This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/BWY_6iX1eFA1wINEV3UFtZmQLVc.roa
File: BWY_6iX1eFA1wINEV3UFtZmQLVc.roa (raw, json)
Hash identifier: ieExeoISyHbhbY82Esso3kgMYn1eA+NJEZI1EbJUVxo=
Subject key identifier: 05:66:3F:EA:25:F5:78:50:35:C0:83:44:57:75:05:B5:99:90:2D:57
Certificate issuer: /CN=4ca66f3c0f25774e696d2a46723277eb961128c3
Certificate serial: 019B175CB27D3D4219B7ED078DFAD0C61659
Authority key identifier: 4C:A6:6F:3C:0F:25:77:4E:69:6D:2A:46:72:32:77:EB:96:11:28:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/BWY_6iX1eFA1wINEV3UFtZmQLVc.roa
Signing time: Sat 13 Dec 2025 10:58:29 +0000
ROA not before: Sat 13 Dec 2025 10:58:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51852
IP address blocks: 176.65.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Dec 2025 10:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:17:5c:b2:7d:3d:42:19:b7:ed:07:8d:fa:d0:c6:16:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ca66f3c0f25774e696d2a46723277eb961128c3
Validity
Not Before: Dec 13 10:58:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=05663fea25f5785035c08344577505b599902d57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b4:e8:ae:70:fd:29:4f:26:35:ca:3a:1d:eb:
8e:75:47:24:50:b3:cc:ff:d0:be:3f:5b:3f:32:17:
b2:21:2e:33:d1:0d:04:92:76:ee:8f:88:2c:63:41:
9d:97:d0:e2:46:85:9b:38:2d:98:be:27:ab:29:19:
8f:41:86:c0:6f:3d:be:ef:75:d0:95:f4:59:18:e3:
fd:fe:55:7d:a6:d5:6d:1c:a6:ae:6a:17:b1:5a:58:
b4:75:dc:92:07:b6:5e:d0:a8:ed:9c:50:65:07:57:
23:6e:02:bb:33:90:a0:ef:4c:ac:4d:db:3a:e5:8c:
32:af:5e:c0:a0:9b:12:f5:91:e2:3a:4e:78:57:63:
29:90:e9:81:53:6a:3e:fe:66:c8:d3:54:11:83:1e:
37:01:ff:8d:2b:b2:4c:ed:74:de:f8:a3:00:64:2b:
86:98:6a:f6:dd:a4:a5:57:2a:90:34:61:1b:7f:95:
43:d3:5b:a9:59:61:0d:15:e0:aa:66:2c:97:8c:85:
bd:55:44:da:03:8c:13:29:41:fd:b3:05:73:c7:84:
3d:62:06:c3:50:df:cc:eb:ee:87:b5:8f:18:b6:29:
47:34:b8:4e:e1:8a:b2:ae:26:54:64:a6:75:a2:23:
9c:f1:74:aa:aa:c7:60:b0:e2:c1:99:a8:a4:94:7c:
9f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:66:3F:EA:25:F5:78:50:35:C0:83:44:57:75:05:B5:99:90:2D:57
X509v3 Authority Key Identifier:
keyid:4C:A6:6F:3C:0F:25:77:4E:69:6D:2A:46:72:32:77:EB:96:11:28:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/BWY_6iX1eFA1wINEV3UFtZmQLVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.65.144.0/24
Signature Algorithm: sha256WithRSAEncryption
30:fa:b9:d6:b1:6d:50:45:dd:25:61:24:cb:9a:62:0c:3e:99:
5d:e4:4f:ca:8f:29:ff:a6:ac:65:a7:03:11:8c:4d:7d:bf:14:
c6:2e:46:33:ea:93:79:f1:bd:d0:d5:30:73:5f:1b:81:64:7c:
f7:84:ab:28:e4:69:28:0a:46:4f:49:1a:a9:05:09:47:28:a3:
82:e2:59:0c:47:54:11:b8:39:fd:b6:6a:76:b0:24:58:cb:d1:
89:7d:82:66:6f:85:c4:c8:37:58:77:6d:cf:ec:be:ae:89:dc:
6c:45:a4:94:ca:56:fd:b8:a9:cc:9f:f9:2e:a7:2d:5c:96:c7:
c8:98:22:89:51:39:2d:92:fa:e3:cf:ad:e8:b9:97:a0:50:6c:
a9:75:e8:53:1c:c4:1e:e1:e8:1c:36:98:f9:ba:b8:da:70:26:
ed:2c:41:52:14:39:5f:22:31:0e:84:d1:3c:29:5a:de:45:bc:
41:0f:f4:51:cf:fc:c2:11:82:3e:0b:57:28:72:11:14:fc:ad:
61:44:9d:47:64:fc:85:28:38:c0:ec:ea:ee:ac:e8:ab:19:d1:
c6:09:68:2f:ab:c0:e5:c1:04:43:fe:0c:e9:a9:1b:d4:ec:c2:
49:7d:70:80:e0:e1:4b:9e:89:06:09:a5:4f:27:90:10:a7:4c:
0f:bf:26:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:08:39 2025 by rpki-client