This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/Bwb-B2AczMd4mj6tvI6rlUDbU5E.roa File: Bwb-B2AczMd4mj6tvI6rlUDbU5E.roa (raw, json) Hash identifier: JFs8H2Nbvm4sp7IfR/fuT3fkxxYTMFvFgH7jK8vIQfA= Subject key identifier: 07:06:FE:07:60:1C:CC:C7:78:9A:3E:AD:BC:8E:AB:95:40:DB:53:91 Certificate issuer: /CN=b2deb3765f539f1ec3f00213ff834085b7c8c76f Certificate serial: 019B77C6B71205A7FE2249C32627EE9F4075 Authority key identifier: B2:DE:B3:76:5F:53:9F:1E:C3:F0:02:13:FF:83:40:85:B7:C8:C7:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/st6zdl9Tnx7D8AIT_4NAhbfIx28.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/Bwb-B2AczMd4mj6tvI6rlUDbU5E.roa Signing time: Thu 01 Jan 2026 04:17:50 +0000 ROA not before: Thu 01 Jan 2026 04:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43641 IP address blocks: 194.9.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.mft rsync://rpki.ripe.net/repository/DEFAULT/st6zdl9Tnx7D8AIT_4NAhbfIx28.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 04:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:b7:12:05:a7:fe:22:49:c3:26:27:ee:9f:40:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2deb3765f539f1ec3f00213ff834085b7c8c76f Validity Not Before: Jan 1 04:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0706fe07601cccc7789a3eadbc8eab9540db5391 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:01:57:83:9f:e5:e8:ff:9c:6c:f6:c9:6c:ee: f9:9a:ab:1b:67:0b:4d:73:53:88:01:49:10:22:d8: 04:e0:e9:08:5f:ff:5b:c4:1d:a3:ac:5d:36:3c:42: 69:ff:cf:e5:90:0c:0f:45:35:78:06:a7:b6:1b:58: b1:91:bd:6b:95:f7:eb:48:57:b9:ad:d8:a4:67:e6: 53:3e:9a:ca:a4:21:81:6f:75:b9:3d:3f:10:46:fe: 6f:f5:f2:a7:5c:60:ec:58:5a:01:c5:c2:ea:2d:16: 17:60:ed:d8:b1:26:17:86:99:1c:20:9c:03:08:17: 31:db:e0:bf:f0:fb:cd:b4:80:49:b8:27:59:90:ee: e7:da:a1:04:3d:d3:52:84:88:4d:bf:9d:8a:33:53: f2:08:73:9c:cb:7d:8c:97:e8:4d:45:94:8a:6d:1d: 9a:70:db:ea:32:5f:de:fb:57:e2:7c:31:68:ee:3c: 5d:b3:94:0f:ae:8e:45:1f:a4:1c:bd:2b:46:76:d5: 24:f7:4a:d3:e9:04:38:43:ea:65:e6:66:d6:07:27: b2:92:c0:75:47:b5:e5:d3:0a:ba:3e:e4:24:04:05: f0:b9:87:eb:ce:36:de:3b:6c:36:20:a5:1c:ee:cd: bb:c9:fe:86:bf:6b:6a:85:0b:81:49:0f:0b:ad:c3: 3f:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:06:FE:07:60:1C:CC:C7:78:9A:3E:AD:BC:8E:AB:95:40:DB:53:91 X509v3 Authority Key Identifier: keyid:B2:DE:B3:76:5F:53:9F:1E:C3:F0:02:13:FF:83:40:85:B7:C8:C7:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/st6zdl9Tnx7D8AIT_4NAhbfIx28.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/Bwb-B2AczMd4mj6tvI6rlUDbU5E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.9.119.