This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bVJONHJfgKZDBK0Jlsu-AiUrumY.roa File: bVJONHJfgKZDBK0Jlsu-AiUrumY.roa (raw, json) Hash identifier: 1OcxCV/N7P1Um6U586/l5XgFjBvwzM7c2rUdENhKMFs= Subject key identifier: 6D:52:4E:34:72:5F:80:A6:43:04:AD:09:96:CB:BE:02:25:2B:BA:66 Certificate issuer: /CN=6e6d7bcabfcc308d420053c482a0d59fb1282e30 Certificate serial: 019B7EA6A7078C52501A602D42556BA781CA Authority key identifier: 6E:6D:7B:CA:BF:CC:30:8D:42:00:53:C4:82:A0:D5:9F:B1:28:2E:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bm17yr_MMI1CAFPEgqDVn7EoLjA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bVJONHJfgKZDBK0Jlsu-AiUrumY.roa Signing time: Fri 02 Jan 2026 12:20:09 +0000 ROA not before: Fri 02 Jan 2026 12:20:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 145.219.34.0/24 maxlen: 24 145.219.35.0/24 maxlen: 24 145.219.36.0/22 maxlen: 22 145.219.40.0/21 maxlen: 21 145.219.48.0/21 maxlen: 21 145.219.56.0/21 maxlen: 21 145.219.64.0/18 maxlen: 18 145.219.128.0/17 maxlen: 17 193.176.255.0/24 maxlen: 24 2a04:b0c4::/30 maxlen: 30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.mft rsync://rpki.ripe.net/repository/DEFAULT/bm17yr_MMI1CAFPEgqDVn7EoLjA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 06:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:a7:07:8c:52:50:1a:60:2d:42:55:6b:a7:81:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e6d7bcabfcc308d420053c482a0d59fb1282e30 Validity Not Before: Jan 2 12:20:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6d524e34725f80a64304ad0996cbbe02252bba66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:46:9d:dd:a7:d4:8b:fb:8b:f3:54:d3:cb:90: d5:e1:86:e4:90:0d:6d:1f:10:a6:c6:ab:7f:c6:b0: 18:af:9d:5c:82:ef:88:2d:35:76:e7:7d:97:7f:9c: 37:a1:4c:34:2b:3a:bc:1b:47:2f:6f:46:95:ee:63: 0e:02:31:d6:1d:07:ed:ff:c1:d2:55:02:4b:cd:61: 27:d0:ec:1c:0a:3d:bb:3d:f4:ab:74:24:a4:ef:58: a2:2d:03:9c:a4:67:5d:40:b0:34:5d:7f:38:d6:fa: ef:af:97:39:14:79:db:3b:b8:54:12:65:83:22:36: cf:0e:30:17:3a:90:f3:e7:c9:11:ee:2b:7f:e9:87: 9c:2c:1b:b3:c7:ad:01:fe:4e:ae:66:3b:67:d0:a0: 98:e9:ea:f5:2c:69:6d:7a:d3:72:6a:6a:34:40:31: 70:92:85:e4:a7:c7:02:fd:ed:1a:61:0b:6e:a7:74: c0:95:d9:19:75:eb:c0:06:b3:de:65:55:a8:a7:6d: bc:08:a8:09:27:74:2d:3b:ca:01:56:ea:9d:e7:aa: ff:80:1b:5c:a3:e8:e3:1f:b1:d9:ed:69:e0:6d:56: fd:ef:4a:79:c6:5a:29:c5:3f:4a:aa:5c:ed:3c:e7: cd:fc:29:ab:43:90:b1:a2:bb:04:4e:28:19:a7:24: e3:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:52:4E:34:72:5F:80:A6:43:04:AD:09:96:CB:BE:02:25:2B:BA:66 X509v3 Authority Key Identifier: keyid:6E:6D:7B:CA:BF:CC:30:8D:42:00:53:C4:82:A0:D5:9F:B1:28:2E:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bm17yr_MMI1CAFPEgqDVn7EoLjA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bVJONHJfgKZDBK0Jlsu-AiUrumY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 