This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/BMMff36mDnqefE-fi1QYcDeaUEk.roa File: BMMff36mDnqefE-fi1QYcDeaUEk.roa (raw, json) Hash identifier: Yky2cFQCYWcMLt5A2AE8QdQ1eB3p9PDevvqazUFMfX4= Subject key identifier: 04:C3:1F:7F:7E:A6:0E:7A:9E:7C:4F:9F:8B:54:18:70:37:9A:50:49 Certificate issuer: /CN=df0ba4f56e6f037725286037afc3c14c293b9b82 Certificate serial: 019B76EB25C31557A98176B4C76F27C939A0 Authority key identifier: DF:0B:A4:F5:6E:6F:03:77:25:28:60:37:AF:C3:C1:4C:29:3B:9B:82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3wuk9W5vA3clKGA3r8PBTCk7m4I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/BMMff36mDnqefE-fi1QYcDeaUEk.roa Signing time: Thu 01 Jan 2026 00:18:00 +0000 ROA not before: Thu 01 Jan 2026 00:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212647 IP address blocks: 31.172.96.0/21 maxlen: 21 2a01:a707::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.mft rsync://rpki.ripe.net/repository/DEFAULT/3wuk9W5vA3clKGA3r8PBTCk7m4I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:25:c3:15:57:a9:81:76:b4:c7:6f:27:c9:39:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df0ba4f56e6f037725286037afc3c14c293b9b82 Validity Not Before: Jan 1 00:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=04c31f7f7ea60e7a9e7c4f9f8b541870379a5049 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:90:1f:a6:3f:27:86:85:d3:0b:1e:05:14:6e: c6:dc:83:eb:9f:0c:84:e8:da:ec:bb:a4:0b:74:c1: 59:43:36:05:fb:78:b6:ed:42:8a:05:94:5f:a7:1a: 52:8f:23:46:59:03:1d:3d:6d:d5:39:9c:7b:4e:f0: 08:63:62:34:80:a3:c1:44:e2:53:7f:0a:27:d9:1e: 94:3e:cc:e4:2d:74:c4:01:27:34:84:ca:28:3b:7c: a4:54:27:01:4f:65:86:84:f2:c3:a3:04:ef:42:23: c0:1c:8c:ac:ac:cc:ad:1a:b0:24:66:84:79:cc:00: af:08:f2:72:1f:71:eb:c4:0a:40:a8:78:f1:6a:03: d7:a7:67:9b:ac:0f:82:ff:a1:0a:28:d9:50:4a:67: fe:51:39:3d:83:2a:c2:75:a1:ab:50:92:33:00:b8: 61:81:6d:8c:98:36:12:2a:9e:0a:c1:23:71:67:15: bf:e5:7d:56:62:4e:1a:2a:eb:4a:90:a6:35:14:f2: 87:a1:d5:85:3a:c7:aa:37:e4:69:89:95:e2:9c:83: d0:b9:5b:7b:7e:17:bf:40:4c:68:fd:53:e1:44:0f: a7:40:3c:4b:7d:98:e9:d3:3c:d6:19:66:f3:8b:43: b9:67:bd:cf:c5:80:32:8f:24:c3:5f:1e:ed:28:07: 69:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:C3:1F:7F:7E:A6:0E:7A:9E:7C:4F:9F:8B:54:18:70:37:9A:50:49 X509v3 Authority Key Identifier: keyid:DF:0B:A4:F5:6E:6F:03:77:25:28:60:37:AF:C3:C1:4C:29:3B:9B:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3wuk9W5vA3clKGA3r8PBTCk7m4I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/BMMff36mDnqefE-fi1QYcDeaUEk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.172.96.0/21 IPv6: 