This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/bwuSOp298-dczsmqdU4uLpa6gjo.roa File: bwuSOp298-dczsmqdU4uLpa6gjo.roa (raw, json) Hash identifier: uzISkAnF902L3J+B/MyOvw4U5tLzeELoUDdqRYulmzE= Subject key identifier: 6F:0B:92:3A:9D:BD:F3:E7:5C:CE:C9:AA:75:4E:2E:2E:96:BA:82:3A Certificate issuer: /CN=79a3b2c3622df9e87982ea8350978a6c9875a7c8 Certificate serial: 019B7D5D0D0D97C0B67CFB3F38F6236CDCC6 Authority key identifier: 79:A3:B2:C3:62:2D:F9:E8:79:82:EA:83:50:97:8A:6C:98:75:A7:C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eaOyw2It-eh5guqDUJeKbJh1p8g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/bwuSOp298-dczsmqdU4uLpa6gjo.roa Signing time: Fri 02 Jan 2026 06:20:08 +0000 ROA not before: Fri 02 Jan 2026 06:20:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 11404 IP address blocks: 194.187.208.0/24 maxlen: 24 194.187.210.0/24 maxlen: 24 194.187.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/eaOyw2It-eh5guqDUJeKbJh1p8g.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/eaOyw2It-eh5guqDUJeKbJh1p8g.mft rsync://rpki.ripe.net/repository/DEFAULT/eaOyw2It-eh5guqDUJeKbJh1p8g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 23:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:0d:0d:97:c0:b6:7c:fb:3f:38:f6:23:6c:dc:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79a3b2c3622df9e87982ea8350978a6c9875a7c8 Validity Not Before: Jan 2 06:20:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6f0b923a9dbdf3e75ccec9aa754e2e2e96ba823a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:3c:c3:7d:4d:0c:a7:57:a7:53:02:cd:11:1a: 70:78:b0:fe:d0:97:82:cd:c9:42:9d:5a:c3:80:36: f6:0e:e2:3d:95:14:5b:cc:06:69:55:0e:e7:f1:7f: 74:e9:84:64:9d:6a:98:81:87:1e:3e:2f:5b:5c:9f: b3:fa:7e:18:91:8b:2c:41:bf:88:76:c2:dd:3a:e2: b6:f5:92:bf:c7:15:c8:cb:c5:53:e7:45:94:80:46: 7f:4e:4c:7d:18:b4:fc:eb:ff:02:04:f4:bc:98:81: 9c:5f:f4:fc:98:d4:6f:d2:75:75:59:3e:dc:ec:31: df:6e:73:70:2e:21:7d:d8:0f:f6:26:1e:34:fb:d3: 96:05:2f:ae:80:9c:85:c5:a3:89:67:df:a9:8f:62: 0d:14:33:f5:6a:90:57:e8:e9:07:be:49:34:ab:4e: bd:2e:f0:a9:44:d3:60:73:ef:68:34:aa:7f:ce:bd: 65:99:29:37:c5:9c:2d:1d:27:17:de:ec:2c:ea:0a: a0:f2:83:30:b2:d9:a8:09:03:41:83:52:7d:d7:23: 88:2e:97:f4:a4:23:28:6b:6a:a2:61:5a:00:53:2d: ec:35:59:31:13:0d:5f:86:a7:b3:1f:bc:37:12:e8: 1c:5d:ff:c3:a0:02:47:c0:d3:39:1c:a2:38:7a:9c: 41:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:0B:92:3A:9D:BD:F3:E7:5C:CE:C9:AA:75:4E:2E:2E:96:BA:82:3A X509v3 Authority Key Identifier: keyid:79:A3:B2:C3:62:2D:F9:E8:79:82:EA:83:50:97:8A:6C:98:75:A7:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eaOyw2It-eh5guqDUJeKbJh1p8g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/bwuSOp298-dczsmqdU4uLpa6gjo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/eaOyw2It-eh5guqDUJeKbJh1p8g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.187.208.0/24 