This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/BW_NoLK8bvq98NW3uQCVBILUjdc.roa File: BW_NoLK8bvq98NW3uQCVBILUjdc.roa (raw, json) Hash identifier: Yv7HzXY6brkJdNWi4vkWfsAkacdbGVR0g6RZPDb2Wbo= Subject key identifier: 05:6F:CD:A0:B2:BC:6E:FA:BD:F0:D5:B7:B9:00:95:04:82:D4:8D:D7 Certificate issuer: /CN=18caeb14a01ee16d836565e14fa53b4ab3c3cd26 Certificate serial: 019B78A30E2404F6D66814CC8CB833AACB0D Authority key identifier: 18:CA:EB:14:A0:1E:E1:6D:83:65:65:E1:4F:A5:3B:4A:B3:C3:CD:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GMrrFKAe4W2DZWXhT6U7SrPDzSY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/BW_NoLK8bvq98NW3uQCVBILUjdc.roa Signing time: Thu 01 Jan 2026 08:18:30 +0000 ROA not before: Thu 01 Jan 2026 08:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197208 IP address blocks: 46.28.112.0/21 maxlen: 21 194.31.3.0/24 maxlen: 24 194.76.29.0/24 maxlen: 24 194.99.56.0/24 maxlen: 24 2a01:6ac0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/GMrrFKAe4W2DZWXhT6U7SrPDzSY.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/GMrrFKAe4W2DZWXhT6U7SrPDzSY.mft rsync://rpki.ripe.net/repository/DEFAULT/GMrrFKAe4W2DZWXhT6U7SrPDzSY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:0e:24:04:f6:d6:68:14:cc:8c:b8:33:aa:cb:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18caeb14a01ee16d836565e14fa53b4ab3c3cd26 Validity Not Before: Jan 1 08:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=056fcda0b2bc6efabdf0d5b7b900950482d48dd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b7:fb:eb:a3:ef:01:d8:f9:ba:d9:38:cd:b3: 57:29:50:0e:a1:6c:c8:eb:7b:21:d2:18:0e:61:a8: 45:bb:9e:b4:5a:a5:6d:75:f8:95:54:e7:ed:40:d7: 09:bb:e4:ad:eb:2d:30:5a:58:a7:b4:99:b5:a5:f9: 9f:af:52:5c:53:38:f1:ab:cb:36:fb:7c:f5:4f:3b: 25:46:85:76:d3:7a:2c:dd:55:6e:12:d6:6d:b3:45: a7:e6:c0:be:a4:03:bb:d2:54:0b:50:6e:21:68:11: 19:4a:2e:4d:47:03:f7:00:dd:72:29:2d:c7:2a:64: 0f:ff:d8:33:16:0e:c9:1f:23:58:3a:f6:35:64:f5: 68:21:1a:c8:fa:5a:84:05:53:d2:50:e8:de:d4:f6: 07:20:87:b8:90:41:5b:8a:23:3b:38:35:b0:7a:86: 32:d2:b1:05:91:74:e2:aa:4c:68:bf:92:e6:1a:4c: 91:52:5c:d1:28:7d:16:03:50:b9:44:f7:8f:39:29: 37:fa:11:6e:b6:81:3c:0b:72:97:49:4a:0a:97:f7: ec:cb:74:23:ea:c5:29:16:a6:69:c9:84:60:e0:fc: 98:e4:be:d8:78:8f:4f:8c:69:66:4f:49:e4:96:4c: b4:c2:84:1d:02:51:ad:64:51:cf:6e:08:ff:27:fd: 16:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:6F:CD:A0:B2:BC:6E:FA:BD:F0:D5:B7:B9:00:95:04:82:D4:8D:D7 X509v3 Authority Key Identifier: keyid:18:CA:EB:14:A0:1E:E1:6D:83:65:65:E1:4F:A5:3B:4A:B3:C3:CD:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GMrrFKAe4W2DZWXhT6U7SrPDzSY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/BW_NoLK8bvq98NW3uQCVBILUjdc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/GMrrFKAe4W2DZWXhT6U7SrPDzSY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.28.112.0/21 