This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/BM26WSHmDXrBxfTRXw9OBN2bB5k.roa File: BM26WSHmDXrBxfTRXw9OBN2bB5k.roa (raw, json) Hash identifier: eTiUZXSOWwdAMhtFe/lHUOC73ALIZLmrUjbnWfXVaNc= Subject key identifier: 04:CD:BA:59:21:E6:0D:7A:C1:C5:F4:D1:5F:0F:4E:04:DD:9B:07:99 Certificate issuer: /CN=d3cb5cecc213b9f86dbba518521e8546ec93861c Certificate serial: 019B77595EE04D2EC8F108D891D0DBAD2EF6 Authority key identifier: D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/BM26WSHmDXrBxfTRXw9OBN2bB5k.roa Signing time: Thu 01 Jan 2026 02:18:24 +0000 ROA not before: Thu 01 Jan 2026 02:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213224 IP address blocks: 66.71.160.0/20 maxlen: 24 85.235.158.0/23 maxlen: 24 209.227.208.0/20 maxlen: 24 209.227.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:5e:e0:4d:2e:c8:f1:08:d8:91:d0:db:ad:2e:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3cb5cecc213b9f86dbba518521e8546ec93861c Validity Not Before: Jan 1 02:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=04cdba5921e60d7ac1c5f4d15f0f4e04dd9b0799 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0a:d5:42:c2:f6:14:10:8e:5d:df:2c:07:95: 90:a8:f9:09:ce:ff:df:bb:b5:51:aa:7b:f7:59:a7: a3:5f:84:ae:de:c0:f2:a9:48:ec:36:7a:52:30:1b: c1:50:12:6e:9b:cc:37:7c:2c:d2:d1:ac:00:3b:29: 13:f8:27:ec:06:ba:17:40:a8:47:1a:07:32:a2:61: 25:ae:54:58:b0:ad:57:8b:50:09:41:d8:0b:e9:50: 7e:ea:08:8e:d2:db:2e:4f:6e:b1:4f:f1:51:16:b3: cb:58:82:28:07:92:d6:83:e8:e2:f3:58:e6:63:03: d1:72:ba:3e:25:8b:c2:1c:4c:ef:d3:b4:fb:de:fe: 8c:80:e8:86:7a:59:1e:6c:f0:b1:55:42:cc:5c:bf: 40:59:d0:7e:2a:f3:26:7f:a3:f8:0e:bd:27:b5:1a: b3:ad:cf:f3:45:c4:e5:bf:2d:d5:78:2d:28:bf:8b: 30:2a:96:73:9e:cd:8a:a6:9c:f8:87:1c:9f:3c:6f: 49:8c:eb:08:00:75:a9:70:4d:fe:6e:26:7b:22:ec: fd:c5:d1:8c:2b:0d:af:d5:32:83:51:f8:d9:de:c5: 54:f2:9c:75:9c:75:8d:c8:49:99:ff:ba:ce:b4:24: 5f:2f:3e:6a:9c:0d:f3:4d:38:f3:25:79:c1:0e:68: ee:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:CD:BA:59:21:E6:0D:7A:C1:C5:F4:D1:5F:0F:4E:04:DD:9B:07:99 X509v3 Authority Key Identifier: keyid:D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/BM26WSHmDXrBxfTRXw9OBN2bB5k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 66.71.160.0/20 85.235.158.0/23 209.227.208.0/20 209.227.240.0/20 Signature Algorithm: sha256WithRSAEncryption 85:0e:ff:98:ec:10:f4:32:f8:66:cc:3a:f9:d6:cc:d7:bd:ad: 9a:8d:b4:3b:5f:6b:ba:6c:a7:6c:36:35:ff:22:d3:72:e9:6b: