This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/BLvck3jtH0yiq7mj0oSIpxGzim0.roa File: BLvck3jtH0yiq7mj0oSIpxGzim0.roa (raw, json) Hash identifier: rNoyDTYrAexTBbf0FBqXytC/SgHvT/1Wqrx2FO97F4M= Subject key identifier: 04:BB:DC:93:78:ED:1F:4C:A2:AB:B9:A3:D2:84:88:A7:11:B3:8A:6D Certificate issuer: /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96 Certificate serial: 019B7E3892E10821EAC2635EA794A98D5F70 Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/BLvck3jtH0yiq7mj0oSIpxGzim0.roa Signing time: Fri 02 Jan 2026 10:19:55 +0000 ROA not before: Fri 02 Jan 2026 10:19:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 46261 IP address blocks: 193.108.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:92:e1:08:21:ea:c2:63:5e:a7:94:a9:8d:5f:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96 Validity Not Before: Jan 2 10:19:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=04bbdc9378ed1f4ca2abb9a3d28488a711b38a6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:92:b9:16:e9:80:b4:b8:4e:1f:b0:88:03:10: 59:17:78:93:b2:11:02:8b:c0:70:6e:fb:10:4e:e5: 8d:ea:f4:b8:26:4f:0b:27:1e:18:d9:cf:42:4b:1a: aa:17:2f:64:a7:6d:9e:7a:40:b7:b0:a9:bc:57:4a: ad:d2:c1:73:96:bc:4d:d1:ef:67:55:aa:15:20:c5: 6d:45:2b:e1:52:dd:97:c8:e8:e8:c9:43:50:72:63: 04:3f:bd:c9:af:6e:e1:1a:96:57:41:74:2d:28:a1: 47:e9:75:7f:31:1e:87:b9:6f:4f:ae:80:b5:e2:3f: e5:49:eb:34:6f:a7:1c:12:37:00:e6:55:b0:ac:01: 9a:86:cb:6d:17:05:bf:05:a6:08:2e:fc:c2:3f:b7: cd:e9:8e:ed:98:f5:7a:14:eb:be:a4:78:16:21:a0: ed:8a:38:d7:46:86:d7:14:65:f5:cb:7c:f4:18:c2: 0d:d7:a0:42:cc:bb:e2:f0:99:39:7a:5f:aa:39:fc: ea:b0:40:26:02:a1:e5:34:05:67:93:5f:73:7e:a0: 08:5d:45:98:b6:cc:6a:75:db:e2:60:f6:01:f3:37: 6c:5f:03:46:6d:bc:c8:14:9f:06:47:6b:7e:60:25: 41:8e:d6:eb:7c:00:1e:74:7d:ef:43:1f:24:db:f9: 67:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:BB:DC:93:78:ED:1F:4C:A2:AB:B9:A3:D2:84:88:A7:11:B3:8A:6D X509v3 Authority Key Identifier: keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/BLvck3jtH0yiq7mj0oSIpxGzim0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.108.56.0/24 Signature Algorithm: sha256WithRSAEncryption 44:b0:a2:65:5b:1f:b6:85:47:64:9f:5e:17:3e:1c:c0:21:c1: f1:d0:31:de:7c:75:4a:eb:64:50:fd:7c:ea:03:6d:78:c2:42: 7b:27:8c:7f:79:17:0f:e7:fc:32:2e:5c:74:de:91:bf:6d:b9: fd:7a:83:d7:b7:93:35:67:ec:55:79:ea:46:94:ae:4c:d3:db: cb:25:c9:07:dd:1e:21:4d:7d:72:a5:b0:5f:e9:8b:4c:6a:8a: 53:9d:5a:1f:35:92:58:2c:99:d9:87:09:bf:c6:bb:cf:25:91: 08:3c:d0:53:7a:cd:27:77:9d:d4:3c:ab:22:78:69:9f:ae:72: 98:d0:b1:2e:28:68:41:58:57:70:32:39:ca:17:3a:00:bf:d6: f4:06:20:a0:c2:e8:16:d1:ee:30:7a:1c:d0:f5:2d:6e:c2:36: 7c:3e:a5:06:d6:20:00:bd:1a:42:c6:d4:c3:8d:31:e5:a5:44: 6f:99:f7:ec:4f:c8:b7:6c:06:d6:e9:b3:5b:75:99:9b:f6:db: 50:dd:1a:4e:ed:80:93:c4:98:cf:ba:29:46:b4:24:80:a9:76: 3a:d3:43:ed:53:8b:5f:82:a6:83:70:49:b0:2b:f8:96:b2:f3: 2a:4a:79:df:0a:40:52:a3:90:41:cf:09:8f:43:22:12:f9:27: 81:b4:cd:bf -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OJLhCCHqwmNep5SpjV9wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ODQ2NWIzN2IyZDRlOWY0MTNhMzFkYzdiN2U2Y2JhMmEz M2RiOTYwHhcNMjYwMTAyMTAxOTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNGJiZGM5Mzc4ZWQxZjRjYTJhYmI5YTNkMjg0ODhhNzExYjM4YTZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJK5FumAtLhOH7CIAxBZF3iTshEC i8BwbvsQTuWN6vS4Jk8LJx4Y2c9CSxqqFy9kp22eekC3sKm8V0qt0sFzlrxN0e9n VaoVIMVtRSvhUt2XyOjoyUNQcmMEP73Jr27hGpZXQXQtKKFH6XV/MR6HuW9ProC1 4j/lSes0b6ccEjcA5lWwrAGahsttFwW/BaYILvzCP7fN6Y7tmPV6FOu+pHgWIaDt ijjXRobXFGX1y3z0GMIN16BCzLvi8Jk5el+qOfzqsEAmAqHlNAVnk19zfqAIXUWY tsxqddviYPYB8zdsXwNGbbzIFJ8GR2t+YCVBjtbrfAAedH3vQx8k2/lnUQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAS73JN47R9Moqu5o9KEiKcRs4ptMB8GA1UdIwQY MBaAFAiEZbN7LU6fQTox3Ht+bLoqM9uWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUt MmM3MDg2ZmRlZDkzLzEvQkx2Y2szanRIMHlpcTdtajBvU0lweEd6aW0wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUtMmM3MDg2ZmRlZDkz LzEvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWw4MA0G CSqGSIb3DQEBCwUAA4IBAQBEsKJlWx+2hUdkn14XPhzAIcHx0DHefHVK62RQ/Xzq A214wkJ7J4x/eRcP5/wyLlx03pG/bbn9eoPXt5M1Z+xVeepGlK5M09vLJckH3R4h TX1ypbBf6YtMaopTnVofNZJYLJnZhwm/xrvPJZEIPNBTes0nd53UPKsieGmfrnKY 0LEuKGhBWFdwMjnKFzoAv9b0BiCgwugW0e4wehzQ9S1uwjZ8PqUG1iAAvRpCxtTD jTHlpURvmffsT8i3bAbW6bNbdZmb9ttQ3RpO7YCTxJjPuilGtCSAqXY600PtU4tf gqaDcEmwK/iWsvMqSnnfCkBSo5BBzwmPQyIS+SeBtM2/ -----END CERTIFICATE-----Generated at Tue Jan 20 09:07:45 2026 by rpki-client