This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/BWXNjP0Uc0WK9SXupz1MbXnfRVA.roa File: BWXNjP0Uc0WK9SXupz1MbXnfRVA.roa (raw, json) Hash identifier: 5k0ze+A5JL1JR0TjjijE0HWjB3RVaU3GzgIpfnCUVm4= Subject key identifier: 05:65:CD:8C:FD:14:73:45:8A:F5:25:EE:A7:3D:4C:6D:79:DF:45:50 Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Certificate serial: 019B76EAB9D8C477A4437A045849158FAABE Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/BWXNjP0Uc0WK9SXupz1MbXnfRVA.roa Signing time: Thu 01 Jan 2026 00:17:33 +0000 ROA not before: Thu 01 Jan 2026 00:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41111 IP address blocks: 5.180.20.0/24 maxlen: 24 5.180.21.0/24 maxlen: 24 5.180.27.0/24 maxlen: 24 5.180.40.0/24 maxlen: 24 5.180.42.0/24 maxlen: 24 5.180.43.0/24 maxlen: 24 5.180.46.0/24 maxlen: 24 5.180.47.0/24 maxlen: 24 5.180.52.0/24 maxlen: 24 5.180.54.0/24 maxlen: 24 5.180.145.0/24 maxlen: 24 5.180.147.0/24 maxlen: 24 5.253.28.0/24 maxlen: 24 5.253.29.0/24 maxlen: 24 5.253.30.0/24 maxlen: 24 5.253.31.0/24 maxlen: 24 5.253.42.0/24 maxlen: 24 45.66.160.0/22 maxlen: 24 45.86.66.0/24 maxlen: 24 45.86.70.0/24 maxlen: 24 45.86.74.0/24 maxlen: 24 45.128.60.0/24 maxlen: 24 45.136.117.0/24 maxlen: 24 45.136.124.0/22 maxlen: 24 45.149.115.0/24 maxlen: 24 85.208.119.0/24 maxlen: 24 85.209.155.0/24 maxlen: 24 85.209.156.0/22 maxlen: 24 85.209.194.0/24 maxlen: 24 88.218.92.0/24 maxlen: 24 88.218.94.0/24 maxlen: 24 88.218.95.0/24 maxlen: 24 194.36.36.0/24 maxlen: 24 194.36.37.0/24 maxlen: 24 194.55.136.0/23 maxlen: 24 194.55.189.0/24 maxlen: 24 194.59.221.0/24 maxlen: 24 194.59.245.0/24 maxlen: 24 194.76.146.0/24 maxlen: 24 194.76.147.0/24 maxlen: 24 194.76.154.0/23 maxlen: 24 194.124.250.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:b9:d8:c4:77:a4:43:7a:04:58:49:15:8f:aa:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Validity Not Before: Jan 1 00:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0565cd8cfd1473458af525eea73d4c6d79df4550 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:45:4e:ea:5b:3c:f3:a1:a5:ed:b9:2a:f7:7c: a8:f9:16:47:2d:85:b9:da:20:45:62:ce:ed:a1:20: 65:fa:ca:5b:35:6b:45:f0:8f:3a:13:04:11:e2:dc: c7:00:ee:8b:e5:e7:4f:15:9d:6d:4d:ef:95:ac:22: 1d:d5:b1:40:16:ac:8b:30:b7:44:4c:08:75:09:39: 83:66:80:b8:9a:2c:e3:cc:ed:b4:4d:51:b7:53:65: 3d:b2:53:84:9e:e0:03:45:bc:96:1f:f8:6d:7e:6f: 46:e6:ad:ef:aa:55:0e:84:03:ff:f2:7f:09:a2:26: 7e:52:0a:78:fb:c1:42:5c:61:44:ac:3f:cf:cd:98: 1b:bb:c8:3e:61:e9:41:ed:7f:af:8f:02:e7:bf:b4: c6:dd:49:74:72:cf:b0:9b:9a:b1:6d:ed:fe:62:9b: 1a:dd:9f:3c:28:d6:5f:cc:ea:32:28:24:db:da:17: f6:4f:91:7f:2f:20:05:1e:9f:59:3e:ea:95:e0:55: e6:f2:67:d2:e5:2c:fa:f0:ea:04:d2:e3:20:06:b6: 0c:81:7d:84:f7:4d:42:a3:37:bb:97:9e:ae:43:79: 61:f6:b9:d4:09:fc:d6:71:68:11:65:2f:f2:0a:e6: 82:56:f4:ba:b0:94:0b:8f:86:f8:7d:1f:05:af:52: 4c:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:65:CD:8C:FD:14:73:45:8A:F5:25:EE:A7:3D:4C:6D:79:DF:45:50 X509v3 Authority Key Identifier: keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/BWXNjP0Uc0WK9SXupz1MbXnfRVA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.180.20.0/23 