This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/96c272-f746-4628-95bc-a6126b54094d/1/Bl3mQJLo6QKNL3wv2g2LT4Q-5M0.roa File: Bl3mQJLo6QKNL3wv2g2LT4Q-5M0.roa (raw, json) Hash identifier: ff2pO6lqKtNRUUCSbOJc5+AZduH9jyQWddIlmRJigdQ= Subject key identifier: 06:5D:E6:40:92:E8:E9:02:8D:2F:7C:2F:DA:0D:8B:4F:84:3E:E4:CD Certificate issuer: /CN=a4e7a0d2fc57a67bb2b7e85c3e8d78192bca0f18 Certificate serial: 019B7C7F1EC4F30FE6C84FB5EA25545A80A0 Authority key identifier: A4:E7:A0:D2:FC:57:A6:7B:B2:B7:E8:5C:3E:8D:78:19:2B:CA:0F:18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOeg0vxXpnuyt-hcPo14GSvKDxg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/96c272-f746-4628-95bc-a6126b54094d/1/Bl3mQJLo6QKNL3wv2g2LT4Q-5M0.roa Signing time: Fri 02 Jan 2026 02:17:44 +0000 ROA not before: Fri 02 Jan 2026 02:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2914 IP address blocks: 212.82.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/96c272-f746-4628-95bc-a6126b54094d/1/pOeg0vxXpnuyt-hcPo14GSvKDxg.crl rsync://rpki.ripe.net/repository/DEFAULT/97/96c272-f746-4628-95bc-a6126b54094d/1/pOeg0vxXpnuyt-hcPo14GSvKDxg.mft rsync://rpki.ripe.net/repository/DEFAULT/pOeg0vxXpnuyt-hcPo14GSvKDxg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:1e:c4:f3:0f:e6:c8:4f:b5:ea:25:54:5a:80:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4e7a0d2fc57a67bb2b7e85c3e8d78192bca0f18 Validity Not Before: Jan 2 02:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=065de64092e8e9028d2f7c2fda0d8b4f843ee4cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:79:94:1d:45:00:e5:6c:13:d7:7d:2d:ad:6b: 91:6b:19:df:6a:27:92:74:60:89:9f:33:ec:0f:18: ff:b6:0d:9c:79:ac:02:72:bd:74:31:73:c1:3c:2c: b8:3f:20:71:e3:1e:ae:4b:41:67:a0:1a:45:97:39: 64:d1:7b:3b:9d:81:84:f3:a7:d1:e2:43:49:da:76: fa:f6:f0:7c:53:78:c4:fd:fa:2c:a3:08:8f:a4:10: d8:79:ea:60:62:28:1b:b3:1f:36:66:44:96:1b:6d: d8:5e:19:e5:d0:60:bd:2c:09:fa:9c:86:6d:51:0e: 51:ed:98:56:67:da:cb:14:47:73:d9:18:89:3f:16: e5:ca:0a:f6:5f:cd:f2:01:11:99:96:2c:41:1c:49: 92:a7:a6:8d:c3:7f:5a:b9:7b:07:24:b2:c2:40:3c: b0:c1:08:db:a9:f7:87:32:32:d5:f0:48:46:a7:19: 5b:08:7d:65:e1:19:67:95:db:9b:46:29:52:06:a2: 7b:c7:79:36:f9:0c:1f:c1:cf:67:e3:0a:65:e5:7d: 0a:dc:94:ef:24:0d:32:57:bd:f0:50:f7:ac:93:66: 28:f1:4a:19:75:1c:41:d4:f7:57:50:9e:ec:ed:5e: 42:9c:76:4b:95:51:ed:3c:2b:7a:06:4c:c8:c3:89: a9:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:5D:E6:40:92:E8:E9:02:8D:2F:7C:2F:DA:0D:8B:4F:84:3E:E4:CD X509v3 Authority Key Identifier: keyid:A4:E7:A0:D2:FC:57:A6:7B:B2:B7:E8:5C:3E:8D:78:19:2B:CA:0F:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOeg0vxXpnuyt-hcPo14GSvKDxg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/96c272-f746-4628-95bc-a6126b54094d/1/Bl3mQJLo6QKNL3wv2g2LT4Q-5M0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/96c272-f746-4628-95bc-a6126b54094d/1/pOeg0vxXpnuyt-hcPo14GSvKDxg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.82.40.0/22 