This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/BMJTX-1VIsJCIAKC_UCdqIb839w.roa File: BMJTX-1VIsJCIAKC_UCdqIb839w.roa (raw, json) Hash identifier: AwaFPfahDvnxUQFxf1zHHxQY3shWXenV5hfHWr+eRSE= Subject key identifier: 04:C2:53:5F:ED:55:22:C2:42:20:02:82:FD:40:9D:A8:86:FC:DF:DC Certificate issuer: /CN=4c87389ef41f18c1fcc82754349ea7096980b1e3 Certificate serial: 019B797EFD00F56B27020C5019FAE8ACACCC Authority key identifier: 4C:87:38:9E:F4:1F:18:C1:FC:C8:27:54:34:9E:A7:09:69:80:B1:E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/BMJTX-1VIsJCIAKC_UCdqIb839w.roa Signing time: Thu 01 Jan 2026 12:18:43 +0000 ROA not before: Thu 01 Jan 2026 12:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57822 IP address blocks: 94.247.106.0/24 maxlen: 24 94.247.107.0/24 maxlen: 24 94.247.109.0/24 maxlen: 24 185.54.245.0/24 maxlen: 24 185.54.246.0/24 maxlen: 24 185.54.247.0/24 maxlen: 24 2a02:47a0:3::/48 maxlen: 48 2a02:47a0:4::/48 maxlen: 48 2a02:47a0:201::/48 maxlen: 48 2a02:47a0:202::/48 maxlen: 48 2a02:47a0:203::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:fd:00:f5:6b:27:02:0c:50:19:fa:e8:ac:ac:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c87389ef41f18c1fcc82754349ea7096980b1e3 Validity Not Before: Jan 1 12:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=04c2535fed5522c242200282fd409da886fcdfdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:db:ee:9b:6b:41:bd:92:85:9d:de:53:37:d4: fa:7a:48:25:f5:4d:b6:dd:e6:61:8f:09:3b:26:f4: 9e:2d:6a:40:39:e9:1c:27:28:22:02:e8:e7:f1:18: 01:db:4a:b5:2a:c9:c4:fc:2e:e8:30:08:2d:dc:77: db:55:d7:d0:57:e6:38:fd:08:49:ac:41:8b:3a:0b: dd:1f:f9:1c:81:f6:23:3c:93:89:ea:22:66:76:31: e5:e9:41:46:d7:00:3c:9d:01:24:ac:80:ee:e8:9f: 03:5d:7f:74:af:e5:6f:f9:8c:da:53:43:29:1d:92: 19:2c:29:f8:66:e6:cf:ff:7f:ba:d5:67:ab:59:a5: e2:3e:95:ee:3b:0e:d4:5e:47:65:9e:91:4e:5d:6a: 00:3b:53:ab:34:07:43:81:ff:a3:84:d6:82:cf:e4: 7f:dd:50:7e:11:7e:13:f1:45:2e:53:98:52:7d:1a: 53:6a:51:03:4a:01:7a:34:d4:be:1b:c7:de:44:1e: 33:1e:91:cc:05:32:94:1d:9b:b6:c9:39:0d:51:db: 61:87:9e:0a:9a:ef:6f:cb:cc:3d:c0:eb:4f:21:a7: 32:83:61:84:17:df:7e:9a:56:f6:af:3b:f8:d7:a0: c5:de:90:ce:fd:1c:b3:2f:de:6c:08:38:b2:09:d4: 68:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:C2:53:5F:ED:55:22:C2:42:20:02:82:FD:40:9D:A8:86:FC:DF:DC X509v3 Authority Key Identifier: keyid:4C:87:38:9E:F4:1F:18:C1:FC:C8:27:54:34:9E:A7:09:69:80:B1:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/BMJTX-1VIsJCIAKC_UCdqIb839w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.247.106.0/23 94.247.109.0/24 185.54.245.0-185.54.247.255 IPv6: 2a02:47a0:3::-2a02:47a0:4:ffff:ffff:ffff:ffff:ffff 