5:66:3f:1b:b6:1e:1a:4d:4e:e6:2a:d1:5c:05:8a: bb:af:eb:eb:0a:4e:00:f7:ec:07:e2:4e:0f:d5:93: 43:40:af:da:03:fa:d9:f1:6e:0d:08:42:c8:b9:c0: 9c:88:8f:c4:73:92:2d:81:20:40:c0:5e:62:d6:4e: 57:89:c1:bb:5e:81:05:15:fc:aa:cb:db:fb:b3:2a: c0:c6:63:3d:ed:d4:56:62:58:19:c9:36:0a:08:44: 9b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:64:83:0B:26:9A:63:3B:6A:7F:CC:74:E0:EC:6E:91:8F:02:3D:8E X509v3 Authority Key Identifier: keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/BWSDCyaaYztqf8x04OxukY8CPY4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.186.195.0/24 Signature Algorithm: sha256WithRSAEncryption 82:31:4f:22:b8:31:47:c9:65:56:a6:06:70:73:5a:ed:36:f9: 65:5a:6b:1e:c7:15:7f:86:36:fe:e1:70:cd:d0:0d:54:f2:e8: 3b:1f:83:77:f8:86:55:7a:76:46:d2:e0:bd:ab:ec:88:40:7c: c7:d8:09:d8:16:41:f9:47:7d:b2:72:96:91:e7:d8:54:d6:ed: 19:01:14:55:ee:4c:2e:a9:ab:6e:57:c9:8a:b2:8f:a2:df:64: 08:50:27:3c:62:79:38:f0:e6:da:45:0d:25:fb:3a:ca:6f:e1: 0b:05:26:3e:4c:1e:c6:d2:2c:4e:36:71:78:7d:c6:c1:38:df: d0:1f:34:09:5f:4a:75:de:4d:39:4c:57:9f:b6:f3:a5:ce:9d: 36:60:5d:73:8c:58:20:ea:1a:35:de:c7:6e:28:ae:8d:1b:1f: 8b:32:64:61:fe:d6:c9:95:ac:12:29:58:39:3b:87:65:dc:27: 36:c0:cd:99:7b:94:b8:f9:e0:49:cc:d9:2e:68:ce:39:06:8e: a9:51:76:92:9a:f4:ab:6b:f5:d5:70:b2:61:ca:90:b2:98:9a: 0e:58:49:34:cc:27:e1:3b:ae:43:77:40:9b:95:55:5f:01:2e: 44:30:8f:84:69:7f:a2:de:5c:5d:f9:31:5b:05:a4:a0:1a:74: 1f:34:da:c4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4o0ZkypjgE/XrJb7z2Ws+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1YmFmMjY5Njc1MTBiM2M1MmU0NmQxZGM1OTM5NjdjZGYy OWY5YzkwHhcNMjYwMTAxMDgxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNTY0ODMwYjI2OWE2MzNiNmE3ZmNjNzRlMGVjNmU5MThmMDIzZDhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4/fsIqmTDHvJ4Uqjn6leBD/buUnD WOrLJCkhR8eeTGHQX4/JqXKI7GPfqKKHYoJwVN7+ppv8Sagi58mQzPZ+EPmKBUiU m82dHReS/FUnqXrYF+cqYsZsR8kKfr+7oiUvir1zv/oC0amJIawe4rd2UmXIXFbF Rt1ppyVqXOZc/Ol6QFh0j+mpzOPaMoKIXwztVdUMRti3LwbAoOO8g55zEtAh8MLF Zj8bth4aTU7mKtFcBYq7r+vrCk4A9+wH4k4P1ZNDQK/aA/rZ8W4NCELIucCciI/E c5ItgSBAwF5i1k5XicG7XoEFFfyqy9v7syrAxmM97dRWYlgZyTYKCESbNwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAVkgwsmmmM7an/MdODsbpGPAj2OMB8GA1UdIwQY MBaAFFW68mlnUQs8UuRtHcWTlnzfKfnJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmJyeWFXZFJDenhTNUcwZHhaT1dmTjhwLWNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS81YWE0ZGMtZDE4NC00ZGI0LTllMTAt NDlmOTgxZWU1OTgxLzEvQldTREN5YWFZenRxZjh4MDRPeHVrWThDUFk0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS81YWE0ZGMtZDE4NC00ZGI0LTllMTAtNDlmOTgxZWU1OTgx LzEvVmJyeWFXZFJDenhTNUcwZHhaT1dmTjhwLWNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW7rDMA0G CSqGSIb3DQEBCwUAA4IBAQCCMU8iuDFHyWVWpgZwc1rtNvllWmsexxV/hjb+4XDN 0A1U8ug7H4N3+IZVenZG0uC9q+yIQHzH2AnYFkH5R32ycpaR59hU1u0ZARRV7kwu qatuV8mKso+i32QIUCc8Ynk48ObaRQ0l+zrKb+ELBSY+TB7G0ixONnF4fcbBON/Q HzQJX0p13k05TFeftvOlzp02YF1zjFgg6ho13sduKK6NGx+LMmRh/tbJlawSKVg5 O4dl3Cc2wM2Ze5S4+eBJzNkuaM45Bo6pUXaSmvSra/XVcLJhypCymJoOWEk0zCfh O65Dd0CblVVfAS5EMI+EaX+i3lxd+TFbBaSgGnQfNNrE -----END CERTIFICATE-----Generated at Tue Jan 20 02:56:27 2026 by rpki-client