This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/f0cc41-b3e7-46ff-a976-29df4e2611f1/1/BLrQemDWjWx48NYMm5EU7FEE2fs.roa File: BLrQemDWjWx48NYMm5EU7FEE2fs.roa (raw, json) Hash identifier: 3uO6NEJSsXjHXxW7DrT2w1ELWOo2S4puGWGymObsq9I= Subject key identifier: 04:BA:D0:7A:60:D6:8D:6C:78:F0:D6:0C:9B:91:14:EC:51:04:D9:FB Certificate issuer: /CN=70f68cded39e3ec54cee2233252ef3937ba9828d Certificate serial: 019B7BA4E32BE7ADADFFA2E3D408E2AF6484 Authority key identifier: 70:F6:8C:DE:D3:9E:3E:C5:4C:EE:22:33:25:2E:F3:93:7B:A9:82:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPaM3tOePsVM7iIzJS7zk3upgo0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/f0cc41-b3e7-46ff-a976-29df4e2611f1/1/BLrQemDWjWx48NYMm5EU7FEE2fs.roa Signing time: Thu 01 Jan 2026 22:19:22 +0000 ROA not before: Thu 01 Jan 2026 22:19:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211201 IP address blocks: 81.85.102.0/23 maxlen: 24 193.33.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/f0cc41-b3e7-46ff-a976-29df4e2611f1/1/cPaM3tOePsVM7iIzJS7zk3upgo0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/f0cc41-b3e7-46ff-a976-29df4e2611f1/1/cPaM3tOePsVM7iIzJS7zk3upgo0.mft rsync://rpki.ripe.net/repository/DEFAULT/cPaM3tOePsVM7iIzJS7zk3upgo0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:e3:2b:e7:ad:ad:ff:a2:e3:d4:08:e2:af:64:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70f68cded39e3ec54cee2233252ef3937ba9828d Validity Not Before: Jan 1 22:19:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=04bad07a60d68d6c78f0d60c9b9114ec5104d9fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:90:2a:df:bd:d2:6a:f2:62:26:9d:c0:ec:de: 53:88:8d:d5:3f:ff:b1:90:4a:f1:23:c4:9d:91:bb: 6d:c6:d5:b2:7d:13:b0:13:01:23:a6:26:96:22:c8: 6f:df:8c:d5:60:ec:02:97:96:35:56:b2:ba:98:75: 0f:71:55:86:f5:95:3c:2e:b7:e5:09:12:b3:85:42: 25:a3:9f:8b:0b:6a:c8:df:0d:02:98:03:00:8f:76: da:47:7a:4a:17:3c:da:36:fb:e4:a1:53:07:97:c4: 83:c6:fb:0e:1f:f8:df:45:9f:99:4a:01:0d:0f:2c: a8:c8:36:a0:78:26:9e:76:99:89:59:0b:cd:27:6c: 91:3b:14:a8:ff:b8:0e:bf:2a:8c:38:3d:08:f4:28: e3:36:4d:c9:04:2c:54:77:26:75:49:f7:04:a0:d4: e8:cc:76:83:c2:0e:f0:e4:82:75:82:df:7a:4c:e8: a4:59:69:da:ca:23:35:18:ae:4f:b7:eb:3f:f7:57: fc:9d:de:29:96:b7:8c:62:1a:ed:49:d7:8d:03:5f: ae:09:b1:f8:4a:08:73:69:d2:25:d2:5a:84:fa:d6: 45:58:71:c3:59:40:03:1d:1f:d4:bd:96:a5:65:12: 14:df:8b:29:d3:48:10:cc:8e:bc:f9:37:e3:7c:fb: 89:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:BA:D0:7A:60:D6:8D:6C:78:F0:D6:0C:9B:91:14:EC:51:04:D9:FB X509v3 Authority Key Identifier: keyid:70:F6:8C:DE:D3:9E:3E:C5:4C:EE:22:33:25:2E:F3:93:7B:A9:82:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPaM3tOePsVM7iIzJS7zk3upgo0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f0cc41-b3e7-46ff-a976-29df4e2611f1/1/BLrQemDWjWx48NYMm5EU7FEE2fs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f0cc41-b3e7-46ff-a976-29df4e2611f1/1/cPaM3tOePsVM7iIzJS7zk3upgo0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.85.102.0/23 