This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/BmS_AQaxlhglywSE02RG2_rJiGY.roa File: BmS_AQaxlhglywSE02RG2_rJiGY.roa (raw, json) Hash identifier: tmqsvLGMWmGAehHm7bUNUAhfsU0S4H4ASFv4gNLmWaQ= Subject key identifier: 06:64:BF:01:06:B1:96:18:25:CB:04:84:D3:64:46:DB:FA:C9:88:66 Certificate issuer: /CN=eae2653179cafe5ff6651c6058b67ad2d2c8485e Certificate serial: 019B7CEDD16A24C34119AAB3D8977CAACC0E Authority key identifier: EA:E2:65:31:79:CA:FE:5F:F6:65:1C:60:58:B6:7A:D2:D2:C8:48:5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6uJlMXnK_l_2ZRxgWLZ60tLISF4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/BmS_AQaxlhglywSE02RG2_rJiGY.roa Signing time: Fri 02 Jan 2026 04:18:38 +0000 ROA not before: Fri 02 Jan 2026 04:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 2a13:5941::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/6uJlMXnK_l_2ZRxgWLZ60tLISF4.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/6uJlMXnK_l_2ZRxgWLZ60tLISF4.mft rsync://rpki.ripe.net/repository/DEFAULT/6uJlMXnK_l_2ZRxgWLZ60tLISF4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 07:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:d1:6a:24:c3:41:19:aa:b3:d8:97:7c:aa:cc:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eae2653179cafe5ff6651c6058b67ad2d2c8485e Validity Not Before: Jan 2 04:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0664bf0106b1961825cb0484d36446dbfac98866 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b5:81:c7:5d:8c:c5:f4:ba:de:20:25:a2:a0: ca:24:16:70:f0:78:b0:7f:b8:c2:75:77:76:02:b2: c4:90:4e:b0:5e:b5:d5:2e:b6:5b:3a:43:66:23:b4: 88:2d:00:5f:57:f4:10:13:d6:86:4e:7d:ac:3d:2a: c5:ec:4b:ff:b8:89:ef:e1:74:75:bf:f3:53:a7:6a: ec:3b:e7:58:fa:4c:1d:d7:71:de:c8:16:72:2d:57: ca:05:b3:17:24:e0:17:34:94:c4:04:b7:89:21:e6: 9e:23:11:03:56:1c:9e:e2:5e:3d:a3:35:d2:6d:be: 23:ac:55:be:c9:16:ca:d1:97:b7:70:8e:f9:f5:7e: 5b:1e:cc:a5:1d:1b:c2:ca:58:c1:87:e1:bc:97:e9: 85:13:e8:06:3f:3c:b5:4f:ea:85:14:32:e6:17:43: 32:8c:47:75:d2:97:3c:84:80:88:05:a8:cb:0a:04: d7:fd:56:de:a1:7c:05:1f:08:93:dd:32:c3:1a:5a: 66:e8:b3:a6:ed:1d:bf:33:d6:73:c1:7e:27:55:84: 8d:dd:da:6b:9c:bd:72:0f:a0:d2:b5:ba:a9:9a:bd: 56:ff:60:f5:f6:38:98:d1:ba:95:26:82:27:3b:ce: 46:8b:90:b0:bc:25:28:b4:03:a9:06:cd:74:93:26: 1c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:64:BF:01:06:B1:96:18:25:CB:04:84:D3:64:46:DB:FA:C9:88:66 X509v3 Authority Key Identifier: keyid:EA:E2:65:31:79:CA:FE:5F:F6:65:1C:60:58:B6:7A:D2:D2:C8:48:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6uJlMXnK_l_2ZRxgWLZ60tLISF4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/BmS_AQaxlhglywSE02RG2_rJiGY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/6uJlMXnK_l_2ZRxgWLZ60tLISF4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:5941::/32 