This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/BiYWf53xHnsw5v8JcK5ES_bYwek.roa File: BiYWf53xHnsw5v8JcK5ES_bYwek.roa (raw, json) Hash identifier: 3G5f6fxQ6KcR5IhaPfuGG3292ypLYTI1+bokGyq5KNw= Subject key identifier: 06:26:16:7F:9D:F1:1E:7B:30:E6:FF:09:70:AE:44:4B:F6:D8:C1:E9 Certificate issuer: /CN=50980fb6ade858f2652e736993126c85759f06d9 Certificate serial: 019AC6CDCFD3F1B2375F0EBBDAFEEB63B98F Authority key identifier: 50:98:0F:B6:AD:E8:58:F2:65:2E:73:69:93:12:6C:85:75:9F:06:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/BiYWf53xHnsw5v8JcK5ES_bYwek.roa Signing time: Thu 27 Nov 2025 19:32:48 +0000 ROA not before: Thu 27 Nov 2025 19:32:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 209372 IP address blocks: 46.148.209.0/24 maxlen: 24 84.22.151.0/24 maxlen: 24 91.204.180.0/24 maxlen: 24 91.204.181.0/24 maxlen: 24 91.204.182.0/23 maxlen: 23 91.204.182.0/24 maxlen: 24 91.218.139.0/24 maxlen: 24 91.218.176.0/22 maxlen: 24 91.218.179.0/24 maxlen: 24 91.232.8.0/22 maxlen: 24 195.234.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.crl rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.mft rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c6:cd:cf:d3:f1:b2:37:5f:0e:bb:da:fe:eb:63:b9:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50980fb6ade858f2652e736993126c85759f06d9 Validity Not Before: Nov 27 19:32:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0626167f9df11e7b30e6ff0970ae444bf6d8c1e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:55:f0:80:16:f8:cf:45:96:52:ac:bc:47:1a: 68:23:9e:94:29:1e:c4:6f:d7:b9:e7:4c:1d:8e:e1: f3:e0:aa:40:3f:28:a6:fa:51:8f:ff:78:97:a5:b7: 7d:27:e1:cc:e4:f9:d7:9d:8b:c7:89:db:e8:9a:8c: f3:05:9b:fe:94:46:a1:26:03:01:18:68:18:af:16: b3:79:27:2f:9c:1b:95:df:a1:2b:ee:54:80:e3:4f: a0:70:ef:13:0f:eb:d7:9f:e9:c1:5b:6e:f2:69:f5: be:49:cc:fa:69:99:02:46:5f:50:b7:15:3e:d9:cc: 5c:1b:e8:56:25:eb:dd:ad:61:1f:f8:e9:a5:ef:b5: 38:1c:a4:0c:68:90:db:b0:19:a5:c3:64:0d:f0:17: ea:ba:ec:d4:6d:3c:47:b9:f6:91:46:b1:82:24:a8: a2:c7:33:32:f1:e5:0e:9e:c0:41:c3:0d:fb:c2:f7: 3e:e5:ea:ce:6c:bc:90:8b:41:a5:a5:cd:26:ea:5e: 30:0f:29:04:b3:24:cd:62:f6:6b:82:80:be:5f:c5: 6c:c8:bf:5f:f8:2b:ec:10:35:45:7b:f9:45:f5:33: c7:68:1c:fd:aa:2a:69:13:8c:92:82:00:2e:a6:17: 8f:f3:63:7d:5a:e9:ed:a5:a2:d7:66:96:9b:72:b7: 12:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:26:16:7F:9D:F1:1E:7B:30:E6:FF:09:70:AE:44:4B:F6:D8:C1:E9 X509v3 Authority Key Identifier: keyid:50:98:0F:B6:AD:E8:58:F2:65:2E:73:69:93:12:6C:85:75:9F:06:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/BiYWf53xHnsw5v8JcK5ES_bYwek.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.148.209.0/24 84.22.151.0/24 91.204.180.0/22 91.218.139.0/24 91.218.176.0/22 91.232.8.0/22 195.234.90.