This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/BmTt_K_BLwv-pJIWhVhf0HoNBHI.roa File: BmTt_K_BLwv-pJIWhVhf0HoNBHI.roa (raw, json) Hash identifier: 7LYJkFKH+ULhI+BQpkEXahBALgXPwOMMlmmdsz27u58= Subject key identifier: 06:64:ED:FC:AF:C1:2F:0B:FE:A4:92:16:85:58:5F:D0:7A:0D:04:72 Certificate issuer: /CN=26bd5ffbce6bf8707fa3e5967e0d38b455d9d4e1 Certificate serial: 019B7CECE17F32C71624BC06FC982828E680 Authority key identifier: 26:BD:5F:FB:CE:6B:F8:70:7F:A3:E5:96:7E:0D:38:B4:55:D9:D4:E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jr1f-85r-HB_o-WWfg04tFXZ1OE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/BmTt_K_BLwv-pJIWhVhf0HoNBHI.roa Signing time: Fri 02 Jan 2026 04:17:37 +0000 ROA not before: Fri 02 Jan 2026 04:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30848 IP address blocks: 185.169.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/Jr1f-85r-HB_o-WWfg04tFXZ1OE.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/Jr1f-85r-HB_o-WWfg04tFXZ1OE.mft rsync://rpki.ripe.net/repository/DEFAULT/Jr1f-85r-HB_o-WWfg04tFXZ1OE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:e1:7f:32:c7:16:24:bc:06:fc:98:28:28:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26bd5ffbce6bf8707fa3e5967e0d38b455d9d4e1 Validity Not Before: Jan 2 04:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0664edfcafc12f0bfea4921685585fd07a0d0472 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:dc:3f:30:c8:f1:99:14:57:f6:76:d4:3e:e1: 87:d2:83:e9:a7:66:37:0f:79:eb:cb:5a:e2:a4:1e: 0a:79:28:be:e3:60:1d:29:de:4c:37:9c:c5:ac:6b: 09:ff:2b:89:34:6c:e9:bc:49:2e:d4:17:82:33:cf: dc:59:fb:34:e0:a5:61:ed:9d:7d:a1:99:68:db:63: 64:f9:5e:f8:40:3d:c5:87:b3:83:08:c4:cf:b5:68: 44:e4:20:a0:93:c6:7a:34:aa:b9:79:69:3b:ba:80: 90:be:fa:ff:75:24:de:c6:6a:3f:67:da:68:f0:e0: 59:0c:c2:68:1c:ae:60:83:14:1e:c3:3f:5e:2a:f7: 65:5b:3b:3b:17:ea:2f:d0:d1:ab:48:2c:95:da:8c: 47:03:d8:27:6a:f5:c3:d2:1c:b1:8c:d9:8c:fa:ca: 6d:55:18:e4:e5:55:83:fc:bd:51:6f:fd:ab:9f:30: b2:56:49:2c:cb:4f:f6:24:55:2c:6f:0b:88:b0:56: 62:61:d5:76:83:60:d8:30:ec:e8:26:14:71:22:69: 8d:8e:a5:51:1e:2f:cc:f5:6d:dc:1c:ce:dd:9b:85: a2:a5:ef:81:60:48:79:7e:47:73:57:4d:ba:a7:69: 14:a3:8b:36:50:2f:89:b5:68:12:76:8e:fe:1a:c8: f7:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:64:ED:FC:AF:C1:2F:0B:FE:A4:92:16:85:58:5F:D0:7A:0D:04:72 X509v3 Authority Key Identifier: keyid:26:BD:5F:FB:CE:6B:F8:70:7F:A3:E5:96:7E:0D:38:B4:55:D9:D4:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jr1f-85r-HB_o-WWfg04tFXZ1OE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/BmTt_K_BLwv-pJIWhVhf0HoNBHI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/Jr1f-85r-HB_o-WWfg04tFXZ1OE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.169.176.0/22 