This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/bwvXbSrlJIoE0c66qILAOtdYwxk.roa File: bwvXbSrlJIoE0c66qILAOtdYwxk.roa (raw, json) Hash identifier: 4eToVigHAIq4SM5IQz4LJLIoNWCbv5rqAFLjherJees= Subject key identifier: 6F:0B:D7:6D:2A:E5:24:8A:04:D1:CE:BA:A8:82:C0:3A:D7:58:C3:19 Certificate issuer: /CN=e754c347d68d15493de71bb962f0a567e134d603 Certificate serial: 019B79111F1C43E4555BFAC70EAEE8FD8CBE Authority key identifier: E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/bwvXbSrlJIoE0c66qILAOtdYwxk.roa Signing time: Thu 01 Jan 2026 10:18:43 +0000 ROA not before: Thu 01 Jan 2026 10:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213535 IP address blocks: 107.161.168.0/24 maxlen: 24 107.161.174.0/24 maxlen: 24 107.161.175.0/24 maxlen: 24 107.181.134.0/24 maxlen: 24 155.254.35.0/24 maxlen: 24 162.217.248.0/24 maxlen: 24 162.217.249.0/24 maxlen: 24 198.105.112.0/24 maxlen: 24 198.105.115.0/24 maxlen: 24 198.105.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.mft rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:1f:1c:43:e4:55:5b:fa:c7:0e:ae:e8:fd:8c:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e754c347d68d15493de71bb962f0a567e134d603 Validity Not Before: Jan 1 10:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6f0bd76d2ae5248a04d1cebaa882c03ad758c319 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b1:cd:b8:33:07:cd:5c:76:1b:05:91:5e:96: b0:99:c2:bc:54:d7:2d:90:15:af:50:26:66:a4:4e: 67:4d:e7:b2:61:a9:7c:a4:e6:fa:5e:d5:fb:df:d7: 53:1f:f9:2d:7d:fa:eb:2b:3e:93:d1:8e:ce:61:d8: 00:3c:44:4f:25:ec:4e:10:78:d3:60:f2:2e:78:9f: ad:64:45:5a:55:de:9d:16:13:3f:ef:48:25:97:7a: 57:5f:c4:be:dc:b9:43:40:a2:23:3b:ef:cf:b0:e0: 59:4e:bc:33:b3:9f:a5:3a:77:27:d7:f8:6f:22:3e: 7d:70:86:32:d2:e9:f4:61:b5:9d:b9:e1:c3:48:fc: e6:12:91:20:41:8e:04:8e:a7:3e:b7:c9:63:f5:93: 10:8d:31:8e:dd:7e:b8:09:9d:86:e4:59:29:54:ba: c2:c9:09:a9:c0:04:7a:ad:6c:3b:b1:71:5e:12:70: 1c:1b:0d:3e:bf:69:ab:64:9c:25:45:f2:55:23:bd: 31:2d:d7:2b:08:85:9c:c9:9b:ba:67:1d:96:a6:df: 85:e0:ee:ef:e7:0d:96:77:89:f0:a3:1d:bb:08:de: 3e:46:69:ec:42:95:e6:01:fb:cd:52:1d:a0:09:0e: 11:00:d9:dc:98:d7:36:8d:de:03:66:79:79:56:e7: a6:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:0B:D7:6D:2A:E5:24:8A:04:D1:CE:BA:A8:82:C0:3A:D7:58:C3:19 X509v3 Authority Key Identifier: keyid:E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/bwvXbSrlJIoE0c66qILAOtdYwxk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 107.161.168.0/24 107.161.174.0/23 107.181.134.0/24 155.254.35.0/24 162.217.248.0/23 198.105.112.0/24 198.105.115.0/24 198.105.123.0/24 