This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/bmr462MOzzVfibPxeKpu-EewsJA.roa File: bmr462MOzzVfibPxeKpu-EewsJA.roa (raw, json) Hash identifier: CnF+rGIRS/b/VIz1Q6MMhGy+46VVxN260juxQ8X0FSw= Subject key identifier: 6E:6A:F8:EB:63:0E:CF:35:5F:89:B3:F1:78:AA:6E:F8:47:B0:B0:90 Certificate issuer: /CN=eb500c9002321f03964583710b7baa4597341213 Certificate serial: 019B7EA6F995923EE1C932FBD897FB3B4ED4 Authority key identifier: EB:50:0C:90:02:32:1F:03:96:45:83:71:0B:7B:AA:45:97:34:12:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/61AMkAIyHwOWRYNxC3uqRZc0EhM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/bmr462MOzzVfibPxeKpu-EewsJA.roa Signing time: Fri 02 Jan 2026 12:20:30 +0000 ROA not before: Fri 02 Jan 2026 12:20:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35374 IP address blocks: 86.110.208.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/61AMkAIyHwOWRYNxC3uqRZc0EhM.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/61AMkAIyHwOWRYNxC3uqRZc0EhM.mft rsync://rpki.ripe.net/repository/DEFAULT/61AMkAIyHwOWRYNxC3uqRZc0EhM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:f9:95:92:3e:e1:c9:32:fb:d8:97:fb:3b:4e:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb500c9002321f03964583710b7baa4597341213 Validity Not Before: Jan 2 12:20:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6e6af8eb630ecf355f89b3f178aa6ef847b0b090 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:75:6e:e8:63:33:47:e2:98:61:42:ba:be:b7: 8c:a3:09:cf:4e:58:f6:a1:40:3c:82:c9:cb:d6:95: 6f:f1:1d:d7:d5:3e:a8:5f:9a:9e:f1:33:a1:89:bd: 1a:f8:d4:fa:c6:9f:f8:e5:94:1c:9e:bd:d6:7c:02: 96:ea:f7:5a:84:16:f5:b1:bc:01:dd:ad:3e:90:a7: d0:94:a4:7e:7b:3b:2c:50:24:83:b9:5c:95:12:af: 2a:79:05:0d:5b:38:05:52:1e:5d:9d:8b:8c:c1:27: be:9c:17:12:09:55:fa:bf:9b:79:2e:15:c8:7f:88: f6:52:ba:e3:4f:48:45:86:35:bb:84:ce:b9:c3:78: cd:5f:a8:15:ec:c8:78:f3:db:dc:eb:db:27:96:37: 60:d0:d1:7f:9e:7b:12:4b:bb:ac:79:75:db:54:7a: 15:9b:d2:67:af:1b:48:e6:0c:96:00:8f:bd:10:0d: 06:01:30:c2:46:42:6d:9c:58:45:79:11:8f:f1:d5: 84:d6:a3:d5:98:30:eb:e6:7f:39:9f:d7:a2:87:9f: a8:c3:9d:4f:bc:e7:18:71:9c:63:85:ef:a0:72:cb: ff:7c:62:c1:15:f5:f1:f8:dd:ea:45:82:b0:45:9a: 06:38:10:52:44:e5:1e:40:80:a9:da:df:4c:50:4d: 7f:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:6A:F8:EB:63:0E:CF:35:5F:89:B3:F1:78:AA:6E:F8:47:B0:B0:90 X509v3 Authority Key Identifier: keyid:EB:50:0C:90:02:32:1F:03:96:45:83:71:0B:7B:AA:45:97:34:12:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61AMkAIyHwOWRYNxC3uqRZc0EhM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/bmr462MOzzVfibPxeKpu-EewsJA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/61AMkAIyHwOWRYNxC3uqRZc0EhM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.110.208.0/23 