This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/ff5ec9-e22e-4030-8334-d5dd46aaa401/1/bwbnq1HdA4AZzkAemAt6HkUyTs4.roa File: bwbnq1HdA4AZzkAemAt6HkUyTs4.roa (raw, json) Hash identifier: wdqCH2TaxxBuj63rE4lc5Ctuv7BNWRJSr9E1thWFs6s= Subject key identifier: 6F:06:E7:AB:51:DD:03:80:19:CE:40:1E:98:0B:7A:1E:45:32:4E:CE Certificate issuer: /CN=555d742d527f9700cc0047d7d61bfd822878db1f Certificate serial: 019B79ED3A9CD983694D4BD2B8856C28C3F7 Authority key identifier: 55:5D:74:2D:52:7F:97:00:CC:00:47:D7:D6:1B:FD:82:28:78:DB:1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VV10LVJ_lwDMAEfX1hv9gih42x8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/ff5ec9-e22e-4030-8334-d5dd46aaa401/1/bwbnq1HdA4AZzkAemAt6HkUyTs4.roa Signing time: Thu 01 Jan 2026 14:19:08 +0000 ROA not before: Thu 01 Jan 2026 14:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16276 IP address blocks: 194.147.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/ff5ec9-e22e-4030-8334-d5dd46aaa401/1/VV10LVJ_lwDMAEfX1hv9gih42x8.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/ff5ec9-e22e-4030-8334-d5dd46aaa401/1/VV10LVJ_lwDMAEfX1hv9gih42x8.mft rsync://rpki.ripe.net/repository/DEFAULT/VV10LVJ_lwDMAEfX1hv9gih42x8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:3a:9c:d9:83:69:4d:4b:d2:b8:85:6c:28:c3:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=555d742d527f9700cc0047d7d61bfd822878db1f Validity Not Before: Jan 1 14:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6f06e7ab51dd038019ce401e980b7a1e45324ece Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:63:df:51:2c:90:4b:c6:5d:6a:01:da:c6:d3: 5e:f4:e0:92:be:5c:36:dc:2c:92:0b:fe:a0:fa:9f: 88:b5:12:98:c1:a3:a3:e2:6c:5b:10:52:82:92:dc: b6:10:7e:70:1f:6a:ae:ba:0c:1f:f5:8f:f9:e6:ea: 0b:63:8f:50:64:68:6f:a5:22:e5:04:31:44:2b:fc: cf:c9:f0:8a:3c:5a:6a:e8:e3:95:bf:1b:c5:b9:96: 7c:8b:8b:dc:a7:d6:3e:7d:76:ce:d5:6d:3d:be:81: 60:a4:85:e4:f9:9d:cf:b9:c8:3d:ae:78:c6:44:4c: a4:20:46:c3:e2:7a:20:c5:75:cc:a1:0b:e0:31:25: a5:cd:e1:4b:c8:7f:94:83:35:6f:02:0b:37:e2:66: 8c:38:50:ce:84:9b:eb:b7:e9:c1:c6:ca:a2:7a:b4: 77:3f:e3:7b:82:43:db:0e:e6:e2:61:29:08:d7:09: 68:7e:38:f3:a7:3c:1d:da:15:57:10:f0:eb:d9:2b: 9c:94:8f:71:a5:50:d5:43:29:70:01:0a:36:0f:ec: 3e:aa:52:0e:8f:bc:3a:ab:fd:b4:31:ae:f6:fc:3c: 11:4e:b2:98:8e:f9:f1:5a:c4:60:76:3f:9d:46:88: 38:ca:f0:77:5c:03:7b:a9:fc:fb:cb:b4:42:e4:24: 76:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:06:E7:AB:51:DD:03:80:19:CE:40:1E:98:0B:7A:1E:45:32:4E:CE X509v3 Authority Key Identifier: keyid:55:5D:74:2D:52:7F:97:00:CC:00:47:D7:D6:1B:FD:82:28:78:DB:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VV10LVJ_lwDMAEfX1hv9gih42x8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ff5ec9-e22e-4030-8334-d5dd46aaa401/1/bwbnq1HdA4AZzkAemAt6HkUyTs4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ff5ec9-e22e-4030-8334-d5dd46aaa401/1/VV10LVJ_lwDMAEfX1hv9gih42x8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.147.159.0/24 