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:d7:21:ce:99:2f:02:93:7d:87:a6:a0:fc:4c:49:04:80:73: cb:ba:68:3b:07:83:60:5a:5b:59:17:00:52:5d:25:cf:1e:c6: 9e:72:60:83:4e:6c:2d:51:1b:80:61:43:94:95:ec:64:a6:1d: 75:82:40:4b:e2:f4:ec:64:86:62:9d:70:23:9d:4a:14:d6:0f: a3:5e:66:2e:35:c1:3c:f5:51:e7:94:4d:b7:a7:c6:a7:b2:65: cb:9c:53:cf:ae:7e:41:9a:d3:54:6d:c2:00:f0:39:ea:85:d8: 30:96:a1:46:23:9f:0c:f6:e0:5b:ee:fe:be:40:9a:7f:44:87: fa:7e:12:db:ab:70:8f:b0:fc:59:bd:86:30:e8:8e:48:4f:85: 4a:c1:24:5c:1b:de:63:c3:06:a0:b9:cd:8e:aa:3f:a7:2c:7b: 29:56:0b:b1:f5:d4:de:a0:ff:9b:5e:da:82:ef:0e:68:1c:5c: ab:fa:ca:1f:fd:dd:c0:53:26:c8:9b:1d:05:7b:68:ff:88:a1: e2:c5:17:6d:65:48:a2:51:da:27:f6:78:6b:a9:f3:cc:85:14: c1:36:55:a0:bd:9f:0d:2a:c9:65:3b:e2:ed:ee:a3:a3:80:7d: 7a:bc:76:b4:a4:b0:5d:bd:d8:c0:34:d6:d0:75:d6:8f:cf:16: 6d:ad:25:60 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xrcSBaf+IknDJifun0B1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyZGViMzc2NWY1MzlmMWVjM2YwMDIxM2ZmODM0MDg1Yjdj OGM3NmYwHhcNMjYwMTAxMDQxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNzA2ZmUwNzYwMWNjY2M3Nzg5YTNlYWRiYzhlYWI5NTQwZGI1MzkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5QFXg5/l6P+cbPbJbO75mqsbZwtN c1OIAUkQItgE4OkIX/9bxB2jrF02PEJp/8/lkAwPRTV4Bqe2G1ixkb1rlffrSFe5 rdikZ+ZTPprKpCGBb3W5PT8QRv5v9fKnXGDsWFoBxcLqLRYXYO3YsSYXhpkcIJwD CBcx2+C/8PvNtIBJuCdZkO7n2qEEPdNShIhNv52KM1PyCHOcy32Ml+hNRZSKbR2a cNvqMl/e+1fifDFo7jxds5QPro5FH6QcvStGdtUk90rT6QQ4Q+pl5mbWByeyksB1 R7Xl0wq6PuQkBAXwuYfrzjbeO2w2IKUc7s27yf6Gv2tqhQuBSQ8LrcM/KQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAcG/gdgHMzHeJo+rbyOq5VA21ORMB8GA1UdIwQY MBaAFLLes3ZfU58ew/ACE/+DQIW3yMdvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3Q2emRsOVRueDdEOEFJVF80TkFoYmZJeDI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC84YzYzOTUtNjQ2YS00N2EyLWI0YjYt YzZmNmUzZjI4OTU2LzEvQndiLUIyQWN6TWQ0bWo2dHZJNnJsVURiVTVFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC84YzYzOTUtNjQ2YS00N2EyLWI0YjYtYzZmNmUzZjI4OTU2 LzEvc3Q2emRsOVRueDdEOEFJVF80TkFoYmZJeDI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwgl3MA0G CSqGSIb3DQEBCwUAA4IBAQAe1yHOmS8Ck32HpqD8TEkEgHPLumg7B4NgWltZFwBS XSXPHsaecmCDTmwtURuAYUOUlexkph11gkBL4vTsZIZinXAjnUoU1g+jXmYuNcE8 9VHnlE23p8ansmXLnFPPrn5BmtNUbcIA8DnqhdgwlqFGI58M9uBb7v6+QJp/RIf6 fhLbq3CPsPxZvYYw6I5IT4VKwSRcG95jwwaguc2Oqj+nLHspVgux9dTeoP+bXtqC 7w5oHFyr+sof/d3AUybImx0Fe2j/iKHixRdtZUiiUdon9nhrqfPMhRTBNlWgvZ8N KsllO+Lt7qOjgH16vHa0pLBdvdjANNbQddaPzxZtrSVg -----END CERTIFICATE-----Generated at Mon Jan 19 11:25:45 2026 by rpki-client