193.33.96.0/24 Signature Algorithm: sha256WithRSAEncryption 62:a6:38:69:b0:7a:7b:89:e9:9e:71:b8:b5:e7:8d:e0:21:a2: 9d:9f:45:93:1a:ee:46:f0:6f:59:0c:5b:a3:73:a3:df:53:70: 3b:a1:1e:5e:db:42:11:eb:75:7d:d4:85:59:73:94:53:2b:97: 46:2c:ee:72:77:52:fc:e2:44:1b:3c:1a:5d:b8:14:3c:3c:51: fa:e9:6a:4d:2f:15:bc:ae:df:22:a8:7a:ce:f6:50:1d:fc:56: 48:4d:5f:21:35:08:aa:bf:0d:36:30:b6:dc:05:e2:7e:8e:1a: ea:ce:ef:69:32:79:c1:a2:68:4a:67:9b:a2:a7:a5:01:12:b6: 16:bc:e0:91:9c:44:6f:89:a2:fa:fc:e4:59:dd:25:cb:e5:b4: 40:7c:89:5b:76:26:bb:7d:0a:9c:ee:c0:ce:71:d2:4c:54:ea: 03:ae:27:51:25:94:93:06:34:13:8b:24:29:14:23:f1:a4:87: 91:9d:c3:0c:2c:f2:2a:fc:f8:26:2a:56:50:08:0d:fc:95:af: e3:75:12:ed:48:4c:e5:c4:18:58:18:4f:ea:e2:84:e9:48:3b: 28:29:ce:85:22:2a:4a:b4:7b:fd:25:88:5f:a9:85:fc:3a:ab: fd:51:8c:4b:53:66:7a:65:bb:83:20:6f:3a:4b:c9:b7:e7:03: 3e:37:75:76 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7pOMr562t/6Lj1Ajir2SEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwZjY4Y2RlZDM5ZTNlYzU0Y2VlMjIzMzI1MmVmMzkzN2Jh OTgyOGQwHhcNMjYwMTAxMjIxOTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNGJhZDA3YTYwZDY4ZDZjNzhmMGQ2MGM5YjkxMTRlYzUxMDRkOWZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppAq373SavJiJp3A7N5TiI3VP/+x kErxI8SdkbttxtWyfROwEwEjpiaWIshv34zVYOwCl5Y1VrK6mHUPcVWG9ZU8Lrfl CRKzhUIlo5+LC2rI3w0CmAMAj3baR3pKFzzaNvvkoVMHl8SDxvsOH/jfRZ+ZSgEN DyyoyDageCaedpmJWQvNJ2yROxSo/7gOvyqMOD0I9CjjNk3JBCxUdyZ1SfcEoNTo zHaDwg7w5IJ1gt96TOikWWnayiM1GK5Pt+s/91f8nd4plreMYhrtSdeNA1+uCbH4 SghzadIl0lqE+tZFWHHDWUADHR/UvZalZRIU34sp00gQzI68+TfjfPuJ7wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFAS60Hpg1o1sePDWDJuRFOxRBNn7MB8GA1UdIwQY MBaAFHD2jN7Tnj7FTO4iMyUu85N7qYKNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1BhTTN0T2VQc1ZNN2lJekpTN3prM3VwZ28wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9mMGNjNDEtYjNlNy00NmZmLWE5NzYt MjlkZjRlMjYxMWYxLzEvQkxyUWVtRFdqV3g0OE5ZTW01RVU3RkVFMmZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy9mMGNjNDEtYjNlNy00NmZmLWE5NzYtMjlkZjRlMjYxMWYx LzEvY1BhTTN0T2VQc1ZNN2lJekpTN3prM3VwZ28wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBUVVmAwQA wSFgMA0GCSqGSIb3DQEBCwUAA4IBAQBipjhpsHp7iemecbi1543gIaKdn0WTGu5G 8G9ZDFujc6PfU3A7oR5e20IR63V91IVZc5RTK5dGLO5yd1L84kQbPBpduBQ8PFH6 6WpNLxW8rt8iqHrO9lAd/FZITV8hNQiqvw02MLbcBeJ+jhrqzu9pMnnBomhKZ5ui p6UBErYWvOCRnERviaL6/ORZ3SXL5bRAfIlbdia7fQqc7sDOcdJMVOoDridRJZST BjQTiyQpFCPxpIeRncMMLPIq/PgmKlZQCA38la/jdRLtSEzlxBhYGE/q4oTpSDso Kc6FIipKtHv9JYhfqYX8Oqv9UYxLU2Z6ZbuDIG86S8m35wM+N3V2 -----END CERTIFICATE-----Generated at Tue Feb 10 03:09:28 2026 by rpki-client