Signature Algorithm: sha256WithRSAEncryption ae:bd:f4:7f:52:1b:ec:04:ee:4f:25:5e:c1:cc:97:28:5f:02: 1d:70:1e:3f:c7:f1:99:51:fc:ff:41:68:35:cf:d8:9e:98:4e: 72:f8:50:68:70:c8:5e:15:f9:55:41:9e:18:07:f7:9c:99:a5: 77:75:15:d9:ea:bd:19:0d:21:6e:5d:93:42:4c:05:71:c0:9d: df:b9:ec:41:8b:3b:f0:29:a0:6b:b0:18:5a:f2:8c:9c:98:a8: 16:9a:14:3a:05:42:7c:3f:88:10:87:6f:ab:ee:2f:9b:6a:ef: 4a:55:77:f2:7b:6c:71:8c:97:60:33:12:e7:7a:b1:91:ae:de: 4c:e9:c0:3b:9b:c8:77:30:2a:ff:6f:fa:e6:1f:95:a2:5c:8d: b4:c6:91:0f:09:81:14:e8:a4:f8:05:eb:88:89:04:97:7c:0c: c8:03:6a:d9:a3:6a:67:b6:38:a7:b1:1e:af:05:09:95:69:61: 49:3b:e4:2c:48:12:04:0e:93:3c:c0:2c:74:f5:38:57:b5:17: 8b:fb:54:c1:63:8d:ee:63:39:bf:e5:1f:be:bd:0e:9b:7f:56: d4:72:ac:99:ad:ad:a1:23:35:fe:13:ba:b2:bf:15:6a:9e:3a: af:9c:c7:3b:5d:d1:f8:33:85:13:29:e6:9e:27:cc:77:0d:bc: 11:d0:de:8f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57Tqc2YNpTUvSuIVsKMP3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1NWQ3NDJkNTI3Zjk3MDBjYzAwNDdkN2Q2MWJmZDgyMjg3 OGRiMWYwHhcNMjYwMTAxMTQxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZjA2ZTdhYjUxZGQwMzgwMTljZTQwMWU5ODBiN2ExZTQ1MzI0ZWNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWPfUSyQS8ZdagHaxtNe9OCSvlw2 3CySC/6g+p+ItRKYwaOj4mxbEFKCkty2EH5wH2quugwf9Y/55uoLY49QZGhvpSLl BDFEK/zPyfCKPFpq6OOVvxvFuZZ8i4vcp9Y+fXbO1W09voFgpIXk+Z3Pucg9rnjG REykIEbD4nogxXXMoQvgMSWlzeFLyH+UgzVvAgs34maMOFDOhJvrt+nBxsqierR3 P+N7gkPbDubiYSkI1wlofjjzpzwd2hVXEPDr2SuclI9xpVDVQylwAQo2D+w+qlIO j7w6q/20Ma72/DwRTrKYjvnxWsRgdj+dRog4yvB3XAN7qfz7y7RC5CR2uQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG8G56tR3QOAGc5AHpgLeh5FMk7OMB8GA1UdIwQY MBaAFFVddC1Sf5cAzABH19Yb/YIoeNsfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlYxMExWSl9sd0RNQUVmWDFodjlnaWg0Mng4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9mZjVlYzktZTIyZS00MDMwLTgzMzQt ZDVkZDQ2YWFhNDAxLzEvYndibnExSGRBNEFaemtBZW1BdDZIa1V5VHM0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS9mZjVlYzktZTIyZS00MDMwLTgzMzQtZDVkZDQ2YWFhNDAx LzEvVlYxMExWSl9sd0RNQUVmWDFodjlnaWg0Mng4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwpOfMA0G CSqGSIb3DQEBCwUAA4IBAQCuvfR/UhvsBO5PJV7BzJcoXwIdcB4/x/GZUfz/QWg1 z9iemE5y+FBocMheFflVQZ4YB/ecmaV3dRXZ6r0ZDSFuXZNCTAVxwJ3fuexBizvw KaBrsBha8oycmKgWmhQ6BUJ8P4gQh2+r7i+bau9KVXfye2xxjJdgMxLnerGRrt5M 6cA7m8h3MCr/b/rmH5WiXI20xpEPCYEU6KT4BeuIiQSXfAzIA2rZo2pntjinsR6v BQmVaWFJO+QsSBIEDpM8wCx09ThXtReL+1TBY43uYzm/5R++vQ6bf1bUcqyZra2h IzX+E7qyvxVqnjqvnMc7XdH4M4UTKeaeJ8x3DbwR0N6P -----END CERTIFICATE-----Generated at Sun Jan 25 09:18:58 2026 by rpki-client