This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/BMVk-OA-2PhTMA5A-sORM1prfMQ.roa File: BMVk-OA-2PhTMA5A-sORM1prfMQ.roa (raw, json) Hash identifier: E5dCIP4UxhH+T0A81jHL6M9IWvcHzJuPi1U0SLcMSqE= Subject key identifier: 04:C5:64:F8:E0:3E:D8:F8:53:30:0E:40:FA:C3:91:33:5A:6B:7C:C4 Certificate issuer: /CN=42432a319f54b058372fd32528eae51fc90c15b2 Certificate serial: 019B7C1357489332A96E9B1FD9EDB250F450 Authority key identifier: 42:43:2A:31:9F:54:B0:58:37:2F:D3:25:28:EA:E5:1F:C9:0C:15:B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/BMVk-OA-2PhTMA5A-sORM1prfMQ.roa Signing time: Fri 02 Jan 2026 00:20:00 +0000 ROA not before: Fri 02 Jan 2026 00:20:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5411 IP address blocks: 93.190.198.0/23 maxlen: 23 93.190.198.0/24 maxlen: 24 93.190.199.0/24 maxlen: 24 213.153.96.0/19 maxlen: 19 213.153.96.0/20 maxlen: 20 213.153.112.0/20 maxlen: 20 2a01:6d00::/32 maxlen: 32 2a01:6d00::/33 maxlen: 33 2a01:6d00:8000::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.mft rsync://rpki.ripe.net/repository/DEFAULT/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:57:48:93:32:a9:6e:9b:1f:d9:ed:b2:50:f4:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42432a319f54b058372fd32528eae51fc90c15b2 Validity Not Before: Jan 2 00:20:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=04c564f8e03ed8f853300e40fac391335a6b7cc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:fa:f2:e0:bc:10:12:36:5b:83:0b:d6:b4:da: 8b:49:b1:2a:3c:04:6a:70:86:da:08:55:a5:d1:58: c1:11:3d:38:ae:ed:59:2e:7d:64:d2:5a:3e:29:e9: f6:66:90:53:e1:da:b8:11:f9:85:a5:68:91:13:1c: ed:f3:d3:52:25:49:61:b0:01:cb:9c:57:a3:17:12: 7c:9f:1b:ca:08:c3:cd:bd:67:bc:53:9e:33:5b:ba: 2a:d7:2a:f6:27:3d:dd:41:57:7b:7a:7a:58:a8:2e: 28:ee:65:34:c0:b2:4e:bd:ad:9a:02:47:2e:8f:26: b2:1f:25:03:26:14:c0:25:18:2a:00:fe:68:d1:cd: 4e:5a:9a:34:f6:53:df:eb:a8:ae:60:e9:26:22:f5: 71:26:ec:1a:f4:59:7f:50:f4:2f:58:35:af:05:cd: 5b:25:1a:1c:a1:c5:81:5e:bc:ae:fa:ab:6a:1d:6e: fa:97:be:c0:86:a2:e5:2a:cd:ec:81:78:c1:4f:7a: d6:83:3a:c3:fb:be:7e:8e:4a:09:8c:4e:8c:5e:11: 2f:01:8f:62:54:6f:30:d8:05:21:ef:d5:88:b0:eb: 23:19:dc:e9:f2:a7:ce:3d:2a:32:49:7f:01:7f:ae: 9f:87:b5:dc:02:32:22:14:5f:eb:34:46:01:2f:e2: 37:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:C5:64:F8:E0:3E:D8:F8:53:30:0E:40:FA:C3:91:33:5A:6B:7C:C4 X509v3 Authority Key Identifier: keyid:42:43:2A:31:9F:54:B0:58:37:2F:D3:25:28:EA:E5:1F:C9:0C:15:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/BMVk-OA-2PhTMA5A-sORM1prfMQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.190.198.0/23 213.153.96.0/19 