This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/d2cd1c-04b5-44d0-81d5-7be3bda05927/1/bgwAATh9CUO7xiOucQ6npGFxHx8.roa File: bgwAATh9CUO7xiOucQ6npGFxHx8.roa (raw, json) Hash identifier: T9bimoTkLBlvWZuKy6AOXF/8PICrLV1Er8M52jbgMpA= Subject key identifier: 6E:0C:00:01:38:7D:09:43:BB:C6:23:AE:71:0E:A7:A4:61:71:1F:1F Certificate issuer: /CN=0759f6ac173f75ed9e585ec7d872a5865cef2835 Certificate serial: 019B7DCA5660361F48DB900C351A54026B3F Authority key identifier: 07:59:F6:AC:17:3F:75:ED:9E:58:5E:C7:D8:72:A5:86:5C:EF:28:35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B1n2rBc_de2eWF7H2HKlhlzvKDU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/d2cd1c-04b5-44d0-81d5-7be3bda05927/1/bgwAATh9CUO7xiOucQ6npGFxHx8.roa Signing time: Fri 02 Jan 2026 08:19:30 +0000 ROA not before: Fri 02 Jan 2026 08:19:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25459 IP address blocks: 37.247.32.0/20 maxlen: 24 77.243.224.0/20 maxlen: 24 94.103.144.0/20 maxlen: 24 178.18.128.0/20 maxlen: 24 2a02:990::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/d2cd1c-04b5-44d0-81d5-7be3bda05927/1/B1n2rBc_de2eWF7H2HKlhlzvKDU.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/d2cd1c-04b5-44d0-81d5-7be3bda05927/1/B1n2rBc_de2eWF7H2HKlhlzvKDU.mft rsync://rpki.ripe.net/repository/DEFAULT/B1n2rBc_de2eWF7H2HKlhlzvKDU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:56:60:36:1f:48:db:90:0c:35:1a:54:02:6b:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0759f6ac173f75ed9e585ec7d872a5865cef2835 Validity Not Before: Jan 2 08:19:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6e0c0001387d0943bbc623ae710ea7a461711f1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0b:ec:03:81:a7:66:6d:d2:ec:00:96:df:1c: 83:01:97:63:f5:a3:91:e0:78:c0:c5:85:db:41:a4: 0f:40:da:df:90:38:03:4b:e4:69:25:82:eb:76:47: 56:35:8e:a2:15:9f:0b:b6:6d:7e:7d:db:52:6a:d7: 67:2a:46:ce:d4:fc:48:a7:fc:eb:ad:9d:b8:63:2d: 4c:2c:51:3d:80:aa:51:20:06:28:d3:0a:a5:03:51: 34:ab:7b:2b:de:34:51:c4:46:1b:c2:b4:79:c3:b9: 8f:8f:b4:f2:b9:e8:68:c8:92:6d:ef:50:03:56:7b: b3:f1:44:56:78:e3:ce:4a:be:77:05:78:15:1a:4b: 0f:e5:b2:83:25:72:50:7e:75:21:a0:3f:16:13:06: 12:5e:b8:0a:6e:6a:4c:43:d2:c5:d2:d7:14:c0:4b: bd:45:c8:d6:7e:38:f8:d3:c5:6a:99:9b:f8:7f:bb: b9:0c:c7:5a:6d:ad:24:35:72:85:f7:1b:f7:39:ba: d1:19:83:13:76:fa:00:95:41:92:7d:da:13:8f:fb: 3f:b8:e2:b0:e0:da:c6:66:ed:26:42:32:55:5e:39: 24:e7:ac:00:85:0b:2e:dd:2c:43:7b:8a:73:a1:33: 22:55:4f:84:cc:7f:a2:c9:f9:66:aa:2a:f3:15:da: 3e:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:0C:00:01:38:7D:09:43:BB:C6:23:AE:71:0E:A7:A4:61:71:1F:1F X509v3 Authority Key Identifier: keyid:07:59:F6:AC:17:3F:75:ED:9E:58:5E:C7:D8:72:A5:86:5C:EF:28:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1n2rBc_de2eWF7H2HKlhlzvKDU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d2cd1c-04b5-44d0-81d5-7be3bda05927/1/bgwAATh9CUO7xiOucQ6npGFxHx8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d2cd1c-04b5-44d0-81d5-7be3bda05927/1/B1n2rBc_de2eWF7H2HKlhlzvKDU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.247.32.0/20 