This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/BX-wklLdDD8XzxHJksQRCy4pE1o.roa File: BX-wklLdDD8XzxHJksQRCy4pE1o.roa (raw, json) Hash identifier: uIUm6XT6o4/miIBu0V3ZQSH97iCpXkbo1bhxbJYRoCE= Subject key identifier: 05:7F:B0:92:52:DD:0C:3F:17:CF:11:C9:92:C4:11:0B:2E:29:13:5A Certificate issuer: /CN=1c6c48cccce321ec18702957b396381a1f1a0410 Certificate serial: 019B78350D63A2129B133CD0773C3DB34EE6 Authority key identifier: 1C:6C:48:CC:CC:E3:21:EC:18:70:29:57:B3:96:38:1A:1F:1A:04:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HGxIzMzjIewYcClXs5Y4Gh8aBBA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/BX-wklLdDD8XzxHJksQRCy4pE1o.roa Signing time: Thu 01 Jan 2026 06:18:21 +0000 ROA not before: Thu 01 Jan 2026 06:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48642 IP address blocks: 5.43.128.0/19 maxlen: 19 5.199.192.0/19 maxlen: 19 45.131.56.0/22 maxlen: 22 46.36.0.0/19 maxlen: 19 82.112.32.0/19 maxlen: 19 88.218.212.0/22 maxlen: 22 91.108.168.0/21 maxlen: 21 91.211.20.0/22 maxlen: 22 91.227.50.0/23 maxlen: 23 91.231.196.0/22 maxlen: 22 93.90.96.0/20 maxlen: 20 94.230.128.0/20 maxlen: 20 94.230.142.0/23 maxlen: 23 109.74.160.0/20 maxlen: 20 134.255.128.0/19 maxlen: 19 185.2.104.0/22 maxlen: 22 185.59.56.0/22 maxlen: 22 185.60.212.0/22 maxlen: 22 185.132.28.0/22 maxlen: 22 185.162.204.0/22 maxlen: 22 185.201.88.0/22 maxlen: 22 185.204.156.0/22 maxlen: 22 185.214.252.0/22 maxlen: 22 185.229.192.0/22 maxlen: 22 185.252.228.0/22 maxlen: 22 193.46.244.0/22 maxlen: 22 193.168.176.0/22 maxlen: 22 194.169.56.0/22 maxlen: 22 195.69.136.0/22 maxlen: 22 217.151.224.0/22 maxlen: 22 217.151.232.0/21 maxlen: 21 2a0a:f940::/32 maxlen: 32 2a0d:b600::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/HGxIzMzjIewYcClXs5Y4Gh8aBBA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/HGxIzMzjIewYcClXs5Y4Gh8aBBA.mft rsync://rpki.ripe.net/repository/DEFAULT/HGxIzMzjIewYcClXs5Y4Gh8aBBA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:0d:63:a2:12:9b:13:3c:d0:77:3c:3d:b3:4e:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c6c48cccce321ec18702957b396381a1f1a0410 Validity Not Before: Jan 1 06:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=057fb09252dd0c3f17cf11c992c4110b2e29135a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:24:ec:49:a6:91:97:cc:81:db:5a:22:cc:54: 32:e2:08:fe:e8:e0:c4:63:17:0d:58:a7:12:c1:f2: 16:51:53:3c:73:ba:55:9b:c6:fd:77:ce:f6:32:b0: 60:b0:06:15:e8:34:72:50:36:8e:28:8b:02:ec:9a: e2:00:93:cf:89:dd:b7:ab:52:19:a0:2c:ad:67:fa: 66:74:e2:bd:a0:35:fd:36:9a:d3:c5:19:c4:40:f8: 3b:e1:0a:dd:ce:9b:4a:54:6f:ae:4d:95:1c:d5:d8: 4e:40:05:38:2e:19:04:7c:ad:98:9b:71:22:30:91: 6e:d8:65:3f:d2:45:5d:6d:fb:13:41:fb:4f:68:4a: e8:c1:be:62:bc:bc:33:a2:b4:1f:4f:7b:f0:47:54: a7:7d:33:08:97:01:b7:80:3e:6f:ee:be:ef:c5:26: ec:90:31:4d:48:22:8a:c6:a8:2d:c2:d8:f9:5f:a2: d1:4f:19:4c:e6:39:32:77:2b:93:fc:67:3a:c8:7c: cf:74:eb:a6:75:8c:69:ee:1f:ea:7c:28:8b:4c:56: 8c:8c:72:2d:39:1f:50:da:94:18:f6:2d:ee:6d:69: 75:b4:70:61:f4:6a:20:0c:ee:e3:88:8b:c2:cc:51: 7b:07:4a:51:28:48:88:62:04:50:88:b7:74:54:d7: 75:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:7F:B0:92:52:DD:0C:3F:17:CF:11:C9:92:C4:11:0B:2E:29:13:5A X509v3 Authority Key Identifier: keyid:1C:6C:48:CC:CC:E3:21:EC:18:70:29:57:B3:96:38:1A:1F:1A:04:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGxIzMzjIewYcClXs5Y4Gh8aBBA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/BX-wklLdDD8XzxHJksQRCy4pE1o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/HGxIzMzjIewYcClXs5Y4Gh8aBBA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.43.128.0/19 