This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/BWlmWVMxkNnS9PCmlrzVPHTr0Qw.roa File: BWlmWVMxkNnS9PCmlrzVPHTr0Qw.roa (raw, json) Hash identifier: 0mnB5pl7WzlDcgHTanlrlKrT0b7HdGshZ3gTbOkWWLE= Subject key identifier: 05:69:66:59:53:31:90:D9:D2:F4:F0:A6:96:BC:D5:3C:74:EB:D1:0C Certificate issuer: /CN=896ed6e4b5c7c19db98c57432af4dcf630bf60ae Certificate serial: 019B78353E32F98731CB5A83944F1AB19B4D Authority key identifier: 89:6E:D6:E4:B5:C7:C1:9D:B9:8C:57:43:2A:F4:DC:F6:30:BF:60:AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iW7W5LXHwZ25jFdDKvTc9jC_YK4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/BWlmWVMxkNnS9PCmlrzVPHTr0Qw.roa Signing time: Thu 01 Jan 2026 06:18:33 +0000 ROA not before: Thu 01 Jan 2026 06:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203214 IP address blocks: 109.224.0.0/18 maxlen: 18 109.224.0.0/21 maxlen: 21 109.224.0.0/22 maxlen: 22 109.224.0.0/24 maxlen: 24 109.224.1.0/24 maxlen: 24 109.224.2.0/23 maxlen: 23 109.224.2.0/24 maxlen: 24 109.224.3.0/24 maxlen: 24 109.224.4.0/22 maxlen: 22 109.224.5.0/24 maxlen: 24 109.224.8.0/21 maxlen: 21 109.224.8.0/22 maxlen: 22 109.224.12.0/23 maxlen: 23 109.224.12.0/24 maxlen: 24 109.224.13.0/24 maxlen: 24 109.224.14.0/23 maxlen: 23 109.224.14.0/24 maxlen: 24 109.224.15.0/24 maxlen: 24 109.224.16.0/22 maxlen: 22 109.224.20.0/22 maxlen: 22 109.224.24.0/22 maxlen: 22 109.224.28.0/24 maxlen: 24 109.224.29.0/24 maxlen: 24 109.224.30.0/23 maxlen: 23 109.224.32.0/22 maxlen: 22 109.224.32.0/24 maxlen: 24 109.224.36.0/22 maxlen: 22 109.224.40.0/21 maxlen: 21 109.224.40.0/24 maxlen: 24 109.224.41.0/24 maxlen: 24 109.224.42.0/23 maxlen: 23 109.224.42.0/24 maxlen: 24 109.224.43.0/24 maxlen: 24 109.224.44.0/22 maxlen: 22 109.224.44.0/24 maxlen: 24 109.224.45.0/24 maxlen: 24 109.224.46.0/24 maxlen: 24 109.224.47.0/24 maxlen: 24 109.224.48.0/21 maxlen: 21 109.224.48.0/22 maxlen: 22 109.224.52.0/22 maxlen: 22 109.224.56.0/21 maxlen: 21 109.224.56.0/22 maxlen: 22 109.224.60.0/22 maxlen: 22 109.224.63.0/24 maxlen: 24 185.118.96.0/22 maxlen: 22 185.118.96.0/24 maxlen: 24 185.141.8.0/24 maxlen: 24 185.141.9.0/24 maxlen: 24 185.141.10.0/24 maxlen: 24 185.141.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/iW7W5LXHwZ25jFdDKvTc9jC_YK4.crl rsync://rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/iW7W5LXHwZ25jFdDKvTc9jC_YK4.mft rsync://rpki.ripe.net/repository/DEFAULT/iW7W5LXHwZ25jFdDKvTc9jC_YK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:3e:32:f9:87:31:cb:5a:83:94:4f:1a:b1:9b:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=896ed6e4b5c7c19db98c57432af4dcf630bf60ae Validity Not Before: Jan 1 06:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=05696659533190d9d2f4f0a696bcd53c74ebd10c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:9f:5b:48:d3:e4:1b:8f:a2:f6:e2:b2:69:78: f8:14:97:d2:43:2a:f3:f0:2e:27:13:8a:4c:e2:7e: 8e:da:69:fb:c9:c6:34:40:0f:ca:bf:51:d8:a5:ce: 95:18:43:d9:d7:1d:2e:7a:7f:15:6a:28:a1:e2:52: ab:b7:5f:da:93:e3:b5:8f:bb:ba:7c:9d:47:75:2c: bc:d4:67:e7:d0:5b:1f:35:1d:ae:6d:96:51:40:66: 4d:d1:4b:cd:d4:ba:b1:e8:25:2f:16:9f:0e:63:7c: 36:74:a7:0d:29:29:f4:6e:2d:ff:3d:af:01:4b:8c: b9:7c:7d:0d:8a:d7:f1:f8:48:e3:1f:e7:a9:ea:9a: 17:cf:28:2b:23:fd:f9:f7:4d:25:fd:10:4e:ec:17: 3c:34:35:5c:e6:4f:bc:b7:f9:24:29:59:1f:49:a5: 36:fa:34:da:49:63:22:06:6c:c3:ff:a5:c9:a8:b8: