This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/bwkyKOlv1z-ETl0oTpyJCVc7D8A.roa File: bwkyKOlv1z-ETl0oTpyJCVc7D8A.roa (raw, json) Hash identifier: Zs3BNPVfnetjwGw17FBHhCCY0W9NsRLsMtmeX45W4aE= Subject key identifier: 6F:09:32:28:E9:6F:D7:3F:84:4E:5D:28:4E:9C:89:09:57:3B:0F:C0 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84844147CD19EABD3C2DAD46CBBD67 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/bwkyKOlv1z-ETl0oTpyJCVc7D8A.roa Signing time: Fri 02 Jan 2026 16:22:29 +0000 ROA not before: Fri 02 Jan 2026 16:22:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 141892 IP address blocks: 31.56.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:84:41:47:cd:19:ea:bd:3c:2d:ad:46:cb:bd:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6f093228e96fd73f844e5d284e9c8909573b0fc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ee:f4:de:fb:41:73:4c:63:91:2b:4d:04:4a: fb:52:ef:36:44:6f:9b:4e:c9:68:6e:1c:5a:87:cd: 6f:85:19:29:89:dd:3a:5f:f8:51:12:e2:28:03:29: c5:58:bb:60:71:5c:3b:f0:bd:62:15:26:d4:a1:50: e3:32:43:2e:e1:2e:d6:66:a7:d9:d0:0e:87:14:6b: df:34:46:50:a6:92:fd:c4:33:94:5d:80:75:f8:b6: 5f:ca:95:be:d3:39:f4:f9:36:d7:08:1f:d4:06:09: 98:ef:36:3b:10:61:e1:3f:ee:78:5d:94:61:88:04: 97:7f:a5:17:91:fe:14:fb:19:d2:16:ed:44:1e:06: b4:54:ea:ad:ca:c2:7c:76:c4:b0:04:ec:a3:ed:33: 1e:38:20:71:5b:d5:aa:ef:6b:ab:55:78:88:4d:5e: 66:07:d8:a9:c4:ca:40:bd:fe:4c:b7:c2:27:52:4a: ea:80:6c:77:7e:32:50:79:f1:82:b4:66:1d:c2:f0: 17:58:d9:1e:43:38:30:bb:dc:b6:12:46:d1:92:80: 4f:62:fc:99:09:3d:9f:a8:94:02:76:df:7f:56:21: 8f:d0:c0:1a:8f:8f:b7:50:8c:41:cd:88:4e:6a:7f: 34:43:7e:43:53:f7:8e:95:b8:04:37:cc:5d:77:82: 30:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:09:32:28:E9:6F:D7:3F:84:4E:5D:28:4E:9C:89:09:57:3B:0F:C0 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/bwkyKOlv1z-ETl0oTpyJCVc7D8A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.56.0/24 Signature Algorithm: sha256WithRSAEncryption 05:1e:26:e3:de:e8:32:76:85:21:f8:22:71:a9:58:cc:b4:e4: 72:a8:f9:d7:ca:f1:d3:73:8f:94:3d:21:df:fd:f0:2d:30:c6: ab:a3:83:6a:71:3c:83:4f:23:69:cc:cb:5d:3e:1c:b2:d7:07: a1:d4:d6:20:93:c3:32:a8:68:90:8a:27:59:be:3a:67:61:70: 7d:c1:4b:4d:dd:1a:b6:7f:b9:83:de:eb:e7:5b:f8:ad:25:8a: e4:60:80:31:cb:87:97:03:01:79:40:92:53:b3:60:9c:db:07: fa:82:e9:f0:3a:19:7e:a1:1e:d4:85:59:39:6f:71:0d:83:1a: be:9c:2b:1c:e9:51:cc:ea:05:7a:b1:ba:9c:d3:20:13:3f:b6: 7e:83:87:1f:d5:52:32:b5:8c:5b:38:8c:2f:d0:6e:29:d4:5f: 7e:a7:29:d0:ff:0d:2d:8f:5b:3b:41:46:74:cc:7c:00:6a:f6: 46:cc:9b:b3:72:33:47:f0:f9:10:26:d3:11:e3:86:8d:87:c3: 28:f8:5c:b1:9b:57:e8:9b:b4:46:5f:f2:0f:76:a8:68:3f:13: a0:96:ef:7a:e8:ac:11:ec:4f:ec:a2:a0:ad:b1:44:d3:a9:bc: 29:a5:d6:92:57:3e:61:41:b3:9b:9a:e7:7d:27:50:41:02:25: 4d:06:b9:44 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hIRBR80Z6r08La1Gy71nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZjA5MzIyOGU5NmZkNzNmODQ0ZTVkMjg0ZTljODkwOTU3M2IwZmMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtu703vtBc0xjkStNBEr7Uu82RG+b Tslobhxah81vhRkpid06X/hREuIoAynFWLtgcVw78L1iFSbUoVDjMkMu4S7WZqfZ 0A6HFGvfNEZQppL9xDOUXYB1+LZfypW+0zn0+TbXCB/UBgmY7zY7EGHhP+54XZRh iASXf6UXkf4U+xnSFu1EHga0VOqtysJ8dsSwBOyj7TMeOCBxW9Wq72urVXiITV5m B9ipxMpAvf5Mt8InUkrqgGx3fjJQefGCtGYdwvAXWNkeQzgwu9y2EkbRkoBPYvyZ CT2fqJQCdt9/ViGP0MAaj4+3UIxBzYhOan80Q35DU/eOlbgEN8xdd4Iw8wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG8JMijpb9c/hE5dKE6ciQlXOw/AMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvYndreUtPbHYxei1FVGwwb1RweUpDVmM3RDhBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzg4MA0G CSqGSIb3DQEBCwUAA4IBAQAFHibj3ugydoUh+CJxqVjMtORyqPnXyvHTc4+UPSHf /fAtMMaro4NqcTyDTyNpzMtdPhyy1weh1NYgk8MyqGiQiidZvjpnYXB9wUtN3Rq2 f7mD3uvnW/itJYrkYIAxy4eXAwF5QJJTs2Cc2wf6gunwOhl+oR7UhVk5b3ENgxq+ nCsc6VHM6gV6sbqc0yATP7Z+g4cf1VIytYxbOIwv0G4p1F9+pynQ/w0tj1s7QUZ0 zHwAavZGzJuzcjNH8PkQJtMR44aNh8Mo+Fyxm1fom7RGX/IPdqhoPxOglu966KwR 7E/soqCtsUTTqbwppdaSVz5hQbObmud9J1BBAiVNBrlE -----END CERTIFICATE-----Generated at Mon Jan 5 14:33:28 2026 by rpki-client