This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Bl0qB9IHm1JVOHIHzIJOmcHHLGw.roa File: Bl0qB9IHm1JVOHIHzIJOmcHHLGw.roa (raw, json) Hash identifier: 5Sm32JyDwrhWc3vyfBWLEKgqGMIQn0oSGZgkbi9R4Ng= Subject key identifier: 06:5D:2A:07:D2:07:9B:52:55:38:72:07:CC:82:4E:99:C1:C7:2C:6C Certificate issuer: /CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69 Certificate serial: 019B7AC808803459804EACCBAF74D98192EC Authority key identifier: 1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Bl0qB9IHm1JVOHIHzIJOmcHHLGw.roa Signing time: Thu 01 Jan 2026 18:18:08 +0000 ROA not before: Thu 01 Jan 2026 18:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1239 IP address blocks: 178.159.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 12:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:08:80:34:59:80:4e:ac:cb:af:74:d9:81:92:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69 Validity Not Before: Jan 1 18:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=065d2a07d2079b5255387207cc824e99c1c72c6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:fa:f4:62:3b:6b:22:f0:4c:8e:7c:73:bf:08: c1:e6:d4:55:b6:83:71:12:f1:46:01:a3:36:fb:6b: ee:37:d7:b8:bb:c3:db:55:3e:5a:e9:42:c0:64:6d: 05:19:32:49:61:8a:8f:29:ca:b9:76:f8:34:0a:da: 4b:c7:e5:72:ed:4a:82:58:c7:3d:3f:bf:89:18:b4: c3:a9:60:63:6a:62:ea:12:9f:05:d0:48:88:60:97: ee:04:8e:6a:8b:33:e1:dc:ab:66:a9:a9:4f:e1:25: b0:73:4a:27:5d:70:99:0f:1e:a6:45:18:33:3d:77: 74:1c:d6:07:f4:8f:3e:76:c1:b2:dd:c0:96:ae:1d: ba:82:ab:8a:ec:58:2c:ec:2c:8c:32:24:7a:47:32: fb:f1:1f:91:29:34:1f:50:51:1e:6c:7b:12:0c:85: 37:67:41:56:ba:f1:9b:f8:02:76:50:36:c7:e0:00: 40:1e:65:a3:05:57:82:a5:30:fd:4b:70:c3:16:f1: 82:a3:9b:50:31:fb:b6:b5:1f:38:4b:62:99:d7:ed: 5c:8a:ec:0c:f2:37:81:54:06:de:7e:17:47:f2:f9: 02:fd:55:30:d1:6f:fc:a0:8a:12:97:8c:45:72:54: bf:db:4e:f3:83:40:c4:31:1c:a8:f7:87:31:22:39: 51:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:5D:2A:07:D2:07:9B:52:55:38:72:07:CC:82:4E:99:C1:C7:2C:6C X509v3 Authority Key Identifier: keyid:1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Bl0qB9IHm1JVOHIHzIJOmcHHLGw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.159.94.0/24 Signature Algorithm: sha256WithRSAEncryption 50:cc:39:82:89:1d:5a:24:ce:e6:72:06:8d:e7:e7:84:17:eb: b8:d1:06:09:2e:b3:c9:59:f3:28:b5:e8:dd:9c:c5:a0:41:c4: 3a:8c:d6:87:5f:86:0b:66:b7:f4:5c:87:5a:5a:0a:e1:b1:be: 69:52:17:09:92:54:d2:54:50:ee:08:2f:08:ba:2b:a7:41:43: ca:11:5d:9b:b3:25:33:26:2e:67:4c:30:c1:e9:f2:4c:2e:21: c0:a0:26:5c:0f:62:6b:f1:17:1a:9e:5e:99:06:e0:52:6f:55: e1:84:2c:60:07:00:69:c4:37:61:25:11:92:40:91:19:3f:b2: 94:4b:b0:0e:4f:5f:54:90:7a:a3:7e:55:54:97:11:42:f0:c1: b7:c5:4f:8b:4c:25:f3:10:72:44:53:42:a4:58:3e:cd:b4:1f: 4f:0b:ba:aa:ee:e2:fb:03:90:8a:e0:46:79:b8:57:08:5a:4f: d8:c8:c5:c1:82:89:3e:ef:4d:27:fd:4c:85:2c:df:8b:72:84: e5:88:4f:1c:00:6a:0c:73:a6:b6:b4:ab:29:ae:75:d1:7b:4f: e0:cb:c2:be:c5:25:58:cd:2a:8b:06:9f:66:50:b3:df:e2:45: 73:d2:46:90:f3:28:85:4e:40:9f:4a:c1:ae:80:23:20:c5:07: 29:ba:13:2c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yAiANFmATqzLr3TZgZLsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlOWZkYzdmYjM5ZWJiYmVkNGVlNTRmNzAzZDNhYzYxNTNk ZGVlNjkwHhcNMjYwMTAxMTgxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNjVkMmEwN2QyMDc5YjUyNTUzODcyMDdjYzgyNGU5OWMxYzcyYzZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2vr0YjtrIvBMjnxzvwjB5tRVtoNx EvFGAaM2+2vuN9e4u8PbVT5a6ULAZG0FGTJJYYqPKcq5dvg0CtpLx+Vy7UqCWMc9 P7+JGLTDqWBjamLqEp8F0EiIYJfuBI5qizPh3KtmqalP4SWwc0onXXCZDx6mRRgz PXd0HNYH9I8+dsGy3cCWrh26gquK7Fgs7CyMMiR6RzL78R+RKTQfUFEebHsSDIU3 Z0FWuvGb+AJ2UDbH4ABAHmWjBVeCpTD9S3DDFvGCo5tQMfu2tR84S2KZ1+1ciuwM 8jeBVAbefhdH8vkC/VUw0W/8oIoSl4xFclS/207zg0DEMRyo94cxIjlRWwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAZdKgfSB5tSVThyB8yCTpnBxyxsMB8GA1UdIwQY MBaAFB6f3H+znru+1O5U9wPTrGFT3e5pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHBfY2Y3T2V1NzdVN2xUM0E5T3NZVlBkN21rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS80MGZkZDEtMTA5Mi00ZjY5LWI2NDgt NjkxZmY1YjQ0YjAxLzEvQmwwcUI5SUhtMUpWT0hJSHpJSk9tY0hITEd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS80MGZkZDEtMTA5Mi00ZjY5LWI2NDgtNjkxZmY1YjQ0YjAx LzEvSHBfY2Y3T2V1NzdVN2xUM0E5T3NZVlBkN21rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsp9eMA0G CSqGSIb3DQEBCwUAA4IBAQBQzDmCiR1aJM7mcgaN5+eEF+u40QYJLrPJWfMotejd nMWgQcQ6jNaHX4YLZrf0XIdaWgrhsb5pUhcJklTSVFDuCC8IuiunQUPKEV2bsyUz Ji5nTDDB6fJMLiHAoCZcD2Jr8Rcanl6ZBuBSb1XhhCxgBwBpxDdhJRGSQJEZP7KU S7AOT19UkHqjflVUlxFC8MG3xU+LTCXzEHJEU0KkWD7NtB9PC7qq7uL7A5CK4EZ5 uFcIWk/YyMXBgok+700n/UyFLN+LcoTliE8cAGoMc6a2tKsprnXRe0/gy8K+xSVY zSqLBp9mULPf4kVz0kaQ8yiFTkCfSsGugCMgxQcpuhMs -----END CERTIFICATE-----Generated at Tue Jan 20 20:07:31 2026 by rpki-client