5.199.192.0/19 45.131.56.0/22 46.36.0.0/19 82.112.32.0/19 88.218.212.0/22 91.108.168.0/21 91.211.20.0/22 91.227.50.0/23 91.231.196.0/22 93.90.96.0/20 94.230.128.0/20 109.74.160.0/20 134.255.128.0/19 185.2.104.0/22 185.59.56.0/22 185.60.212.0/22 185.132.28.0/22 185.162.204.0/22 185.201.88.0/22 185.204.156.0/22 185.214.252.0/22 185.229.192.0/22 185.252.228.0/22 193.46.244.0/22 193.168.176.0/22 194.169.56.0/22 195.69.136.0/22 217.151.224.0/22 217.151.232.0/21 IPv6: 2a0a:f940::/32 2a0d:b600::/29 Signature Algorithm: sha256WithRSAEncryption 72:b0:81:3c:f2:84:a0:fd:b5:ea:27:b0:80:b9:67:1c:cf:f0: e3:4d:86:c1:4d:48:28:36:b5:a4:7d:09:62:34:01:66:0b:4d: e6:ba:86:fd:cf:7b:9e:2e:4b:a9:2f:27:de:3d:4d:de:75:4f: 30:65:01:d1:aa:fe:44:3c:f0:b7:88:4a:12:2e:f9:fd:d9:42: a5:c6:e7:6a:a3:88:3e:71:91:f0:19:36:49:69:19:05:1c:73: 8a:fe:f6:f9:ab:ef:41:5a:2d:98:ec:d3:ec:78:e1:19:58:4c: ac:10:1d:2f:53:27:09:76:08:cc:5b:0d:6a:c0:69:99:53:6f: d8:7f:3f:f4:1e:d9:84:64:60:fd:0e:13:3b:21:65:8a:8c:5c: 28:e4:6c:08:9d:f5:f3:ce:bf:f1:aa:06:0a:d5:4f:a7:f3:57: 8a:da:a0:8f:f1:08:d7:41:61:c5:0a:ce:ab:79:32:e7:56:49: 09:c6:84:15:64:66:58:26:9e:0a:d1:6c:e1:a8:99:07:98:6c: 99:68:fb:36:ad:ae:3e:a5:44:c4:f1:35:e4:4d:61:e4:66:67: 91:3a:39:0e:85:a1:86:67:4e:79:62:06:d9:f3:eb:63:08:ad: 66:c3:05:73:63:04:60:75:a3:dd:1d:33:5b:a7:2e:d8:35:84: c5:2d:6c:37 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgISAZt4NQ1johKbEzzQdzw9s07mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjNmM0OGNjY2NlMzIxZWMxODcwMjk1N2IzOTYzODFhMWYx YTA0MTAwHhcNMjYwMTAxMDYxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNTdmYjA5MjUyZGQwYzNmMTdjZjExYzk5MmM0MTEwYjJlMjkxMzVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyTsSaaRl8yB21oizFQy4gj+6ODE YxcNWKcSwfIWUVM8c7pVm8b9d872MrBgsAYV6DRyUDaOKIsC7JriAJPPid23q1IZ oCytZ/pmdOK9oDX9NprTxRnEQPg74QrdzptKVG+uTZUc1dhOQAU4LhkEfK2Ym3Ei MJFu2GU/0kVdbfsTQftPaErowb5ivLwzorQfT3vwR1SnfTMIlwG3gD5v7r7vxSbs kDFNSCKKxqgtwtj5X6LRTxlM5jkydyuT/Gc6yHzPdOumdYxp7h/qfCiLTFaMjHIt OR9Q2pQY9i3ubWl1tHBh9GogDO7jiIvCzFF7B0pRKEiIYgRQiLd0VNd1NQIDAQAB o4IC0jCCAs4wHQYDVR0OBBYEFAV/sJJS3Qw/F88RyZLEEQsuKRNaMB8GA1UdIwQY MBaAFBxsSMzM4yHsGHApV7OWOBofGgQQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEd4SXpNempJZXdZY0NsWHM1WTRHaDhhQkJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS84ZTRlNjgtYmQyYS00ZGMyLWFhZTYt YTA1NjBhYzgyYmE3LzEvQlgtd2tsTGRERDhYenhISmtzUVJDeTRwRTFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS84ZTRlNjgtYmQyYS00ZGMyLWFhZTYtYTA1NjBhYzgyYmE3 LzEvSEd4SXpNempJZXdZY0NsWHM1WTRHaDhhQkJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHnBggrBgEFBQcBBwEB/wSB1zCB1DCBuwQCAAEwgbQDBAUF K4ADBAUFx8ADBAItgzgDBAUuJAADBAVScCADBAJY2tQDBANbbKgDBAJb0xQDBAFb 4zIDBAJb58QDBARdWmADBARe5oADBARtSqADBAWG/4ADBAK5AmgDBAK5OzgDBAK5 PNQDBAK5hBwDBAK5oswDBAK5yVgDBAK5zJwDBAK51vwDBAK55cADBAK5/OQDBALB LvQDBALBqLADBALCqTgDBALDRYgDBALZl+ADBAPZl+gwFAQCAAIwDgMFACoK+UAD BQMqDbYAMA0GCSqGSIb3DQEBCwUAA4IBAQBysIE88oSg/bXqJ7CAuWccz/DjTYbB TUgoNrWkfQliNAFmC03muob9z3ueLkupLyfePU3edU8wZQHRqv5EPPC3iEoSLvn9 2UKlxudqo4g+cZHwGTZJaRkFHHOK/vb5q+9BWi2Y7NPseOEZWEysEB0vUycJdgjM Ww1qwGmZU2/Yfz/0HtmEZGD9DhM7IWWKjFwo5GwInfXzzr/xqgYK1U+n81eK2qCP 8QjXQWHFCs6reTLnVkkJxoQVZGZYJp4K0WzhqJkHmGyZaPs2ra4+pUTE8TXkTWHk ZmeROjkOhaGGZ055YgbZ8+tjCK1mwwVzYwRgdaPdHTNbpy7YNYTFLWw3 -----END CERTIFICATE-----Generated at Mon Jan 26 00:14:16 2026 by rpki-client