This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/Bj-sb0mQpbmYapiUX3wlUb00RYE.roa File: Bj-sb0mQpbmYapiUX3wlUb00RYE.roa (raw, json) Hash identifier: Q+c9LnetW9OE+r5uMdb5YH/qdA8Hh9wEoBB8GBwKZg4= Subject key identifier: 06:3F:AC:6F:49:90:A5:B9:98:6A:98:94:5F:7C:25:51:BD:34:45:81 Certificate issuer: /CN=c65a1da1cb1c920ae2f9b748270fded8737a9184 Certificate serial: 019B79EC4DE876C19F0D9DD2DD6BE46CFE36 Authority key identifier: C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/Bj-sb0mQpbmYapiUX3wlUb00RYE.roa Signing time: Thu 01 Jan 2026 14:18:08 +0000 ROA not before: Thu 01 Jan 2026 14:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202656 IP address blocks: 136.234.127.0/24 maxlen: 24 136.234.130.0/24 maxlen: 24 136.234.133.0/24 maxlen: 24 136.234.138.0/24 maxlen: 24 136.234.139.0/24 maxlen: 24 136.234.158.0/24 maxlen: 24 136.234.159.0/24 maxlen: 24 136.234.160.0/24 maxlen: 24 136.234.161.0/24 maxlen: 24 136.234.162.0/24 maxlen: 24 136.234.221.0/24 maxlen: 24 136.234.222.0/24 maxlen: 24 136.234.223.0/24 maxlen: 24 136.234.224.0/24 maxlen: 24 136.234.225.0/24 maxlen: 24 136.234.244.0/24 maxlen: 24 136.234.249.0/24 maxlen: 24 136.234.250.0/24 maxlen: 24 136.234.252.0/24 maxlen: 24 136.234.253.0/24 maxlen: 24 136.234.255.0/24 maxlen: 24 153.80.128.0/24 maxlen: 24 153.80.129.0/24 maxlen: 24 153.80.139.0/24 maxlen: 24 153.80.140.0/24 maxlen: 24 153.80.160.0/24 maxlen: 24 153.80.169.0/24 maxlen: 24 153.80.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:4d:e8:76:c1:9f:0d:9d:d2:dd:6b:e4:6c:fe:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c65a1da1cb1c920ae2f9b748270fded8737a9184 Validity Not Before: Jan 1 14:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=063fac6f4990a5b9986a98945f7c2551bd344581 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b9:db:1d:c0:79:0f:77:ca:94:96:6d:b2:ef: a5:f2:ac:ef:10:48:42:a5:20:13:3b:42:41:eb:87: 88:ca:43:28:fe:53:83:e9:f6:14:3a:b6:f4:57:e4: 33:2b:68:f8:c9:09:65:75:2c:0b:42:be:92:17:cf: b6:0a:f0:f0:34:74:ad:af:03:d6:d4:64:a1:1a:92: 64:e9:4d:b7:12:77:1c:62:83:4e:01:40:3c:b4:7c: 49:5c:c2:01:b1:e7:b7:b3:38:6f:6e:8c:02:9e:84: e1:f2:6a:66:b4:9d:70:fd:bb:47:1a:22:47:0b:69: 03:57:3c:54:72:88:22:44:63:2a:a0:e7:80:1c:49: 21:8c:95:3c:26:bc:a1:76:43:13:88:1d:48:2a:64: 77:76:3a:40:e0:9b:14:85:e6:c9:4c:63:d7:e9:43: 07:c2:ba:71:fa:cd:ae:6c:c0:6a:de:63:a5:7c:54: 12:52:8e:46:14:e2:ba:f6:a9:00:89:82:04:58:b1: f2:b2:ef:63:f8:1f:3a:85:56:65:be:41:52:5c:46: 68:22:94:37:5a:5d:79:dd:8c:ae:e7:f4:40:d4:e9: 89:ad:07:db:76:05:af:96:f1:c9:63:b2:10:4c:c8: 0b:f3:a2:d1:f8:6f:7c:05:72:20:0f:dd:59:27:1b: 73:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:3F:AC:6F:49:90:A5:B9:98:6A:98:94:5F:7C:25:51:BD:34:45:81 X509v3 Authority Key Identifier: keyid:C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/Bj-sb0mQpbmYapiUX3wlUb00RYE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 136.234.127.0/24 136.234.130.0/24 136.234.133.0/24 136.234.138.0/23 136.234.158.0-136.234.162.255 136.234.221.0-136.234.225.255 136.234.244.0/24 136.234.249.0-136.234.250.255 136.234.252.0/23 136.234.255.0/24 153.80.128.0/23 153.80.139.0-153.80.140.255 153.80.160.0/24 153.80.169.0/24 153.80.171.