194.187.210.0/23 Signature Algorithm: sha256WithRSAEncryption 79:94:e5:43:77:2a:cf:a9:6e:21:b4:17:18:f7:9c:69:af:e7: b9:3b:27:e0:1c:4c:f5:a2:97:a9:56:ae:da:0e:2e:4b:07:f6: 7c:43:56:1c:9f:2e:09:93:9d:16:34:31:f8:6c:a8:c4:d2:8e: 61:b1:6f:58:db:d9:a8:50:cc:a9:e0:b7:a6:35:d6:5e:ce:be: 60:c7:91:42:c6:80:20:66:4c:fd:b7:12:a3:4d:07:e5:b8:81: 6c:b8:b8:dd:00:d7:89:1b:ed:eb:de:4c:36:b1:46:39:77:fc: 71:5e:b7:0e:b3:7b:e0:56:ae:67:96:b9:8c:02:d8:fe:de:99: 71:d3:8a:04:c1:de:70:e4:65:fe:fe:89:7a:0a:81:8e:68:0c: 43:21:e5:98:96:47:6d:e4:9d:c7:9b:f1:00:55:55:c7:1d:34: ed:1f:bf:c0:13:58:11:84:96:1a:fd:ec:5d:12:55:b9:97:e1: 4d:4b:08:4b:f9:54:87:5a:7f:ef:d2:66:3b:47:bb:1a:7a:43: 4a:16:d4:85:b2:69:e1:2e:d6:a8:20:75:b9:c2:bd:9f:1c:65: 74:89:43:ad:4d:3f:2d:e7:d6:cc:c7:cb:88:e0:60:b5:a3:d8: ee:1b:31:3b:e8:b9:db:2e:9d:5c:5c:a1:fb:35:43:8d:79:7c: ad:30:ab:dd -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9XQ0Nl8C2fPs/OPYjbNzGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5YTNiMmMzNjIyZGY5ZTg3OTgyZWE4MzUwOTc4YTZjOTg3 NWE3YzgwHhcNMjYwMTAyMDYyMDA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZjBiOTIzYTlkYmRmM2U3NWNjZWM5YWE3NTRlMmUyZTk2YmE4MjNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjzDfU0Mp1enUwLNERpweLD+0JeC zclCnVrDgDb2DuI9lRRbzAZpVQ7n8X906YRknWqYgYcePi9bXJ+z+n4YkYssQb+I dsLdOuK29ZK/xxXIy8VT50WUgEZ/Tkx9GLT86/8CBPS8mIGcX/T8mNRv0nV1WT7c 7DHfbnNwLiF92A/2Jh40+9OWBS+ugJyFxaOJZ9+pj2INFDP1apBX6OkHvkk0q069 LvCpRNNgc+9oNKp/zr1lmSk3xZwtHScX3uws6gqg8oMwstmoCQNBg1J91yOILpf0 pCMoa2qiYVoAUy3sNVkxEw1fhqezH7w3EugcXf/DoAJHwNM5HKI4epxBYwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFG8LkjqdvfPnXM7JqnVOLi6WuoI6MB8GA1UdIwQY MBaAFHmjssNiLfnoeYLqg1CXimyYdafIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWFPeXcySXQtZWg1Z3VxRFVKZUtiSmgxcDhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9lNTA2OWItMWNhZC00NWE0LWE2MTkt YzI0ZmY2ODJmN2FkLzEvYnd1U09wMjk4LWRjenNtcWRVNHVMcGE2Z2pvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9lNTA2OWItMWNhZC00NWE0LWE2MTktYzI0ZmY2ODJmN2Fk LzEvZWFPeXcySXQtZWg1Z3VxRFVKZUtiSmgxcDhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwrvQAwQB wrvSMA0GCSqGSIb3DQEBCwUAA4IBAQB5lOVDdyrPqW4htBcY95xpr+e5OyfgHEz1 opepVq7aDi5LB/Z8Q1Ycny4Jk50WNDH4bKjE0o5hsW9Y29moUMyp4LemNdZezr5g x5FCxoAgZkz9txKjTQfluIFsuLjdANeJG+3r3kw2sUY5d/xxXrcOs3vgVq5nlrmM Atj+3plx04oEwd5w5GX+/ol6CoGOaAxDIeWYlkdt5J3Hm/EAVVXHHTTtH7/AE1gR hJYa/exdElW5l+FNSwhL+VSHWn/v0mY7R7saekNKFtSFsmnhLtaoIHW5wr2fHGV0 iUOtTT8t59bMx8uI4GC1o9juGzE76LnbLp1cXKH7NUONeXytMKvd -----END CERTIFICATE-----Generated at Thu Jan 22 07:30:07 2026 by rpki-client