This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/f0b954-9886-409b-8219-d3fdfa9a8f14/1/bLk88x2HL-2GICyBNcP5Qc7qD64.roa File: bLk88x2HL-2GICyBNcP5Qc7qD64.roa (raw, json) Hash identifier: 4cgQdkwpHUEmwJaaIvwsSgvpblfNuKKSJZKxTdOD8Wk= Subject key identifier: 6C:B9:3C:F3:1D:87:2F:ED:86:20:2C:81:35:C3:F9:41:CE:EA:0F:AE Certificate issuer: /CN=a986a0677b91c45667e45e12ee07f5219901a87a Certificate serial: 019B7C11A1E1AB73816D4D72183663A4D123 Authority key identifier: A9:86:A0:67:7B:91:C4:56:67:E4:5E:12:EE:07:F5:21:99:01:A8:7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYagZ3uRxFZn5F4S7gf1IZkBqHo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/f0b954-9886-409b-8219-d3fdfa9a8f14/1/bLk88x2HL-2GICyBNcP5Qc7qD64.roa Signing time: Fri 02 Jan 2026 00:18:08 +0000 ROA not before: Fri 02 Jan 2026 00:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20559 IP address blocks: 91.197.72.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/f0b954-9886-409b-8219-d3fdfa9a8f14/1/qYagZ3uRxFZn5F4S7gf1IZkBqHo.crl rsync://rpki.ripe.net/repository/DEFAULT/46/f0b954-9886-409b-8219-d3fdfa9a8f14/1/qYagZ3uRxFZn5F4S7gf1IZkBqHo.mft rsync://rpki.ripe.net/repository/DEFAULT/qYagZ3uRxFZn5F4S7gf1IZkBqHo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:a1:e1:ab:73:81:6d:4d:72:18:36:63:a4:d1:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a986a0677b91c45667e45e12ee07f5219901a87a Validity Not Before: Jan 2 00:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6cb93cf31d872fed86202c8135c3f941ceea0fae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:bc:2b:ea:0e:42:0f:bf:ea:a7:14:e5:28:02: 15:f6:01:93:05:78:fe:ce:a8:d7:a2:c5:8b:49:3d: d8:1d:4a:5a:75:a9:92:73:b5:99:51:9e:6b:c7:26: c1:4d:5b:28:66:18:8a:a1:4f:6c:0c:d7:88:3f:02: b1:01:a2:a5:b4:df:55:8f:fa:c8:19:56:d8:dc:e6: de:c9:76:bf:b0:79:f6:dd:36:78:4f:c6:26:26:01: ec:7b:a1:d1:f3:28:7e:36:5e:52:f3:81:30:c3:4d: 3b:68:28:b2:3d:c5:01:7d:3b:91:66:db:03:c6:23: 95:6b:9c:99:68:c5:12:76:eb:f0:79:bf:93:64:d0: 89:ce:0a:ca:a6:09:35:05:fc:c7:e3:b2:83:c7:3c: e3:20:b7:61:0e:9a:0d:6e:14:28:80:26:7f:0d:05: 01:0d:c5:fa:46:66:b8:18:70:21:94:43:35:d2:26: dc:f5:09:21:d2:79:25:ff:49:6c:2c:c5:cb:40:ba: 9c:06:43:fc:a5:46:d8:2e:93:c5:ed:a8:67:6c:ba: 07:fa:e8:80:3a:88:33:86:7a:75:f9:7f:09:44:64: 61:48:08:b2:0a:68:51:77:20:da:98:01:66:8d:92: 34:68:4a:64:42:f0:58:4b:e6:3c:3a:be:b2:c4:99: 6a:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:B9:3C:F3:1D:87:2F:ED:86:20:2C:81:35:C3:F9:41:CE:EA:0F:AE X509v3 Authority Key Identifier: keyid:A9:86:A0:67:7B:91:C4:56:67:E4:5E:12:EE:07:F5:21:99:01:A8:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYagZ3uRxFZn5F4S7gf1IZkBqHo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/f0b954-9886-409b-8219-d3fdfa9a8f14/1/bLk88x2HL-2GICyBNcP5Qc7qD64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/f0b954-9886-409b-8219-d3fdfa9a8f14/1/qYagZ3uRxFZn5F4S7gf1IZkBqHo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.197.72.0/22 