This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/BwmCQS6rN4At5ff2VmaD4STv4Jc.roa File: BwmCQS6rN4At5ff2VmaD4STv4Jc.roa (raw, json) Hash identifier: Rrzqqm/u8oeldAyFqyBciHWz0IVXTmCxkQZ3y1YdadI= Subject key identifier: 07:09:82:41:2E:AB:37:80:2D:E5:F7:F6:56:66:83:E1:24:EF:E0:97 Certificate issuer: /CN=788f5b210f3c3eb42065960e85d061e9d9d63ab8 Certificate serial: 019B7E38766E261C03A1171954D57CC72F68 Authority key identifier: 78:8F:5B:21:0F:3C:3E:B4:20:65:96:0E:85:D0:61:E9:D9:D6:3A:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eI9bIQ88PrQgZZYOhdBh6dnWOrg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/BwmCQS6rN4At5ff2VmaD4STv4Jc.roa Signing time: Fri 02 Jan 2026 10:19:48 +0000 ROA not before: Fri 02 Jan 2026 10:19:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206786 IP address blocks: 45.86.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/eI9bIQ88PrQgZZYOhdBh6dnWOrg.crl rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/eI9bIQ88PrQgZZYOhdBh6dnWOrg.mft rsync://rpki.ripe.net/repository/DEFAULT/eI9bIQ88PrQgZZYOhdBh6dnWOrg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 19:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:76:6e:26:1c:03:a1:17:19:54:d5:7c:c7:2f:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=788f5b210f3c3eb42065960e85d061e9d9d63ab8 Validity Not Before: Jan 2 10:19:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=070982412eab37802de5f7f6566683e124efe097 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:83:96:6e:0e:e8:16:43:f5:ad:d9:55:87:c5: b5:88:07:a1:e2:03:f5:41:49:be:e2:e6:a7:ea:44: 6f:5d:dd:eb:e5:5f:73:4c:9f:67:2f:9d:41:5b:19: cb:42:4b:8a:e7:c3:f8:ad:43:c8:f2:ef:47:85:07: 0d:67:15:f8:55:a3:19:bb:b4:58:05:c9:f2:44:17: d2:2b:5b:17:be:14:7f:ae:76:85:0f:92:b4:ac:f1: d4:6e:2f:30:a1:ae:7b:77:59:fe:78:ab:97:ae:0f: d0:7d:16:7e:ac:31:50:9e:33:45:e5:81:52:4e:57: 5b:9a:a8:b5:e6:5a:6d:d9:2e:1e:79:60:d8:03:3e: 8a:f8:a1:be:2f:43:de:c3:a8:67:3b:d6:3d:dd:58: a6:f8:7f:37:70:04:b8:1b:7c:f3:ef:96:bd:c1:c3: cd:21:0e:96:4f:e8:2a:a3:16:f6:47:34:7d:11:b8: bb:6e:f4:ac:94:ce:ce:af:c8:73:8b:7f:c1:84:17: 2e:da:55:12:d7:c9:32:07:0e:d9:9c:7d:e3:4f:bb: 5c:39:aa:b5:84:c4:51:5b:b3:8c:39:66:7a:bd:e6: 6e:28:7f:33:2d:76:e9:f1:f0:77:17:bd:95:cb:15: 9d:1e:1e:71:0e:63:b1:cb:cf:e4:a8:fc:53:60:f9: e8:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:09:82:41:2E:AB:37:80:2D:E5:F7:F6:56:66:83:E1:24:EF:E0:97 X509v3 Authority Key Identifier: keyid:78:8F:5B:21:0F:3C:3E:B4:20:65:96:0E:85:D0:61:E9:D9:D6:3A:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eI9bIQ88PrQgZZYOhdBh6dnWOrg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/BwmCQS6rN4At5ff2VmaD4STv4Jc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/eI9bIQ88PrQgZZYOhdBh6dnWOrg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.86.34.0/24 