This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/BHMecBG9x9xUY8jTjlOT7nNxN9k.roa File: BHMecBG9x9xUY8jTjlOT7nNxN9k.roa (raw, json) Hash identifier: HYJY2r76YQlta0gJBproON2MhOd3SZjrPkPVpXkWpDU= Subject key identifier: 04:73:1E:70:11:BD:C7:DC:54:63:C8:D3:8E:53:93:EE:73:71:37:D9 Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f Certificate serial: 019B77C6CDC698009AA792C0E36C58A87D10 Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/BHMecBG9x9xUY8jTjlOT7nNxN9k.roa Signing time: Thu 01 Jan 2026 04:17:56 +0000 ROA not before: Thu 01 Jan 2026 04:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209242 IP address blocks: 5.10.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 06:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:cd:c6:98:00:9a:a7:92:c0:e3:6c:58:a8:7d:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f Validity Not Before: Jan 1 04:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=04731e7011bdc7dc5463c8d38e5393ee737137d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:31:fb:52:71:7d:b1:db:75:b8:b6:f1:99:60: 2d:85:c6:ef:ea:36:ec:49:8f:3c:83:32:91:e4:45: 38:89:53:ed:f7:8b:23:a0:bc:4d:aa:c6:f1:a5:cc: 58:e7:e5:e7:1f:8c:37:ab:42:ad:b3:29:35:43:70: 29:1b:4a:1a:fd:6c:02:02:38:8c:62:75:f9:25:d0: 99:fa:df:f9:26:4a:05:31:3f:eb:a1:a7:e3:1a:2d: bd:c3:db:fe:d0:bc:de:5c:0b:30:d9:05:cd:96:bc: 32:ef:02:55:ca:c7:64:29:94:85:a5:05:8d:09:3d: 2e:cd:fd:68:03:92:0d:9c:78:bc:16:55:35:8e:42: 99:4a:50:1e:08:5a:fc:10:72:9a:2c:34:57:69:07: bc:a1:0f:a8:62:3e:30:aa:27:fd:6a:b9:84:21:ad: 67:6a:50:aa:c0:e7:70:08:81:dd:78:fa:6c:98:f0: 89:28:ab:d1:71:6c:9e:a7:c8:58:03:bf:20:8c:b6: 02:ee:79:11:8a:c0:1f:65:9b:a9:82:65:b4:50:ea: 95:a6:e4:69:2d:f2:db:cc:13:dd:11:4f:7b:ea:9f: 27:22:fb:37:41:ee:07:59:6d:0d:2b:e1:1d:44:f0: da:ca:11:4f:e3:d3:dc:8c:e6:3c:ad:03:bb:76:ed: 0c:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:73:1E:70:11:BD:C7:DC:54:63:C8:D3:8E:53:93:EE:73:71:37:D9 X509v3 Authority Key Identifier: keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/BHMecBG9x9xUY8jTjlOT7nNxN9k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.10.244.0/22 Signature Algorithm: sha256WithRSAEncryption 5a:59:35:35:a1:53:61:32:d3:74:3d:c2:67:75:31:44:4c:44: 60:71:5a:bb:25:8b:53:38:a0:93:e8:5e:db:41:d9:be:07:82: af:e1:9c:21:99:2b:ab:3c:45:05:f4:a1:5c:1b:8b:9f:13:60: 1e:d1:a2:6f:6b:91:6e:bb:3d:36:41:f9:e3:ba:7c:a2:6c:87: 2a:94:cc:b7:82:8c:69:ad:2b:2f:67:f8:e6:26:cf:5f:a2:47: f2:99:92:a0:03:b6:45:09:8a:d7:0f:90:ed:72:bb:e9:52:e0: 5c:06:44:b2:78:54:90:01:22:6c:2e:9e:73:e0:e2:ed:18:b3: 05:df:d1:53:d1:db:cd:27:0d:24:5e:77:91:67:a6:91:a4:64: c5:60:7c:7f:d8:80:88:6f:bb:e9:e9:e6:ca:c9:54:5a:3a:c7: 2e:c6:60:36:f1:73:c8:0f:0d:4e:15:30:4b:2b:55:5f:9f:91: 40:40:31:a2:7e:7d:e4:d1:b1:3b:10:7a:f5:0a:2e:95:3a:74: 29:42:fd:fe:9e:b7:82:2d:9b:b6:a0:39:e9:90:0a:1a:e9:2f: 52:59:12:57:33:d8:d9:33:69:61:ba:ec:81:ac:13:1c:25:7e: 9d:ba:2c:9d:c8:a3:d5:58:41:2c:f9:95:5d:89:c6:52:1c:41: 30:10:e5:03 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xs3GmACap5LA42xYqH0QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMDZhNDJiYjI0NDZlNTFmMTkyZWEzNzViZGY3ZWVjNWE1 MWM3N2YwHhcNMjYwMTAxMDQxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNDczMWU3MDExYmRjN2RjNTQ2M2M4ZDM4ZTUzOTNlZTczNzEzN2Q5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzH7UnF9sdt1uLbxmWAthcbv6jbs SY88gzKR5EU4iVPt94sjoLxNqsbxpcxY5+XnH4w3q0Ktsyk1Q3ApG0oa/WwCAjiM YnX5JdCZ+t/5JkoFMT/roafjGi29w9v+0LzeXAsw2QXNlrwy7wJVysdkKZSFpQWN CT0uzf1oA5INnHi8FlU1jkKZSlAeCFr8EHKaLDRXaQe8oQ+oYj4wqif9armEIa1n alCqwOdwCIHdePpsmPCJKKvRcWyep8hYA78gjLYC7nkRisAfZZupgmW0UOqVpuRp LfLbzBPdEU976p8nIvs3Qe4HWW0NK+EdRPDayhFP49PcjOY8rQO7du0MFwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFARzHnARvcfcVGPI045Tk+5zcTfZMB8GA1UdIwQY MBaAFH0GpCuyRG5R8ZLqN1vffuxaUcd/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUt MmNmODA2YjJkMGYyLzEvQkhNZWNCRzl4OXhVWThqVGpsT1Q3bk54TjlrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUtMmNmODA2YjJkMGYy LzEvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCBQr0MA0G CSqGSIb3DQEBCwUAA4IBAQBaWTU1oVNhMtN0PcJndTFETERgcVq7JYtTOKCT6F7b Qdm+B4Kv4ZwhmSurPEUF9KFcG4ufE2Ae0aJva5Fuuz02QfnjunyibIcqlMy3goxp rSsvZ/jmJs9fokfymZKgA7ZFCYrXD5DtcrvpUuBcBkSyeFSQASJsLp5z4OLtGLMF 39FT0dvNJw0kXneRZ6aRpGTFYHx/2ICIb7vp6ebKyVRaOscuxmA28XPIDw1OFTBL K1Vfn5FAQDGifn3k0bE7EHr1Ci6VOnQpQv3+nreCLZu2oDnpkAoa6S9SWRJXM9jZ M2lhuuyBrBMcJX6duiydyKPVWEEs+ZVdicZSHEEwEOUD -----END CERTIFICATE-----Generated at Wed Jan 21 12:20:15 2026 by rpki-client