This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/BmoelkPQt4i3BlkcahPvi7qWXN4.roa File: BmoelkPQt4i3BlkcahPvi7qWXN4.roa (raw, json) Hash identifier: z9IVfQbmn+DFxr8Krtk/I8KiP3Zb6ONjO0YjL8dGC3M= Subject key identifier: 06:6A:1E:96:43:D0:B7:88:B7:06:59:1C:6A:13:EF:8B:BA:96:5C:DE Certificate issuer: /CN=8cfff21538e225618314615e4f0d0688b7b0dd5a Certificate serial: 019B77594D38439BA756288032440B1363F3 Authority key identifier: 8C:FF:F2:15:38:E2:25:61:83:14:61:5E:4F:0D:06:88:B7:B0:DD:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jP_yFTjiJWGDFGFeTw0GiLew3Vo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/BmoelkPQt4i3BlkcahPvi7qWXN4.roa Signing time: Thu 01 Jan 2026 02:18:19 +0000 ROA not before: Thu 01 Jan 2026 02:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39292 IP address blocks: 185.80.247.0/24 maxlen: 24 2a01:1b1::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.crl rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.mft rsync://rpki.ripe.net/repository/DEFAULT/jP_yFTjiJWGDFGFeTw0GiLew3Vo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 05:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:4d:38:43:9b:a7:56:28:80:32:44:0b:13:63:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8cfff21538e225618314615e4f0d0688b7b0dd5a Validity Not Before: Jan 1 02:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=066a1e9643d0b788b706591c6a13ef8bba965cde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:79:42:a8:c3:a7:71:bc:e8:ab:f0:31:d0:8c: 66:cd:a5:c9:17:47:53:24:b6:d2:a0:70:99:73:38: f1:99:4c:3c:d0:a9:09:75:12:97:9a:6c:da:c7:74: d5:4f:6f:f4:6b:2c:0e:43:f5:e3:4f:ea:e9:27:1b: ba:62:8b:b8:6c:f0:4a:13:96:ad:cb:30:13:a4:d2: 09:5b:12:fa:ac:23:54:70:97:e7:f4:47:8e:6f:59: 53:17:15:98:7f:b2:45:15:87:a3:c0:36:1e:21:a2: 02:94:dc:1f:27:09:ee:0e:d9:2a:70:90:86:5e:45: 50:71:b3:a2:88:62:cd:d2:e0:01:38:4a:8c:af:d3: a4:81:c7:72:09:97:12:a0:94:2b:69:20:f8:9d:07: 88:9b:69:da:75:5c:51:0f:b1:9e:26:70:d9:1c:7d: 96:3b:ce:c8:84:72:94:4d:59:3c:a7:84:7d:0a:37: da:26:36:a0:1f:b8:38:73:10:d1:23:15:20:4f:5e: ba:30:41:d1:ce:38:5f:c9:cd:0f:a4:ea:13:47:28: 9e:8b:26:f8:f8:0a:0b:39:d0:00:a5:69:41:37:bc: 99:61:b2:c2:99:d7:6f:11:ea:59:53:27:e8:dc:50: 61:dc:b6:26:06:90:cb:35:4b:f0:15:40:aa:c6:e0: 02:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:6A:1E:96:43:D0:B7:88:B7:06:59:1C:6A:13:EF:8B:BA:96:5C:DE X509v3 Authority Key Identifier: keyid:8C:FF:F2:15:38:E2:25:61:83:14:61:5E:4F:0D:06:88:B7:B0:DD:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jP_yFTjiJWGDFGFeTw0GiLew3Vo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/BmoelkPQt4i3BlkcahPvi7qWXN4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.80.247.0/24 