This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/bwRA1i-n189vPT-iJPMMcXm_fOU.roa File: bwRA1i-n189vPT-iJPMMcXm_fOU.roa (raw, json) Hash identifier: /aZD95cwPbBEC+pYbods3hnay36mkiDzCXiuSjLwkjo= Subject key identifier: 6F:04:40:D6:2F:A7:D7:CF:6F:3D:3F:A2:24:F3:0C:71:79:BF:7C:E5 Certificate issuer: /CN=8342a1413b0cce34e3f7fbf0e7f38e0a370a6267 Certificate serial: 019B7DCA3C21058668A50A22916B241E9EAE Authority key identifier: 83:42:A1:41:3B:0C:CE:34:E3:F7:FB:F0:E7:F3:8E:0A:37:0A:62:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g0KhQTsMzjTj9_vw5_OOCjcKYmc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/bwRA1i-n189vPT-iJPMMcXm_fOU.roa Signing time: Fri 02 Jan 2026 08:19:24 +0000 ROA not before: Fri 02 Jan 2026 08:19:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 196971 IP address blocks: 193.105.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.mft rsync://rpki.ripe.net/repository/DEFAULT/g0KhQTsMzjTj9_vw5_OOCjcKYmc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:3c:21:05:86:68:a5:0a:22:91:6b:24:1e:9e:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8342a1413b0cce34e3f7fbf0e7f38e0a370a6267 Validity Not Before: Jan 2 08:19:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6f0440d62fa7d7cf6f3d3fa224f30c7179bf7ce5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:73:7f:2b:85:0b:36:24:c2:a8:79:93:36:e0: ae:2f:a6:ab:b8:e0:bc:16:3b:b6:df:c4:7d:10:cd: d5:74:42:7c:28:64:ca:e2:21:3b:e2:40:2c:3e:43: 45:2b:87:41:87:09:0c:68:46:e3:d5:c7:77:0d:69: f4:3a:df:29:7f:43:2e:57:51:7d:92:3e:ee:3e:0e: c4:9b:57:76:10:79:f8:e3:d6:16:86:8e:58:a4:80: a5:b0:25:54:2d:63:b8:d5:5f:50:cc:6f:16:68:be: 84:b1:5a:8a:0b:64:6f:de:18:48:78:20:53:80:78: ec:79:d3:54:2c:57:b3:5a:b6:48:65:f8:58:0f:12: d3:aa:cf:54:0c:8f:03:56:9c:72:ad:40:78:46:17: de:e1:9c:1b:42:37:e1:be:17:b1:04:58:98:c5:14: ba:a5:05:dd:58:6f:aa:ba:62:1a:77:86:bd:e0:c7: a3:37:af:d1:11:f3:22:b1:42:ca:b0:48:30:41:f8: ba:f2:e2:64:32:6d:32:0c:be:20:39:78:86:b2:a7: b3:98:8d:f8:7f:07:4e:cf:8b:df:1e:a0:e6:fd:7b: 9e:91:0a:36:0d:e0:7d:99:c9:17:ec:71:35:96:35: 61:4b:78:7a:98:bb:a1:a3:e6:35:05:20:88:18:ce: 9a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:04:40:D6:2F:A7:D7:CF:6F:3D:3F:A2:24:F3:0C:71:79:BF:7C:E5 X509v3 Authority Key Identifier: keyid:83:42:A1:41:3B:0C:CE:34:E3:F7:FB:F0:E7:F3:8E:0A:37:0A:62:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0KhQTsMzjTj9_vw5_OOCjcKYmc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/bwRA1i-n189vPT-iJPMMcXm_fOU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.105.211.0/24 