This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/bmiicfROGlo9yf7zWdyA9ISaaIk.roa File: bmiicfROGlo9yf7zWdyA9ISaaIk.roa (raw, json) Hash identifier: 1eggDeotMzuLMDhclZE88i2+/VDlsW1ydjGiJvLTfSk= Subject key identifier: 6E:68:A2:71:F4:4E:1A:5A:3D:C9:FE:F3:59:DC:80:F4:84:9A:68:89 Certificate issuer: /CN=ec3a633ef2c08251a58603562e56aa6efa93ec25 Certificate serial: 019B7F85380B19E0D12B44AAA39553DC68E7 Authority key identifier: EC:3A:63:3E:F2:C0:82:51:A5:86:03:56:2E:56:AA:6E:FA:93:EC:25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7DpjPvLAglGlhgNWLlaqbvqT7CU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/bmiicfROGlo9yf7zWdyA9ISaaIk.roa Signing time: Fri 02 Jan 2026 16:23:15 +0000 ROA not before: Fri 02 Jan 2026 16:23:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12975 IP address blocks: 37.8.0.0/17 maxlen: 20 37.8.0.0/20 maxlen: 20 37.8.16.0/20 maxlen: 20 37.8.32.0/20 maxlen: 20 37.8.48.0/20 maxlen: 20 82.102.192.0/18 maxlen: 24 82.102.192.0/20 maxlen: 20 82.102.208.0/21 maxlen: 21 82.102.218.0/23 maxlen: 23 82.102.220.0/22 maxlen: 22 82.102.224.0/20 maxlen: 20 82.102.240.0/20 maxlen: 20 82.205.0.0/17 maxlen: 21 82.205.0.0/20 maxlen: 20 82.205.16.0/20 maxlen: 20 82.205.27.0/24 maxlen: 24 82.205.96.0/20 maxlen: 20 82.205.104.0/21 maxlen: 21 82.205.120.0/21 maxlen: 21 85.113.96.0/19 maxlen: 24 86.107.16.0/22 maxlen: 22 87.252.108.0/22 maxlen: 22 89.239.32.0/20 maxlen: 20 94.26.112.0/20 maxlen: 20 109.232.162.0/23 maxlen: 23 109.232.162.0/24 maxlen: 24 109.232.163.0/24 maxlen: 24 147.189.176.0/20 maxlen: 20 176.65.12.0/22 maxlen: 22 185.40.192.0/22 maxlen: 22 185.90.242.0/24 maxlen: 24 185.138.132.0/22 maxlen: 22 185.171.132.0/22 maxlen: 22 188.209.208.0/22 maxlen: 22 188.215.100.0/22 maxlen: 22 194.169.121.0/24 maxlen: 24 194.169.122.0/23 maxlen: 23 194.169.122.0/24 maxlen: 24 194.169.123.0/24 maxlen: 24 199.204.215.0/24 maxlen: 24 199.250.128.0/19 maxlen: 21 212.33.96.0/19 maxlen: 20 212.106.64.0/19 maxlen: 20 217.21.0.0/20 maxlen: 20 217.21.2.0/24 maxlen: 24 217.21.3.0/24 maxlen: 24 217.21.4.0/24 maxlen: 24 217.21.5.0/24 maxlen: 24 217.21.6.0/23 maxlen: 23 217.21.8.0/23 maxlen: 23 217.21.10.0/23 maxlen: 23 217.21.12.0/23 maxlen: 23 217.21.14.0/23 maxlen: 23 217.66.224.0/19 maxlen: 24 217.66.233.0/24 maxlen: 24 217.66.234.0/23 maxlen: 23 217.66.237.0/24 maxlen: 24 217.66.240.0/20 maxlen: 20 217.78.48.0/20 maxlen: 20 217.78.48.0/21 maxlen: 21 217.78.60.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/7DpjPvLAglGlhgNWLlaqbvqT7CU.