This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/BWdOJUJHW4QsoZ3P2rPDusTmWpc.roa File: BWdOJUJHW4QsoZ3P2rPDusTmWpc.roa (raw, json) Hash identifier: r0xk4CgECKya80vzJQ9hcP0gdEvOB+SAvKqgvCk44+c= Subject key identifier: 05:67:4E:25:42:47:5B:84:2C:A1:9D:CF:DA:B3:C3:BA:C4:E6:5A:97 Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d Certificate serial: 019B7758B350D40D751BD75FF0C936E682E8 Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/BWdOJUJHW4QsoZ3P2rPDusTmWpc.roa Signing time: Thu 01 Jan 2026 02:17:40 +0000 ROA not before: Thu 01 Jan 2026 02:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201064 IP address blocks: 185.87.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:b3:50:d4:0d:75:1b:d7:5f:f0:c9:36:e6:82:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d Validity Not Before: Jan 1 02:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=05674e2542475b842ca19dcfdab3c3bac4e65a97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:36:24:27:00:92:42:6b:7a:96:ee:4c:b0:51: 69:ee:20:58:1f:a1:aa:c5:b0:5b:4e:c5:9d:2b:f8: f1:ad:b0:8a:2e:05:e9:ee:7e:0d:08:b0:da:66:16: 62:fd:5d:08:e2:1d:11:f5:d9:54:9d:cd:c8:4c:74: c1:4a:e9:00:8c:6d:3f:97:5f:08:62:2a:a8:62:89: d5:90:1e:34:61:1e:8c:b2:ba:58:d2:8d:b3:64:3f: 5f:74:2c:ce:f7:9b:23:bf:79:6e:93:35:f5:49:89: 58:5d:11:63:0c:27:cd:0f:5d:ed:b2:72:d1:b1:f9: b5:92:d4:c0:d0:e0:29:9d:98:19:8c:73:ee:13:cf: ab:58:9a:ca:41:f6:28:b2:ee:12:d5:be:78:19:35: ec:ae:97:d1:5d:21:91:9d:bd:5f:4b:2b:73:b1:18: fe:a8:b7:71:73:00:e2:c3:0f:de:45:e5:5e:f5:e0: 00:59:38:3e:86:e8:47:6a:c7:5b:4b:18:e7:f9:71: 72:49:12:93:3a:c8:57:c3:68:3e:14:04:02:03:d7: 22:ed:9e:02:b9:48:db:bb:53:f8:1d:d6:d9:3c:3d: b0:19:30:a2:c6:7f:2e:b3:96:a0:71:b8:11:24:8e: 03:af:d5:89:de:0c:66:f9:b5:35:af:9b:a1:a7:1f: 6d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:67:4E:25:42:47:5B:84:2C:A1:9D:CF:DA:B3:C3:BA:C4:E6:5A:97 X509v3 Authority Key Identifier: keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/BWdOJUJHW4QsoZ3P2rPDusTmWpc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.87.25.0/24 Signature Algorithm: sha256WithRSAEncryption 77:26:46:e5:d3:4e:6f:7c:1d:ab:54:3a:ac:90:dc:2f:27:47: 17:66:57:5b:2a:b1:84:b1:df:3d:7c:a8:ad:c7:52:fb:0b:c1: 02:60:6e:3d:44:73:7d:a9:e9:fa:a1:9b:28:b3:ba:d7:32:b3: ae:a6:43:dd:6a:bc:04:6b:63:d6:d8:b8:c0:e2:16:6d:d6:a1: f3:bc:5c:c7:3a:7a:d1:f1:51:9a:0d:bd:6f:19:77:5d:9f:15: 19:63:d2:a4:1a:7b:a3:0d:98:b0:c8:08:e7:7b:1b:87:8a:f5: 8f:d3:07:b9:7f:82:e8:d4:8d:ad:43:e0:9d:1c:67:af:f8:43: af:ca:10:33:dc:90:02:75:fc:cb:2a:52:5e:ef:aa:81:ab:67: 67:5b:ee:ee:38:c2:29:d0:0d:39:c6:35:23:51:22:c6:8f:3e: 4c:34:c8:40:fb:45:b2:fb:45:06:b6:b3:1b:50:96:e4:ee:f1: 3c:fa:55:9e:56:66:a6:9c:f1:b3:f4:80:cc:42:81:19:1a:1c: 3b:41:d8:78:7f:01:f7:4b:86:eb:67:5e:47:15:39:72:64:60: e1:0f:4b:1b:e4:51:a4:d5:71:f1:63:77:7a:ca:8b:3e:47:4b: 77:23:ca:0e:d0:a9:61:4e:3d:49:55:3a:8b:17:05:ef:a5:ae: e7:f8:c5:ff -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WLNQ1A11G9df8Mk25oLoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MTZjNDE5NTE1MmVmZmVkYmY3YjNhZmVlMmFhNzJlMTkw OTBlNGQwHhcNMjYwMTAxMDIxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNTY3NGUyNTQyNDc1Yjg0MmNhMTlkY2ZkYWIzYzNiYWM0ZTY1YTk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2TYkJwCSQmt6lu5MsFFp7iBYH6Gq xbBbTsWdK/jxrbCKLgXp7n4NCLDaZhZi/V0I4h0R9dlUnc3ITHTBSukAjG0/l18I YiqoYonVkB40YR6MsrpY0o2zZD9fdCzO95sjv3lukzX1SYlYXRFjDCfND13tsnLR sfm1ktTA0OApnZgZjHPuE8+rWJrKQfYosu4S1b54GTXsrpfRXSGRnb1fSytzsRj+ qLdxcwDiww/eReVe9eAAWTg+huhHasdbSxjn+XFySRKTOshXw2g+FAQCA9ci7Z4C uUjbu1P4HdbZPD2wGTCixn8us5agcbgRJI4Dr9WJ3gxm+bU1r5uhpx9tTwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAVnTiVCR1uELKGdz9qzw7rE5lqXMB8GA1UdIwQY MBaAFMYWxBlRUu/+2/ezr+4qpy4ZCQ5NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjkt MzlmZGI5ODZmMDU5LzEvQldkT0pVSkhXNFFzb1ozUDJyUER1c1RtV3BjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjktMzlmZGI5ODZmMDU5 LzEveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuVcZMA0G CSqGSIb3DQEBCwUAA4IBAQB3Jkbl005vfB2rVDqskNwvJ0cXZldbKrGEsd89fKit x1L7C8ECYG49RHN9qen6oZsos7rXMrOupkPdarwEa2PW2LjA4hZt1qHzvFzHOnrR 8VGaDb1vGXddnxUZY9KkGnujDZiwyAjnexuHivWP0we5f4Lo1I2tQ+CdHGev+EOv yhAz3JACdfzLKlJe76qBq2dnW+7uOMIp0A05xjUjUSLGjz5MNMhA+0Wy+0UGtrMb UJbk7vE8+lWeVmamnPGz9IDMQoEZGhw7Qdh4fwH3S4brZ15HFTlyZGDhD0sb5FGk 1XHxY3d6yos+R0t3I8oO0KlhTj1JVTqLFwXvpa7n+MX/ -----END CERTIFICATE-----Generated at Wed Jan 21 14:11:04 2026 by rpki-client