Signature Algorithm: sha256WithRSAEncryption 9a:54:8d:36:ea:8f:75:88:76:53:08:41:64:22:a3:16:c1:52: cc:d3:f2:d3:06:5e:1e:d6:c2:f1:4a:49:d8:89:77:00:88:8b: 72:2a:4e:55:ec:b1:bf:3e:d7:2d:d0:48:29:6f:a5:05:70:4e: 8d:6d:7b:b6:c1:93:6b:7c:f0:6b:35:a4:86:bc:54:30:eb:6d: 73:a5:28:d7:47:3b:53:8f:ab:51:23:79:ae:f5:14:50:15:ca: c1:e8:d3:53:d1:2c:6b:41:e8:5d:0f:11:c2:6a:c0:84:a0:28: 1f:5d:06:6d:56:a9:6e:b1:d8:08:ab:a5:c3:6d:e3:42:48:a2: 08:69:2f:11:f6:50:1b:4b:3c:95:05:94:9c:a2:05:64:3e:f4: 33:6c:f1:c9:f7:bd:4e:46:29:c8:e7:ef:bc:56:0c:74:0b:3a: d6:d9:56:47:40:79:13:54:e1:66:00:f7:8d:fd:db:a2:f0:7f: 2c:8f:12:89:34:d0:61:10:cf:0f:01:7d:ae:11:ea:b5:15:f8: b0:68:c3:85:7f:e2:6e:ff:35:27:dc:53:03:ed:c4:3b:bd:74: 56:de:85:0f:fa:f0:c0:1f:21:a8:7c:b4:e1:41:2e:14:a7:6c: f3:9e:d9:fe:83:5e:00:3b:fc:37:f8:3b:eb:39:e1:bd:b6:b2: 89:cc:b4:bc -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt87dFqJMNBGaqz2Jd8qswOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhZTI2NTMxNzljYWZlNWZmNjY1MWM2MDU4YjY3YWQyZDJj ODQ4NWUwHhcNMjYwMTAyMDQxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNjY0YmYwMTA2YjE5NjE4MjVjYjA0ODRkMzY0NDZkYmZhYzk4ODY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorWBx12MxfS63iAloqDKJBZw8Hiw f7jCdXd2ArLEkE6wXrXVLrZbOkNmI7SILQBfV/QQE9aGTn2sPSrF7Ev/uInv4XR1 v/NTp2rsO+dY+kwd13HeyBZyLVfKBbMXJOAXNJTEBLeJIeaeIxEDVhye4l49ozXS bb4jrFW+yRbK0Ze3cI759X5bHsylHRvCyljBh+G8l+mFE+gGPzy1T+qFFDLmF0My jEd10pc8hICIBajLCgTX/VbeoXwFHwiT3TLDGlpm6LOm7R2/M9ZzwX4nVYSN3dpr nL1yD6DStbqpmr1W/2D19jiY0bqVJoInO85Gi5CwvCUotAOpBs10kyYcdwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFAZkvwEGsZYYJcsEhNNkRtv6yYhmMB8GA1UdIwQY MBaAFOriZTF5yv5f9mUcYFi2etLSyEheMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnVKbE1YbktfbF8yWlJ4Z1dMWjYwdExJU0Y0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8xOWU5YzUtODJlMi00MzhiLWEwZTkt OTkyZDc5N2Y0YmJiLzEvQm1TX0FRYXhsaGdseXdTRTAyUkcyX3JKaUdZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC8xOWU5YzUtODJlMi00MzhiLWEwZTktOTkyZDc5N2Y0YmJi LzEvNnVKbE1YbktfbF8yWlJ4Z1dMWjYwdExJU0Y0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhNZQTAN BgkqhkiG9w0BAQsFAAOCAQEAmlSNNuqPdYh2UwhBZCKjFsFSzNPy0wZeHtbC8UpJ 2Il3AIiLcipOVeyxvz7XLdBIKW+lBXBOjW17tsGTa3zwazWkhrxUMOttc6Uo10c7 U4+rUSN5rvUUUBXKwejTU9Esa0HoXQ8RwmrAhKAoH10GbVapbrHYCKulw23jQkii CGkvEfZQG0s8lQWUnKIFZD70M2zxyfe9TkYpyOfvvFYMdAs61tlWR0B5E1ThZgD3 jf3bovB/LI8SiTTQYRDPDwF9rhHqtRX4sGjDhX/ibv81J9xTA+3EO710Vt6FD/rw wB8hqHy04UEuFKds857Z/oNeADv8N/g76znhvbayicy0vA== -----END CERTIFICATE-----Generated at Fri Jan 9 17:06:05 2026 by rpki-client