This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/BWSJy8NvodFOV60IwMs9NgR2Z0c.roa File: BWSJy8NvodFOV60IwMs9NgR2Z0c.roa (raw, json) Hash identifier: MCuVu23q+816TN6sBz2yUZp1+opWf1V3N9l9i52MAlQ= Subject key identifier: 05:64:89:CB:C3:6F:A1:D1:4E:57:AD:08:C0:CB:3D:36:04:76:67:47 Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a Certificate serial: 019B7BA405AD5A75804D8AC30236092D48D3 Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/BWSJy8NvodFOV60IwMs9NgR2Z0c.roa Signing time: Thu 01 Jan 2026 22:18:25 +0000 ROA not before: Thu 01 Jan 2026 22:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62282 IP address blocks: 193.34.233.0/24 maxlen: 24 2a0f:7b80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:05:ad:5a:75:80:4d:8a:c3:02:36:09:2d:48:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a Validity Not Before: Jan 1 22:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=056489cbc36fa1d14e57ad08c0cb3d3604766747 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ec:b0:e4:8a:87:fa:66:32:ca:ae:39:88:b9: 50:66:d8:0b:db:b5:c6:92:4a:25:e8:a0:3f:a7:65: 3d:db:34:42:ae:ae:3d:88:8c:8b:8c:51:b5:68:97: f9:3b:81:90:f2:ff:3c:e1:26:43:d2:c9:a0:c3:fc: 91:3a:14:4a:63:d8:70:7b:be:e0:f2:5f:2d:8d:3a: 71:bc:60:37:e7:db:4d:a4:8e:e5:e4:91:98:a7:18: 3e:ec:cc:b1:7a:0f:60:0f:79:50:69:a0:25:cb:65: 07:4f:73:34:67:4d:a5:78:65:36:63:48:54:69:1e: 0f:03:97:49:36:c3:71:0f:1c:19:10:39:44:64:25: fa:2c:52:a5:97:46:23:44:7e:d9:27:be:41:72:7a: 40:e9:55:4e:52:61:8f:88:b1:ba:ec:dc:97:6b:d3: 88:85:15:ca:a4:d2:13:aa:25:1d:cc:67:2a:37:d0: 00:55:a8:11:60:e1:32:b9:6b:3e:9f:d7:77:37:96: 00:c5:ef:6f:46:2d:e5:b3:c0:0b:1c:ce:18:ec:2a: a4:62:1d:77:9c:4e:92:2b:7a:5a:fc:20:6c:56:12: f8:fc:b3:77:52:85:5d:26:65:19:a3:ac:38:8e:6a: 30:30:8f:ef:35:fe:d8:b4:ae:1f:50:6f:7e:0e:0f: 6c:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:64:89:CB:C3:6F:A1:D1:4E:57:AD:08:C0:CB:3D:36:04:76:67:47 X509v3 Authority Key Identifier: keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/BWSJy8NvodFOV60IwMs9NgR2Z0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.34.233.0/24 IPv6: 2a0f:7b80::/48 Signature Algorithm: sha256WithRSAEncryption b6:b4:48:35:89:8e:cf:e9:47:c8:5f:cf:b2:0b:69:57:d1:d7: f6:dd:84:51:61:df:83:4b:6c:58:48:63:84:b5:46:23:6a:97: dd:d6:33:15:82:e2:96:54:a8:95:1e:47:20:3c:ec:b3:30:81: d0:5f:87:18:d1:e4:1b:59:ad:e9:29:75:39:27:f3:62:69:61: 89:d4:3d:ba:55:8f:88:05:58:bb:8e:0c:52:62:6c:de:25:95: f2:82:75:d8:a6:fc:3a:d6:70:e6:2e:ca:de:1a:cb:63:d6:fd: 91:bc:2d:55:48:01:39:a4:7e:17:b4:af:99:c9:29:7e:ab:f0: fa:c7:1e:c5:cf:e7:89:70:9e:8a:fc:4d:fd:73:e3:48:9e:ca: 51:5c:54:7b:a6:af:d1:87:d8:e8:4d:cf:7b:05:41:f8:4d:83: a1:ac:88:38:e7:16:18:38:e3:4c:30:52:94:85:c8:30:f3:62: 4c:19:bd:1e:79:26:53:7f:11:ca:aa:bf:05:24:8c:9c:34:a6: 52:52:c0:5b:8e:e6:93:87:5e:f8:98:cc:03:2d:28:13:7f:3c: 6f:f1:66:3e:12:9d:b1:93:d5:87:f2:4a:6f:01:9e:f7:f4:dc: 28:79:19:35:7e:29:f9:a1:c6:41:0c:ba:70:ef:d1:99:12:b8: 14:0e:e4:03 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt7pAWtWnWATYrDAjYJLUjTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NzA5MGMyNzVjMzRjMDVjMzA2ZjNiMzYwNjM4OTNhMGQ3 Mjc4MmEwHhcNMjYwMTAxMjIxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNTY0ODljYmMzNmZhMWQxNGU1N2FkMDhjMGNiM2QzNjA0NzY2NzQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+yw5IqH+mYyyq45iLlQZtgL27XG kkol6KA/p2U92zRCrq49iIyLjFG1aJf5O4GQ8v884SZD0smgw/yROhRKY9hwe77g 8l8tjTpxvGA359tNpI7l5JGYpxg+7Myxeg9gD3lQaaAly2UHT3M0Z02leGU2Y0hU aR4PA5dJNsNxDxwZEDlEZCX6LFKll0YjRH7ZJ75BcnpA6VVOUmGPiLG67NyXa9OI hRXKpNITqiUdzGcqN9AAVagRYOEyuWs+n9d3N5YAxe9vRi3ls8ALHM4Y7CqkYh13 nE6SK3pa/CBsVhL4/LN3UoVdJmUZo6w4jmowMI/vNf7YtK4fUG9+Dg9s9QIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFAVkicvDb6HRTletCMDLPTYEdmdHMB8GA1UdIwQY MBaAFKhwkMJ1w0wFwwbzs2BjiToNcngqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEt YjU3YTM2ZjJhZmNkLzEvQldTSnk4TnZvZEZPVjYwSXdNczlOZ1IyWjBjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEtYjU3YTM2ZjJhZmNk LzEvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwSLpMA8E AgACMAkDBwAqD3uAAAAwDQYJKoZIhvcNAQELBQADggEBALa0SDWJjs/pR8hfz7IL aVfR1/bdhFFh34NLbFhIY4S1RiNql93WMxWC4pZUqJUeRyA87LMwgdBfhxjR5BtZ rekpdTkn82JpYYnUPbpVj4gFWLuODFJibN4llfKCddim/DrWcOYuyt4ay2PW/ZG8 LVVIATmkfhe0r5nJKX6r8PrHHsXP54lwnor8Tf1z40ieylFcVHumr9GH2OhNz3sF QfhNg6GsiDjnFhg440wwUpSFyDDzYkwZvR55JlN/EcqqvwUkjJw0plJSwFuO5pOH XviYzAMtKBN/PG/xZj4SnbGT1YfySm8Bnvf03Ch5GTV+KfmhxkEMunDv0ZkSuBQO 5AM= -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:12 2026 by rpki-client