This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/16eb59-68a3-4215-809f-79b2e40e2bd8/1/blLvX2-SqKRxgzfg9csWt9Te5CU.roa File: blLvX2-SqKRxgzfg9csWt9Te5CU.roa (raw, json) Hash identifier: Nyn58GOogqZkbGAVvyp/qEbfXu/9YSuSkYbo5ZUxKIg= Subject key identifier: 6E:52:EF:5F:6F:92:A8:A4:71:83:37:E0:F5:CB:16:B7:D4:DE:E4:25 Certificate issuer: /CN=a9be16ce7db3be6905b1abef8be21a2319b0e43e Certificate serial: 019B7F153BE93DF8122A09EDD26D78743C5E Authority key identifier: A9:BE:16:CE:7D:B3:BE:69:05:B1:AB:EF:8B:E2:1A:23:19:B0:E4:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qb4Wzn2zvmkFsavvi-IaIxmw5D4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/16eb59-68a3-4215-809f-79b2e40e2bd8/1/blLvX2-SqKRxgzfg9csWt9Te5CU.roa Signing time: Fri 02 Jan 2026 14:20:56 +0000 ROA not before: Fri 02 Jan 2026 14:20:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 137 IP address blocks: 192.107.51.0/24 maxlen: 24 192.107.52.0/22 maxlen: 22 192.107.56.0/21 maxlen: 21 192.107.64.0/19 maxlen: 19 192.107.96.0/22 maxlen: 22 192.107.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/16eb59-68a3-4215-809f-79b2e40e2bd8/1/qb4Wzn2zvmkFsavvi-IaIxmw5D4.crl rsync://rpki.ripe.net/repository/DEFAULT/09/16eb59-68a3-4215-809f-79b2e40e2bd8/1/qb4Wzn2zvmkFsavvi-IaIxmw5D4.mft rsync://rpki.ripe.net/repository/DEFAULT/qb4Wzn2zvmkFsavvi-IaIxmw5D4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:3b:e9:3d:f8:12:2a:09:ed:d2:6d:78:74:3c:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9be16ce7db3be6905b1abef8be21a2319b0e43e Validity Not Before: Jan 2 14:20:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6e52ef5f6f92a8a4718337e0f5cb16b7d4dee425 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:6a:3f:f4:41:8b:cd:01:2a:9f:ec:3f:79:1a: 36:6a:49:bc:33:56:71:89:6a:ba:f0:8b:95:2e:03: d3:99:d4:6c:e1:e4:0f:98:be:79:6b:9d:57:6d:60: a7:b1:9b:1a:cc:08:ee:eb:04:01:2b:b5:48:f3:ea: a0:a5:17:1a:30:2e:b3:ab:1d:02:76:2c:57:a9:12: 03:5d:86:85:7d:fb:8b:9a:38:12:7e:2d:f0:97:31: ba:73:f9:64:58:57:42:2f:b3:ed:75:e2:6d:f4:1b: b6:37:83:e7:07:df:3e:2f:fd:3e:61:59:7c:af:ba: 44:04:b8:a0:75:f4:33:29:ff:04:8e:21:ff:23:f1: 8f:a5:73:d1:f1:b7:d7:36:8f:3e:2c:e1:7e:d0:5b: b4:09:ef:0c:6d:1e:3a:fe:1d:20:e7:0a:87:b9:38: 87:e6:da:82:da:04:ca:24:50:3e:67:49:6b:af:42: c4:28:43:5f:78:9f:72:6e:f6:4f:11:37:29:e1:69: 7c:8c:22:9f:b2:c3:e0:ae:95:c7:1d:c5:1d:da:0e: 89:e8:5e:6d:d7:f6:95:00:4b:c3:23:cb:58:f3:67: 2e:a6:af:9a:f7:b0:60:1b:9b:84:38:85:a8:34:b8: 6b:34:85:8a:71:81:b7:b8:88:8c:6c:50:19:b6:5d: 9d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:52:EF:5F:6F:92:A8:A4:71:83:37:E0:F5:CB:16:B7:D4:DE:E4:25 X509v3 Authority Key Identifier: