This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/bwdHvKYyhs4Ju5CwlBTPEYm3sCg.roa File: bwdHvKYyhs4Ju5CwlBTPEYm3sCg.roa (raw, json) Hash identifier: J52qNXcYUL8Md7MHBa4Z1H074n+eMZjwdb1rZYRHD/s= Subject key identifier: 6F:07:47:BC:A6:32:86:CE:09:BB:90:B0:94:14:CF:11:89:B7:B0:28 Certificate issuer: /CN=4b9f31e7352a8707b98c6d27348e8bc493d1a9af Certificate serial: 019B7AC8B9E77CC03A842559A0E00103AA3A Authority key identifier: 4B:9F:31:E7:35:2A:87:07:B9:8C:6D:27:34:8E:8B:C4:93:D1:A9:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S58x5zUqhwe5jG0nNI6LxJPRqa8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/bwdHvKYyhs4Ju5CwlBTPEYm3sCg.roa Signing time: Thu 01 Jan 2026 18:18:53 +0000 ROA not before: Thu 01 Jan 2026 18:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12637 IP address blocks: 185.142.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.crl rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.mft rsync://rpki.ripe.net/repository/DEFAULT/S58x5zUqhwe5jG0nNI6LxJPRqa8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:b9:e7:7c:c0:3a:84:25:59:a0:e0:01:03:aa:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b9f31e7352a8707b98c6d27348e8bc493d1a9af Validity Not Before: Jan 1 18:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6f0747bca63286ce09bb90b09414cf1189b7b028 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:2f:8b:99:1c:81:42:2f:68:e4:a2:14:5f:08: 1a:48:43:7d:5d:21:f1:86:25:4a:e9:5e:68:7a:c5: 45:37:70:78:21:3b:a2:a2:1f:28:82:df:61:1a:6a: 81:a7:f1:4b:1f:27:5e:0a:a3:df:73:26:5c:db:c1: 13:d2:d1:be:a5:ce:9c:71:e9:34:5b:99:e2:4a:85: 4d:eb:9e:27:bf:ae:a2:8f:53:9c:10:90:57:69:5c: 09:36:37:56:9e:62:28:9a:2d:75:8c:4f:17:34:63: 4d:a9:b8:9f:01:b8:ba:3a:19:97:98:34:7b:66:d3: 1a:0d:02:fe:7a:2f:95:52:92:ee:ae:1e:fe:70:38: f9:d4:1d:bb:be:00:a6:b6:80:6d:52:e7:dc:3c:ab: 9e:39:01:5d:4a:05:54:72:9e:12:ee:e6:25:89:ed: 4c:ce:44:f1:e1:3a:68:f5:0b:46:b0:7b:30:30:48: e6:f4:ab:3d:cd:39:b4:45:46:05:09:7a:b8:14:31: d8:ee:91:84:f4:d3:25:2b:97:9c:d2:9f:71:28:ca: 81:54:90:38:75:a9:d5:f7:7f:93:ad:c4:91:62:52: f5:6d:9e:bd:11:d1:79:0d:8b:b3:57:c0:02:12:48: c9:2e:47:d0:93:f0:45:24:5e:24:d7:be:d7:c7:ae: d0:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:07:47:BC:A6:32:86:CE:09:BB:90:B0:94:14:CF:11:89:B7:B0:28 X509v3 Authority Key Identifier: keyid:4B:9F:31:E7:35:2A:87:07:B9:8C:6D:27:34:8E:8B:C4:93:D1:A9:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S58x5zUqhwe5jG0nNI6LxJPRqa8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/bwdHvKYyhs4Ju5CwlBTPEYm3sCg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.142.68.