This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/BWoaGekGzmMFOcb57tiwQ9__17o.roa File: BWoaGekGzmMFOcb57tiwQ9__17o.roa (raw, json) Hash identifier: CdidSnwNP4v5tI+QOVdmDHPF0D650SAL4wHqBfTMNlc= Subject key identifier: 05:6A:1A:19:E9:06:CE:63:05:39:C6:F9:EE:D8:B0:43:DF:FF:D7:BA Certificate issuer: /CN=574e25a16e5d3aa110ac5e8335f88f63e54b42f1 Certificate serial: 019ADED8E70491F9C9F343303524BE3D0612 Authority key identifier: 57:4E:25:A1:6E:5D:3A:A1:10:AC:5E:83:35:F8:8F:63:E5:4B:42:F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V04loW5dOqEQrF6DNfiPY-VLQvE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/BWoaGekGzmMFOcb57tiwQ9__17o.roa Signing time: Tue 02 Dec 2025 11:35:48 +0000 ROA not before: Tue 02 Dec 2025 11:35:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 202214 IP address blocks: 185.50.64.0/23 maxlen: 23 185.50.64.0/24 maxlen: 24 185.50.65.0/24 maxlen: 24 185.50.66.0/23 maxlen: 23 185.50.66.0/24 maxlen: 24 185.50.67.0/24 maxlen: 24 2a01:a6a0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/V04loW5dOqEQrF6DNfiPY-VLQvE.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/V04loW5dOqEQrF6DNfiPY-VLQvE.mft rsync://rpki.ripe.net/repository/DEFAULT/V04loW5dOqEQrF6DNfiPY-VLQvE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:de:d8:e7:04:91:f9:c9:f3:43:30:35:24:be:3d:06:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=574e25a16e5d3aa110ac5e8335f88f63e54b42f1 Validity Not Before: Dec 2 11:35:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=056a1a19e906ce630539c6f9eed8b043dfffd7ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:fb:86:37:11:05:dd:e5:7f:99:b2:a2:c1:5d: b0:0d:bc:f2:e6:8b:8b:c0:8e:ae:50:17:05:ca:05: 8d:76:71:49:62:b7:b5:c6:e9:a1:40:4d:b8:c7:31: 41:a3:fe:51:90:3a:4e:93:80:01:53:b0:42:37:e4: 9a:0b:b7:04:eb:ef:a3:a9:09:c9:9a:98:14:39:6e: ea:3c:4f:00:e6:f4:35:73:0f:3f:5e:dd:e8:af:e1: a0:2b:8d:4e:20:4d:2a:f4:28:a4:9d:a3:d0:bf:94: 74:a3:10:0e:6a:02:df:42:8c:ec:37:a5:ae:a0:a0: 4c:e9:a6:83:86:2d:e0:27:4d:9c:e7:f0:af:09:e8: 42:9d:ab:7e:66:f0:8d:1c:9c:ce:81:70:54:0b:9c: 58:83:0e:1b:3f:32:56:53:09:e7:ef:cf:27:3c:4c: 2b:59:97:e8:1c:93:6e:2f:b4:0b:11:1c:5f:80:64: 34:87:b4:be:a5:4a:8f:4b:72:20:b1:d3:55:f3:7a: f9:21:d0:d6:e3:48:62:26:44:e9:de:7b:ba:13:76: 2e:29:6f:af:5f:70:fd:e8:3c:8e:1c:db:7a:82:af: ae:55:98:25:75:9e:fd:67:b6:87:c2:4b:a0:d9:fc: 13:e4:29:e8:d7:d1:7d:c9:28:b3:f5:76:aa:c3:20: 86:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:6A:1A:19:E9:06:CE:63:05:39:C6:F9:EE:D8:B0:43:DF:FF:D7:BA X509v3 Authority Key Identifier: keyid:57:4E:25:A1:6E:5D:3A:A1:10:AC:5E:83:35:F8:8F:63:E5:4B:42:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V04loW5dOqEQrF6DNfiPY-VLQvE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/BWoaGekGzmMFOcb57tiwQ9__17o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/V04loW5dOqEQrF6DNfiPY-VLQvE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.50.64.0/22 