a7:cf:02:68:3f:50:39:4b:0a:0b:6b:6f:8c:a1:f5: d2:51:66:e1:63:de:8d:c4:c4:90:ff:54:17:ad:16: e3:a3:96:5b:37:21:f6:c7:9d:23:a8:6c:4d:14:91: 50:04:6e:b2:be:be:14:41:58:10:fd:ae:58:3c:54: 3d:d9:b8:8b:8c:40:82:6a:8e:5c:15:a4:98:07:8a: 5a:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:69:66:59:53:31:90:D9:D2:F4:F0:A6:96:BC:D5:3C:74:EB:D1:0C X509v3 Authority Key Identifier: keyid:89:6E:D6:E4:B5:C7:C1:9D:B9:8C:57:43:2A:F4:DC:F6:30:BF:60:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iW7W5LXHwZ25jFdDKvTc9jC_YK4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/BWlmWVMxkNnS9PCmlrzVPHTr0Qw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/iW7W5LXHwZ25jFdDKvTc9jC_YK4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.224.0.0/18 185.118.96.0/22 185.141.8.0/22 Signature Algorithm: sha256WithRSAEncryption a3:19:35:30:d2:92:e9:fc:76:40:f8:a5:8e:b5:f3:5f:f7:d0: 82:17:06:24:e2:98:54:41:cc:53:d9:8c:5f:31:49:71:7e:ad: a2:31:8a:a0:bf:f8:04:90:4f:6c:ef:b3:ff:40:fb:10:e9:a7: ea:67:5c:ab:24:50:47:29:8f:71:34:36:3d:b2:16:04:72:c0: c5:83:cd:06:79:28:2a:9b:22:bb:86:45:55:12:2c:1d:62:7b: 4f:c6:ad:c6:f1:bb:62:f9:3d:96:8a:f6:83:d0:84:9c:e8:d0: 12:e5:92:31:c0:aa:8f:e2:42:27:5a:d9:4f:4e:84:0b:f4:0d: 2e:2c:12:e8:ad:da:c5:38:85:81:7a:e9:3e:5c:f1:30:8a:28: 76:d3:15:43:cf:2c:4a:93:fe:13:5c:26:cf:e4:aa:55:5e:14: 49:59:a1:f4:8e:72:ba:a5:f4:bd:56:b3:9b:a7:88:6c:75:81: 22:4e:e9:db:59:cb:ae:84:77:53:94:b7:e2:cc:a5:a5:a5:b7: 99:d1:cd:40:87:d9:35:67:5a:df:3b:ff:21:ad:c3:e9:83:ca: 76:1a:96:bd:4a:dd:bb:3d:41:2b:66:4e:d7:f3:74:71:7a:7b: 38:70:fd:f4:8e:25:c7:5a:53:c7:6c:3a:5b:fa:47:66:88:33: 5b:a5:71:4e -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt4NT4y+Ycxy1qDlE8asZtNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5NmVkNmU0YjVjN2MxOWRiOThjNTc0MzJhZjRkY2Y2MzBi ZjYwYWUwHhcNMjYwMTAxMDYxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNTY5NjY1OTUzMzE5MGQ5ZDJmNGYwYTY5NmJjZDUzYzc0ZWJkMTBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv59bSNPkG4+i9uKyaXj4FJfSQyrz 8C4nE4pM4n6O2mn7ycY0QA/Kv1HYpc6VGEPZ1x0uen8Vaiih4lKrt1/ak+O1j7u6 fJ1HdSy81Gfn0FsfNR2ubZZRQGZN0UvN1Lqx6CUvFp8OY3w2dKcNKSn0bi3/Pa8B S4y5fH0Nitfx+EjjH+ep6poXzygrI/35900l/RBO7Bc8NDVc5k+8t/kkKVkfSaU2 +jTaSWMiBmzD/6XJqLinzwJoP1A5SwoLa2+MofXSUWbhY96NxMSQ/1QXrRbjo5Zb NyH2x50jqGxNFJFQBG6yvr4UQVgQ/a5YPFQ92biLjECCao5cFaSYB4paoQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFAVpZllTMZDZ0vTwppa81Tx069EMMB8GA1UdIwQY MBaAFIlu1uS1x8GduYxXQyr03PYwv2CuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVc3VzVMWEh3WjI1akZkREt2VGM5akNfWUs0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC85MDA0NDQtZGQ0MC00YTA0LWE2MTYt ZGMxZmY2NzQ2ZDJlLzEvQldsbVdWTXhrTm5TOVBDbWxyelZQSFRyMFF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC85MDA0NDQtZGQ0MC00YTA0LWE2MTYtZGMxZmY2NzQ2ZDJl LzEvaVc3VzVMWEh3WjI1akZkREt2VGM5akNfWUs0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQGbeAAAwQC uXZgAwQCuY0IMA0GCSqGSIb3DQEBCwUAA4IBAQCjGTUw0pLp/HZA+KWOtfNf99CC FwYk4phUQcxT2YxfMUlxfq2iMYqgv/gEkE9s77P/QPsQ6afqZ1yrJFBHKY9xNDY9 shYEcsDFg80GeSgqmyK7hkVVEiwdYntPxq3G8bti+T2WivaD0ISc6NAS5ZIxwKqP 4kInWtlPToQL9A0uLBLordrFOIWBeuk+XPEwiih20xVDzyxKk/4TXCbP5KpVXhRJ WaH0jnK6pfS9VrObp4hsdYEiTunbWcuuhHdTlLfizKWlpbeZ0c1Ah9k1Z1rfO/8h rcPpg8p2Gpa9St27PUErZk7X83Rxens4cP30jiXHWlPHbDpb+kdmiDNbpXFO -----END CERTIFICATE-----Generated at Mon Jan 26 00:37:27 2026 by rpki-client