IPv6: 2a01:1b1::/32 Signature Algorithm: sha256WithRSAEncryption 19:ad:91:7c:6c:76:ae:5a:5f:66:f7:77:35:8a:e1:69:08:45: 39:9a:32:d9:32:db:df:15:6f:e9:b2:6d:e0:69:4a:5d:91:70: 3b:f9:6a:f1:7a:a3:06:89:35:74:8d:1d:3f:6b:f9:8e:8b:bf: 4a:b2:af:03:82:3c:71:5d:93:fb:d7:ed:ca:39:0d:82:b9:e4: 60:30:57:75:85:cd:56:27:2e:3b:d2:e4:4f:06:6c:46:75:96: 5a:2e:c3:f8:f9:d6:29:d9:4f:6b:14:a0:b4:f9:41:17:63:36: d5:81:fa:ee:a5:6d:6d:4a:ab:f5:af:29:da:8d:df:81:e5:cd: 31:b9:58:95:22:fe:31:65:da:db:78:5e:5e:64:19:e0:da:ae: 43:2b:e3:82:9e:15:50:07:67:9a:40:10:66:7e:f5:b8:be:ca: 54:43:ed:9b:49:25:02:2d:1b:28:48:55:31:7a:27:de:ea:34: 18:a8:38:0b:d5:01:55:31:51:1f:bb:39:5f:72:d3:33:03:e7: df:6d:e9:ab:10:7a:84:d3:8e:9f:67:e3:0c:be:2c:c6:71:bc: 20:8b:a8:30:b6:ba:81:88:f4:64:3e:ea:19:eb:aa:0b:7a:56: cb:79:1c:e9:d9:da:af:11:19:1d:31:de:cf:41:e0:b3:44:57: ce:fc:c7:d6 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt3WU04Q5unViiAMkQLE2PzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjZmZmMjE1MzhlMjI1NjE4MzE0NjE1ZTRmMGQwNjg4Yjdi MGRkNWEwHhcNMjYwMTAxMDIxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNjZhMWU5NjQzZDBiNzg4YjcwNjU5MWM2YTEzZWY4YmJhOTY1Y2RlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAznlCqMOncbzoq/Ax0IxmzaXJF0dT JLbSoHCZczjxmUw80KkJdRKXmmzax3TVT2/0aywOQ/XjT+rpJxu6You4bPBKE5at yzATpNIJWxL6rCNUcJfn9EeOb1lTFxWYf7JFFYejwDYeIaIClNwfJwnuDtkqcJCG XkVQcbOiiGLN0uABOEqMr9OkgcdyCZcSoJQraSD4nQeIm2nadVxRD7GeJnDZHH2W O87IhHKUTVk8p4R9CjfaJjagH7g4cxDRIxUgT166MEHRzjhfyc0PpOoTRyieiyb4 +AoLOdAApWlBN7yZYbLCmddvEepZUyfo3FBh3LYmBpDLNUvwFUCqxuACQQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFAZqHpZD0LeItwZZHGoT74u6llzeMB8GA1UdIwQY MBaAFIz/8hU44iVhgxRhXk8NBoi3sN1aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalBfeUZUamlKV0dERkdGZVR3MEdpTGV3M1ZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi82NzUwMWEtNzhkYi00YzM4LThhOTUt MjYxNjY2YzNhNTg5LzEvQm1vZWxrUFF0NGkzQmxrY2FoUHZpN3FXWE40LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi82NzUwMWEtNzhkYi00YzM4LThhOTUtMjYxNjY2YzNhNTg5 LzEvalBfeUZUamlKV0dERkdGZVR3MEdpTGV3M1ZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuVD3MA0E AgACMAcDBQAqAQGxMA0GCSqGSIb3DQEBCwUAA4IBAQAZrZF8bHauWl9m93c1iuFp CEU5mjLZMtvfFW/psm3gaUpdkXA7+WrxeqMGiTV0jR0/a/mOi79Ksq8DgjxxXZP7 1+3KOQ2CueRgMFd1hc1WJy470uRPBmxGdZZaLsP4+dYp2U9rFKC0+UEXYzbVgfru pW1tSqv1rynajd+B5c0xuViVIv4xZdrbeF5eZBng2q5DK+OCnhVQB2eaQBBmfvW4 vspUQ+2bSSUCLRsoSFUxeife6jQYqDgL1QFVMVEfuzlfctMzA+ffbemrEHqE046f Z+MMvizGcbwgi6gwtrqBiPRkPuoZ66oLelbLeRzp2dqvERkdMd7PQeCzRFfO/MfW -----END CERTIFICATE-----Generated at Wed Feb 4 12:24:12 2026 by rpki-client