This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/54213d-c3ed-4d67-b9bf-7ba136f51ef9/1/BwYYOmhJLJqapgE9lvV3d7BEWAU.roa File: BwYYOmhJLJqapgE9lvV3d7BEWAU.roa (raw, json) Hash identifier: ME1eFTl4ynavuH8tL0n87NqGZ4of85as6TbMREzi3Ig= Subject key identifier: 07:06:18:3A:68:49:2C:9A:9A:A6:01:3D:96:F5:77:77:B0:44:58:05 Certificate issuer: /CN=621b8e486eecae6124de10494fd39139ed4a37cb Certificate serial: 019B7D5AE71FEC8C59408A51B13B61BC6327 Authority key identifier: 62:1B:8E:48:6E:EC:AE:61:24:DE:10:49:4F:D3:91:39:ED:4A:37:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhuOSG7srmEk3hBJT9OROe1KN8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/54213d-c3ed-4d67-b9bf-7ba136f51ef9/1/BwYYOmhJLJqapgE9lvV3d7BEWAU.roa Signing time: Fri 02 Jan 2026 06:17:48 +0000 ROA not before: Fri 02 Jan 2026 06:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30900 IP address blocks: 185.176.128.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/54213d-c3ed-4d67-b9bf-7ba136f51ef9/1/YhuOSG7srmEk3hBJT9OROe1KN8s.crl rsync://rpki.ripe.net/repository/DEFAULT/98/54213d-c3ed-4d67-b9bf-7ba136f51ef9/1/YhuOSG7srmEk3hBJT9OROe1KN8s.mft rsync://rpki.ripe.net/repository/DEFAULT/YhuOSG7srmEk3hBJT9OROe1KN8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:e7:1f:ec:8c:59:40:8a:51:b1:3b:61:bc:63:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=621b8e486eecae6124de10494fd39139ed4a37cb Validity Not Before: Jan 2 06:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0706183a68492c9a9aa6013d96f57777b0445805 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:13:bf:a4:99:16:30:0e:30:4d:71:16:98:32: ec:ea:d3:90:a9:1c:88:c8:f2:4c:e4:68:a2:a9:83: 59:1e:7e:44:9e:56:df:26:85:cf:f5:4c:04:c2:f5: 7a:54:7a:15:f0:12:12:3b:7e:b2:72:d4:ff:4d:3f: dc:fb:79:1b:e9:e8:dd:e4:b9:7c:ba:9b:27:47:bc: 22:6d:cf:eb:86:21:4f:fd:19:0a:73:f1:ae:68:53: 8b:9b:c3:08:24:93:bf:59:54:ee:48:e9:0d:e6:d7: 4b:f2:24:01:ea:39:65:80:85:b6:a5:37:28:e9:44: 3f:96:53:4f:4d:d5:aa:17:d3:9c:bd:38:2a:ea:d8: 2f:28:84:58:3e:ff:81:b5:39:98:61:93:43:a5:a7: 58:2e:f7:2a:b4:b6:d7:59:78:17:08:54:e0:a7:12: 7d:f0:72:ad:64:c5:78:93:6b:e3:07:15:be:6e:4b: 47:84:07:34:21:63:2f:9a:36:f7:32:98:3f:a6:12: 9b:4f:10:42:48:d5:cc:f6:29:1e:45:4b:a6:d2:2b: 2b:65:08:28:1a:b3:8d:5e:5e:1d:9d:30:6a:d3:a6: 4f:65:e8:c1:36:80:e7:89:25:a7:5c:27:d2:cf:f3: 99:a5:96:87:38:63:63:10:7f:7f:14:91:7c:48:25: 01:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:06:18:3A:68:49:2C:9A:9A:A6:01:3D:96:F5:77:77:B0:44:58:05 X509v3 Authority Key Identifier: keyid:62:1B:8E:48:6E:EC:AE:61:24:DE:10:49:4F:D3:91:39:ED:4A:37:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhuOSG7srmEk3hBJT9OROe1KN8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/54213d-c3ed-4d67-b9bf-7ba136f51ef9/1/BwYYOmhJLJqapgE9lvV3d7BEWAU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/54213d-c3ed-4d67-b9bf-7ba136f51ef9/1/YhuOSG7srmEk3hBJT9OROe1KN8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.176.128.0/22 