5.180.27.0/24 5.180.40.0/24 5.180.42.0/23 5.180.46.0/23 5.180.52.0/24 5.180.54.0/24 5.180.145.0/24 5.180.147.0/24 5.253.28.0/22 5.253.42.0/24 45.66.160.0/22 45.86.66.0/24 45.86.70.0/24 45.86.74.0/24 45.128.60.0/24 45.136.117.0/24 45.136.124.0/22 45.149.115.0/24 85.208.119.0/24 85.209.155.0-85.209.159.255 85.209.194.0/24 88.218.92.0/24 88.218.94.0/23 194.36.36.0/23 194.55.136.0/23 194.55.189.0/24 194.59.221.0/24 194.59.245.0/24 194.76.146.0/23 194.76.154.0/23 194.124.250.0/23 Signature Algorithm: sha256WithRSAEncryption 0d:ca:f5:a1:f3:d2:32:a5:7a:99:9c:bd:4d:58:1e:db:5e:e7: 1c:6b:79:33:f1:1c:f6:29:7f:f8:24:df:05:34:1e:96:ad:0f: 63:6c:a1:36:28:2c:4f:67:48:c7:e8:a9:3c:44:8e:ce:0d:59: ac:f9:fd:a9:29:d1:0c:d7:e0:9d:a9:b4:ce:be:87:61:48:3f: 1b:cf:60:65:fa:31:c4:7c:53:f5:53:47:f8:27:c6:fb:2a:39: d4:95:87:ca:96:44:3f:f2:c4:42:7d:c5:96:46:08:dc:f4:3c: b6:ef:e8:eb:aa:8f:15:39:e0:22:59:be:50:3f:5f:5f:ca:63: b5:77:cc:01:0b:80:5b:b7:a7:31:69:26:fd:db:81:0b:fa:a8: 76:2f:9d:2a:c6:35:b1:a5:9c:b1:43:8d:79:a6:f5:f2:81:e8: d2:a8:eb:5c:3b:84:45:84:ec:4d:1c:df:1a:06:28:f7:19:3a: c7:a5:37:d7:32:a0:0a:37:59:a3:d9:0b:2f:ff:93:80:90:a2: 71:f8:a6:c3:2c:d5:ff:55:61:cc:a9:10:da:b1:b1:47:c8:93: b3:02:e8:08:9c:12:55:c4:07:c0:c3:75:69:c4:65:d0:63:6c: 10:2e:48:be:7a:0a:d3:22:d1:99:94:9a:ac:ac:74:af:3f:ea: 37:d3:ac:26 -----BEGIN CERTIFICATE----- MIIFxDCCBKygAwIBAgISAZt26rnYxHekQ3oEWEkVj6q+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj Zjk3MDQwHhcNMjYwMTAxMDAxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNTY1Y2Q4Y2ZkMTQ3MzQ1OGFmNTI1ZWVhNzNkNGM2ZDc5ZGY0NTUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEVO6ls886Gl7bkq93yo+RZHLYW5 2iBFYs7toSBl+spbNWtF8I86EwQR4tzHAO6L5edPFZ1tTe+VrCId1bFAFqyLMLdE TAh1CTmDZoC4mizjzO20TVG3U2U9slOEnuADRbyWH/htfm9G5q3vqlUOhAP/8n8J oiZ+Ugp4+8FCXGFErD/PzZgbu8g+YelB7X+vjwLnv7TG3Ul0cs+wm5qxbe3+Ypsa 3Z88KNZfzOoyKCTb2hf2T5F/LyAFHp9ZPuqV4FXm8mfS5Sz68OoE0uMgBrYMgX2E 901Coze7l56uQ3lh9rnUCfzWcWgRZS/yCuaCVvS6sJQLj4b4fR8Fr1JMkQIDAQAB o4IC0DCCAswwHQYDVR0OBBYEFAVlzYz9FHNFivUl7qc9TG1530VQMB8GA1UdIwQY MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct ZTg2MTIxYzU5NGRmLzEvQldYTmpQMFVjMFdLOVNYdXB6MU1iWG5mUlZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHlBggrBgEFBQcBBwEB/wSB1TCB0jCBzwQCAAEwgcgDBAEF tBQDBAAFtBsDBAAFtCgDBAEFtCoDBAEFtC4DBAAFtDQDBAAFtDYDBAAFtJEDBAAF tJMDBAIF/RwDBAAF/SoDBAItQqADBAAtVkIDBAAtVkYDBAAtVkoDBAAtgDwDBAAt iHUDBAItiHwDBAAtlXMDBABV0HcwDAMEAFXRmwMEBVXRgAMEAFXRwgMEAFjaXAME AVjaXgMEAcIkJAMEAcI3iAMEAMI3vQMEAMI73QMEAMI79QMEAcJMkgMEAcJMmgME AcJ8+jANBgkqhkiG9w0BAQsFAAOCAQEADcr1ofPSMqV6mZy9TVge217nHGt5M/Ec 9il/+CTfBTQelq0PY2yhNigsT2dIx+ipPESOzg1ZrPn9qSnRDNfgnam0zr6HYUg/ G89gZfoxxHxT9VNH+CfG+yo51JWHypZEP/LEQn3FlkYI3PQ8tu/o66qPFTngIlm+ UD9fX8pjtXfMAQuAW7enMWkm/duBC/qodi+dKsY1saWcsUONeab18oHo0qjrXDuE RYTsTRzfGgYo9xk6x6U31zKgCjdZo9kLL/+TgJCicfimwyzV/1VhzKkQ2rGxR8iT swLoCJwSVcQHwMN1acRl0GNsEC5IvnoK0yLRmZSarKx0rz/qN9OsJg== -----END CERTIFICATE-----Generated at Wed Jan 21 15:22:33 2026 by rpki-client