Signature Algorithm: sha256WithRSAEncryption 68:ea:12:81:f0:0c:1a:81:ef:64:e5:76:bd:51:21:36:8e:fc: ae:38:6c:93:7b:39:7b:66:0b:e6:a2:31:f2:b5:72:d8:a6:5f: 49:e7:f2:0e:cb:40:56:96:f4:22:99:54:d8:6d:89:aa:3c:e8: 27:43:fa:17:fa:3a:a6:03:42:72:66:7e:7a:ab:e2:a5:3a:11: df:07:16:04:52:0c:9b:19:be:df:1c:9f:48:ea:9f:f7:7a:b3: 4c:0d:81:93:32:17:30:09:f3:f8:32:b6:eb:1d:b3:88:b7:79: 31:25:c1:f6:d4:50:3d:64:80:b5:41:1b:54:95:bb:1a:0b:cb: 31:6e:d6:aa:7a:52:1a:ed:5c:a6:42:0e:e8:1a:76:2b:e3:fa: 29:17:69:75:2c:7d:d8:b3:94:b0:c4:95:3e:8d:35:f9:97:98: f1:dd:36:32:b9:79:c5:a2:a8:f1:5f:46:c2:d2:6b:cb:4c:83: 66:02:0a:bb:0b:b3:53:6a:ea:1a:5a:d9:5a:17:62:75:54:53: bf:26:21:3b:84:18:3b:13:9a:4c:ed:1b:2e:4d:e0:11:77:67: 9c:77:94:cc:95:ec:ef:24:4b:66:8c:08:3c:50:8b:ba:6b:f7: a6:49:bc:3c:8c:15:2b:95:f6:38:44:fc:4c:0b:64:7f:87:a4: 0f:94:7f:6e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pvmVkj7hyTL72Jf7O07UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViNTAwYzkwMDIzMjFmMDM5NjQ1ODM3MTBiN2JhYTQ1OTcz NDEyMTMwHhcNMjYwMTAyMTIyMDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZTZhZjhlYjYzMGVjZjM1NWY4OWIzZjE3OGFhNmVmODQ3YjBiMDkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9nVu6GMzR+KYYUK6vreMownPTlj2 oUA8gsnL1pVv8R3X1T6oX5qe8TOhib0a+NT6xp/45ZQcnr3WfAKW6vdahBb1sbwB 3a0+kKfQlKR+ezssUCSDuVyVEq8qeQUNWzgFUh5dnYuMwSe+nBcSCVX6v5t5LhXI f4j2UrrjT0hFhjW7hM65w3jNX6gV7Mh489vc69snljdg0NF/nnsSS7useXXbVHoV m9JnrxtI5gyWAI+9EA0GATDCRkJtnFhFeRGP8dWE1qPVmDDr5n85n9eih5+ow51P vOcYcZxjhe+gcsv/fGLBFfXx+N3qRYKwRZoGOBBSROUeQICp2t9MUE1/sQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG5q+OtjDs81X4mz8XiqbvhHsLCQMB8GA1UdIwQY MBaAFOtQDJACMh8DlkWDcQt7qkWXNBITMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNjFBTWtBSXlId09XUllOeEMzdXFSWmMwRWhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8xOWMwOWEtZDc5YS00ZGU0LThhODYt NGE2ODU5NjJmM2U4LzEvYm1yNDYyTU96elZmaWJQeGVLcHUtRWV3c0pBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS8xOWMwOWEtZDc5YS00ZGU0LThhODYtNGE2ODU5NjJmM2U4 LzEvNjFBTWtBSXlId09XUllOeEMzdXFSWmMwRWhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBVm7QMA0G CSqGSIb3DQEBCwUAA4IBAQBo6hKB8Awage9k5Xa9USE2jvyuOGyTezl7ZgvmojHy tXLYpl9J5/IOy0BWlvQimVTYbYmqPOgnQ/oX+jqmA0JyZn56q+KlOhHfBxYEUgyb Gb7fHJ9I6p/3erNMDYGTMhcwCfP4MrbrHbOIt3kxJcH21FA9ZIC1QRtUlbsaC8sx btaqelIa7VymQg7oGnYr4/opF2l1LH3Ys5SwxJU+jTX5l5jx3TYyuXnFoqjxX0bC 0mvLTINmAgq7C7NTauoaWtlaF2J1VFO/JiE7hBg7E5pM7RsuTeARd2ecd5TMlezv JEtmjAg8UIu6a/emSbw8jBUrlfY4RPxMC2R/h6QPlH9u -----END CERTIFICATE-----Generated at Mon Jan 26 23:00:37 2026 by rpki-client