IPv6: 2a01:6d00::/32 Signature Algorithm: sha256WithRSAEncryption a1:5f:a9:15:c9:4b:0a:b9:02:2a:89:e8:94:c9:49:24:21:42: c4:06:b5:93:09:77:f2:58:2d:60:df:cd:47:f5:83:7d:10:89: 65:2b:5a:39:2a:f4:7f:73:87:f0:cd:9e:48:e0:68:89:28:c8: 49:4c:75:c4:d4:ab:5f:e0:a5:bb:87:fc:bc:11:3c:61:69:be: d8:01:81:39:bb:55:be:53:74:10:93:21:e8:85:49:15:ad:9c: c3:2b:2e:d8:a5:2e:fd:83:b4:1c:e7:86:da:ba:38:48:0b:eb: 5b:dd:d7:73:31:6c:d2:81:f5:b6:22:df:9c:cf:99:5d:f8:9f: 10:2a:4f:1e:17:94:f3:b6:e7:07:c2:7b:37:de:1a:8f:c2:4a: c8:77:94:12:fa:99:c4:57:f0:c7:c9:bf:f5:19:d0:92:df:b3: ef:1a:97:f0:54:7b:7e:8e:e7:c0:49:74:ba:4a:23:8a:27:1b: d6:3f:a7:28:32:3e:da:27:2d:9a:f8:2b:5f:53:97:e9:96:e6: 79:34:b0:26:af:5f:7a:21:9e:e9:62:d3:59:10:80:7f:1e:a7: 23:23:a8:cf:a6:35:a9:eb:62:8a:5a:66:4a:ce:f5:46:75:3d: a3:57:03:72:07:80:0c:a7:4f:9b:1e:6c:d5:19:49:2a:ca:81: 97:57:71:17 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt8E1dIkzKpbpsf2e2yUPRQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyNDMyYTMxOWY1NGIwNTgzNzJmZDMyNTI4ZWFlNTFmYzkw YzE1YjIwHhcNMjYwMTAyMDAyMDAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNGM1NjRmOGUwM2VkOGY4NTMzMDBlNDBmYWMzOTEzMzVhNmI3Y2M0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvry4LwQEjZbgwvWtNqLSbEqPARq cIbaCFWl0VjBET04ru1ZLn1k0lo+Ken2ZpBT4dq4EfmFpWiRExzt89NSJUlhsAHL nFejFxJ8nxvKCMPNvWe8U54zW7oq1yr2Jz3dQVd7enpYqC4o7mU0wLJOva2aAkcu jyayHyUDJhTAJRgqAP5o0c1OWpo09lPf66iuYOkmIvVxJuwa9Fl/UPQvWDWvBc1b JRococWBXryu+qtqHW76l77AhqLlKs3sgXjBT3rWgzrD+75+jkoJjE6MXhEvAY9i VG8w2AUh79WIsOsjGdzp8qfOPSoySX8Bf66fh7XcAjIiFF/rNEYBL+I3GQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFATFZPjgPtj4UzAOQPrDkTNaa3zEMB8GA1UdIwQY MBaAFEJDKjGfVLBYNy/TJSjq5R/JDBWyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWtNcU1aOVVzRmczTDlNbEtPcmxIOGtNRmJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS83YWI3OWMtOWRmZi00YTVkLWFlODMt MTMxZGMyYmEyZWM4LzEvQk1Way1PQS0yUGhUTUE1QS1zT1JNMXByZk1RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS83YWI3OWMtOWRmZi00YTVkLWFlODMtMTMxZGMyYmEyZWM4 LzEvUWtNcU1aOVVzRmczTDlNbEtPcmxIOGtNRmJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBXb7GAwQF 1ZlgMA0EAgACMAcDBQAqAW0AMA0GCSqGSIb3DQEBCwUAA4IBAQChX6kVyUsKuQIq ieiUyUkkIULEBrWTCXfyWC1g381H9YN9EIllK1o5KvR/c4fwzZ5I4GiJKMhJTHXE 1Ktf4KW7h/y8ETxhab7YAYE5u1W+U3QQkyHohUkVrZzDKy7YpS79g7Qc54baujhI C+tb3ddzMWzSgfW2It+cz5ld+J8QKk8eF5TztucHwns33hqPwkrId5QS+pnEV/DH yb/1GdCS37PvGpfwVHt+jufASXS6SiOKJxvWP6coMj7aJy2a+CtfU5fpluZ5NLAm r196IZ7pYtNZEIB/HqcjI6jPpjWp62KKWmZKzvVGdT2jVwNyB4AMp0+bHmzVGUkq yoGXV3EX -----END CERTIFICATE-----Generated at Sun Jan 25 18:05:37 2026 by rpki-client