This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/bLR2p3__awZBusTPsasm4YiUzOA.roa
File: bLR2p3__awZBusTPsasm4YiUzOA.roa (raw, json)
Hash identifier: kbNkczFSH4sSNGYoqWKL5gjy1l744pKUP8ECezyOvL0=
Subject key identifier: 6C:B4:76:A7:7F:FF:6B:06:41:BA:C4:CF:B1:AB:26:E1:88:94:CC:E0
Certificate issuer: /CN=070483d3d62f19c0835746dcb721c8832c3b7926
Certificate serial: 019B7D5C1D52F69283F87FED9DF45889B78E
Authority key identifier: 07:04:83:D3:D6:2F:19:C0:83:57:46:DC:B7:21:C8:83:2C:3B:79:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BwSD09YvGcCDV0bctyHIgyw7eSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/bLR2p3__awZBusTPsasm4YiUzOA.roa
Signing time: Fri 02 Jan 2026 06:19:07 +0000
ROA not before: Fri 02 Jan 2026 06:19:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5650
IP address blocks: 45.134.92.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BwSD09YvGcCDV0bctyHIgyw7eSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Jan 2026 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:5c:1d:52:f6:92:83:f8:7f:ed:9d:f4:58:89:b7:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=070483d3d62f19c0835746dcb721c8832c3b7926
Validity
Not Before: Jan 2 06:19:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6cb476a77fff6b0641bac4cfb1ab26e18894cce0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:82:f8:15:ff:92:2d:2d:db:13:97:d9:82:67:
24:a0:cd:e5:90:90:1f:15:f8:6f:73:57:85:11:6e:
2c:a4:6a:c6:ee:8f:3a:33:08:4e:e7:c2:71:7b:38:
79:36:47:a8:26:33:56:93:b4:cd:55:3f:18:d7:85:
74:78:4d:46:16:2b:f2:c5:72:d8:b3:d8:db:5e:af:
e5:7a:2e:5f:bc:a0:7c:63:a2:7b:97:99:fa:d7:76:
23:1d:23:89:c0:8b:1b:2f:a7:40:d5:77:57:94:46:
3c:38:58:7c:85:8c:e3:90:66:93:aa:bc:6f:4a:3f:
26:2e:2e:c4:1b:5f:50:2a:eb:9d:ae:03:5b:7a:bd:
5b:9b:00:4c:c0:61:47:8c:dc:ac:e4:6a:f8:92:b9:
3b:5e:2b:23:4a:0c:1e:40:01:a0:89:a7:8b:8d:b5:
e1:0d:f8:3f:3b:b6:5f:8d:6c:97:e5:fe:8a:09:5e:
81:74:f2:66:9a:c4:81:19:99:ec:48:0b:21:ee:fb:
49:0e:13:f4:3f:cc:be:35:e2:89:4c:6c:bf:76:14:
57:ea:d9:29:d4:e4:6a:da:27:8a:97:62:d1:0d:84:
ed:91:53:9b:74:ec:a6:c3:de:3b:96:1d:28:44:81:
98:c7:40:bc:71:54:b9:40:93:bb:08:18:41:f4:a4:
3a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:B4:76:A7:7F:FF:6B:06:41:BA:C4:CF:B1:AB:26:E1:88:94:CC:E0
X509v3 Authority Key Identifier:
keyid:07:04:83:D3:D6:2F:19:C0:83:57:46:DC:B7:21:C8:83:2C:3B:79:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BwSD09YvGcCDV0bctyHIgyw7eSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/bLR2p3__awZBusTPsasm4YiUzOA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.92.0/22
