This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/BMHXoNqb9w8hGpmKpbza0EXvFx4.roa File: BMHXoNqb9w8hGpmKpbza0EXvFx4.roa (raw, json) Hash identifier: GAFHMPGGv6WbCFEAKXD/fdvXu0V9RH11YpVxeHI3Tgg= Subject key identifier: 04:C1:D7:A0:DA:9B:F7:0F:21:1A:99:8A:A5:BC:DA:D0:45:EF:17:1E Certificate issuer: /CN=5a141c5090824d0a17c29ec4050e21007113fbda Certificate serial: 019B7BA356644FAB3434627339B5141ADC71 Authority key identifier: 5A:14:1C:50:90:82:4D:0A:17:C2:9E:C4:05:0E:21:00:71:13:FB:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/BMHXoNqb9w8hGpmKpbza0EXvFx4.roa Signing time: Thu 01 Jan 2026 22:17:40 +0000 ROA not before: Thu 01 Jan 2026 22:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1299 IP address blocks: 5.63.24.0/21 maxlen: 21 91.190.168.0/21 maxlen: 21 185.85.76.0/22 maxlen: 22 2a02:798::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:56:64:4f:ab:34:34:62:73:39:b5:14:1a:dc:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a141c5090824d0a17c29ec4050e21007113fbda Validity Not Before: Jan 1 22:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=04c1d7a0da9bf70f211a998aa5bcdad045ef171e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:e3:2c:ec:72:5e:ea:cb:a3:bf:09:50:f1:00: ed:47:e2:ee:75:0f:11:4f:7c:ac:33:75:15:e9:70: 5e:dc:c3:83:56:21:f7:4b:fe:d5:5f:86:13:6e:dd: 53:15:c0:cb:5c:0e:b4:af:e7:4d:c4:8c:4d:23:c9: d8:ff:73:f8:73:ab:6b:27:af:e6:34:25:e2:ee:8d: f0:5c:d4:07:56:68:a9:fc:54:01:e9:59:f2:f5:f2: 1d:62:79:39:5a:45:8d:1e:25:49:11:13:e6:d2:f0: ea:58:d9:c8:f4:52:c6:b9:9c:81:19:3e:08:a5:e1: b5:50:08:01:38:97:11:85:4a:da:9d:0a:ad:af:4b: de:22:19:40:8a:9e:25:27:8e:48:2b:de:77:40:16: a9:7b:00:51:52:53:cc:b3:d1:e0:60:eb:7b:38:67: ba:9c:b6:f5:77:8a:7a:b1:70:40:bc:21:82:da:1a: db:04:3b:a0:2f:b2:82:77:b2:14:26:41:fd:64:45: 5e:84:8f:19:9b:d6:b9:03:a7:90:4c:92:e3:04:ab: 90:03:5f:1b:68:d5:c6:26:16:3c:f2:ed:c8:b6:b8: 84:4d:5c:7d:98:a9:35:2a:b6:69:1f:02:8b:66:4d: 64:f5:c8:5c:72:fb:51:d4:47:20:6d:d8:7e:17:dc: cc:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:C1:D7:A0:DA:9B:F7:0F:21:1A:99:8A:A5:BC:DA:D0:45:EF:17:1E X509v3 Authority Key Identifier: keyid:5A:14:1C:50:90:82:4D:0A:17:C2:9E:C4:05:0E:21:00:71:13:FB:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/BMHXoNqb9w8hGpmKpbza0EXvFx4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.63.24.0/21 91.190.168.0/21 185.85.76.0/22 IPv6: 2a02:798::/32 Signature Algorithm: sha256WithRSAEncryption 5a:4a:35:61:09:af:59:14:07:61:b5:0b:2b:40:2e:37:0b:38: 