This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/bzM0vXaT5a0wdLKXtzcW1KTh0E0.roa File: bzM0vXaT5a0wdLKXtzcW1KTh0E0.roa (raw, json) Hash identifier: HSw7OuKnO856MNi69RfSc3oV1YFcKv7OWcbxs0IZTX4= Subject key identifier: 6F:33:34:BD:76:93:E5:AD:30:74:B2:97:B7:37:16:D4:A4:E1:D0:4D Certificate issuer: /CN=c1bf8f3e609072889e74dd0fb4e27f9bac47b3b0 Certificate serial: 019B7C13302E58D71C4B5C77325A4D771922 Authority key identifier: C1:BF:8F:3E:60:90:72:88:9E:74:DD:0F:B4:E2:7F:9B:AC:47:B3:B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/bzM0vXaT5a0wdLKXtzcW1KTh0E0.roa Signing time: Fri 02 Jan 2026 00:19:50 +0000 ROA not before: Fri 02 Jan 2026 00:19:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35588 IP address blocks: 46.33.48.0/21 maxlen: 24 46.33.48.0/22 maxlen: 22 46.33.52.0/22 maxlen: 24 46.33.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.mft rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:30:2e:58:d7:1c:4b:5c:77:32:5a:4d:77:19:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1bf8f3e609072889e74dd0fb4e27f9bac47b3b0 Validity Not Before: Jan 2 00:19:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6f3334bd7693e5ad3074b297b73716d4a4e1d04d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:7d:a9:dc:13:62:34:49:e4:68:8c:48:25:fb: 6b:9e:41:fe:47:78:55:da:ec:a6:21:24:17:b3:b5: 90:8c:fc:c3:8a:db:b9:87:25:97:1c:e3:05:66:c4: ae:89:1f:ab:ee:e5:bc:ed:99:b2:44:4a:70:47:ff: 6b:56:72:fe:ba:32:e6:60:ea:5f:a7:d2:ca:ff:65: c1:de:99:8a:09:1a:17:0e:24:94:5e:b3:18:ea:7b: 5a:61:a4:9a:38:00:2d:ad:d1:11:c4:54:fa:f4:d9: 13:5e:55:34:bd:37:70:ff:4e:bf:0c:06:49:6f:6a: 82:20:dd:51:cf:87:67:6f:8b:07:22:dd:dd:8c:5f: ce:6e:78:66:d4:7f:6b:6d:5d:dd:cb:7d:4b:ae:60: bc:7a:4c:a4:52:50:dd:bf:71:bc:3e:4c:02:f5:ff: bb:91:fa:6b:f5:f6:47:02:89:0e:d9:53:40:17:e6: ad:f3:3f:a1:f9:cd:e9:42:d8:f6:da:61:af:53:b0: 91:14:e8:00:66:e7:39:9c:bc:bd:30:21:c8:1e:c4: 67:08:d2:4b:e0:1f:4b:35:6c:95:a4:c0:c6:61:10: 45:9e:84:3e:b6:10:a4:6c:5c:5d:b9:af:33:c1:fe: 7b:4a:1c:cd:a0:8a:ce:5d:f3:ee:ec:e4:26:cf:be: f8:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:33:34:BD:76:93:E5:AD:30:74:B2:97:B7:37:16:D4:A4:E1:D0:4D X509v3 Authority Key Identifier: keyid:C1:BF:8F:3E:60:90:72:88:9E:74:DD:0F:B4:E2:7F:9B:AC:47:B3:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/bzM0vXaT5a0wdLKXtzcW1KTh0E0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.33.48.0/21 Signature Algorithm: sha256WithRSAEncryption 3b:49:59:f3:92:13:f3:3d:07:2d:9f:6b:32:0e:88:1d:a9:8c: db:63:d4:f4:a7:2b:4f:91:b3:4c:bf:68:9a:fe:14:a8:88:42: 26:f1:18:a5:49:df:19:f7:2b:7d:3c:0f:f1:c8:4d:e2:43:7a: 91:10:ac:97:3b:87:d7:bf:55:bd:0f:72:25:ba:d5:3c:97:e8: 84:65:cb:1e:26:63:ff:3b:72:6d:c2:95:0d:c6:64:bc:8c:80: 82:ae:17:d1:9d:17:54:e2:45:b6:c0:f6:14:24:04:b3:22:93: c7:85:7d:a5:f4:35:3e:43:6e:72:fc:73:9c:b4:0d:1e:b2:4e: 21:2f:46:d6:2d:62:00:24:ea:2f:8d:8b:62:9f:7a:6b:5a:01: 5b:51:30:5e:ba:e2:63:69:ea:02:2b:e9:ef:a1:2e:97:62:00: e3:d6:19:03:6e:ee:29:5a:b6:f3:a7:ac:eb:a9:2d:3f:08:49: aa:36:c7:5a:ce:d0:f2:8b:77:81:52:fc:ac:a4:4b:ea:91:1f: ff:4c:e5:d8:ec:97:50:77:51:02:38:e4:d6:4f:e8:b5:75:5d: de:8c:58:38:d7:83:7c:e8:51:6f:8b:b7:63:88:96:8d:26:e9: 82:5e:d0:59:8f:0e:ae:0f:87:49:4d:4c:58:75:ac:89:ba:6c: f2:de:9f:33 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EzAuWNccS1x3MlpNdxkiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxYmY4ZjNlNjA5MDcyODg5ZTc0ZGQwZmI0ZTI3ZjliYWM0 N2IzYjAwHhcNMjYwMTAyMDAxOTUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZjMzMzRiZDc2OTNlNWFkMzA3NGIyOTdiNzM3MTZkNGE0ZTFkMDRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmX2p3BNiNEnkaIxIJftrnkH+R3hV 2uymISQXs7WQjPzDitu5hyWXHOMFZsSuiR+r7uW87ZmyREpwR/9rVnL+ujLmYOpf p9LK/2XB3pmKCRoXDiSUXrMY6ntaYaSaOAAtrdERxFT69NkTXlU0vTdw/06/DAZJ b2qCIN1Rz4dnb4sHIt3djF/Obnhm1H9rbV3dy31LrmC8ekykUlDdv3G8PkwC9f+7 kfpr9fZHAokO2VNAF+at8z+h+c3pQtj22mGvU7CRFOgAZuc5nLy9MCHIHsRnCNJL 4B9LNWyVpMDGYRBFnoQ+thCkbFxdua8zwf57ShzNoIrOXfPu7OQmz774rQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG8zNL12k+WtMHSyl7c3FtSk4dBNMB8GA1UdIwQY MBaAFMG/jz5gkHKInnTdD7Tif5usR7OwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2ItUFBtQ1Fjb2llZE4wUHRPSl9tNnhIczdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9hMWM2YzAtZTc1NC00NzllLTg1MWQt MGQwZGEwZDEwNDMyLzEvYnpNMHZYYVQ1YTB3ZExLWHR6Y1cxS1RoMEUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9hMWM2YzAtZTc1NC00NzllLTg1MWQtMGQwZGEwZDEwNDMy LzEvd2ItUFBtQ1Fjb2llZE4wUHRPSl9tNnhIczdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDLiEwMA0G CSqGSIb3DQEBCwUAA4IBAQA7SVnzkhPzPQctn2syDogdqYzbY9T0pytPkbNMv2ia /hSoiEIm8RilSd8Z9yt9PA/xyE3iQ3qREKyXO4fXv1W9D3IlutU8l+iEZcseJmP/ O3JtwpUNxmS8jICCrhfRnRdU4kW2wPYUJASzIpPHhX2l9DU+Q25y/HOctA0esk4h L0bWLWIAJOovjYtin3prWgFbUTBeuuJjaeoCK+nvoS6XYgDj1hkDbu4pWrbzp6zr qS0/CEmqNsdaztDyi3eBUvyspEvqkR//TOXY7JdQd1ECOOTWT+i1dV3ejFg414N8 6FFvi7djiJaNJumCXtBZjw6uD4dJTUxYdayJumzy3p8z -----END CERTIFICATE-----Generated at Mon Jan 26 01:41:56 2026 by rpki-client