145.219.34.0-145.219.255.255 193.176.255.0/24 IPv6: 2a04:b0c4::/30 Signature Algorithm: sha256WithRSAEncryption 8b:9a:3b:b9:57:4f:21:ac:e0:a2:38:69:47:a7:90:f1:f2:a0: 56:8b:e7:d4:6e:15:b7:ea:28:65:19:93:86:a0:8b:c7:42:d9: ff:98:e2:fd:f4:27:3d:62:fb:16:08:e7:98:e1:bf:a2:9e:51: 83:33:ed:a1:c7:32:7a:e1:93:4a:60:e1:6a:07:0c:6b:22:0d: f5:5c:97:e6:b6:ef:ac:63:ba:0b:37:04:50:eb:18:0c:04:6d: be:92:4b:64:10:36:08:d7:45:a1:30:37:19:a9:21:05:06:77: f0:32:5f:5f:72:6c:b3:60:d0:7b:a9:01:5e:21:52:9f:1e:af: 88:fe:b7:bb:bc:13:e2:12:e7:e7:92:15:b6:ef:2b:a9:a1:cd: e9:e6:71:ef:79:95:89:14:31:4d:58:39:8b:cd:b0:18:cf:e3: 0f:39:63:80:3f:28:f3:29:c4:04:cb:43:aa:63:56:28:2f:29: c9:20:fe:bb:a0:13:24:08:6d:15:12:99:b9:03:27:ac:9b:b3: ef:26:70:32:0c:87:73:c0:ab:4e:35:e1:98:fb:ac:94:92:ec: 51:55:15:78:46:b6:18:25:7f:96:c3:8a:91:6b:27:9a:c8:6a: 59:7d:e0:41:ec:5f:da:c5:cf:e8:9d:c8:81:d2:bc:d4:4c:e9: 30:bd:35:2d -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt+pqcHjFJQGmAtQlVrp4HKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlNmQ3YmNhYmZjYzMwOGQ0MjAwNTNjNDgyYTBkNTlmYjEy ODJlMzAwHhcNMjYwMTAyMTIyMDA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZDUyNGUzNDcyNWY4MGE2NDMwNGFkMDk5NmNiYmUwMjI1MmJiYTY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0ad3afUi/uL81TTy5DV4YbkkA1t HxCmxqt/xrAYr51cgu+ILTV2532Xf5w3oUw0Kzq8G0cvb0aV7mMOAjHWHQft/8HS VQJLzWEn0OwcCj27PfSrdCSk71iiLQOcpGddQLA0XX841vrvr5c5FHnbO7hUEmWD IjbPDjAXOpDz58kR7it/6YecLBuzx60B/k6uZjtn0KCY6er1LGltetNyamo0QDFw koXkp8cC/e0aYQtup3TAldkZdevABrPeZVWop228CKgJJ3QtO8oBVuqd56r/gBtc o+jjH7HZ7WngbVb970p5xlopxT9KqlztPOfN/CmrQ5CxorsETigZpyTjLwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFG1STjRyX4CmQwStCZbLvgIlK7pmMB8GA1UdIwQY MBaAFG5te8q/zDCNQgBTxIKg1Z+xKC4wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYm0xN3lyX01NSTFDQUZQRWdxRFZuN0VvTGpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy80NWM2ODktYWZhYS00ZGEzLWE5NDIt OTMxOTRlYjYxMDhkLzEvYlZKT05ISmZnS1pEQkswSmxzdS1BaVVydW1ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy80NWM2ODktYWZhYS00ZGEzLWE5NDItOTMxOTRlYjYxMDhk LzEvYm0xN3lyX01NSTFDQUZQRWdxRFZuN0VvTGpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAZBAIAATATMAsDBAGR2yID AwKR2AMEAMGw/zANBAIAAjAHAwUCKgSwxDANBgkqhkiG9w0BAQsFAAOCAQEAi5o7 uVdPIazgojhpR6eQ8fKgVovn1G4Vt+ooZRmThqCLx0LZ/5ji/fQnPWL7FgjnmOG/ op5RgzPtoccyeuGTSmDhagcMayIN9VyX5rbvrGO6CzcEUOsYDARtvpJLZBA2CNdF oTA3GakhBQZ38DJfX3Jss2DQe6kBXiFSnx6viP63u7wT4hLn55IVtu8rqaHN6eZx 73mViRQxTVg5i82wGM/jDzljgD8o8ynEBMtDqmNWKC8pySD+u6ATJAhtFRKZuQMn rJuz7yZwMgyHc8CrTjXhmPuslJLsUVUVeEa2GCV/lsOKkWsnmshqWX3gQexf2sXP 6J3IgdK81EzpML01LQ== -----END CERTIFICATE-----Generated at Fri Jan 9 17:06:03 2026 by rpki-client