This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/Bw6-Wr1JNk-7fz2mXQy9nA5MJgU.roa File: Bw6-Wr1JNk-7fz2mXQy9nA5MJgU.roa (raw, json) Hash identifier: Z1+ExXxO5BljQ2HjyYTmMCJWikJ19g5wPeRJsuXjlCo= Subject key identifier: 07:0E:BE:5A:BD:49:36:4F:BB:7F:3D:A6:5D:0C:BD:9C:0E:4C:26:05 Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Certificate serial: 019B7D5D62FE59F6E48295B22626A6C0AFE5 Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/Bw6-Wr1JNk-7fz2mXQy9nA5MJgU.roa Signing time: Fri 02 Jan 2026 06:20:30 +0000 ROA not before: Fri 02 Jan 2026 06:20:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396356 IP address blocks: 45.80.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 11:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:62:fe:59:f6:e4:82:95:b2:26:26:a6:c0:af:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Validity Not Before: Jan 2 06:20:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=070ebe5abd49364fbb7f3da65d0cbd9c0e4c2605 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:91:0a:82:5a:b8:50:92:a0:59:b0:6a:10:b7: dc:aa:50:89:3b:6d:cf:f9:8c:dc:17:52:e5:0c:56: 55:8c:64:2a:e0:a6:ff:f3:01:d3:fe:e8:11:f8:9e: c8:f6:ae:31:25:cd:d4:bd:53:02:2e:38:00:5c:fd: 9d:76:2a:8d:77:3e:a1:ff:ea:67:0a:9f:28:1f:1d: 1d:7f:bc:9c:e9:7b:9a:47:79:c0:42:de:f1:1a:79: d0:ae:ee:9b:ba:b6:39:62:73:8b:13:b5:50:5c:1e: a4:99:4d:8e:34:ca:d3:9f:80:39:0a:c6:df:c8:ab: 18:19:6f:2e:23:d1:9b:b5:d9:65:95:a1:4f:ef:02: 6c:1e:4a:f7:b7:19:2c:57:ba:7b:a4:66:d1:b9:dc: 95:b9:85:f2:34:bc:ce:71:2b:10:a2:f8:4b:9d:b5: c4:fa:71:9b:42:96:cf:65:d4:e8:70:4c:f6:bf:fa: 31:e9:29:5d:8c:51:6c:b1:8d:8c:83:f4:b4:6a:19: 78:2b:35:0f:b6:a5:29:4d:5e:e8:ea:c0:d6:11:d6: 1d:19:db:05:3d:48:0a:fb:02:4c:11:cd:60:77:60: 7a:bc:0b:ef:93:fe:80:a5:d0:8a:ca:e4:d9:f8:1a: 08:c1:11:27:c9:df:ad:8a:f8:40:e9:52:06:b3:67: e7:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:0E:BE:5A:BD:49:36:4F:BB:7F:3D:A6:5D:0C:BD:9C:0E:4C:26:05 X509v3 Authority Key Identifier: keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/Bw6-Wr1JNk-7fz2mXQy9nA5MJgU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.80.159.0/24 Signature Algorithm: sha256WithRSAEncryption 59:cb:56:1e:cd:42:22:cb:f7:7e:8a:23:a5:7e:f0:71:4b:5a: a2:0e:29:3b:17:62:76:9b:9a:b7:3c:d5:cb:3a:3d:b0:dc:32: 44:ef:1a:2b:73:6a:dd:b6:34:c0:e2:5d:5a:df:03:2e:38:d6: 5f:bd:0d:d6:a7:60:74:fb:be:2e:a8:32:a0:28:3e:eb:4c:ed: 32:ae:2a:44:6c:95:c1:27:9c:1b:3b:d3:e4:b5:93:2f:16:83: 06:52:6e:8d:ce:6b:2d:0e:e8:5e:70:5c:53:71:4a:70:5f:04: 89:30:72:46:c5:76:f7:da:a1:c8:0f:e3:a3:1f:22:e8:22:ee: af:7b:ba:c2:d5:c7:a8:a2:2e:3a:87:c5:a6:16:da:d7:ff:1d: b6:6c:09:b3:9b:26:51:4a:d4:33:0f:55:a1:46:6f:7e:44:84: fa:99:61:6c:fc:ac:51:14:24:36:78:e9:48:62:bd:b8:33:ad: f1:d2:81:4e:20:a8:83:51:4e:d8:7f:fb:21:7b:38:6c:a1:3b: 16:cb:f3:09:c3:e1:06:b2:de:7c:bf:0a:aa:93:48:c8:a8:4f: 4a:22:05:cc:2e:49:0c:8a:41:25:13:28:27:c7:10:ba:3e:f6: 45:04:01:2a:5f:af:b1:0f:19:44:38:62:1e:da:e2:49:b6:5e: 7a:29:59:f1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XWL+WfbkgpWyJiamwK/lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw NWIwZTIwHhcNMjYwMTAyMDYyMDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNzBlYmU1YWJkNDkzNjRmYmI3ZjNkYTY1ZDBjYmQ5YzBlNGMyNjA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15EKglq4UJKgWbBqELfcqlCJO23P +YzcF1LlDFZVjGQq4Kb/8wHT/ugR+J7I9q4xJc3UvVMCLjgAXP2ddiqNdz6h/+pn Cp8oHx0df7yc6XuaR3nAQt7xGnnQru6burY5YnOLE7VQXB6kmU2ONMrTn4A5Csbf yKsYGW8uI9GbtdlllaFP7wJsHkr3txksV7p7pGbRudyVuYXyNLzOcSsQovhLnbXE +nGbQpbPZdTocEz2v/ox6SldjFFssY2Mg/S0ahl4KzUPtqUpTV7o6sDWEdYdGdsF PUgK+wJMEc1gd2B6vAvvk/6ApdCKyuTZ+BoIwREnyd+tivhA6VIGs2fneQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAcOvlq9STZPu389pl0MvZwOTCYFMB8GA1UdIwQY MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt MmNjZWRiOTY2YTU4LzEvQnc2LVdyMUpOay03ZnoybVhReTluQTVNSmdVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4 LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVCfMA0G CSqGSIb3DQEBCwUAA4IBAQBZy1YezUIiy/d+iiOlfvBxS1qiDik7F2J2m5q3PNXL Oj2w3DJE7xorc2rdtjTA4l1a3wMuONZfvQ3Wp2B0+74uqDKgKD7rTO0yripEbJXB J5wbO9PktZMvFoMGUm6NzmstDuhecFxTcUpwXwSJMHJGxXb32qHID+OjHyLoIu6v e7rC1ceooi46h8WmFtrX/x22bAmzmyZRStQzD1WhRm9+RIT6mWFs/KxRFCQ2eOlI Yr24M63x0oFOIKiDUU7Yf/shezhsoTsWy/MJw+EGst58vwqqk0jIqE9KIgXMLkkM ikElEygnxxC6PvZFBAEqX6+xDxlEOGIe2uJJtl56KVnx -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:54 2026 by rpki-client