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:05:0d:d0:5c:23:c3:b4:e6:19:08:39:69:82:e4:ae:4b:4f: 4a:c5:45:6c:48:59:e9:dc:58:7a:7d:8e:48:72:54:7b:26:26: 3b:ec:e4:35:5a:4b:ab:9d:86:aa:0c:c1:a2:98:4d:b0:a3:90: 29:7c:2d:57:5b:0a:ca:32:88:96:bf:c3:fe:6e:89:d7:be:1e: f7:f3:ec:1b:6d:aa:ae:b5:53:41:6c:10:5f:b4:f6:5a:f1:17: b2:c1:c5:88:6a:31:18:c7:32:bb:37:c7:7c:f0:7a:fe:7c:d2: 59:07:33:19:38:30:4c:6d:cd:9c:1b:7c:18:49:b5:5a:ee:79: 72:ab:2e:e1:9e:7c:2e:02:55:fb:e6:8c:6c:5a:4f:f0:bd:74: f5:e3:45:0b:ee:18:27:01:0f:b7:3b:68:3c:d1:7b:a6:97:46: 40:bb:5d:bd:9e:ca:e1:55:a7:ec:53:de:73:cc:f0:3e:ec:b0: 96:15:30:2d:2f:71:cf:7d:6a:9e:d8:dd:13:cf:82:93:94:26: df:f5:bd:bf:d7:10:45:79:05:45:3a:59:02:a6:9f:50:a9:0d: 18:d1:70:2a:d2:b8:1e:ad:89:25:71:b3:90:1a:ea:51:c5:5c: 9e:b3:ac:f2:dc:59:cd:28:e8:56:6b:2e:a1:74:33:ff:6e:14: 4e:4c:58:8e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yLnnfMA6hCVZoOABA6o6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiOWYzMWU3MzUyYTg3MDdiOThjNmQyNzM0OGU4YmM0OTNk MWE5YWYwHhcNMjYwMTAxMTgxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZjA3NDdiY2E2MzI4NmNlMDliYjkwYjA5NDE0Y2YxMTg5YjdiMDI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0i+LmRyBQi9o5KIUXwgaSEN9XSHx hiVK6V5oesVFN3B4ITuioh8ogt9hGmqBp/FLHydeCqPfcyZc28ET0tG+pc6ccek0 W5niSoVN654nv66ij1OcEJBXaVwJNjdWnmIomi11jE8XNGNNqbifAbi6OhmXmDR7 ZtMaDQL+ei+VUpLurh7+cDj51B27vgCmtoBtUufcPKueOQFdSgVUcp4S7uYlie1M zkTx4Tpo9QtGsHswMEjm9Ks9zTm0RUYFCXq4FDHY7pGE9NMlK5ec0p9xKMqBVJA4 danV93+TrcSRYlL1bZ69EdF5DYuzV8ACEkjJLkfQk/BFJF4k177Xx67QBwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG8HR7ymMobOCbuQsJQUzxGJt7AoMB8GA1UdIwQY MBaAFEufMec1KocHuYxtJzSOi8ST0amvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzU4eDV6VXFod2U1akcwbk5JNkx4SlBScWE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My84NWZkMzEtZmU5MS00Mzg5LWFiNjct MzY1MWU0MGYxNDM2LzEvYndkSHZLWXloczRKdTVDd2xCVFBFWW0zc0NnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My84NWZkMzEtZmU5MS00Mzg5LWFiNjctMzY1MWU0MGYxNDM2 LzEvUzU4eDV6VXFod2U1akcwbk5JNkx4SlBScWE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuY5EMA0G CSqGSIb3DQEBCwUAA4IBAQBcBQ3QXCPDtOYZCDlpguSuS09KxUVsSFnp3Fh6fY5I clR7JiY77OQ1WkurnYaqDMGimE2wo5ApfC1XWwrKMoiWv8P+bonXvh738+wbbaqu tVNBbBBftPZa8ReywcWIajEYxzK7N8d88Hr+fNJZBzMZODBMbc2cG3wYSbVa7nly qy7hnnwuAlX75oxsWk/wvXT140UL7hgnAQ+3O2g80Xuml0ZAu129nsrhVafsU95z zPA+7LCWFTAtL3HPfWqe2N0Tz4KTlCbf9b2/1xBFeQVFOlkCpp9QqQ0Y0XAq0rge rYklcbOQGupRxVyes6zy3FnNKOhWay6hdDP/bhROTFiO -----END CERTIFICATE-----Generated at Tue Jan 27 04:23:30 2026 by rpki-client