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/7DpjPvLAglGlhgNWLlaqbvqT7CU.mft rsync://rpki.ripe.net/repository/DEFAULT/7DpjPvLAglGlhgNWLlaqbvqT7CU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:38:0b:19:e0:d1:2b:44:aa:a3:95:53:dc:68:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec3a633ef2c08251a58603562e56aa6efa93ec25 Validity Not Before: Jan 2 16:23:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6e68a271f44e1a5a3dc9fef359dc80f4849a6889 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ec:41:9b:52:33:83:ac:94:89:0f:11:ee:11: 0d:11:31:c0:4b:c6:4d:10:ea:24:7c:ec:c4:db:da: 87:ba:56:f4:15:a8:0d:aa:24:90:47:65:5d:f5:68: cc:82:75:54:13:e2:f6:28:11:e7:7f:a6:5e:13:7b: fd:56:c5:b0:16:6e:9f:07:21:be:8a:72:a6:d8:02: de:84:7b:e6:47:a4:a0:87:78:bc:6b:4d:81:9d:38: c1:b8:5f:2f:5d:68:ef:11:05:02:dd:0b:83:c7:ff: 88:f9:b9:5f:11:4c:65:5d:41:04:e2:d1:af:b1:26: c1:c3:a1:fb:82:54:5d:56:02:ea:89:d5:4c:19:89: c8:e8:48:b7:1d:73:25:b4:99:0b:38:c6:36:9a:cd: e6:2a:94:db:d7:a7:00:9c:25:d6:6f:d9:9b:ff:4a: 5e:ec:dc:f9:8d:88:d1:85:0d:cb:4f:db:40:9c:dc: 5a:e7:82:1e:bc:5c:f9:3e:3f:4f:bc:2a:14:db:c3: 1b:af:a0:73:d8:be:a5:6a:03:6b:b9:22:3e:39:ca: 00:95:8f:41:06:de:e6:e3:c4:68:82:84:d0:e7:03: a5:1e:b0:85:2c:17:fe:62:2d:e4:7e:7e:69:ae:fa: a2:d5:72:b9:e7:96:e9:a8:20:a8:a7:bb:2f:d5:e4: 33:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:68:A2:71:F4:4E:1A:5A:3D:C9:FE:F3:59:DC:80:F4:84:9A:68:89 X509v3 Authority Key Identifier: keyid:EC:3A:63:3E:F2:C0:82:51:A5:86:03:56:2E:56:AA:6E:FA:93:EC:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7DpjPvLAglGlhgNWLlaqbvqT7CU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/bmiicfROGlo9yf7zWdyA9ISaaIk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/7DpjPvLAglGlhgNWLlaqbvqT7CU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.8.0.0/17 82.102.192.0/18 82.205.0.0/17 85.113.96.0/19 86.107.16.0/22 87.252.108.0/22 89.239.32.0/20 94.26.112.0/20 109.232.162.0/23 147.189.176.0/20 176.65.12.0/22 185.40.192.0/22 185.90.242.0/24 185.138.132.0/22 185.171.132.0/22 188.209.208.0/22 188.215.100.0/22 194.169.121.0-194.169.123.255 199.204.215.0/24 199.250.128.0/19 212.33.96.0/19 212.106.64.0/19 217.21.0.0/20 217.66.224.0/19 217.78.48.0/20 Signature Algorithm: sha256WithRSAEncryption 6b:e6:34:de:74:52:d4:35:39:cb:ce:8b:2a:b8:de:0c:da:2e: 5b:12:f4:47:e5:ba:2c:ad:3e:6f:10:d9:d8:fc:ff:41:98:fd: df:26:f4:98:9d:b7:2f:e8:71:12:ed:fb:98:1b:14:30:63:4c: 67:f0:0e:96:eb:47:b2:53:2a:83:b8:34:01:5a:c7:15:2f:d5: 0e:90:02:0b:ed:f5:69:c4:3b:42:bb:62:41:6e:66:9f:41:b7: 