194.31.3.0/24 194.76.29.0/24 194.99.56.0/24 IPv6: 2a01:6ac0::/32 Signature Algorithm: sha256WithRSAEncryption 2a:22:de:8a:16:8a:fb:66:6a:b6:68:48:2d:d8:1c:ef:6a:d0: cc:f4:35:b5:51:cd:cc:48:cc:ad:fb:64:8d:e6:23:fd:f0:7a: 0d:22:53:a1:21:4d:b4:3c:92:8b:38:76:7a:b1:84:11:5c:ff: 03:5d:18:7f:62:07:b3:24:17:29:4b:5e:ee:1e:26:b0:63:f2: 50:5b:51:1b:54:04:df:f2:ae:e9:8a:61:d2:e8:5f:f1:29:1c: 36:c6:95:8c:11:f3:4e:65:b4:6a:24:41:42:2e:ae:7b:8b:a2: 58:95:27:b2:37:67:10:90:06:77:e5:fc:dc:53:99:93:c5:3e: f9:6b:ce:ba:2d:a9:a5:9b:a3:1c:dd:c3:ed:a0:0f:26:e0:0e: 4a:29:28:30:18:b6:d5:6e:a1:76:0a:43:e0:57:5d:47:78:cf: c5:96:51:40:0b:e8:61:17:0e:91:1f:da:35:00:f3:d7:55:a1: cf:93:3f:2f:2a:55:f9:bd:8c:ae:4f:ab:42:71:6b:df:4d:2f: 6e:47:e5:9e:c7:32:be:f3:5c:20:27:b2:f7:fb:e2:53:cc:73: 04:c4:ac:68:e1:b4:a2:f0:5c:81:df:11:58:6c:0f:fb:18:4c: d1:36:ce:77:12:af:0e:fd:48:db:71:21:d2:d4:90:46:aa:f4: 84:5f:b3:2c -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt4ow4kBPbWaBTMjLgzqssNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4Y2FlYjE0YTAxZWUxNmQ4MzY1NjVlMTRmYTUzYjRhYjNj M2NkMjYwHhcNMjYwMTAxMDgxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNTZmY2RhMGIyYmM2ZWZhYmRmMGQ1YjdiOTAwOTUwNDgyZDQ4ZGQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLf766PvAdj5utk4zbNXKVAOoWzI 63sh0hgOYahFu560WqVtdfiVVOftQNcJu+St6y0wWlintJm1pfmfr1JcUzjxq8s2 +3z1TzslRoV203os3VVuEtZts0Wn5sC+pAO70lQLUG4haBEZSi5NRwP3AN1yKS3H KmQP/9gzFg7JHyNYOvY1ZPVoIRrI+lqEBVPSUOje1PYHIIe4kEFbiiM7ODWweoYy 0rEFkXTiqkxov5LmGkyRUlzRKH0WA1C5RPePOSk3+hFutoE8C3KXSUoKl/fsy3Qj 6sUpFqZpyYRg4PyY5L7YeI9PjGlmT0nklky0woQdAlGtZFHPbgj/J/0WLwIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFAVvzaCyvG76vfDVt7kAlQSC1I3XMB8GA1UdIwQY MBaAFBjK6xSgHuFtg2Vl4U+lO0qzw80mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR01yckZLQWU0VzJEWldYaFQ2VTdTclBEelNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9lN2IxZDctM2Q3YS00NmFiLTgxMGYt ZWRkZjIzYzFiYTZkLzEvQldfTm9MSzhidnE5OE5XM3VRQ1ZCSUxVamRjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9lN2IxZDctM2Q3YS00NmFiLTgxMGYtZWRkZjIzYzFiYTZk LzEvR01yckZLQWU0VzJEWldYaFQ2VTdTclBEelNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQDLhxwAwQA wh8DAwQAwkwdAwQAwmM4MA0EAgACMAcDBQAqAWrAMA0GCSqGSIb3DQEBCwUAA4IB AQAqIt6KFor7Zmq2aEgt2BzvatDM9DW1Uc3MSMyt+2SN5iP98HoNIlOhIU20PJKL OHZ6sYQRXP8DXRh/YgezJBcpS17uHiawY/JQW1EbVATf8q7pimHS6F/xKRw2xpWM EfNOZbRqJEFCLq57i6JYlSeyN2cQkAZ35fzcU5mTxT75a866Lamlm6Mc3cPtoA8m 4A5KKSgwGLbVbqF2CkPgV11HeM/FllFAC+hhFw6RH9o1APPXVaHPkz8vKlX5vYyu T6tCcWvfTS9uR+WexzK+81wgJ7L3++JTzHMExKxo4bSi8FyB3xFYbA/7GEzRNs53 Eq8O/UjbcSHS1JBGqvSEX7Ms -----END CERTIFICATE-----Generated at Tue Feb 10 03:58:37 2026 by rpki-client