This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/bwP4-xNa1bychjvLUhNdqJpwnJs.roa File: bwP4-xNa1bychjvLUhNdqJpwnJs.roa (raw, json) Hash identifier: 5lsd8W+jVQNaR8ng6KSZRDsMkhoT/mI5u8+/ogalpgU= Subject key identifier: 6F:03:F8:FB:13:5A:D5:BC:9C:86:3B:CB:52:13:5D:A8:9A:70:9C:9B Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019BEC17F2F72F2DCB54DA02C88A9B4670ED Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/bwP4-xNa1bychjvLUhNdqJpwnJs.roa Signing time: Fri 23 Jan 2026 18:22:31 +0000 ROA not before: Fri 23 Jan 2026 18:22:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49581 IP address blocks: 5.83.131.0/24 maxlen: 24 5.83.132.0/24 maxlen: 24 5.175.214.0/24 maxlen: 24 5.175.216.0/24 maxlen: 24 5.175.218.0/24 maxlen: 24 5.175.219.0/24 maxlen: 24 5.231.26.0/24 maxlen: 24 5.231.105.0/24 maxlen: 24 5.231.242.0/24 maxlen: 24 83.243.86.0/24 maxlen: 24 89.106.69.0/24 maxlen: 24 89.106.71.0/24 maxlen: 24 2a02:2fc0:11::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ec:17:f2:f7:2f:2d:cb:54:da:02:c8:8a:9b:46:70:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Jan 23 18:22:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6f03f8fb135ad5bc9c863bcb52135da89a709c9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1c:19:e3:3a:20:eb:d4:4f:60:c2:c8:04:c9: 0f:c0:5b:f0:63:82:b3:da:9c:54:7b:db:04:5c:c7: 41:7f:f0:18:ec:42:da:22:f6:a9:7b:c7:27:b2:d7: ff:a8:2d:83:95:b2:98:c8:5e:67:fe:26:1c:0a:b4: a8:b4:e3:cb:3b:bb:cf:97:68:a9:6e:92:95:f4:9f: 02:5a:ac:9c:cb:76:b5:e0:71:51:d8:a9:09:8e:b3: 09:f0:ec:8f:1a:7a:0b:d6:68:ac:c4:1d:07:d4:a6: 79:01:60:d3:7d:5a:9e:5d:eb:83:f5:57:7f:c6:77: d9:1e:ee:af:a7:ab:8c:bd:62:57:71:14:1c:34:ab: 10:eb:5e:0b:81:25:57:0d:99:41:a1:a4:6c:3f:2b: 39:63:8a:9b:6f:27:a1:cf:af:aa:06:f6:79:46:59: f5:24:a4:c8:ac:76:58:a4:ae:9c:17:46:40:36:65: 4e:5f:5f:ba:64:0c:58:1a:1a:fc:f7:12:fb:18:80: fd:3c:b6:90:f9:83:fa:44:dc:d9:6d:bc:64:d5:d8: 7e:c3:a2:19:81:ff:a2:e2:08:c0:91:bb:07:0b:e7: a5:a3:ee:ed:08:14:e8:87:3d:49:15:c1:67:99:9f: 81:4d:a8:e3:21:31:f2:25:79:3d:91:65:54:66:14: 9f:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:03:F8:FB:13:5A:D5:BC:9C:86:3B:CB:52:13:5D:A8:9A:70:9C:9B X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/bwP4-xNa1bychjvLUhNdqJpwnJs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.83.131.0-5.83.132.255 5.175.214.0/24 5.175.216.0/24 5.175.218.0/23 5.231.26.0/24 5.231.105.0/24 