IPv6: 2a01:a6a0::/32 Signature Algorithm: sha256WithRSAEncryption 4f:05:51:a1:2c:66:16:84:82:cb:8a:e1:e5:e5:cd:37:74:15: dd:bc:f5:c8:45:a4:42:0d:8d:ce:70:f1:8a:21:3a:dd:8a:13: 7c:97:f6:0b:cc:1e:9b:4b:80:f4:e6:82:43:d9:6a:f4:5f:ff: 9e:a2:9b:a9:ea:04:88:d0:e0:59:12:8a:7d:ce:08:99:de:60: fd:24:ef:41:cb:04:e2:fa:b2:e6:45:c3:93:0c:2d:1c:43:63: a8:03:ab:81:49:c5:01:c7:19:dc:ec:14:4f:ed:ef:d4:93:d4: 05:22:26:d2:0f:66:8c:04:c0:bf:da:87:df:2d:f7:e2:24:51: db:be:f0:9f:36:e3:fb:bf:94:e1:c2:4f:ac:59:6b:9b:02:70: 26:d5:95:0c:8e:5d:04:57:ae:80:07:ba:a6:85:c3:9a:e9:29: a4:42:44:ab:9b:c5:4d:e1:ca:f8:75:db:e1:8c:92:58:18:39: cf:ec:2a:26:00:c1:20:d0:e8:e0:af:38:44:3f:3c:e4:f1:bb: f2:dc:91:83:2b:be:1c:36:75:aa:fa:99:58:7a:17:01:14:46: b9:07:56:bf:94:03:45:c6:59:13:d6:34:87:6d:aa:62:dd:20: 40:2c:65:45:84:f6:b8:38:56:3b:c1:b9:0c:54:2b:56:96:f4: 68:02:60:61 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZre2OcEkfnJ80MwNSS+PQYSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3NGUyNWExNmU1ZDNhYTExMGFjNWU4MzM1Zjg4ZjYzZTU0 YjQyZjEwHhcNMjUxMjAyMTEzNTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNTZhMWExOWU5MDZjZTYzMDUzOWM2ZjllZWQ4YjA0M2RmZmZkN2JhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fuGNxEF3eV/mbKiwV2wDbzy5ouL wI6uUBcFygWNdnFJYre1xumhQE24xzFBo/5RkDpOk4ABU7BCN+SaC7cE6++jqQnJ mpgUOW7qPE8A5vQ1cw8/Xt3or+GgK41OIE0q9CiknaPQv5R0oxAOagLfQozsN6Wu oKBM6aaDhi3gJ02c5/CvCehCnat+ZvCNHJzOgXBUC5xYgw4bPzJWUwnn788nPEwr WZfoHJNuL7QLERxfgGQ0h7S+pUqPS3IgsdNV83r5IdDW40hiJkTp3nu6E3YuKW+v X3D96DyOHNt6gq+uVZgldZ79Z7aHwkug2fwT5Cno19F9ySiz9XaqwyCGGQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFAVqGhnpBs5jBTnG+e7YsEPf/9e6MB8GA1UdIwQY MBaAFFdOJaFuXTqhEKxegzX4j2PlS0LxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjA0bG9XNWRPcUVRckY2RE5maVBZLVZMUXZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8wNDI5MmYtZjEwNC00MTdjLWFjZGEt NTcxYWYwNjZjZjFlLzEvQldvYUdla0d6bU1GT2NiNTd0aXdROV9fMTdvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC8wNDI5MmYtZjEwNC00MTdjLWFjZGEtNTcxYWYwNjZjZjFl LzEvVjA0bG9XNWRPcUVRckY2RE5maVBZLVZMUXZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuTJAMA0E AgACMAcDBQAqAaagMA0GCSqGSIb3DQEBCwUAA4IBAQBPBVGhLGYWhILLiuHl5c03 dBXdvPXIRaRCDY3OcPGKITrdihN8l/YLzB6bS4D05oJD2Wr0X/+eopup6gSI0OBZ Eop9zgiZ3mD9JO9BywTi+rLmRcOTDC0cQ2OoA6uBScUBxxnc7BRP7e/Uk9QFIibS D2aMBMC/2offLffiJFHbvvCfNuP7v5Thwk+sWWubAnAm1ZUMjl0EV66AB7qmhcOa 6SmkQkSrm8VN4cr4ddvhjJJYGDnP7ComAMEg0OjgrzhEPzzk8bvy3JGDK74cNnWq +plYehcBFEa5B1a/lANFxlkT1jSHbapi3SBALGVFhPa4OFY7wbkMVCtWlvRoAmBh -----END CERTIFICATE-----Generated at Sat Dec 6 14:05:16 2025 by rpki-client