This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/BW5S5s1xvxdYeismlznCSfBL2yI.roa
File: BW5S5s1xvxdYeismlznCSfBL2yI.roa (raw, json)
Hash identifier: EtWeWpCD+suUmysPule/ohTEye/jj6Q4dBOVaR6L3gA=
Subject key identifier: 05:6E:52:E6:CD:71:BF:17:58:7A:2B:26:97:39:C2:49:F0:4B:DB:22
Certificate issuer: /CN=e2c5861210dc38bdbaeb477d6da719664a84a6bc
Certificate serial: 019B77C6BFA6A3EC236B5A1B96D3C75CA587
Authority key identifier: E2:C5:86:12:10:DC:38:BD:BA:EB:47:7D:6D:A7:19:66:4A:84:A6:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sWGEhDcOL2660d9bacZZkqEprw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/BW5S5s1xvxdYeismlznCSfBL2yI.roa
Signing time: Thu 01 Jan 2026 04:17:52 +0000
ROA not before: Thu 01 Jan 2026 04:17:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197772
IP address blocks: 91.226.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sWGEhDcOL2660d9bacZZkqEprw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c6:bf:a6:a3:ec:23:6b:5a:1b:96:d3:c7:5c:a5:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c5861210dc38bdbaeb477d6da719664a84a6bc
Validity
Not Before: Jan 1 04:17:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=056e52e6cd71bf17587a2b269739c249f04bdb22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4d:e2:1b:93:b2:65:4e:24:a9:8a:c8:a3:72:
95:83:39:4e:19:54:30:3d:21:97:89:38:eb:ca:42:
93:64:ef:60:64:6c:fe:89:cb:96:a6:70:30:93:e1:
da:dd:13:e7:67:de:16:0c:46:4b:c0:15:be:c5:6d:
7a:ee:e3:0e:a3:05:9c:cc:c2:4f:e6:e9:0c:20:09:
94:04:d4:0d:c3:fd:bc:d0:61:9b:5a:9d:fd:d8:af:
50:3d:e3:bc:3d:05:87:27:ed:b9:3e:8e:14:77:86:
11:55:45:e0:cf:5f:55:f1:82:b5:aa:17:2b:da:d1:
cb:3b:58:ae:40:98:06:27:d8:4c:b0:c1:57:79:93:
28:93:c7:f9:da:98:fb:42:2e:58:9c:be:4e:24:6f:
9d:a5:db:2c:bf:90:8c:11:2a:c1:95:43:64:95:08:
c8:09:b9:f7:9c:c1:3c:ed:77:4a:90:af:f8:36:9b:
05:19:16:da:7b:37:c1:fa:07:0b:54:f5:98:69:7a:
1f:b1:51:da:eb:72:36:b2:52:88:31:8c:c8:aa:6c:
23:00:e6:9e:34:94:b3:2d:61:e2:7d:24:ce:2b:62:
b9:d6:3b:ec:c5:90:60:89:06:8b:03:1e:27:72:c7:
2d:50:3f:96:ca:79:1c:f5:1f:b5:3f:06:4c:69:32:
83:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:6E:52:E6:CD:71:BF:17:58:7A:2B:26:97:39:C2:49:F0:4B:DB:22
X509v3 Authority Key Identifier:
keyid:E2:C5:86:12:10:DC:38:BD:BA:EB:47:7D:6D:A7:19:66:4A:84:A6:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sWGEhDcOL2660d9bacZZkqEprw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/BW5S5s1xvxdYeismlznCSfBL2yI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.176.0/24
Signature Algorithm: sha256WithRSAEncryption
82:1b:f3:12:cf:71:ed:94:ea:06:0c:f7:54:87:ff:da:67:d6:
86:3e:0c:0c:9d:0d:1d:b1:d7:13:78:e4:1e:00:63:cd:34:77:
0b:92:bf:24:bf:b1:49:0d:26:ca:41:9a:8b:92:99:d2:ca:73:
33:e9:bd:fc:99:a7:ae:dc:c0:c9:fb:37:20:51:ae:3b:d3:1f:
af:90:c3:75:f1:e0:90:85:37:0d:e1:3c:fd:6e:2d:04:fa:c9:
ee:b0:e1:59:7a:98:ce:91:3f:ff:ca:27:b7:89:ce:c1:e6:9f:
f3:88:89:95:e9:59:d3:14:a2:6f:4d:fa:3c:1c:99:bf:29:7c:
b1:75:17:f8:02:27:a1:27:93:7c:f1:e4:a1:ad:75:f2:b8:21:
1f:0f:bb:13:80:14:d3:aa:da:ff:a3:70:a9:4a:b0:89:0f:9d:
e3:09:47:69:61:17:81:6a:ab:1b:80:e6:07:bd:08:a7:d8:f7:
4d:b3:a0:c5:ab:53:5d:e3:76:be:e0:aa:7c:ac:90:86:98:e9:
d7:c0:d2:ab:c3:f5:bc:d0:9d:3d:b4:07:9e:94:88:c9:32:cd:
5c:f4:b0:00:de:6e:4d:e5:8c:c9:84:65:bb:a3:ac:7d:d2:52:
e8:bc:9a:7f:e3:42:ce:37:dc:31:da:c3:53:55:6d:a7:24:33:
8e:1c:7d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:14:51 2026 by rpki-client