This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/BMiy1JnIBdqaYNvRqu6-2P_qo0g.roa File: BMiy1JnIBdqaYNvRqu6-2P_qo0g.roa (raw, json) Hash identifier: wJFVAFKjJaOOX54II9TwShDgsfQDd3N1+hHW81slGB0= Subject key identifier: 04:C8:B2:D4:99:C8:05:DA:9A:60:DB:D1:AA:EE:BE:D8:FF:EA:A3:48 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB66826A0882BDB8425EE53C662AF0 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/BMiy1JnIBdqaYNvRqu6-2P_qo0g.roa Signing time: Fri 02 Jan 2026 08:20:40 +0000 ROA not before: Fri 02 Jan 2026 08:20:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203414 IP address blocks: 151.242.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:66:82:6a:08:82:bd:b8:42:5e:e5:3c:66:2a:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=04c8b2d499c805da9a60dbd1aaeebed8ffeaa348 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b6:c2:c1:55:bf:75:35:22:73:03:ae:0a:ab: ad:4a:11:2b:65:8f:80:8c:07:a0:d6:7d:0b:da:b6: 48:a7:05:d2:47:60:f7:0e:a3:1d:1a:e0:49:9e:e8: c1:2e:0d:77:7b:74:33:e0:16:e8:02:5e:b3:97:7f: ee:e7:25:bc:c0:6b:c7:e3:83:c4:06:53:f1:19:ba: 95:59:10:0c:f8:35:62:c9:e6:2d:6a:e7:fe:86:14: b6:bc:ca:2b:64:40:1d:93:b1:c2:20:b9:81:b7:1f: 8f:21:6d:21:de:21:bd:1f:a6:ca:46:d4:0b:2b:ba: ae:d1:22:2f:49:ec:28:be:fb:4e:28:19:fd:98:93: 55:8f:92:ac:b8:40:cd:f7:fa:42:33:73:d7:6e:30: 0f:e1:d4:42:17:b8:29:98:ac:06:d7:81:c0:09:64: 73:05:33:65:7e:c9:38:e2:76:2d:e9:6e:88:dc:ec: 35:0f:87:2b:19:12:79:e1:7f:65:a7:31:66:55:90: 8a:c5:3e:b5:aa:39:70:f5:16:4a:cf:8e:3b:d6:d9: c8:ca:cf:a0:13:fa:53:0f:9c:67:35:fb:3b:b9:d1: ce:72:19:59:e7:ad:fb:cc:85:d5:3f:f5:44:65:5b: 85:de:11:ff:11:0b:3f:9e:35:f6:a1:a9:0c:25:a6: 93:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:C8:B2:D4:99:C8:05:DA:9A:60:DB:D1:AA:EE:BE:D8:FF:EA:A3:48 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/BMiy1JnIBdqaYNvRqu6-2P_qo0g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.242.252.0/24 Signature Algorithm: sha256WithRSAEncryption 17:b8:1d:da:08:bd:f6:8c:e9:6a:1e:8c:40:3c:43:8b:08:28: 4e:3e:3e:ca:80:1b:23:52:43:ad:e8:84:48:ff:e3:f0:a1:20: ba:5c:b5:01:a8:18:11:24:f4:6b:da:58:eb:e3:de:6c:3d:a4: 13:af:7e:43:3a:94:3f:aa:e9:8e:75:ad:1d:59:e1:fd:ff:51: fb:28:10:f2:92:d8:a7:55:43:76:91:48:ee:99:d1:09:49:91: cc:77:e9:42:08:74:f6:2c:28:c9:d7:3c:d1:c3:8a:25:82:8d: 23:8e:dd:d8:7b:93:81:02:d5:56:72:1b:57:f3:f5:f9:99:21: b4:f2:f0:b3:94:6a:fe:a7:3d:41:2f:ef:42:f6:92:d0:43:ec: 7c:fa:b1:6f:a5:84:2c:6c:35:2f:b6:8a:fe:fa:8b:2f:7a:44: 8c:d3:46:09:f9:09:8f:40:4e:0d:3d:06:c0:33:0b:81:5c:b7: e6:65:b8:21:f8:d3:0f:de:6c:3c:8b:36:f8:62:df:de:38:af: 4d:da:02:67:85:6f:45:46:93:37:74:f7:02:e9:11:9f:19:f9: 63:70:05:fe:b2:76:c6:c7:5b:2e:c9:a5:a0:fd:5c:af:e7:ca: 82:e6:ce:ca:ca:88:27:ca:85:fc:ce:4c:f2:ee:e4:2c:88:49: 82:ba:14:6c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y2aCagiCvbhCXuU8ZirwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNGM4YjJkNDk5YzgwNWRhOWE2MGRiZDFhYWVlYmVkOGZmZWFhMzQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLbCwVW/dTUicwOuCqutShErZY+A jAeg1n0L2rZIpwXSR2D3DqMdGuBJnujBLg13e3Qz4BboAl6zl3/u5yW8wGvH44PE BlPxGbqVWRAM+DViyeYtauf+hhS2vMorZEAdk7HCILmBtx+PIW0h3iG9H6bKRtQL K7qu0SIvSewovvtOKBn9mJNVj5KsuEDN9/pCM3PXbjAP4dRCF7gpmKwG14HACWRz BTNlfsk44nYt6W6I3Ow1D4crGRJ54X9lpzFmVZCKxT61qjlw9RZKz4471tnIys+g E/pTD5xnNfs7udHOchlZ5637zIXVP/VEZVuF3hH/EQs/njX2oakMJaaTmQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFATIstSZyAXammDb0aruvtj/6qNIMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvQk1peTFKbklCZHFhWU52UnF1Ni0yUF9xbzBnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/L8MA0G CSqGSIb3DQEBCwUAA4IBAQAXuB3aCL32jOlqHoxAPEOLCChOPj7KgBsjUkOt6IRI /+PwoSC6XLUBqBgRJPRr2ljr495sPaQTr35DOpQ/qumOda0dWeH9/1H7KBDyktin VUN2kUjumdEJSZHMd+lCCHT2LCjJ1zzRw4olgo0jjt3Ye5OBAtVWchtX8/X5mSG0 8vCzlGr+pz1BL+9C9pLQQ+x8+rFvpYQsbDUvtor++osvekSM00YJ+QmPQE4NPQbA MwuBXLfmZbgh+NMP3mw8izb4Yt/eOK9N2gJnhW9FRpM3dPcC6RGfGfljcAX+snbG x1suyaWg/Vyv58qC5s7KyognyoX8zkzy7uQsiEmCuhRs -----END CERTIFICATE-----Generated at Sun Jan 18 06:28:48 2026 by rpki-client