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:c8:dc:d2:1c:a6:ad:03:1a:5e:08:df:87:6e:dc:86:b3:4b: 20:e1:4c:99:c7:e8:1c:86:c9:7b:17:b1:4c:d1:02:0d:ac:40: 1a:9d:46:07:ac:54:67:df:cc:b6:91:da:c2:d3:78:b1:c5:56: fc:b6:12:9d:aa:76:d6:52:0e:e9:87:cc:45:53:fa:fd:e0:e8: 35:19:c6:72:5b:73:9f:f1:bc:11:af:31:8f:0f:2e:e1:28:dd: 70:e6:be:a0:f4:91:2b:79:71:93:b3:b9:45:fe:e8:20:80:45: 84:a8:bd:31:10:f2:73:03:a3:60:b9:a5:1e:18:ef:7b:6a:cc: f1:85:e8:69:de:fb:5a:04:9a:cc:85:7f:9c:0f:db:30:03:a3: 15:ff:53:42:80:fa:af:b5:4c:f4:de:85:ed:08:0d:cd:c2:86: c8:02:77:00:0c:10:4e:82:2b:7d:10:41:d8:bf:7b:b2:fe:b0: 14:20:47:11:9e:45:d8:ff:fb:da:e5:c8:1f:90:55:45:1e:7e: d9:0f:36:aa:7c:b9:5b:2b:a0:d4:70:3e:88:1a:75:b2:e6:0f: 01:2d:f9:73:7f:70:fa:ae:1c:64:34:32:4d:9c:b2:cb:d6:83: 5a:dd:bf:22:c4:02:f6:10:ab:d3:f7:fb:9c:28:0e:e9:2d:9b: 5d:e1:9b:a6 -----BEGIN CERTIFICATE----- MIIFdTCCBF2gAwIBAgISAZt57E3odsGfDZ3S3WvkbP42MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NWExZGExY2IxYzkyMGFlMmY5Yjc0ODI3MGZkZWQ4NzM3 YTkxODQwHhcNMjYwMTAxMTQxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNjNmYWM2ZjQ5OTBhNWI5OTg2YTk4OTQ1ZjdjMjU1MWJkMzQ0NTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbnbHcB5D3fKlJZtsu+l8qzvEEhC pSATO0JB64eIykMo/lOD6fYUOrb0V+QzK2j4yQlldSwLQr6SF8+2CvDwNHStrwPW 1GShGpJk6U23EnccYoNOAUA8tHxJXMIBsee3szhvbowCnoTh8mpmtJ1w/btHGiJH C2kDVzxUcogiRGMqoOeAHEkhjJU8JryhdkMTiB1IKmR3djpA4JsUhebJTGPX6UMH wrpx+s2ubMBq3mOlfFQSUo5GFOK69qkAiYIEWLHysu9j+B86hVZlvkFSXEZoIpQ3 Wl153Yyu5/RA1OmJrQfbdgWvlvHJY7IQTMgL86LR+G98BXIgD91ZJxtzmwIDAQAB o4ICgTCCAn0wHQYDVR0OBBYEFAY/rG9JkKW5mGqYlF98JVG9NEWBMB8GA1UdIwQY MBaAFMZaHaHLHJIK4vm3SCcP3thzepGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGxvZG9jc2NrZ3JpLWJkSUp3X2UySE42a1lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS80ZjU0YjQtMDA5Zi00NmNlLTlhYzAt MzZiYWM4ZDkxZTJlLzEvQmotc2IwbVFwYm1ZYXBpVVgzd2xVYjAwUllFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS80ZjU0YjQtMDA5Zi00NmNlLTlhYzAtMzZiYWM4ZDkxZTJl LzEveGxvZG9jc2NrZ3JpLWJkSUp3X2UySE42a1lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGWBggrBgEFBQcBBwEB/wSBhjCBgzCBgAQCAAEwegMEAIjq fwMEAIjqggMEAIjqhQMEAYjqijAMAwQBiOqeAwQAiOqiMAwDBACI6t0DBAGI6uAD BACI6vQwDAMEAIjq+QMEAIjq+gMEAYjq/AMEAIjq/wMEAZlQgDAMAwQAmVCLAwQA mVCMAwQAmVCgAwQAmVCpAwQAmVCrMA0GCSqGSIb3DQEBCwUAA4IBAQAeyNzSHKat AxpeCN+HbtyGs0sg4UyZx+gchsl7F7FM0QINrEAanUYHrFRn38y2kdrC03ixxVb8 thKdqnbWUg7ph8xFU/r94Og1GcZyW3Of8bwRrzGPDy7hKN1w5r6g9JEreXGTs7lF /ugggEWEqL0xEPJzA6NguaUeGO97aszxhehp3vtaBJrMhX+cD9swA6MV/1NCgPqv tUz03oXtCA3NwobIAncADBBOgit9EEHYv3uy/rAUIEcRnkXY//va5cgfkFVFHn7Z DzaqfLlbK6DUcD6IGnWy5g8BLflzf3D6rhxkNDJNnLLL1oNa3b8ixAL2EKvT9/uc KA7pLZtd4Zum -----END CERTIFICATE-----Generated at Mon Jan 19 23:20:33 2026 by rpki-client