76:e6:f7:3c:7a:9d:e5:f9:17:71:db:f2:7f:45:82:b3:d4:fd: f9:dc:b5:33:a9:8c:e5:b6:4b:4e:6b:2f:f6:25:c3:f4:f6:fc: 14:d7:81:8d:4e:48:6a:fe:5c:3e:c1:8b:44:1e:02:95:36:06: c7:71:b8:c3:80:98:6f:6f:27:1e:36:fe:6a:ad:e8:ec:d5:d8: d2:1e:d5:e0:64:f5:e5:7a:25:78:e6:20:ff:f3:7d:f2:de:4b: 8b:7c:74:1b:84:d3:0f:f4:56:e9:4a:ac:b4:e6:91:88:cd:c4: ab:f7:db:49:d5:f7:d2:1e:18:a8:77:13:94:89:32:94:28:51: 72:70:3e:dc:8b:66:65:84:bb:ac:5c:13:9f:c1:7b:b9:67:82: 8c:1c:27:58:88:64:e2:f7:99:f1:bd:18:b5:c0:26:12:a8:1d: 71:ce:c0:9e -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt/hTgLGeDRK0Sqo5VT3GjnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjM2E2MzNlZjJjMDgyNTFhNTg2MDM1NjJlNTZhYTZlZmE5 M2VjMjUwHhcNMjYwMTAyMTYyMzE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZTY4YTI3MWY0NGUxYTVhM2RjOWZlZjM1OWRjODBmNDg0OWE2ODg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1+xBm1Izg6yUiQ8R7hENETHAS8ZN EOokfOzE29qHulb0FagNqiSQR2Vd9WjMgnVUE+L2KBHnf6ZeE3v9VsWwFm6fByG+ inKm2ALehHvmR6Sgh3i8a02BnTjBuF8vXWjvEQUC3QuDx/+I+blfEUxlXUEE4tGv sSbBw6H7glRdVgLqidVMGYnI6Ei3HXMltJkLOMY2ms3mKpTb16cAnCXWb9mb/0pe 7Nz5jYjRhQ3LT9tAnNxa54IevFz5Pj9PvCoU28Mbr6Bz2L6lagNruSI+OcoAlY9B Bt7m48RogoTQ5wOlHrCFLBf+Yi3kfn5prvqi1XK555bpqCCop7sv1eQz6wIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFG5oonH0ThpaPcn+81ncgPSEmmiJMB8GA1UdIwQY MBaAFOw6Yz7ywIJRpYYDVi5Wqm76k+wlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0RwalB2TEFnbEdsaGdOV0xsYXFidnFUN0NVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9jMWIxZjAtMjM0Zi00NWQ1LTg1OTUt ZjdjMmMyYTkxYmMyLzEvYm1paWNmUk9HbG85eWY3eldkeUE5SVNhYUlrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC9jMWIxZjAtMjM0Zi00NWQ1LTg1OTUtZjdjMmMyYTkxYmMy LzEvN0RwalB2TEFnbEdsaGdOV0xsYXFidnFUN0NVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIG7BggrBgEFBQcBBwEB/wSBqzCBqDCBpQQCAAEwgZ4DBAcl CAADBAZSZsADBAdSzQADBAVVcWADBAJWaxADBAJX/GwDBARZ7yADBAReGnADBAFt 6KIDBASTvbADBAKwQQwDBAK5KMADBAC5WvIDBAK5ioQDBAK5q4QDBAK80dADBAK8 12QwDAMEAMKpeQMEAsKpeAMEAMfM1wMEBcf6gAMEBdQhYAMEBdRqQAMEBNkVAAME BdlC4AMEBNlOMDANBgkqhkiG9w0BAQsFAAOCAQEAa+Y03nRS1DU5y86LKrjeDNou WxL0R+W6LK0+bxDZ2Pz/QZj93yb0mJ23L+hxEu37mBsUMGNMZ/AOlutHslMqg7g0 AVrHFS/VDpACC+31acQ7QrtiQW5mn0G3dub3PHqd5fkXcdvyf0WCs9T9+dy1M6mM 5bZLTmsv9iXD9Pb8FNeBjU5Iav5cPsGLRB4ClTYGx3G4w4CYb28nHjb+aq3o7NXY 0h7V4GT15XoleOYg//N98t5Li3x0G4TTD/RW6UqstOaRiM3Eq/fbSdX30h4YqHcT lIkylChRcnA+3ItmZYS7rFwTn8F7uWeCjBwnWIhk4veZ8b0YtcAmEqgdcc7Ang== -----END CERTIFICATE-----Generated at Tue Jan 20 04:45:25 2026 by rpki-client