Signature Algorithm: sha256WithRSAEncryption 3c:fe:7f:fd:07:46:6d:de:c8:c6:7c:38:f4:c6:bb:4b:3b:5d: de:e2:b5:b6:a9:2f:61:c4:09:f0:c7:92:45:d9:4c:82:40:40: 05:68:f9:86:f2:e7:28:c5:45:cb:d7:ef:5d:2a:5f:0d:64:c1: 63:fc:1c:32:4f:4f:56:ff:fd:56:0f:1f:90:4d:9a:b6:75:3f: b5:ba:4b:78:85:9c:e1:13:8b:d9:a6:7b:ad:f2:9e:28:34:66: 32:69:1e:3b:a7:39:f0:35:07:4c:bc:df:0a:70:f2:26:27:ad: 1c:b7:04:6e:93:e1:e0:3d:8d:2a:4f:90:0a:b2:82:51:68:82: ef:ba:32:40:fd:b7:4c:f5:e8:f8:f7:49:a9:08:97:2f:bb:59: 57:c5:8b:ef:a7:f0:2a:93:8a:13:04:f3:19:f2:2f:51:be:1b: ca:bc:65:d4:5a:b3:aa:88:46:12:18:5f:5b:9e:a8:ae:9f:43: 1c:ea:0b:ff:6d:5c:06:9b:8a:a9:3b:f6:12:52:31:57:82:1c: e7:60:5c:d4:ee:58:a2:ca:6b:5e:e0:32:44:b7:64:30:a4:b8: a1:74:60:88:cb:b1:02:49:eb:e5:af:cb:a7:48:74:a4:70:8f: f4:47:65:bc:47:a4:96:3d:38:da:fd:c8:ad:9b:ec:38:9d:9a: 2b:c3:73:3b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EaHhq3OBbU1yGDZjpNEjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5ODZhMDY3N2I5MWM0NTY2N2U0NWUxMmVlMDdmNTIxOTkw MWE4N2EwHhcNMjYwMTAyMDAxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Y2I5M2NmMzFkODcyZmVkODYyMDJjODEzNWMzZjk0MWNlZWEwZmFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLwr6g5CD7/qpxTlKAIV9gGTBXj+ zqjXosWLST3YHUpadamSc7WZUZ5rxybBTVsoZhiKoU9sDNeIPwKxAaKltN9Vj/rI GVbY3ObeyXa/sHn23TZ4T8YmJgHse6HR8yh+Nl5S84Eww007aCiyPcUBfTuRZtsD xiOVa5yZaMUSduvweb+TZNCJzgrKpgk1BfzH47KDxzzjILdhDpoNbhQogCZ/DQUB DcX6Rma4GHAhlEM10ibc9Qkh0nkl/0lsLMXLQLqcBkP8pUbYLpPF7ahnbLoH+uiA Oogzhnp1+X8JRGRhSAiyCmhRdyDamAFmjZI0aEpkQvBYS+Y8Or6yxJlqwwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGy5PPMdhy/thiAsgTXD+UHO6g+uMB8GA1UdIwQY MBaAFKmGoGd7kcRWZ+ReEu4H9SGZAah6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVlhZ1ozdVJ4RlpuNUY0UzdnZjFJWmtCcUhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9mMGI5NTQtOTg4Ni00MDliLTgyMTkt ZDNmZGZhOWE4ZjE0LzEvYkxrODh4MkhMLTJHSUN5Qk5jUDVRYzdxRDY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni9mMGI5NTQtOTg4Ni00MDliLTgyMTktZDNmZGZhOWE4ZjE0 LzEvcVlhZ1ozdVJ4RlpuNUY0UzdnZjFJWmtCcUhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW8VIMA0G CSqGSIb3DQEBCwUAA4IBAQA8/n/9B0Zt3sjGfDj0xrtLO13e4rW2qS9hxAnwx5JF 2UyCQEAFaPmG8ucoxUXL1+9dKl8NZMFj/BwyT09W//1WDx+QTZq2dT+1ukt4hZzh E4vZpnut8p4oNGYyaR47pznwNQdMvN8KcPImJ60ctwRuk+HgPY0qT5AKsoJRaILv ujJA/bdM9ej490mpCJcvu1lXxYvvp/Aqk4oTBPMZ8i9RvhvKvGXUWrOqiEYSGF9b nqiun0Mc6gv/bVwGm4qpO/YSUjFXghznYFzU7liiymte4DJEt2QwpLihdGCIy7EC Sevlr8unSHSkcI/0R2W8R6SWPTja/citm+w4nZorw3M7 -----END CERTIFICATE-----Generated at Tue Jan 27 10:18:51 2026 by rpki-client