This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/BwwsX5CA49DLpcT7EZANR8AOmBk.roa File: BwwsX5CA49DLpcT7EZANR8AOmBk.roa (raw, json) Hash identifier: xROcBtDrvn9mIzufXpFQnh5qUEHfuMjeYS0C0sO/iyE= Subject key identifier: 07:0C:2C:5F:90:80:E3:D0:CB:A5:C4:FB:11:90:0D:47:C0:0E:98:19 Certificate issuer: /CN=234b54b119a7b3eff153085b7315507cd8513a0f Certificate serial: 019B7AC9421BF051B6F3D28CC96BD488CE13 Authority key identifier: 23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/BwwsX5CA49DLpcT7EZANR8AOmBk.roa Signing time: Thu 01 Jan 2026 18:19:28 +0000 ROA not before: Thu 01 Jan 2026 18:19:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214561 IP address blocks: 2a04:5b81:21b0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:42:1b:f0:51:b6:f3:d2:8c:c9:6b:d4:88:ce:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=234b54b119a7b3eff153085b7315507cd8513a0f Validity Not Before: Jan 1 18:19:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=070c2c5f9080e3d0cba5c4fb11900d47c00e9819 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:14:be:b9:f4:d3:57:c8:49:c6:7f:bd:7c:6f: bf:26:0f:06:98:88:eb:d7:ec:bb:f3:b1:db:43:72: 73:f5:09:b9:4f:22:f5:3f:c6:d3:7f:8c:f2:62:ec: 23:3e:f7:2f:06:78:7d:04:0c:85:8c:f9:df:ea:0a: 39:6e:20:73:3b:bc:30:b9:c2:87:b6:57:41:3f:04: 58:c2:e1:c4:26:47:e2:26:90:40:ed:65:ed:68:12: cf:98:66:3c:5e:a1:54:dd:73:2c:ab:f8:10:0b:39: 2a:2d:60:df:a0:b8:b5:41:1c:3c:02:c0:39:e4:30: ff:72:2d:62:32:ed:e3:77:35:30:45:48:c6:5b:16: dd:97:b4:d4:f1:5c:be:47:ca:c6:b5:3b:c9:0f:be: 18:43:42:a4:22:cc:2d:6e:11:4a:ce:52:6d:da:a2: 93:a0:9b:25:af:d0:14:55:81:80:21:88:45:f5:e2: 1d:15:98:02:6d:15:45:a8:6c:e8:6d:c2:e9:6a:1e: 32:ef:d5:c1:19:58:74:23:71:eb:ba:e9:fb:64:4b: 95:00:38:ab:dc:71:af:3e:ca:4e:59:b7:20:e4:77: a3:21:d6:df:4a:fc:cb:f9:33:c8:d6:4b:ec:17:b9: d2:d1:77:24:7b:f9:db:ae:b0:51:b1:12:e2:c5:a5: 61:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:0C:2C:5F:90:80:E3:D0:CB:A5:C4:FB:11:90:0D:47:C0:0E:98:19 X509v3 Authority Key Identifier: keyid:23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/BwwsX5CA49DLpcT7EZANR8AOmBk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a04:5b81:21b0::/44 Signature Algorithm: sha256WithRSAEncryption aa:b1:27:54:7e:4e:a6:8f:3d:eb:98:2b:15:82:24:a4:29:b9: cf:ef:9d:a7:8e:b6:7e:98:e8:e1:87:8b:1b:85:1e:78:3d:5e: 7a:d1:5d:4c:32:98:ec:8c:54:ae:56:0f:ce:a3:fd:91:01:de: 93:16:b9:8a:48:f7:e3:07:52:c9:72:84:d6:e9:d3:90:03:78: de:c2:c3:db:61:02:aa:20:19:94:42:3d:3e:e9:0b:fd:a9:19: 1b:71:b2:21:44:de:cc:ae:e0:cd:e3:e5:e8:41:d0:d0:46:1c: 05:af:1b:97:e2:c7:0b:a7:46:40:fc:cd:51:5c:61:05:57:49: 06:18:ca:f5:18:f2:29:38:c0:a3:17:a2:8b:8a:4c:c0:4d:ad: b3:cf:89:bd:62:17:35:b7:c8:c8:bc:34:df:8c:ba:90:a7:8d: 42:7a:df:b4:b2:7d:bd:a4:78:08:78:f3:cb:cf:38:63:22:e0: de:04:48:48:b2:f9:1c:7e:9f:7f:ad:ea:c2:b6:bc:08:90:c8: f0:2d:33:18:58:af:4a:de:13:e4:48:ae:24:85:0b:d8:05:05: a0:74:a6:49:25:e1:e5:d5:36:98:ff:8a:ac:43:e3:a3:4b:68: 3f:a7:51:31:25:f6:e7:15:21:e6:78:6b:72:ef:21:28:85:a6: 9d:62:39:ca -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt6yUIb8FG289KMyWvUiM4TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNGI1NGIxMTlhN2IzZWZmMTUzMDg1YjczMTU1MDdjZDg1 MTNhMGYwHhcNMjYwMTAxMTgxOTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNzBjMmM1ZjkwODBlM2QwY2JhNWM0ZmIxMTkwMGQ0N2MwMGU5ODE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRS+ufTTV8hJxn+9fG+/Jg8GmIjr 1+y787HbQ3Jz9Qm5TyL1P8bTf4zyYuwjPvcvBnh9BAyFjPnf6go5biBzO7wwucKH tldBPwRYwuHEJkfiJpBA7WXtaBLPmGY8XqFU3XMsq/gQCzkqLWDfoLi1QRw8AsA5 5DD/ci1iMu3jdzUwRUjGWxbdl7TU8Vy+R8rGtTvJD74YQ0KkIswtbhFKzlJt2qKT oJslr9AUVYGAIYhF9eIdFZgCbRVFqGzobcLpah4y79XBGVh0I3Hruun7ZEuVADir 3HGvPspOWbcg5HejIdbfSvzL+TPI1kvsF7nS0Xcke/nbrrBRsRLixaVhiQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFAcMLF+QgOPQy6XE+xGQDUfADpgZMB8GA1UdIwQY MBaAFCNLVLEZp7Pv8VMIW3MVUHzYUToPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9iYzcwNzgtMWVlNC00MmYxLWJjMzQt MWQyMWQxYmNlM2ZlLzEvQnd3c1g1Q0E0OURMcGNUN0VaQU5SOEFPbUJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9iYzcwNzgtMWVlNC00MmYxLWJjMzQtMWQyMWQxYmNlM2Zl LzEvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgRbgSGw MA0GCSqGSIb3DQEBCwUAA4IBAQCqsSdUfk6mjz3rmCsVgiSkKbnP752njrZ+mOjh h4sbhR54PV560V1MMpjsjFSuVg/Oo/2RAd6TFrmKSPfjB1LJcoTW6dOQA3jewsPb YQKqIBmUQj0+6Qv9qRkbcbIhRN7MruDN4+XoQdDQRhwFrxuX4scLp0ZA/M1RXGEF V0kGGMr1GPIpOMCjF6KLikzATa2zz4m9Yhc1t8jIvDTfjLqQp41Cet+0sn29pHgI ePPLzzhjIuDeBEhIsvkcfp9/rerCtrwIkMjwLTMYWK9K3hPkSK4khQvYBQWgdKZJ JeHl1TaY/4qsQ+OjS2g/p1ExJfbnFSHmeGty7yEohaadYjnK -----END CERTIFICATE-----Generated at Sun Jan 25 12:03:00 2026 by rpki-client