9d:06:0d:22:27:fb:8a:67:d3:fd:98:40:ab:9e:1e:e4:93:58: 5a:e9:3c:09:69:1f:b7:c6:b4:0d:1e:f0:e9:14:19:7e:81:28: 1a:28:44:ff:4a:df:ad:2d:55:b6:66:4c:b6:76:c1:f3:5e:33: 07:58:1d:ce:fa:1e:fb:8b:c1:33:b0:6e:a6:27:c9:ae:c2:ba: ba:bf:d5:45:c6:ff:eb:28:72:fb:5b:6b:1d:ea:85:a1:f0:ea: 0d:3b:35:6d:c2:1f:aa:d8:2f:c6:37:75:cd:4e:70:1e:7d:7e: f8:93:48:aa:c5:1d:91:92:32:f4:67:69:b7:c1:b2:9c:52:95: 59:14:1a:3f:11:34:a6:81:d9:65:13:2d:56:7f:04:ae:2a:46: aa:2a:43:1f:73:86:4b:9c:56:46:10:f0:69:0b:1b:0e:89:fd: 04:ed:6f:58:7b:b3:01:b5:7f:7e:0a:b7:39:95:d0:88:37:c7: f7:cc:ea:19:3c:12:d3:09:f1:b1:29:90:f9:b8:89:53:d1:a1: 7c:4a:67:31:ac:3e:5e:fd:15:86:74:fb:86:d7:d8:ee:17:79: f5:6d:a6:c0:54:6f:a9:b3:39:c4:d6:ff:2a:1b:48:57:5c:cf: 16:a4:db:d7 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt7o1ZkT6s0NGJzObUUGtxxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhMTQxYzUwOTA4MjRkMGExN2MyOWVjNDA1MGUyMTAwNzEx M2ZiZGEwHhcNMjYwMTAxMjIxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNGMxZDdhMGRhOWJmNzBmMjExYTk5OGFhNWJjZGFkMDQ1ZWYxNzFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4+Ms7HJe6sujvwlQ8QDtR+LudQ8R T3ysM3UV6XBe3MODViH3S/7VX4YTbt1TFcDLXA60r+dNxIxNI8nY/3P4c6trJ6/m NCXi7o3wXNQHVmip/FQB6Vny9fIdYnk5WkWNHiVJERPm0vDqWNnI9FLGuZyBGT4I peG1UAgBOJcRhUranQqtr0veIhlAip4lJ45IK953QBapewBRUlPMs9HgYOt7OGe6 nLb1d4p6sXBAvCGC2hrbBDugL7KCd7IUJkH9ZEVehI8Zm9a5A6eQTJLjBKuQA18b aNXGJhY88u3ItriETVx9mKk1KrZpHwKLZk1k9chccvtR1Ecgbdh+F9zMfwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFATB16Dam/cPIRqZiqW82tBF7xceMB8GA1UdIwQY MBaAFFoUHFCQgk0KF8KexAUOIQBxE/vaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2hRY1VKQ0NUUW9Yd3A3RUJRNGhBSEVULTlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9iMjBlOTAtYmY2ZS00ZTI1LTg3ZDUt ZWNlZWZmOGU4NGUwLzEvQk1IWG9OcWI5dzhoR3BtS3BiemEwRVh2Rng0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9iMjBlOTAtYmY2ZS00ZTI1LTg3ZDUtZWNlZWZmOGU4NGUw LzEvV2hRY1VKQ0NUUW9Yd3A3RUJRNGhBSEVULTlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDBT8YAwQD W76oAwQCuVVMMA0EAgACMAcDBQAqAgeYMA0GCSqGSIb3DQEBCwUAA4IBAQBaSjVh Ca9ZFAdhtQsrQC43CzidBg0iJ/uKZ9P9mECrnh7kk1ha6TwJaR+3xrQNHvDpFBl+ gSgaKET/St+tLVW2Zky2dsHzXjMHWB3O+h77i8EzsG6mJ8muwrq6v9VFxv/rKHL7 W2sd6oWh8OoNOzVtwh+q2C/GN3XNTnAefX74k0iqxR2RkjL0Z2m3wbKcUpVZFBo/ ETSmgdllEy1WfwSuKkaqKkMfc4ZLnFZGEPBpCxsOif0E7W9Ye7MBtX9+Crc5ldCI N8f3zOoZPBLTCfGxKZD5uIlT0aF8SmcxrD5e/RWGdPuG19juF3n1babAVG+psznE 1v8qG0hXXM8WpNvX -----END CERTIFICATE-----Generated at Fri Jan 2 13:02:06 2026 by rpki-client