keyid:A9:BE:16:CE:7D:B3:BE:69:05:B1:AB:EF:8B:E2:1A:23:19:B0:E4:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qb4Wzn2zvmkFsavvi-IaIxmw5D4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/16eb59-68a3-4215-809f-79b2e40e2bd8/1/blLvX2-SqKRxgzfg9csWt9Te5CU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/16eb59-68a3-4215-809f-79b2e40e2bd8/1/qb4Wzn2zvmkFsavvi-IaIxmw5D4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.107.51.0-192.107.100.255 Signature Algorithm: sha256WithRSAEncryption 79:6f:dc:fe:5e:1e:71:ba:d7:a2:e9:88:c6:a8:5f:38:0f:2e: 50:41:19:ba:99:70:d1:2f:a0:c0:4c:9c:a1:91:2d:11:c0:4b: 2e:25:8b:35:88:03:6d:4d:d0:14:a3:60:df:f4:15:f0:4f:40: e8:ea:a6:97:3d:e2:ef:34:71:9b:a9:81:23:3d:92:78:e4:8b: 1a:50:70:6e:ae:67:93:52:3a:ca:7a:0f:cf:8f:1f:a3:6a:61: 1e:b2:01:8c:19:7a:46:33:7c:5b:10:e6:85:5b:95:bd:ab:06: f0:75:ea:e3:9b:1c:7b:60:50:93:7a:b1:44:b5:48:56:bf:63: 4f:9e:76:d2:50:1e:9b:00:3f:cc:8e:a2:f2:72:08:d0:cf:07: 08:4d:39:90:3b:f0:74:6f:6b:a3:d8:7e:5e:f9:1a:f5:71:af: 28:18:bc:2b:8b:7e:01:73:4d:43:e3:35:28:12:f6:c4:fa:94: fe:4b:9f:19:7d:bf:a1:0e:4a:e8:7e:42:28:41:70:e4:bd:f7: a2:3a:4e:17:6c:2b:2b:d6:62:86:0f:25:9c:51:09:90:81:1d: e2:4e:08:5b:86:78:f4:58:15:62:63:9c:be:31:d0:4d:31:6d: 0b:70:3c:00:cd:4e:08:30:b0:7b:56:44:a4:1d:bf:8f:f9:9a: 2e:7d:88:74 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt/FTvpPfgSKgnt0m14dDxeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5YmUxNmNlN2RiM2JlNjkwNWIxYWJlZjhiZTIxYTIzMTli MGU0M2UwHhcNMjYwMTAyMTQyMDU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZTUyZWY1ZjZmOTJhOGE0NzE4MzM3ZTBmNWNiMTZiN2Q0ZGVlNDI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGo/9EGLzQEqn+w/eRo2akm8M1Zx iWq68IuVLgPTmdRs4eQPmL55a51XbWCnsZsazAju6wQBK7VI8+qgpRcaMC6zqx0C dixXqRIDXYaFffuLmjgSfi3wlzG6c/lkWFdCL7PtdeJt9Bu2N4PnB98+L/0+YVl8 r7pEBLigdfQzKf8EjiH/I/GPpXPR8bfXNo8+LOF+0Fu0Ce8MbR46/h0g5wqHuTiH 5tqC2gTKJFA+Z0lrr0LEKENfeJ9ybvZPETcp4Wl8jCKfssPgrpXHHcUd2g6J6F5t 1/aVAEvDI8tY82cupq+a97BgG5uEOIWoNLhrNIWKcYG3uIiMbFAZtl2duQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFG5S719vkqikcYM34PXLFrfU3uQlMB8GA1UdIwQY MBaAFKm+Fs59s75pBbGr74viGiMZsOQ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWI0V3puMnp2bWtGc2F2dmktSWFJeG13NUQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8xNmViNTktNjhhMy00MjE1LTgwOWYt NzliMmU0MGUyYmQ4LzEvYmxMdlgyLVNxS1J4Z3pmZzljc1d0OVRlNUNVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS8xNmViNTktNjhhMy00MjE1LTgwOWYtNzliMmU0MGUyYmQ4 LzEvcWI0V3puMnp2bWtGc2F2dmktSWFJeG13NUQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADAazMD BADAa2QwDQYJKoZIhvcNAQELBQADggEBAHlv3P5eHnG616LpiMaoXzgPLlBBGbqZ cNEvoMBMnKGRLRHASy4lizWIA21N0BSjYN/0FfBPQOjqppc94u80cZupgSM9knjk ixpQcG6uZ5NSOsp6D8+PH6NqYR6yAYwZekYzfFsQ5oVblb2rBvB16uObHHtgUJN6 sUS1SFa/Y0+edtJQHpsAP8yOovJyCNDPBwhNOZA78HRva6PYfl75GvVxrygYvCuL fgFzTUPjNSgS9sT6lP5Lnxl9v6EOSuh+QihBcOS996I6ThdsKyvWYoYPJZxRCZCB HeJOCFuGePRYFWJjnL4x0E0xbQtwPADNTggwsHtWRKQdv4/5mi59iHQ= -----END CERTIFICATE-----Generated at Mon Feb 9 23:46:00 2026 by rpki-client