Signature Algorithm: sha256WithRSAEncryption 7b:8d:90:4f:02:f0:07:79:28:1f:75:13:ac:7b:35:61:13:05: dc:07:a0:01:63:03:e8:84:0e:5b:f6:a8:77:05:b1:6c:a7:c8: 82:d7:5e:5a:6c:c6:2f:57:8d:7e:47:6f:a7:96:48:bc:ca:70: ae:20:a6:b3:d2:3e:bb:ae:e3:b0:16:44:3d:03:a4:ed:d4:d4: ab:00:fe:c0:db:d0:8c:b3:6c:cc:f8:7c:c3:64:36:a9:45:4d: c1:db:a5:18:5d:3b:a5:cc:83:67:7f:19:0d:50:52:b3:f7:33: 6e:83:40:3f:e6:f5:ba:00:d2:6d:a7:b1:8e:eb:c2:18:63:e1: d1:5f:2d:b5:20:8c:fc:df:ad:c9:70:54:69:93:c6:40:7f:5a: fb:2f:ac:f6:dc:b6:d2:4f:6e:14:8f:0f:57:c7:cb:7a:da:7b: 7c:d0:77:c6:74:fc:29:68:4f:e6:d6:8c:d4:8b:45:a2:57:58: f3:d7:4b:fa:48:f2:b1:a5:fd:d2:5d:81:77:47:fe:f0:a7:a6: 89:2e:7b:90:46:bb:bd:47:62:8f:d2:87:75:df:49:6b:8c:67: a0:40:a5:bd:27:c9:00:61:67:3f:d4:a5:b8:82:27:1c:98:77: 82:cb:98:49:e2:0c:ea:55:33:bb:5e:00:f7:a0:1a:90:80:9a: b1:13:83:4c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9Wucf7IxZQIpRsTthvGMnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyMWI4ZTQ4NmVlY2FlNjEyNGRlMTA0OTRmZDM5MTM5ZWQ0 YTM3Y2IwHhcNMjYwMTAyMDYxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNzA2MTgzYTY4NDkyYzlhOWFhNjAxM2Q5NmY1Nzc3N2IwNDQ1ODA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhO/pJkWMA4wTXEWmDLs6tOQqRyI yPJM5GiiqYNZHn5EnlbfJoXP9UwEwvV6VHoV8BISO36yctT/TT/c+3kb6ejd5Ll8 upsnR7wibc/rhiFP/RkKc/GuaFOLm8MIJJO/WVTuSOkN5tdL8iQB6jllgIW2pTco 6UQ/llNPTdWqF9OcvTgq6tgvKIRYPv+BtTmYYZNDpadYLvcqtLbXWXgXCFTgpxJ9 8HKtZMV4k2vjBxW+bktHhAc0IWMvmjb3Mpg/phKbTxBCSNXM9ikeRUum0isrZQgo GrONXl4dnTBq06ZPZejBNoDniSWnXCfSz/OZpZaHOGNjEH9/FJF8SCUBWwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAcGGDpoSSyamqYBPZb1d3ewRFgFMB8GA1UdIwQY MBaAFGIbjkhu7K5hJN4QSU/TkTntSjfLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWh1T1NHN3NybUVrM2hCSlQ5T1JPZTFLTjhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC81NDIxM2QtYzNlZC00ZDY3LWI5YmYt N2JhMTM2ZjUxZWY5LzEvQndZWU9taEpMSnFhcGdFOWx2VjNkN0JFV0FVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC81NDIxM2QtYzNlZC00ZDY3LWI5YmYtN2JhMTM2ZjUxZWY5 LzEvWWh1T1NHN3NybUVrM2hCSlQ5T1JPZTFLTjhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCubCAMA0G CSqGSIb3DQEBCwUAA4IBAQB7jZBPAvAHeSgfdROsezVhEwXcB6ABYwPohA5b9qh3 BbFsp8iC115abMYvV41+R2+nlki8ynCuIKaz0j67ruOwFkQ9A6Tt1NSrAP7A29CM s2zM+HzDZDapRU3B26UYXTulzINnfxkNUFKz9zNug0A/5vW6ANJtp7GO68IYY+HR Xy21IIz8363JcFRpk8ZAf1r7L6z23LbST24Ujw9Xx8t62nt80HfGdPwpaE/m1ozU i0WiV1jz10v6SPKxpf3SXYF3R/7wp6aJLnuQRru9R2KP0od130lrjGegQKW9J8kA YWc/1KW4giccmHeCy5hJ4gzqVTO7XgD3oBqQgJqxE4NM -----END CERTIFICATE-----Generated at Sun Jan 25 15:36:26 2026 by rpki-client