77.243.224.0/20 94.103.144.0/20 178.18.128.0/20 IPv6: 2a02:990::/32 Signature Algorithm: sha256WithRSAEncryption 33:39:1e:f6:ed:0d:17:3e:02:c3:f9:63:69:e4:10:34:ae:d2: bc:29:ac:16:b8:8e:d8:86:37:38:1a:91:b5:b6:8a:ea:1d:d9: 12:e2:6e:f2:da:5c:4c:d3:d5:d6:0f:69:eb:e9:69:c6:2f:7f: fd:af:a0:fb:d3:d1:cb:14:ba:5b:1d:9e:64:90:8d:6e:35:20: 28:ae:14:27:7b:32:72:3f:3c:e9:66:68:83:26:52:7d:b3:5c: 18:e9:fc:d9:18:a0:9a:9a:d1:c2:eb:2c:0b:bc:af:11:2f:d6: f1:34:74:6c:e4:18:33:e2:7b:4d:87:c1:7c:98:29:25:fa:db: fc:d8:c7:46:71:fd:a3:85:af:58:a3:d1:2b:aa:68:bf:16:2b: 16:52:83:ad:ef:84:a1:ad:c6:e3:37:a3:62:24:52:32:0f:74: 69:a0:9d:65:12:68:35:3f:be:e2:c7:51:6b:0a:a4:0f:54:c4: a5:36:eb:ad:b8:df:24:f1:28:ab:a6:83:2a:a4:32:32:91:39: ba:43:54:a5:c0:4d:7c:20:26:dc:e7:c4:b6:b5:d6:7e:07:41: fc:47:b7:b6:36:ec:73:2b:22:c3:43:e7:dc:bb:2d:52:df:43: a3:cf:33:c2:92:76:28:4e:98:63:94:ca:92:d3:77:80:bd:0a: 25:0b:ba:f4 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt9ylZgNh9I25AMNRpUAms/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3NTlmNmFjMTczZjc1ZWQ5ZTU4NWVjN2Q4NzJhNTg2NWNl ZjI4MzUwHhcNMjYwMTAyMDgxOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZTBjMDAwMTM4N2QwOTQzYmJjNjIzYWU3MTBlYTdhNDYxNzExZjFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwvsA4GnZm3S7ACW3xyDAZdj9aOR 4HjAxYXbQaQPQNrfkDgDS+RpJYLrdkdWNY6iFZ8Ltm1+fdtSatdnKkbO1PxIp/zr rZ24Yy1MLFE9gKpRIAYo0wqlA1E0q3sr3jRRxEYbwrR5w7mPj7TyuehoyJJt71AD Vnuz8URWeOPOSr53BXgVGksP5bKDJXJQfnUhoD8WEwYSXrgKbmpMQ9LF0tcUwEu9 RcjWfjj408VqmZv4f7u5DMdaba0kNXKF9xv3ObrRGYMTdvoAlUGSfdoTj/s/uOKw 4NrGZu0mQjJVXjkk56wAhQsu3SxDe4pzoTMiVU+EzH+iyflmqirzFdo+YwIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFG4MAAE4fQlDu8YjrnEOp6RhcR8fMB8GA1UdIwQY MBaAFAdZ9qwXP3Xtnlhex9hypYZc7yg1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjFuMnJCY19kZTJlV0Y3SDJIS2xobHp2S0RVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9kMmNkMWMtMDRiNS00NGQwLTgxZDUt N2JlM2JkYTA1OTI3LzEvYmd3QUFUaDlDVU83eGlPdWNRNm5wR0Z4SHg4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS9kMmNkMWMtMDRiNS00NGQwLTgxZDUtN2JlM2JkYTA1OTI3 LzEvQjFuMnJCY19kZTJlV0Y3SDJIS2xobHp2S0RVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQEJfcgAwQE TfPgAwQEXmeQAwQEshKAMA0EAgACMAcDBQAqAgmQMA0GCSqGSIb3DQEBCwUAA4IB AQAzOR727Q0XPgLD+WNp5BA0rtK8KawWuI7Yhjc4GpG1torqHdkS4m7y2lxM09XW D2nr6WnGL3/9r6D709HLFLpbHZ5kkI1uNSAorhQnezJyPzzpZmiDJlJ9s1wY6fzZ GKCamtHC6ywLvK8RL9bxNHRs5Bgz4ntNh8F8mCkl+tv82MdGcf2jha9Yo9Erqmi/ FisWUoOt74ShrcbjN6NiJFIyD3RpoJ1lEmg1P77ix1FrCqQPVMSlNuutuN8k8Sir poMqpDIykTm6Q1SlwE18ICbc58S2tdZ+B0H8R7e2NuxzKyLDQ+fcuy1S30OjzzPC knYoTphjlMqS03eAvQolC7r0 -----END CERTIFICATE-----Generated at Mon Jan 26 20:26:03 2026 by rpki-client