Signature Algorithm: sha256WithRSAEncryption d7:e2:46:fe:61:14:54:8d:b3:19:0a:ab:54:14:16:4e:fa:59: 62:aa:4e:43:52:ab:bf:bd:80:a2:cf:3e:81:36:df:fd:57:b9: 89:b4:25:85:41:8d:0f:e7:95:e4:e1:50:1b:47:17:56:74:86: b4:4b:ce:fb:0d:11:99:af:a8:60:09:bc:50:76:39:24:c3:b5: a9:f6:63:da:a8:53:24:e2:38:4e:e9:16:19:04:b8:92:3d:f5: 5c:46:7a:fd:57:ed:dc:59:68:46:84:c5:9f:33:65:0d:a1:8e: b9:7e:39:e1:6f:09:8b:1b:d0:4d:bd:72:89:5c:19:33:68:75: 54:49:3a:c3:4d:ef:cc:7c:bc:d4:17:e2:18:09:94:ff:d7:f3: e8:e7:8c:fd:94:e3:7d:26:b2:76:7c:55:6b:01:a2:9b:1b:29: ef:a0:cd:55:4f:22:a9:30:74:8d:27:30:07:8d:61:2f:7a:e7: b7:4c:45:6d:09:a0:3c:b1:b7:f6:d6:b8:1e:1d:b2:b1:80:58: c0:1c:2d:92:ac:93:8f:5a:5e:2d:cc:a4:e8:2c:28:88:de:59: 66:28:6e:e5:2f:1c:bf:03:fc:9b:9c:a8:4f:38:80:d4:15:ba: 15:5e:a8:ee:5f:06:40:9b:63:52:4b:20:d6:8e:16:78:7d:f0: 7a:21:c7:59 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OHZuJhwDoRcZVNV8xy9oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4OGY1YjIxMGYzYzNlYjQyMDY1OTYwZTg1ZDA2MWU5ZDlk NjNhYjgwHhcNMjYwMTAyMTAxOTQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNzA5ODI0MTJlYWIzNzgwMmRlNWY3ZjY1NjY2ODNlMTI0ZWZlMDk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIOWbg7oFkP1rdlVh8W1iAeh4gP1 QUm+4uan6kRvXd3r5V9zTJ9nL51BWxnLQkuK58P4rUPI8u9HhQcNZxX4VaMZu7RY BcnyRBfSK1sXvhR/rnaFD5K0rPHUbi8woa57d1n+eKuXrg/QfRZ+rDFQnjNF5YFS Tldbmqi15lpt2S4eeWDYAz6K+KG+L0Pew6hnO9Y93Vim+H83cAS4G3zz75a9wcPN IQ6WT+gqoxb2RzR9Ebi7bvSslM7Or8hzi3/BhBcu2lUS18kyBw7ZnH3jT7tcOaq1 hMRRW7OMOWZ6veZuKH8zLXbp8fB3F72VyxWdHh5xDmOxy8/kqPxTYPnoHwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAcJgkEuqzeALeX39lZmg+Ek7+CXMB8GA1UdIwQY MBaAFHiPWyEPPD60IGWWDoXQYenZ1jq4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZUk5YklRODhQclFnWlpZT2hkQmg2ZG5XT3JnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9lMTAwYjUtNmYwYS00ZmU5LWJlZmIt YzRhY2I4OTY5YzQ5LzEvQndtQ1FTNnJONEF0NWZmMlZtYUQ0U1R2NEpjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9lMTAwYjUtNmYwYS00ZmU5LWJlZmItYzRhY2I4OTY5YzQ5 LzEvZUk5YklRODhQclFnWlpZT2hkQmg2ZG5XT3JnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVYiMA0G CSqGSIb3DQEBCwUAA4IBAQDX4kb+YRRUjbMZCqtUFBZO+lliqk5DUqu/vYCizz6B Nt/9V7mJtCWFQY0P55Xk4VAbRxdWdIa0S877DRGZr6hgCbxQdjkkw7Wp9mPaqFMk 4jhO6RYZBLiSPfVcRnr9V+3cWWhGhMWfM2UNoY65fjnhbwmLG9BNvXKJXBkzaHVU STrDTe/MfLzUF+IYCZT/1/Po54z9lON9JrJ2fFVrAaKbGynvoM1VTyKpMHSNJzAH jWEveue3TEVtCaA8sbf21rgeHbKxgFjAHC2SrJOPWl4tzKToLCiI3llmKG7lLxy/ A/ybnKhPOIDUFboVXqjuXwZAm2NSSyDWjhZ4ffB6IcdZ -----END CERTIFICATE-----Generated at Tue Jan 27 06:05:29 2026 by rpki-client