This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/bjLbDPr7IT8tPVSsaaWCIlzRwWc.roa File: bjLbDPr7IT8tPVSsaaWCIlzRwWc.roa (raw, json) Hash identifier: h5JQY6abimoX7dClbgszdZMdB2AaJa1jhJZUQvEe7+Q= Subject key identifier: 6E:32:DB:0C:FA:FB:21:3F:2D:3D:54:AC:69:A5:82:22:5C:D1:C1:67 Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Certificate serial: 019B797EBCF18B8E56C64EFB082F468A41D1 Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/bjLbDPr7IT8tPVSsaaWCIlzRwWc.roa Signing time: Thu 01 Jan 2026 12:18:27 +0000 ROA not before: Thu 01 Jan 2026 12:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7029 IP address blocks: 77.105.22.0/24 maxlen: 24 79.175.96.0/24 maxlen: 24 109.121.0.0/19 maxlen: 24 109.121.40.0/24 maxlen: 24 109.121.43.0/24 maxlen: 24 109.233.184.0/24 maxlen: 24 109.233.185.0/24 maxlen: 24 178.219.14.0/24 maxlen: 24 178.253.237.0/24 maxlen: 24 212.69.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 03:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:bc:f1:8b:8e:56:c6:4e:fb:08:2f:46:8a:41:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Validity Not Before: Jan 1 12:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6e32db0cfafb213f2d3d54ac69a582225cd1c167 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:29:88:7d:51:d7:43:58:06:6a:e4:10:64:46: 5f:54:dd:1c:7c:ef:8e:06:59:6c:5e:e4:e6:24:c5: 2f:c8:1d:8f:49:08:eb:40:30:09:35:26:6b:70:1c: 25:95:7e:31:a8:bb:ff:87:28:e2:05:04:a4:57:1e: 98:92:fb:29:af:17:03:c1:d6:d7:42:a7:3b:3e:38: a2:29:34:1f:b6:3d:c7:c1:a6:37:21:0b:c8:f6:7d: f2:56:f7:e7:78:60:e8:a3:56:c9:b0:71:45:1d:e3: 3e:f6:e5:e0:b6:f3:da:cd:27:17:02:05:a6:3b:53: 8d:14:b6:22:23:34:94:44:6d:ad:37:f1:7b:dc:ec: d3:01:e7:57:d8:b3:a2:55:c5:25:64:6b:97:00:77: 45:28:2e:fa:a8:09:21:a8:05:1a:c2:81:63:1a:8c: d4:e4:1a:a8:bc:4c:27:f1:4d:ef:a1:1f:42:7d:10: b1:72:e6:69:c6:d2:c3:fb:ed:52:04:79:40:2e:d7: 35:97:11:98:dc:49:b7:3e:94:9f:a6:f7:70:da:fa: cb:43:ce:7e:ba:0c:e7:9a:14:62:52:41:ca:85:c9: 1d:79:1a:8c:5c:52:70:9a:f9:68:01:44:61:10:f6: a3:05:de:c5:5a:8e:d2:e5:38:69:a4:74:9d:d6:eb: 5c:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:32:DB:0C:FA:FB:21:3F:2D:3D:54:AC:69:A5:82:22:5C:D1:C1:67 X509v3 Authority Key Identifier: keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/bjLbDPr7IT8tPVSsaaWCIlzRwWc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.105.22.0/24 79.175.96.0/24 109.121.0.0/19 109.121.40.0/24 109.121.43.0/24 109.233.184.0/23 178.219.14.0/24 178.253.237.0/24 212.69.0.0/24 Signature Algorithm: sha256WithRSAEncryption 15:1e:d8:79:89:48:5a:ac:4f:d6:08:de:ca:91:21:8f:a7:58: ff:1a:96:31:f8:b2:7b:ae:0b:10:85:75:ad:02:f0:54:6a:c8: 11:ef:f0:f8:64:67:60:1e:d9:9d:35:06:ee:3f:dc:1f:ce:da: a8:f8:28:5c:a6:3a:85:ce:d7:2c:fd:95:e3:8e:5e:3e:96:62: 6b:c7:07:cf:a0:df:57:c3:74:30:41:7b:9d:50:f6:7c:67:d7: ec:e2:fc:ab:90:32:25:90:07:3d:bf:d6:58:a7:24:44:a2:93: c3:da:44:1a:d4:12:0f:a1:4d:5e:2f:74:bc:de:54:af:1e:af: f6:c4:9f:ca:d1:6c:58:65:78:74:85:7a:d3:ad:23:5d:42:b2: 17:d1:cf:d8:0c:0c:fa:30:5f:93:27:e7:c1:60:dd:7e:98:04: fd:14:43:12:a3:71:03:7c:20:35:59:d1:fe:13:4b:93:82:8d: 0f:cb:85:82:29:b8:80:b1:65:0a:89:fe:5c:fa:58:12:7a:d6: 90:bb:b0:c1:d7:f8:3c:e9:07:91:eb:97:90:3d:37:7f:c7:5d: 92:5e:d8:34:81:12:54:c8:b4:59:8f:9e:62:82:4d:b7:3d:65: 61:22:d0:03:bb:8b:4c:0e:52:79:99:33:9d:8f:0a:6a:39:9a: 98:0f:de:1d -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZt5frzxi45Wxk77CC9GikHRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj N2U5MTUwHhcNMjYwMTAxMTIxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZTMyZGIwY2ZhZmIyMTNmMmQzZDU0YWM2OWE1ODIyMjVjZDFjMTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwimIfVHXQ1gGauQQZEZfVN0cfO+O BllsXuTmJMUvyB2PSQjrQDAJNSZrcBwllX4xqLv/hyjiBQSkVx6YkvsprxcDwdbX Qqc7PjiiKTQftj3HwaY3IQvI9n3yVvfneGDoo1bJsHFFHeM+9uXgtvPazScXAgWm O1ONFLYiIzSURG2tN/F73OzTAedX2LOiVcUlZGuXAHdFKC76qAkhqAUawoFjGozU 5BqovEwn8U3voR9CfRCxcuZpxtLD++1SBHlALtc1lxGY3Em3PpSfpvdw2vrLQ85+ ugznmhRiUkHKhckdeRqMXFJwmvloAURhEPajBd7FWo7S5ThppHSd1utc0QIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFG4y2wz6+yE/LT1UrGmlgiJc0cFnMB8GA1UdIwQY MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt ZmFlNWRiZWQzYjFiLzEvYmpMYkRQcjdJVDh0UFZTc2FhV0NJbHpSd1djLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQATWkWAwQA T69gAwQFbXkAAwQAbXkoAwQAbXkrAwQBbem4AwQAstsOAwQAsv3tAwQA1EUAMA0G CSqGSIb3DQEBCwUAA4IBAQAVHth5iUharE/WCN7KkSGPp1j/GpYx+LJ7rgsQhXWt AvBUasgR7/D4ZGdgHtmdNQbuP9wfztqo+ChcpjqFztcs/ZXjjl4+lmJrxwfPoN9X w3QwQXudUPZ8Z9fs4vyrkDIlkAc9v9ZYpyREopPD2kQa1BIPoU1eL3S83lSvHq/2 xJ/K0WxYZXh0hXrTrSNdQrIX0c/YDAz6MF+TJ+fBYN1+mAT9FEMSo3EDfCA1WdH+ E0uTgo0Py4WCKbiAsWUKif5c+lgSetaQu7DB1/g86QeR65eQPTd/x12SXtg0gRJU yLRZj55igk23PWVhItADu4tMDlJ5mTOdjwpqOZqYD94d -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:32 2026 by rpki-client