2a01:a707::/32 Signature Algorithm: sha256WithRSAEncryption 7e:9c:64:04:0e:6b:9c:24:26:18:1d:33:79:e0:7c:9e:af:f0: 1f:b2:70:ed:1b:6e:de:68:20:8b:cf:4f:78:6b:98:8b:43:f0: f1:29:a5:85:5d:4d:61:49:97:7d:90:c8:35:94:f4:39:3d:3a: 07:b4:62:43:37:f6:6f:e8:c7:cb:d0:43:67:a1:97:67:59:f0: 61:39:47:cd:9c:86:c0:2b:0d:46:6d:e2:50:08:d0:d7:d1:6e: d3:f4:9a:7a:d8:69:17:21:ed:32:88:88:e7:1d:01:df:f8:91: 87:fe:9c:94:05:fb:f9:5a:58:09:9d:79:6e:64:61:fb:da:f7: 78:14:73:0d:97:07:b2:28:13:14:b3:c1:37:a1:da:cd:f2:ad: 84:31:2c:7d:b5:0f:e4:80:0e:84:c8:1f:d7:65:39:b6:a0:39: dd:43:d3:19:d4:61:bb:fb:26:a0:4d:3f:c5:e2:84:3a:53:f5: 83:b3:af:68:55:6e:ef:f1:4c:51:8a:53:c9:1d:77:31:1d:bb: 6e:02:67:f6:58:da:8a:6a:9d:48:b7:9c:b7:28:41:d1:af:45: be:95:ae:b7:b6:3b:36:cd:19:db:c0:71:c1:c6:ba:15:af:65: 7d:bc:12:06:18:f1:e8:92:02:1d:3c:4d:76:39:a8:ec:ae:a2: 0e:1c:be:f9 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt26yXDFVepgXa0x28nyTmgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmMGJhNGY1NmU2ZjAzNzcyNTI4NjAzN2FmYzNjMTRjMjkz YjliODIwHhcNMjYwMTAxMDAxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNGMzMWY3ZjdlYTYwZTdhOWU3YzRmOWY4YjU0MTg3MDM3OWE1MDQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpAfpj8nhoXTCx4FFG7G3IPrnwyE 6Nrsu6QLdMFZQzYF+3i27UKKBZRfpxpSjyNGWQMdPW3VOZx7TvAIY2I0gKPBROJT fwon2R6UPszkLXTEASc0hMooO3ykVCcBT2WGhPLDowTvQiPAHIysrMytGrAkZoR5 zACvCPJyH3HrxApAqHjxagPXp2ebrA+C/6EKKNlQSmf+UTk9gyrCdaGrUJIzALhh gW2MmDYSKp4KwSNxZxW/5X1WYk4aKutKkKY1FPKHodWFOseqN+RpiZXinIPQuVt7 fhe/QExo/VPhRA+nQDxLfZjp0zzWGWbzi0O5Z73PxYAyjyTDXx7tKAdpjQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFATDH39+pg56nnxPn4tUGHA3mlBJMB8GA1UdIwQY MBaAFN8LpPVubwN3JShgN6/DwUwpO5uCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3d1azlXNXZBM2NsS0dBM3I4UEJUQ2s3bTRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9hODBiZDktYmExMS00NThlLTg0ZTIt MzZjNjc4OTAwZjc5LzEvQk1NZmYzNm1EbnFlZkUtZmkxUVljRGVhVUVrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy9hODBiZDktYmExMS00NThlLTg0ZTItMzZjNjc4OTAwZjc5 LzEvM3d1azlXNXZBM2NsS0dBM3I4UEJUQ2s3bTRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDH6xgMA0E AgACMAcDBQAqAacHMA0GCSqGSIb3DQEBCwUAA4IBAQB+nGQEDmucJCYYHTN54Hye r/AfsnDtG27eaCCLz094a5iLQ/DxKaWFXU1hSZd9kMg1lPQ5PToHtGJDN/Zv6MfL 0ENnoZdnWfBhOUfNnIbAKw1GbeJQCNDX0W7T9Jp62GkXIe0yiIjnHQHf+JGH/pyU Bfv5WlgJnXluZGH72vd4FHMNlweyKBMUs8E3odrN8q2EMSx9tQ/kgA6EyB/XZTm2 oDndQ9MZ1GG7+yagTT/F4oQ6U/WDs69oVW7v8UxRilPJHXcxHbtuAmf2WNqKap1I t5y3KEHRr0W+la63tjs2zRnbwHHBxroVr2V9vBIGGPHokgIdPE12OajsrqIOHL75 -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:33 2026 by rpki-client