f9:73:67:99:8b:db:e4:44:c9:34:d2:a2:31:e6:62:e3:5d:85: e4:0b:10:a1:04:7e:20:bd:c5:3b:31:3b:6b:d6:d1:81:f5:50: b5:40:33:bc:44:51:f1:d8:ee:a8:50:35:9f:05:cc:e8:09:43: 25:2e:bf:ab:e2:b3:5f:84:5d:6b:bf:a5:1e:c1:f7:a8:ff:9b: da:f8:c1:1c:d5:42:f5:d1:01:ba:b4:bf:70:eb:70:7c:92:ef: 96:67:99:60:3e:3d:b1:fe:b4:bc:1b:ce:68:92:9d:32:45:86: f8:34:87:f1:29:cb:60:5f:29:ce:62:a5:0a:3e:c3:cf:04:e3: 45:93:6c:0c:74:c5:e0:5c:6d:0a:a9:2a:53:e5:fb:74:5f:9a: 55:34:cb:c7:b1:65:5d:9d:87:1e:11:67:2d:3e:c1:0e:2f:ae: 98:2f:0b:55:90:8b:09:5b:16:bf:17:4d:0d:cb:49:67:1f:5c: d9:5c:76:0d:74:d3:5f:a8:d2:c3:32:d1:e5:08:35:ce:1b:36: 3d:8a:93:d4:88:68:1a:67:90:eb:65:b8:d4:a8:99:dc:5a:5a: 95:ae:dd:99 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt3WV7gTS7I8QjYkdDbrS72MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzY2I1Y2VjYzIxM2I5Zjg2ZGJiYTUxODUyMWU4NTQ2ZWM5 Mzg2MWMwHhcNMjYwMTAxMDIxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNGNkYmE1OTIxZTYwZDdhYzFjNWY0ZDE1ZjBmNGUwNGRkOWIwNzk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwrVQsL2FBCOXd8sB5WQqPkJzv/f u7VRqnv3WaejX4Su3sDyqUjsNnpSMBvBUBJum8w3fCzS0awAOykT+CfsBroXQKhH GgcyomElrlRYsK1Xi1AJQdgL6VB+6giO0tsuT26xT/FRFrPLWIIoB5LWg+ji81jm YwPRcro+JYvCHEzv07T73v6MgOiGelkebPCxVULMXL9AWdB+KvMmf6P4Dr0ntRqz rc/zRcTlvy3VeC0ov4swKpZzns2Kppz4hxyfPG9JjOsIAHWpcE3+biZ7Iuz9xdGM Kw2v1TKDUfjZ3sVU8px1nHWNyEmZ/7rOtCRfLz5qnA3zTTjzJXnBDmjulQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFATNulkh5g16wcX00V8PTgTdmweZMB8GA1UdIwQY MBaAFNPLXOzCE7n4bbulGFIehUbsk4YcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDh0YzdNSVR1Zmh0dTZVWVVoNkZSdXlUaGh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9lMTE3ZmUtYzllNy00ZDQxLTk0ZGYt ODQyNjk0MTJkNTYxLzEvQk0yNldTSG1EWHJCeGZUUlh3OU9CTjJiQjVrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy9lMTE3ZmUtYzllNy00ZDQxLTk0ZGYtODQyNjk0MTJkNTYx LzEvMDh0YzdNSVR1Zmh0dTZVWVVoNkZSdXlUaGh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQEQkegAwQB VeueAwQE0ePQAwQE0ePwMA0GCSqGSIb3DQEBCwUAA4IBAQCFDv+Y7BD0MvhmzDr5 1szXva2ajbQ7X2u6bKdsNjX/ItNy6Wv5c2eZi9vkRMk00qIx5mLjXYXkCxChBH4g vcU7MTtr1tGB9VC1QDO8RFHx2O6oUDWfBczoCUMlLr+r4rNfhF1rv6Uewfeo/5va +MEc1UL10QG6tL9w63B8ku+WZ5lgPj2x/rS8G85okp0yRYb4NIfxKctgXynOYqUK PsPPBONFk2wMdMXgXG0KqSpT5ft0X5pVNMvHsWVdnYceEWctPsEOL66YLwtVkIsJ Wxa/F00Ny0lnH1zZXHYNdNNfqNLDMtHlCDXOGzY9ipPUiGgaZ5DrZbjUqJncWlqV rt2Z -----END CERTIFICATE-----Generated at Mon Jan 26 05:48:55 2026 by rpki-client