This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/BWPseGVRi3l-zfC0baLeQvt8npw.roa File: BWPseGVRi3l-zfC0baLeQvt8npw.roa (raw, json) Hash identifier: S5E2qZZQYizqFQAAmmLpDPTTQwoCIm+hzIsTiWyQI/w= Subject key identifier: 05:63:EC:78:65:51:8B:79:7E:CD:F0:B4:6D:A2:DE:42:FB:7C:9E:9C Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4 Certificate serial: 019B7CEE409F7F27371D0BF8C811A2C75C0C Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/BWPseGVRi3l-zfC0baLeQvt8npw.roa Signing time: Fri 02 Jan 2026 04:19:07 +0000 ROA not before: Fri 02 Jan 2026 04:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212980 IP address blocks: 82.163.56.0/22 maxlen: 22 92.114.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:40:9f:7f:27:37:1d:0b:f8:c8:11:a2:c7:5c:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4 Validity Not Before: Jan 2 04:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0563ec7865518b797ecdf0b46da2de42fb7c9e9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:22:cf:1e:77:78:7a:89:1d:2e:00:eb:13:55: 68:7f:b6:46:b9:00:ba:99:d8:6f:a0:1b:64:34:5b: a1:a1:07:4f:b2:7e:2a:8f:0d:c7:69:99:3c:f1:c0: 81:eb:3c:e1:c1:38:51:ec:4f:d2:32:82:66:ec:49: ca:a0:2f:8f:d8:15:e4:38:6a:33:1e:0e:96:d6:4e: 50:56:9b:c8:d9:53:5a:a2:5b:90:3d:da:1e:75:30: 8c:96:3a:10:a5:e6:8f:74:8d:41:77:c9:d0:89:3e: 59:bd:c5:17:93:fd:d2:fb:b9:92:33:27:18:25:7d: 9c:d5:d8:89:ea:a9:f5:7b:88:fa:89:42:f1:a2:19: 98:2c:c8:d9:8c:11:79:50:08:29:dc:6d:14:6d:74: 0d:8d:fd:ae:a1:59:66:aa:10:13:24:6a:ef:a9:6f: 0f:d9:1b:fc:c7:0a:62:4f:d2:6d:d5:7f:9e:98:d5: 23:2e:db:b6:bd:ff:32:5a:0c:ea:59:c4:e7:d2:80: 06:01:e9:f7:b2:2c:cf:7c:8d:19:02:0f:6d:f2:63: 83:e1:a9:32:a0:4e:b2:53:af:0f:de:c2:18:f6:ae: 08:08:21:e8:53:56:33:4c:fb:2b:dc:87:ab:35:bc: 14:47:fb:3b:b4:73:53:b9:3b:c7:51:ec:9a:b5:6f: a3:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:63:EC:78:65:51:8B:79:7E:CD:F0:B4:6D:A2:DE:42:FB:7C:9E:9C X509v3 Authority Key Identifier: keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/BWPseGVRi3l-zfC0baLeQvt8npw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.163.56.0/22 92.114.40.0/22 Signature Algorithm: sha256WithRSAEncryption 63:14:28:51:55:d1:38:25:7e:55:58:af:f1:a0:ca:d7:39:0c: 1e:9a:82:c7:70:71:0d:93:f3:34:d5:d1:41:39:89:5b:6d:33: 55:d1:2e:31:d1:bc:ea:95:32:37:4c:63:34:bc:cc:75:05:cc: ec:16:28:14:3d:17:0c:9c:d3:bd:5e:87:42:11:81:4e:41:03: 82:28:e7:b4:07:35:68:e6:a2:c8:c7:cc:0e:ab:61:f4:1e:ca: 9d:8e:2d:6f:2e:cc:0e:e6:cb:23:15:aa:e3:ec:87:b2:21:2f: 3e:78:68:d5:cd:75:f9:09:d0:4d:5a:bd:62:b6:e3:dd:39:4c: 29:b1:4c:1c:18:d1:8d:59:7b:c8:3f:d4:c1:91:ee:12:da:14: 9d:b3:b6:94:73:56:8f:e0:36:ae:27:6f:75:cb:bf:4c:54:d4: 6b:da:6b:8d:05:54:22:d9:f4:e5:01:1a:ff:a7:16:8e:30:f8: 00:dd:7a:74:b2:a9:3f:42:1f:22:2a:da:b1:c5:cd:af:d7:d6: 7a:3a:dd:83:1e:7d:dd:7e:76:65:21:aa:90:fc:5f:d6:cf:f0: 87:22:53:70:c2:71:e8:3f:ed:62:87:ff:6a:11:d9:f8:bd:9f: 45:6c:9d:2b:df:37:14:aa:ec:0d:6b:cb:c3:d2:9e:ce:07:bb: b8:9d:1a:ab -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt87kCffyc3HQv4yBGix1wMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2Y2NlMDZlNzBkZjk3MGQ5MGFiZmUzY2JlN2ZhODgyZjQ2 N2IxZTQwHhcNMjYwMTAyMDQxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNTYzZWM3ODY1NTE4Yjc5N2VjZGYwYjQ2ZGEyZGU0MmZiN2M5ZTljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4iLPHnd4eokdLgDrE1Vof7ZGuQC6 mdhvoBtkNFuhoQdPsn4qjw3HaZk88cCB6zzhwThR7E/SMoJm7EnKoC+P2BXkOGoz Hg6W1k5QVpvI2VNaoluQPdoedTCMljoQpeaPdI1Bd8nQiT5ZvcUXk/3S+7mSMycY JX2c1diJ6qn1e4j6iULxohmYLMjZjBF5UAgp3G0UbXQNjf2uoVlmqhATJGrvqW8P 2Rv8xwpiT9Jt1X+emNUjLtu2vf8yWgzqWcTn0oAGAen3sizPfI0ZAg9t8mOD4aky oE6yU68P3sIY9q4ICCHoU1YzTPsr3IerNbwUR/s7tHNTuTvHUeyatW+jrQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFAVj7HhlUYt5fs3wtG2i3kL7fJ6cMB8GA1UdIwQY MBaAFIbM4G5w35cNkKv+PL5/qIL0Z7HkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC82NmYwNWMtNzQxYy00NzIwLWJjN2Ut ODk3MTRhN2U4ZDU4LzEvQldQc2VHVlJpM2wtemZDMGJhTGVRdnQ4bnB3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC82NmYwNWMtNzQxYy00NzIwLWJjN2UtODk3MTRhN2U4ZDU4 LzEvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCUqM4AwQC XHIoMA0GCSqGSIb3DQEBCwUAA4IBAQBjFChRVdE4JX5VWK/xoMrXOQwemoLHcHEN k/M01dFBOYlbbTNV0S4x0bzqlTI3TGM0vMx1BczsFigUPRcMnNO9XodCEYFOQQOC KOe0BzVo5qLIx8wOq2H0Hsqdji1vLswO5ssjFarj7IeyIS8+eGjVzXX5CdBNWr1i tuPdOUwpsUwcGNGNWXvIP9TBke4S2hSds7aUc1aP4DauJ291y79MVNRr2muNBVQi 2fTlARr/pxaOMPgA3Xp0sqk/Qh8iKtqxxc2v19Z6Ot2DHn3dfnZlIaqQ/F/Wz/CH IlNwwnHoP+1ih/9qEdn4vZ9FbJ0r3zcUquwNa8vD0p7OB7u4nRqr -----END CERTIFICATE-----Generated at Sun Jan 25 07:36:28 2026 by rpki-client