This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/BSwE4k_qFyqxMrdShjqvF4jnTL8.roa File: BSwE4k_qFyqxMrdShjqvF4jnTL8.roa (raw, json) Hash identifier: oMo6L40X4qe6QWPhrSHg9ULY1MyzZvPQEPrBk1VTYF0= Subject key identifier: 05:2C:04:E2:4F:EA:17:2A:B1:32:B7:52:86:3A:AF:17:88:E7:4C:BF Certificate issuer: /CN=8728f400d83d49aaa6e9320ca2cbfa93da5be79b Certificate serial: 019B7B35C0BE5661885E4AED8B5C1E573EB2 Authority key identifier: 87:28:F4:00:D8:3D:49:AA:A6:E9:32:0C:A2:CB:FA:93:DA:5B:E7:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hyj0ANg9Saqm6TIMosv6k9pb55s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/BSwE4k_qFyqxMrdShjqvF4jnTL8.roa Signing time: Thu 01 Jan 2026 20:17:58 +0000 ROA not before: Thu 01 Jan 2026 20:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204986 IP address blocks: 185.233.180.0/22 maxlen: 22 185.233.180.0/23 maxlen: 23 185.233.180.0/24 maxlen: 24 185.233.181.0/24 maxlen: 24 185.233.182.0/23 maxlen: 23 185.233.182.0/24 maxlen: 24 185.233.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.crl rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.mft rsync://rpki.ripe.net/repository/DEFAULT/hyj0ANg9Saqm6TIMosv6k9pb55s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:c0:be:56:61:88:5e:4a:ed:8b:5c:1e:57:3e:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8728f400d83d49aaa6e9320ca2cbfa93da5be79b Validity Not Before: Jan 1 20:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=052c04e24fea172ab132b752863aaf1788e74cbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:2a:a5:78:f3:06:68:c1:d1:fd:fa:70:ff:f3: 54:83:37:23:5d:14:dc:5a:3d:ab:c9:13:f4:7d:3b: b3:80:a1:25:a2:41:90:a6:c4:20:18:77:e1:23:cc: ad:97:88:4a:d3:a5:1e:b3:35:32:23:8e:05:72:e2: 04:a4:e0:99:66:3f:e4:76:b7:62:17:31:c2:c3:a5: 5c:5e:75:e3:63:f7:9b:47:bb:2b:b2:f4:60:6a:57: 32:50:63:54:69:d9:5b:de:26:f8:a4:44:34:6c:72: 3c:7f:61:45:8c:99:3a:a4:97:bc:5a:18:32:16:2d: df:b1:b9:0f:02:b7:35:6e:ec:7e:c0:cd:41:d6:d6: 0e:fe:f3:28:ac:1a:54:f3:f8:53:05:b8:eb:3e:2a: 6b:64:ce:8b:09:b8:ad:2f:27:98:f9:b8:1f:f5:0e: 8e:ea:8a:48:a6:14:fd:9b:7b:fb:8f:4d:2f:52:bd: 49:ca:2a:01:a9:25:5b:6b:0a:62:5a:a9:be:c5:2d: 71:4b:69:0d:bf:38:7b:7b:56:05:23:6c:e9:d7:64: cd:67:62:81:ec:29:ae:3a:b9:51:bc:da:53:b3:23: 7c:7d:38:34:e5:d1:5d:17:68:87:0c:bb:db:7d:37: 31:84:1c:5e:6d:16:31:e9:c4:58:69:1a:d8:e1:af: ae:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:2C:04:E2:4F:EA:17:2A:B1:32:B7:52:86:3A:AF:17:88:E7:4C:BF X509v3 Authority Key Identifier: keyid:87:28:F4:00:D8:3D:49:AA:A6:E9:32:0C:A2:CB:FA:93:DA:5B:E7:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hyj0ANg9Saqm6TIMosv6k9pb55s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/BSwE4k_qFyqxMrdShjqvF4jnTL8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.233.180.0/22 