Signature Algorithm: sha256WithRSAEncryption a3:9f:5b:e0:1c:38:86:d0:f9:b6:62:84:22:1b:c0:33:9e:e6: 7c:36:f2:76:ee:7f:28:12:67:34:b1:9a:6e:86:54:61:c4:a3: 36:74:e5:b5:91:7c:17:01:7f:96:36:78:91:a1:70:02:11:f9: dc:b3:a8:b3:84:01:84:1a:4b:2d:57:f0:99:95:b0:12:93:65: f4:77:0c:09:42:84:b0:a5:f0:0c:3e:e2:14:d7:4d:17:e8:5b: 8c:94:6d:57:0a:c3:e6:49:ce:67:78:77:f8:6c:51:2e:1f:7f: fb:e3:3a:60:eb:62:1e:74:e5:4a:e1:f2:0a:49:7f:59:1d:e7: ac:c3:52:95:a1:c1:cc:27:42:7a:1c:e3:6b:5f:f7:57:65:bd: 81:c4:28:a5:7e:61:5a:c1:25:84:b4:fe:a3:94:83:a1:cd:ca: 8f:d1:58:e2:af:c7:46:87:9a:13:36:e8:e2:51:ae:94:0c:5d: b3:d4:33:c8:01:3e:99:00:b1:b9:04:09:0f:68:d6:4c:1a:5b: 06:85:7f:da:93:09:86:45:59:60:d4:b5:be:41:da:0a:d7:5a: 11:bc:df:c6:b3:73:d6:c9:f4:7c:b6:e7:ae:1d:52:7c:fb:a1: 3a:f9:b7:37:d5:57:ef:1d:51:98:00:72:56:d1:71:ae:fa:d3: 48:8e:83:e8 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISAZt5ER8cQ+RVW/rHDq7o/Yy+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3NTRjMzQ3ZDY4ZDE1NDkzZGU3MWJiOTYyZjBhNTY3ZTEz NGQ2MDMwHhcNMjYwMTAxMTAxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZjBiZDc2ZDJhZTUyNDhhMDRkMWNlYmFhODgyYzAzYWQ3NThjMzE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2rHNuDMHzVx2GwWRXpawmcK8VNct kBWvUCZmpE5nTeeyYal8pOb6XtX739dTH/ktffrrKz6T0Y7OYdgAPERPJexOEHjT YPIueJ+tZEVaVd6dFhM/70gll3pXX8S+3LlDQKIjO+/PsOBZTrwzs5+lOncn1/hv Ij59cIYy0un0YbWdueHDSPzmEpEgQY4Ejqc+t8lj9ZMQjTGO3X64CZ2G5FkpVLrC yQmpwAR6rWw7sXFeEnAcGw0+v2mrZJwlRfJVI70xLdcrCIWcyZu6Zx2Wpt+F4O7v 5w2Wd4nwox27CN4+RmnsQpXmAfvNUh2gCQ4RANncmNc2jd4DZnl5VuemuQIDAQAB o4ICMzCCAi8wHQYDVR0OBBYEFG8L120q5SSKBNHOuqiCwDrXWMMZMB8GA1UdIwQY MBaAFOdUw0fWjRVJPecbuWLwpWfhNNYDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTFURFI5YU5GVWs5NXh1NVl2Q2xaLUUwMWdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80NmRiM2EtYTU3My00ZjI4LWI0M2It MzdiNjJkMjIzOTI0LzEvYnd2WGJTcmxKSW9FMGM2NnFJTEFPdGRZd3hrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC80NmRiM2EtYTU3My00ZjI4LWI0M2ItMzdiNjJkMjIzOTI0 LzEvNTFURFI5YU5GVWs5NXh1NVl2Q2xaLUUwMWdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQAa6GoAwQB a6GuAwQAa7WGAwQAm/4jAwQBotn4AwQAxmlwAwQAxmlzAwQAxml7MA0GCSqGSIb3 DQEBCwUAA4IBAQCjn1vgHDiG0Pm2YoQiG8AznuZ8NvJ27n8oEmc0sZpuhlRhxKM2 dOW1kXwXAX+WNniRoXACEfncs6izhAGEGkstV/CZlbASk2X0dwwJQoSwpfAMPuIU 100X6FuMlG1XCsPmSc5neHf4bFEuH3/74zpg62IedOVK4fIKSX9ZHeesw1KVocHM J0J6HONrX/dXZb2BxCilfmFawSWEtP6jlIOhzcqP0Vjir8dGh5oTNujiUa6UDF2z 1DPIAT6ZALG5BAkPaNZMGlsGhX/akwmGRVlg1LW+QdoK11oRvN/Gs3PWyfR8tueu HVJ8+6E6+bc31VfvHVGYAHJW0XGu+tNIjoPo -----END CERTIFICATE-----Generated at Wed Jan 21 15:07:10 2026 by rpki-client