5.231.242.0/24 83.243.86.0/24 89.106.69.0/24 89.106.71.0/24 IPv6: 2a02:2fc0:11::/48 Signature Algorithm: sha256WithRSAEncryption ba:e0:0d:23:ce:62:bf:c4:72:d5:9e:8a:d6:22:e2:76:38:d2: 4d:f1:df:63:94:fb:96:74:6e:55:21:5e:ab:93:a8:bd:94:5a: 55:fb:2c:81:71:83:0d:1c:9d:87:26:43:3e:bd:68:d5:a4:fe: 6c:69:67:aa:b5:f4:de:96:c3:1d:e7:0f:39:6a:4c:03:6f:f6: 77:1b:8d:c6:d3:7c:0c:5f:6e:0a:17:47:6e:7d:18:cc:e0:42: 3d:5f:3f:a0:d1:9e:5b:97:4e:c9:c4:69:ce:9f:f4:22:1f:bd: a8:0b:94:19:fc:11:c7:2d:c8:e8:b6:4c:f0:2b:75:30:25:4d: 51:56:16:c2:b9:d9:e4:dd:e2:1c:26:89:13:7f:5c:5b:df:22: 77:74:d8:c4:b3:2d:1f:1c:f3:76:d3:10:e2:e4:8e:95:bc:17: cf:3c:4a:c9:c7:81:4c:99:a6:c2:6a:34:a5:c7:be:a7:fb:11: f6:ac:43:df:1f:c2:85:c7:ad:78:a2:7a:04:4c:fa:54:67:71: 58:fb:f2:98:85:47:0d:2d:89:91:8a:f3:73:d0:93:81:55:2c: 08:e3:b2:42:9e:9e:be:01:21:60:44:af:f8:95:d8:8b:04:ac: 3e:46:9d:c2:28:5a:19:49:96:89:54:c2:c8:e0:d2:7d:25:95: bd:0a:0a:66 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgISAZvsF/L3Ly3LVNoCyIqbRnDtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjYwMTIzMTgyMjMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZjAzZjhmYjEzNWFkNWJjOWM4NjNiY2I1MjEzNWRhODlhNzA5YzliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRwZ4zog69RPYMLIBMkPwFvwY4Kz 2pxUe9sEXMdBf/AY7ELaIvape8cnstf/qC2DlbKYyF5n/iYcCrSotOPLO7vPl2ip bpKV9J8CWqycy3a14HFR2KkJjrMJ8OyPGnoL1misxB0H1KZ5AWDTfVqeXeuD9Vd/ xnfZHu6vp6uMvWJXcRQcNKsQ614LgSVXDZlBoaRsPys5Y4qbbyehz6+qBvZ5Rln1 JKTIrHZYpK6cF0ZANmVOX1+6ZAxYGhr89xL7GID9PLaQ+YP6RNzZbbxk1dh+w6IZ gf+i4gjAkbsHC+elo+7tCBTohz1JFcFnmZ+BTajjITHyJXk9kWVUZhSf0wIDAQAB o4ICWDCCAlQwHQYDVR0OBBYEFG8D+PsTWtW8nIY7y1ITXaiacJybMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvYndQNC14TmExYnljaGp2TFVoTmRxSnB3bkpzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMG4GCCsGAQUFBwEHAQH/BF8wXTBKBAIAATBEMAwDBAAFU4MD BAAFU4QDBAAFr9YDBAAFr9gDBAEFr9oDBAAF5xoDBAAF52kDBAAF5/IDBABT81YD BABZakUDBABZakcwDwQCAAIwCQMHACoCL8AAETANBgkqhkiG9w0BAQsFAAOCAQEA uuANI85iv8Ry1Z6K1iLidjjSTfHfY5T7lnRuVSFeq5OovZRaVfssgXGDDRydhyZD Pr1o1aT+bGlnqrX03pbDHecPOWpMA2/2dxuNxtN8DF9uChdHbn0YzOBCPV8/oNGe W5dOycRpzp/0Ih+9qAuUGfwRxy3I6LZM8Ct1MCVNUVYWwrnZ5N3iHCaJE39cW98i d3TYxLMtHxzzdtMQ4uSOlbwXzzxKyceBTJmmwmo0pce+p/sR9qxD3x/ChceteKJ6 BEz6VGdxWPvymIVHDS2JkYrzc9CTgVUsCOOyQp6evgEhYESv+JXYiwSsPkadwiha GUmWiVTCyODSfSWVvQoKZg== -----END CERTIFICATE-----Generated at Sun Jan 25 07:08:26 2026 by rpki-client