Signature Algorithm: sha256WithRSAEncryption
61:75:d2:40:19:35:86:be:f9:9b:a2:7b:c4:e1:0d:ae:bc:8d:
52:7f:02:f8:fa:20:9f:81:ff:89:53:9c:0c:13:fe:9c:28:53:
07:11:c5:59:2b:d2:6e:55:cb:8b:1f:8c:72:0f:05:01:fb:16:
fb:25:49:67:1b:93:27:65:23:2e:12:e9:c6:01:77:cf:fd:4c:
bc:1a:4d:49:77:7d:06:8a:40:a2:1e:83:20:d9:0f:a0:40:45:
65:6a:0f:f2:55:81:2d:5c:fc:f2:bf:18:a2:ac:56:23:3c:e3:
90:cf:9c:98:c0:30:a7:81:ad:de:d3:b0:4c:aa:f5:51:e1:1e:
dc:be:16:e5:24:a4:e7:f0:c0:93:23:67:08:b0:f6:dd:e2:c0:
a1:52:b5:96:2a:aa:58:e5:cd:07:fc:ce:23:52:2e:48:5c:4b:
91:0e:fc:d7:fa:8a:7c:03:73:ba:05:aa:e0:27:96:af:6f:59:
50:f9:74:25:56:c1:c3:e0:5f:56:df:51:83:00:0e:e8:71:0b:
62:4e:7d:36:49:8e:d0:4a:7b:19:c8:a7:72:0f:7d:c3:80:27:
7d:92:3c:ee:09:85:85:1c:5f:ca:e2:c3:6f:ee:11:e5:06:a1:
52:42:72:7e:66:69:42:de:e7:ff:d7:54:cb:c4:96:38:93:c1:
ea:3a:37:47
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt9XB1S9pKD+H/tnfRYibeOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3MDQ4M2QzZDYyZjE5YzA4MzU3NDZkY2I3MjFjODgzMmMz
Yjc5MjYwHhcNMjYwMTAyMDYxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2Y2I0NzZhNzdmZmY2YjA2NDFiYWM0Y2ZiMWFiMjZlMTg4OTRjY2UwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIL4Ff+SLS3bE5fZgmckoM3lkJAf
Ffhvc1eFEW4spGrG7o86MwhO58Jxezh5NkeoJjNWk7TNVT8Y14V0eE1GFivyxXLY
s9jbXq/lei5fvKB8Y6J7l5n613YjHSOJwIsbL6dA1XdXlEY8OFh8hYzjkGaTqrxv
Sj8mLi7EG19QKuudrgNber1bmwBMwGFHjNys5Gr4krk7XisjSgweQAGgiaeLjbXh
Dfg/O7ZfjWyX5f6KCV6BdPJmmsSBGZnsSAsh7vtJDhP0P8y+NeKJTGy/dhRX6tkp
1ORq2ieKl2LRDYTtkVObdOymw947lh0oRIGYx0C8cVS5QJO7CBhB9KQ6rwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGy0dqd//2sGQbrEz7GrJuGIlMzgMB8GA1UdIwQY
MBaAFAcEg9PWLxnAg1dG3LchyIMsO3kmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQndTRDA5WXZHY0NEVjBiY3R5SElneXc3ZVNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS82NDUxYzEtMmJjZC00NDYzLWE3MDAt
ZDQ0MmM0ZjllOWJkLzEvYkxSMnAzX19hd1pCdXNUUHNhc200WWlVek9BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS82NDUxYzEtMmJjZC00NDYzLWE3MDAtZDQ0MmM0ZjllOWJk
LzEvQndTRDA5WXZHY0NEVjBiY3R5SElneXc3ZVNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLYZcMA0G
CSqGSIb3DQEBCwUAA4IBAQBhddJAGTWGvvmbonvE4Q2uvI1SfwL4+iCfgf+JU5wM
E/6cKFMHEcVZK9JuVcuLH4xyDwUB+xb7JUlnG5MnZSMuEunGAXfP/Uy8Gk1Jd30G
ikCiHoMg2Q+gQEVlag/yVYEtXPzyvxiirFYjPOOQz5yYwDCnga3e07BMqvVR4R7c
vhblJKTn8MCTI2cIsPbd4sChUrWWKqpY5c0H/M4jUi5IXEuRDvzX+op8A3O6Barg
J5avb1lQ+XQlVsHD4F9W31GDAA7ocQtiTn02SY7QSnsZyKdyD33DgCd9kjzuCYWF
HF/K4sNv7hHlBqFSQnJ+ZmlC3uf/11TLxJY4k8HqOjdH
-----END CERTIFICATE-----
Generated at Sun Jan 18 11:04:18 2026 by rpki-client