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:26:3a:7e:3f:8a:c6:f0:2d:52:23:36:9e:d5:75:9a:40:c4: dc:e7:c8:63:42:9c:a2:45:2f:d1:6e:39:c2:df:e3:a0:de:08: d8:73:68:17:0f:7b:65:5e:54:a0:fe:1c:75:5c:0d:b4:18:53: 19:8c:48:90:e3:e5:24:35:d1:7a:6e:b8:5b:f5:a5:ec:61:4c: 83:e3:27:29:85:f2:fb:60:cf:c8:77:fd:ad:6b:bc:dd:cf:87: d9:1e:f2:1a:14:9f:2a:c1:7a:89:73:21:67:00:0e:4c:0b:8b: 4d:45:e5:11:d2:d9:2f:97:ed:4c:4c:e8:fc:d3:f1:6f:aa:f4: 50:99:ee:10:c0:16:ab:45:3f:98:5c:1b:53:6b:04:8c:35:a8: 9d:91:dd:1e:cf:2a:bb:82:4a:13:2f:1c:9f:7d:63:0c:1b:70: a7:b8:ee:9f:82:05:6a:0d:82:53:b3:7e:3f:b1:ab:b3:66:3a: b4:01:9c:d7:f5:13:a4:b9:d6:13:3b:36:87:94:c2:52:39:ed: 77:a8:fb:1f:32:77:af:fc:d9:2a:66:ee:7b:47:78:ae:d5:f9: 3b:2d:91:fa:1c:18:4a:cc:d8:7d:3c:d2:ab:7c:d6:a5:53:47: 35:46:46:7c:5c:5e:d2:f4:70:53:ca:f3:49:14:c5:e0:1f:28: 83:e7:db:84 -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZrGzc/T8bI3Xw672v7rY7mPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwOTgwZmI2YWRlODU4ZjI2NTJlNzM2OTkzMTI2Yzg1NzU5 ZjA2ZDkwHhcNMjUxMTI3MTkzMjQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNjI2MTY3ZjlkZjExZTdiMzBlNmZmMDk3MGFlNDQ0YmY2ZDhjMWU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1XwgBb4z0WWUqy8RxpoI56UKR7E b9e550wdjuHz4KpAPyim+lGP/3iXpbd9J+HM5PnXnYvHidvomozzBZv+lEahJgMB GGgYrxazeScvnBuV36Er7lSA40+gcO8TD+vXn+nBW27yafW+Scz6aZkCRl9QtxU+ 2cxcG+hWJevdrWEf+Oml77U4HKQMaJDbsBmlw2QN8BfquuzUbTxHufaRRrGCJKii xzMy8eUOnsBBww37wvc+5erObLyQi0Glpc0m6l4wDykEsyTNYvZrgoC+X8VsyL9f +CvsEDVFe/lF9TPHaBz9qippE4ySggAupheP82N9WuntpaLXZpabcrcS9QIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFAYmFn+d8R57MOb/CXCuREv22MHpMB8GA1UdIwQY MBaAFFCYD7at6FjyZS5zaZMSbIV1nwbZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUpnUHRxM29XUEpsTG5OcGt4SnNoWFdmQnRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8zYzdhZjYtZjQ2Ni00ZDg3LWI5ZjEt Y2NhNzlhNjk4MjBhLzEvQmlZV2Y1M3hIbnN3NXY4SmNLNUVTX2JZd2VrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC8zYzdhZjYtZjQ2Ni00ZDg3LWI5ZjEtY2NhNzlhNjk4MjBh LzEvVUpnUHRxM29XUEpsTG5OcGt4SnNoWFdmQnRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQALpTRAwQA VBaXAwQCW8y0AwQAW9qLAwQCW9qwAwQCW+gIAwQAw+paMA0GCSqGSIb3DQEBCwUA A4IBAQBdJjp+P4rG8C1SIzae1XWaQMTc58hjQpyiRS/RbjnC3+Og3gjYc2gXD3tl XlSg/hx1XA20GFMZjEiQ4+UkNdF6brhb9aXsYUyD4ycphfL7YM/Id/2ta7zdz4fZ HvIaFJ8qwXqJcyFnAA5MC4tNReUR0tkvl+1MTOj80/FvqvRQme4QwBarRT+YXBtT awSMNaidkd0ezyq7gkoTLxyffWMMG3CnuO6fggVqDYJTs34/sauzZjq0AZzX9ROk udYTOzaHlMJSOe13qPsfMnev/NkqZu57R3iu1fk7LZH6HBhKzNh9PNKrfNalU0c1 RkZ8XF7S9HBTyvNJFMXgHyiD59uE -----END CERTIFICATE-----Generated at Mon Dec 8 10:02:45 2025 by rpki-client