Signature Algorithm: sha256WithRSAEncryption a7:61:f9:fc:02:87:ab:43:87:1d:ff:ac:f5:60:88:77:35:3e: 33:35:4f:cb:87:a2:d7:51:42:76:7b:89:de:e1:09:68:bd:c3: f5:55:3b:c6:b6:3b:11:85:ba:6a:12:fe:12:de:a6:65:e3:75: a2:00:1d:d2:0a:3a:37:67:97:02:2b:ff:a5:81:d7:b0:6d:9a: fd:be:15:8f:51:11:0d:fb:cc:4a:f3:17:62:8e:e5:4c:a5:a0: 14:3d:6f:36:b1:d4:6c:bf:20:e2:b3:31:8b:1e:d6:b9:db:52: aa:64:0c:09:e5:69:dd:7e:60:02:0c:cb:55:95:41:67:13:aa: 91:94:3b:f8:f3:89:66:d5:90:98:f3:4b:57:3c:69:9d:20:0c: 42:b2:61:c4:11:66:0d:6e:32:05:12:d9:0d:8a:43:a0:52:c2: b6:89:42:eb:6e:d2:a3:a7:34:28:5d:0d:91:b4:32:46:8b:89: 85:83:9d:4a:6d:be:1a:44:ce:1f:57:4f:4f:13:0d:b5:d8:bd: 8e:bf:16:81:6b:fb:58:bb:31:4a:9f:5b:1f:77:fa:37:78:29: 91:98:41:90:6c:ea:37:6c:1c:9e:75:f7:39:02:56:b8:5b:29: 03:54:e5:fb:03:6b:28:88:75:ec:3f:5d:b2:63:ec:6e:33:ce: cd:f6:3a:bd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8fx7E8w/myE+16iVUWoCgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0ZTdhMGQyZmM1N2E2N2JiMmI3ZTg1YzNlOGQ3ODE5MmJj YTBmMTgwHhcNMjYwMTAyMDIxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNjVkZTY0MDkyZThlOTAyOGQyZjdjMmZkYTBkOGI0Zjg0M2VlNGNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXmUHUUA5WwT130trWuRaxnfaieS dGCJnzPsDxj/tg2ceawCcr10MXPBPCy4PyBx4x6uS0FnoBpFlzlk0Xs7nYGE86fR 4kNJ2nb69vB8U3jE/fosowiPpBDYeepgYigbsx82ZkSWG23YXhnl0GC9LAn6nIZt UQ5R7ZhWZ9rLFEdz2RiJPxblygr2X83yARGZlixBHEmSp6aNw39auXsHJLLCQDyw wQjbqfeHMjLV8EhGpxlbCH1l4RlnldubRilSBqJ7x3k2+Qwfwc9n4wpl5X0K3JTv JA0yV73wUPesk2Yo8UoZdRxB1PdXUJ7s7V5CnHZLlVHtPCt6BkzIw4mppwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAZd5kCS6OkCjS98L9oNi0+EPuTNMB8GA1UdIwQY MBaAFKTnoNL8V6Z7srfoXD6NeBkryg8YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcE9lZzB2eFhwbnV5dC1oY1BvMTRHU3ZLRHhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny85NmMyNzItZjc0Ni00NjI4LTk1YmMt YTYxMjZiNTQwOTRkLzEvQmwzbVFKTG82UUtOTDN3djJnMkxUNFEtNU0wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny85NmMyNzItZjc0Ni00NjI4LTk1YmMtYTYxMjZiNTQwOTRk LzEvcE9lZzB2eFhwbnV5dC1oY1BvMTRHU3ZLRHhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC1FIoMA0G CSqGSIb3DQEBCwUAA4IBAQCnYfn8AoerQ4cd/6z1YIh3NT4zNU/Lh6LXUUJ2e4ne 4QlovcP1VTvGtjsRhbpqEv4S3qZl43WiAB3SCjo3Z5cCK/+lgdewbZr9vhWPUREN +8xK8xdijuVMpaAUPW82sdRsvyDiszGLHta521KqZAwJ5WndfmACDMtVlUFnE6qR lDv484lm1ZCY80tXPGmdIAxCsmHEEWYNbjIFEtkNikOgUsK2iULrbtKjpzQoXQ2R tDJGi4mFg51Kbb4aRM4fV09PEw212L2OvxaBa/tYuzFKn1sfd/o3eCmRmEGQbOo3 bByedfc5Ala4WykDVOX7A2soiHXsP12yY+xuM87N9jq9 -----END CERTIFICATE-----Generated at Thu Jan 8 00:11:48 2026 by rpki-client