2a02:47a0:201::-2a02:47a0:203:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 96:fb:49:7c:d1:de:58:59:68:ac:b8:79:4a:f0:96:8e:88:e9: 12:be:53:aa:41:d0:98:97:e2:e9:32:94:b5:52:85:4d:42:30: 6d:c3:a6:3a:59:c0:79:28:1f:54:5a:f2:52:2c:bd:98:be:3d: b1:fe:7a:3c:4b:dd:6f:43:52:18:76:82:41:75:ee:6f:3d:aa: 62:25:88:fe:ec:f6:58:90:d2:03:7c:60:e1:17:8d:3e:35:a2: 1e:55:d4:81:df:4d:38:cc:12:fd:56:3a:ba:d8:71:e2:75:7d: ab:4f:7b:bf:35:30:98:91:b2:9d:7f:24:7d:89:d5:37:bd:0f: 00:38:71:df:84:47:ab:6b:24:eb:38:75:fc:a9:93:1d:c2:d0: e6:86:50:c3:ea:8f:11:d9:81:7d:57:ce:4b:f7:d1:a2:7e:36: 22:1c:31:3b:7c:e6:ee:cf:e1:2e:99:60:38:e3:f9:be:42:a8: 65:3b:93:ff:8b:1d:7a:5c:ac:5c:7a:3f:0a:6c:49:6f:43:89: c2:cb:45:81:99:50:5b:86:91:1c:53:99:5f:2c:bf:3c:62:c3: 0d:c0:cc:c5:f7:be:d1:f8:d6:0b:5e:5a:03:2a:28:49:94:46: c4:1f:e8:5c:35:5c:c3:fd:de:ac:bd:19:b3:d0:8d:d4:5c:fb: 82:5a:4f:cd -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgISAZt5fv0A9WsnAgxQGfrorKzMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjODczODllZjQxZjE4YzFmY2M4Mjc1NDM0OWVhNzA5Njk4 MGIxZTMwHhcNMjYwMTAxMTIxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNGMyNTM1ZmVkNTUyMmMyNDIyMDAyODJmZDQwOWRhODg2ZmNkZmRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdvum2tBvZKFnd5TN9T6ekgl9U22 3eZhjwk7JvSeLWpAOekcJygiAujn8RgB20q1KsnE/C7oMAgt3HfbVdfQV+Y4/QhJ rEGLOgvdH/kcgfYjPJOJ6iJmdjHl6UFG1wA8nQEkrIDu6J8DXX90r+Vv+YzaU0Mp HZIZLCn4ZubP/3+61WerWaXiPpXuOw7UXkdlnpFOXWoAO1OrNAdDgf+jhNaCz+R/ 3VB+EX4T8UUuU5hSfRpTalEDSgF6NNS+G8feRB4zHpHMBTKUHZu2yTkNUdthh54K mu9vy8w9wOtPIacyg2GEF99+mlb2rzv416DF3pDO/RyzL95sCDiyCdRo5wIDAQAB o4ICTTCCAkkwHQYDVR0OBBYEFATCU1/tVSLCQiACgv1AnaiG/N/cMB8GA1UdIwQY MBaAFEyHOJ70HxjB/MgnVDSepwlpgLHjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEljNG52UWZHTUg4eUNkVU5KNm5DV21Bc2VNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8yMjE1ZjctODg3YS00YmQ1LWJmOTct ZmZiNzA5Zjc2NjhjLzEvQk1KVFgtMVZJc0pDSUFLQ19VQ2RxSWI4Mzl3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC8yMjE1ZjctODg3YS00YmQ1LWJmOTctZmZiNzA5Zjc2Njhj LzEvVEljNG52UWZHTUg4eUNkVU5KNm5DV21Bc2VNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGMGCCsGAQUFBwEHAQH/BFQwUjAgBAIAATAaAwQBXvdqAwQA XvdtMAwDBAC5NvUDBAO5NvAwLgQCAAIwKDASAwcAKgJHoAADAwcAKgJHoAAEMBID BwAqAkegAgEDBwIqAkegAgAwDQYJKoZIhvcNAQELBQADggEBAJb7SXzR3lhZaKy4 eUrwlo6I6RK+U6pB0JiX4ukylLVShU1CMG3DpjpZwHkoH1Ra8lIsvZi+PbH+ejxL 3W9DUhh2gkF17m89qmIliP7s9liQ0gN8YOEXjT41oh5V1IHfTTjMEv1WOrrYceJ1 fatPe781MJiRsp1/JH2J1Te9DwA4cd+ER6trJOs4dfypkx3C0OaGUMPqjxHZgX1X zkv30aJ+NiIcMTt85u7P4S6ZYDjj+b5CqGU7k/+LHXpcrFx6PwpsSW9DicLLRYGZ UFuGkRxTmV8svzxiww3AzMX3vtH41gteWgMqKEmURsQf6Fw1XMP93qy9GbPQjdRc +4JaT80= -----END CERTIFICATE-----Generated at Mon Jan 26 02:23:45 2026 by rpki-client