Signature Algorithm: sha256WithRSAEncryption 14:d5:45:71:f6:3d:3d:ef:72:4e:7b:e9:92:b0:d1:f1:a5:bd: 61:f0:a9:21:66:60:8e:50:1b:75:73:5c:19:a4:99:57:23:0b: 51:73:e6:94:48:dc:63:21:74:71:ee:af:b3:d6:c3:8a:a0:f9: 59:89:3e:2a:ce:69:70:0c:3d:f4:ad:42:7e:61:84:ce:aa:b6: 9e:d2:d2:28:93:5b:e5:f1:15:ba:f2:42:2e:67:2d:6d:68:d4: 0b:ff:0c:d5:96:28:dc:74:ef:33:51:1d:e2:c7:a0:6a:ef:9e: ba:b1:bb:d9:c8:93:cd:ea:78:1f:ad:50:8b:18:5f:fa:65:17: d8:41:0e:f0:2b:8e:46:31:fc:0a:cc:69:57:80:e9:0c:70:6a: 6f:80:3b:f0:8c:b9:44:03:c2:1f:15:7d:ca:5b:66:e3:27:dd: 5f:22:36:c3:f8:3b:e8:be:b5:b5:fe:85:b4:d8:a0:c0:f9:16: 5f:f2:94:88:3c:38:c7:fc:fb:7c:de:a9:ce:78:23:24:92:89: 77:b5:28:91:41:73:39:37:ad:e2:02:86:32:d9:f1:b5:26:df: b7:38:6c:3c:31:b7:5a:37:15:d7:d2:92:5c:ef:8a:73:a6:da: 7a:3e:73:0b:53:46:23:45:40:cf:16:b0:d9:02:4c:19:9c:cb: 76:8b:68:91 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NcC+VmGIXkrti1weVz6yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3MjhmNDAwZDgzZDQ5YWFhNmU5MzIwY2EyY2JmYTkzZGE1 YmU3OWIwHhcNMjYwMTAxMjAxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNTJjMDRlMjRmZWExNzJhYjEzMmI3NTI4NjNhYWYxNzg4ZTc0Y2JmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyqlePMGaMHR/fpw//NUgzcjXRTc Wj2ryRP0fTuzgKElokGQpsQgGHfhI8ytl4hK06UeszUyI44FcuIEpOCZZj/kdrdi FzHCw6VcXnXjY/ebR7srsvRgalcyUGNUadlb3ib4pEQ0bHI8f2FFjJk6pJe8Whgy Fi3fsbkPArc1bux+wM1B1tYO/vMorBpU8/hTBbjrPiprZM6LCbitLyeY+bgf9Q6O 6opIphT9m3v7j00vUr1JyioBqSVbawpiWqm+xS1xS2kNvzh7e1YFI2zp12TNZ2KB 7CmuOrlRvNpTsyN8fTg05dFdF2iHDLvbfTcxhBxebRYx6cRYaRrY4a+uUwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAUsBOJP6hcqsTK3UoY6rxeI50y/MB8GA1UdIwQY MBaAFIco9ADYPUmqpukyDKLL+pPaW+ebMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHlqMEFOZzlTYXFtNlRJTW9zdjZrOXBiNTVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8zM2YxYWItNmEzNS00ZTYzLThiZGMt YTI1ZTE0ZDUzOWEyLzEvQlN3RTRrX3FGeXF4TXJkU2hqcXZGNGpuVEw4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC8zM2YxYWItNmEzNS00ZTYzLThiZGMtYTI1ZTE0ZDUzOWEy LzEvaHlqMEFOZzlTYXFtNlRJTW9zdjZrOXBiNTVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuem0MA0G CSqGSIb3DQEBCwUAA4IBAQAU1UVx9j0973JOe+mSsNHxpb1h8KkhZmCOUBt1c1wZ pJlXIwtRc+aUSNxjIXRx7q+z1sOKoPlZiT4qzmlwDD30rUJ+YYTOqrae0tIok1vl 8RW68kIuZy1taNQL/wzVlijcdO8zUR3ix6Bq7566sbvZyJPN6ngfrVCLGF/6ZRfY QQ7wK45GMfwKzGlXgOkMcGpvgDvwjLlEA8IfFX3KW2bjJ91fIjbD+DvovrW1/oW0 2KDA+RZf8pSIPDjH/Pt83qnOeCMkkol3tSiRQXM5N63iAoYy2fG1Jt+3OGw8Mbda NxXX0pJc74pzptp6PnMLU0YjRUDPFrDZAkwZnMt2i2iR -----END CERTIFICATE-----Generated at Mon Jan 26 03:06:13 2026 by rpki-client