Signature Algorithm: sha256WithRSAEncryption 93:59:23:39:6d:69:2e:39:eb:d3:1c:e3:ae:0f:59:a7:e3:67: 67:f0:5d:60:c7:46:18:41:43:af:96:be:57:9a:77:0d:7f:89: ac:9f:4b:83:40:82:04:6d:b5:ee:f8:a8:7a:24:0c:7b:0d:c0: a5:97:93:39:bb:4b:5e:7e:2a:62:a6:4e:6c:21:80:45:be:19: 5f:47:d6:e2:be:c2:2f:5f:50:d2:cb:25:11:ba:0d:b2:f1:ea: 3e:8f:7b:4c:cb:cd:a7:c7:34:69:0e:db:24:dc:f4:ac:04:66: be:fe:6b:40:18:6b:ec:f1:b2:75:00:08:fa:5b:29:02:ff:b4: 74:07:58:12:04:db:1b:ca:2d:ec:40:3a:c4:9d:f6:61:12:49: 16:3e:08:b7:fa:5c:75:9f:f3:ad:7a:4d:8c:54:3b:42:59:19: 4c:24:ea:ce:a6:e0:0f:8b:ba:e6:4d:97:1d:46:db:53:e9:6d: d4:c0:f1:26:e9:06:93:21:93:ab:1e:49:7c:56:00:3a:3c:00: 6f:5d:e8:db:69:cf:22:f6:58:59:23:76:aa:ed:b7:b4:5c:e5: 60:7d:66:f2:5c:7c:17:57:3b:75:ad:1c:1c:d1:26:5d:2a:f1: b6:cd:7d:5e:a8:8b:97:f0:61:79:8e:84:40:d2:81:9c:44:11: 20:8d:a7:8d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yjwhBYZopQoikWskHp6uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzNDJhMTQxM2IwY2NlMzRlM2Y3ZmJmMGU3ZjM4ZTBhMzcw YTYyNjcwHhcNMjYwMTAyMDgxOTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZjA0NDBkNjJmYTdkN2NmNmYzZDNmYTIyNGYzMGM3MTc5YmY3Y2U1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHN/K4ULNiTCqHmTNuCuL6aruOC8 Fju238R9EM3VdEJ8KGTK4iE74kAsPkNFK4dBhwkMaEbj1cd3DWn0Ot8pf0MuV1F9 kj7uPg7Em1d2EHn449YWho5YpIClsCVULWO41V9QzG8WaL6EsVqKC2Rv3hhIeCBT gHjsedNULFezWrZIZfhYDxLTqs9UDI8DVpxyrUB4Rhfe4ZwbQjfhvhexBFiYxRS6 pQXdWG+qumIad4a94MejN6/REfMisULKsEgwQfi68uJkMm0yDL4gOXiGsqezmI34 fwdOz4vfHqDm/XuekQo2DeB9mckX7HE1ljVhS3h6mLuho+Y1BSCIGM6abwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG8EQNYvp9fPbz0/oiTzDHF5v3zlMB8GA1UdIwQY MBaAFINCoUE7DM404/f78Ofzjgo3CmJnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzBLaFFUc016alRqOV92dzVfT09DamNLWW1jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS81NGU3OTctZGJlMy00OTQ1LWE4MzUt NjQ4YjkyMjc2MDE0LzEvYndSQTFpLW4xODl2UFQtaUpQTU1jWG1fZk9VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS81NGU3OTctZGJlMy00OTQ1LWE4MzUtNjQ4YjkyMjc2MDE0 LzEvZzBLaFFUc016alRqOV92dzVfT09DamNLWW1jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWnTMA0G CSqGSIb3DQEBCwUAA4IBAQCTWSM5bWkuOevTHOOuD1mn42dn8F1gx0YYQUOvlr5X mncNf4msn0uDQIIEbbXu+Kh6JAx7DcCll5M5u0tefipipk5sIYBFvhlfR9bivsIv X1DSyyURug2y8eo+j3tMy82nxzRpDtsk3PSsBGa+/mtAGGvs8bJ1AAj6WykC/7R0 B1gSBNsbyi3sQDrEnfZhEkkWPgi3+lx1n/Otek2MVDtCWRlMJOrOpuAPi7rmTZcd RttT6W3UwPEm6QaTIZOrHkl8VgA6PABvXejbac8i9lhZI3aq7be0XOVgfWbyXHwX Vzt1rRwc0SZdKvG2zX1eqIuX8GF5joRA0oGcRBEgjaeN -----END CERTIFICATE-----Generated at Tue Feb 10 00:03:21 2026 by rpki-client