Signature Algorithm: sha256WithRSAEncryption 0c:2f:fc:6a:2c:22:06:eb:4a:b5:fb:c8:5b:08:cc:d4:76:6e: ab:63:70:af:89:dd:0f:fd:d8:f2:d7:a8:62:6f:e2:92:b5:52: f0:1b:47:d4:69:81:a3:9f:28:50:3d:53:89:31:c8:56:77:f6: db:46:66:15:a0:25:a1:69:86:18:4b:00:6f:60:d1:ea:63:e7: 01:1b:dc:da:1c:48:49:02:d4:cd:ce:98:ff:e4:d1:5f:34:98: e4:a9:92:c2:08:b0:28:be:a3:ae:d0:41:72:21:ac:db:6c:82: cf:a1:96:53:86:5e:a2:1c:48:2a:4e:98:4f:0d:b8:0c:47:6b: 51:d1:e3:2a:56:44:21:0f:f9:0a:91:53:6a:b9:29:0d:aa:29: e2:e3:ff:af:7c:17:b5:a3:9b:ee:0a:ed:99:5e:a1:07:a6:67: 70:c2:c7:87:d2:c8:3e:f4:90:74:c2:22:d8:f2:ac:9e:a7:96: a0:8f:f3:e3:66:6d:5a:de:db:ad:b5:94:ae:79:41:fd:ae:9f: c1:82:26:c9:7a:9c:97:e9:89:07:d6:b9:b9:19:95:23:54:f9: 7a:1e:93:77:3f:6f:fd:dc:9d:9a:0c:a6:03:0b:db:36:38:ca: d2:1a:d6:fc:6a:d1:b5:19:d7:97:46:88:32:7e:d9:3d:69:a7: d4:60:89:59 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87OF/MscWJLwG/JgoKOaAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2YmQ1ZmZiY2U2YmY4NzA3ZmEzZTU5NjdlMGQzOGI0NTVk OWQ0ZTEwHhcNMjYwMTAyMDQxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNjY0ZWRmY2FmYzEyZjBiZmVhNDkyMTY4NTU4NWZkMDdhMGQwNDcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9w/MMjxmRRX9nbUPuGH0oPpp2Y3 D3nry1ripB4KeSi+42AdKd5MN5zFrGsJ/yuJNGzpvEku1BeCM8/cWfs04KVh7Z19 oZlo22Nk+V74QD3Fh7ODCMTPtWhE5CCgk8Z6NKq5eWk7uoCQvvr/dSTexmo/Z9po 8OBZDMJoHK5ggxQewz9eKvdlWzs7F+ov0NGrSCyV2oxHA9gnavXD0hyxjNmM+spt VRjk5VWD/L1Rb/2rnzCyVkksy0/2JFUsbwuIsFZiYdV2g2DYMOzoJhRxImmNjqVR Hi/M9W3cHM7dm4Wipe+BYEh5fkdzV026p2kUo4s2UC+JtWgSdo7+Gsj3EwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAZk7fyvwS8L/qSSFoVYX9B6DQRyMB8GA1UdIwQY MBaAFCa9X/vOa/hwf6Plln4NOLRV2dThMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSnIxZi04NXItSEJfby1XV2ZnMDR0RlhaMU9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9mNDk4YTItZDg2ZC00Yzc1LWJmZDMt ZThjNTU5YzcxZDY2LzEvQm1UdF9LX0JMd3YtcEpJV2hWaGYwSG9OQkhJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9mNDk4YTItZDg2ZC00Yzc1LWJmZDMtZThjNTU5YzcxZDY2 LzEvSnIxZi04NXItSEJfby1XV2ZnMDR0RlhaMU9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuamwMA0G CSqGSIb3DQEBCwUAA4IBAQAML/xqLCIG60q1+8hbCMzUdm6rY3Cvid0P/djy16hi b+KStVLwG0fUaYGjnyhQPVOJMchWd/bbRmYVoCWhaYYYSwBvYNHqY+cBG9zaHEhJ AtTNzpj/5NFfNJjkqZLCCLAovqOu0EFyIazbbILPoZZThl6iHEgqTphPDbgMR2tR 0eMqVkQhD/kKkVNquSkNqini4/+vfBe1o5vuCu2ZXqEHpmdwwseH0sg+9JB0wiLY 8qyep5agj/PjZm1a3tuttZSueUH9rp/BgibJepyX6YkH1rm5GZUjVPl6HpN3P2/9 3J2aDKYDC9s2OMrSGtb8atG1GdeXRogyftk9aafUYIlZ -----END CERTIFICATE-----Generated at Mon Jan 26 06:17:50 2026 by rpki-client