This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/324f05-9a07-44cb-8709-0a19518f7358/1/b6l9v1ElJ3uyxkToat5aNcrzqOs.roa File: b6l9v1ElJ3uyxkToat5aNcrzqOs.roa (raw, json) Hash identifier: D+KuC67p737rJd0RBqemivsjTzSJ1aYBrvzPTFI+e5k= Subject key identifier: 6F:A9:7D:BF:51:25:27:7B:B2:C6:44:E8:6A:DE:5A:35:CA:F3:A8:EB Certificate issuer: /CN=bc3a252a8fcca0361da234a4f3ddb957789d0e55 Certificate serial: 019B7758D289ABF046596A95B1D812D932DA Authority key identifier: BC:3A:25:2A:8F:CC:A0:36:1D:A2:34:A4:F3:DD:B9:57:78:9D:0E:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vDolKo_MoDYdojSk8925V3idDlU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/324f05-9a07-44cb-8709-0a19518f7358/1/b6l9v1ElJ3uyxkToat5aNcrzqOs.roa Signing time: Thu 01 Jan 2026 02:17:48 +0000 ROA not before: Thu 01 Jan 2026 02:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31898 IP address blocks: 212.96.152.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/324f05-9a07-44cb-8709-0a19518f7358/1/vDolKo_MoDYdojSk8925V3idDlU.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/324f05-9a07-44cb-8709-0a19518f7358/1/vDolKo_MoDYdojSk8925V3idDlU.mft rsync://rpki.ripe.net/repository/DEFAULT/vDolKo_MoDYdojSk8925V3idDlU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 11:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:d2:89:ab:f0:46:59:6a:95:b1:d8:12:d9:32:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc3a252a8fcca0361da234a4f3ddb957789d0e55 Validity Not Before: Jan 1 02:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6fa97dbf5125277bb2c644e86ade5a35caf3a8eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:d8:46:8d:ea:1c:0d:7f:9e:99:7a:05:bd:dc: 1c:9f:fb:e2:86:37:5b:4b:a8:d2:f9:e3:2f:f8:83: 2a:f6:ad:9a:3b:a6:6e:f8:05:cd:88:d6:7e:0a:98: 50:b8:e9:ae:6d:80:9b:99:f3:b5:06:58:c4:16:7e: c8:84:ca:2a:11:a0:05:c8:50:7f:cc:31:e6:b5:30: 2d:1c:a2:a2:b5:83:ae:b7:0f:71:1c:f3:e7:43:22: eb:75:05:e4:65:1e:21:af:9d:9d:02:8a:1e:c6:85: 59:31:d4:58:68:db:24:70:95:91:5f:8f:4a:d5:fd: 4f:07:8f:c0:4b:87:1d:8d:b7:f3:5d:17:cc:96:5e: 74:2f:f8:25:be:28:a4:39:1b:56:31:d9:b9:9a:25: 91:b3:b6:52:c5:75:3b:62:bb:6a:43:0e:e3:c9:83: 6d:fc:08:9b:69:78:0f:ff:7a:97:f9:38:a1:d8:b0: 2d:ec:a3:38:87:67:9d:15:31:80:8e:f7:80:47:58: 3b:ed:b4:8b:b4:0d:89:50:9e:5c:66:b4:77:29:7b: 79:73:b4:46:09:9b:1c:fd:dc:67:ed:1d:3f:ad:08: ce:cc:55:38:7a:ac:98:4c:e9:cd:62:55:97:06:e2: 28:f8:d9:23:5a:c3:54:aa:15:f1:7e:a2:a5:31:e5: 94:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:A9:7D:BF:51:25:27:7B:B2:C6:44:E8:6A:DE:5A:35:CA:F3:A8:EB X509v3 Authority Key Identifier: keyid:BC:3A:25:2A:8F:CC:A0:36:1D:A2:34:A4:F3:DD:B9:57:78:9D:0E:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDolKo_MoDYdojSk8925V3idDlU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/324f05-9a07-44cb-8709-0a19518f7358/1/b6l9v1ElJ3uyxkToat5aNcrzqOs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/324f05-9a07-44cb-8709-0a19518f7358/1/vDolKo_MoDYdojSk8925V3idDlU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.96.152.0/23 Signature Algorithm: sha256WithRSAEncryption 57:27:8e:13:81:a7:38:12:82:fd:c1:a3:85:f6:0f:80:09:be: 8f:ff:a4:42:1b:a1:c0:d0:6e:24:7a:dd:6b:9e:6d:8d:1a:b6: 86:81:e6:f0:5c:82:a0:91:8d:a5:47:4a:8e:00:f2:a5:f8:1e: ae:f5:1b:74:9b:00:5c:ff:84:b9:86:35:fc:81:2e:27:60:40: 3a:16:88:e2:2e:66:18:56:b2:a4:ff:ce:f5:a9:9e:e9:41:3e: 41:86:25:af:28:ef:08:36:0f:37:c4:fa:8f:8b:e6:99:76:df: da:6a:be:f6:13:ea:40:f8:92:38:ed:7b:38:19:33:5e:9e:2b: 78:d1:3a:c9:a3:72:b4:0a:de:e2:9c:5e:52:93:1a:8b:89:88: 21:bd:70:1e:40:9f:50:f3:7a:dc:53:d9:b6:83:5f:c0:3f:48: 67:ae:6b:a0:55:65:87:ab:8b:41:86:a7:0d:91:54:f8:bd:f9: 12:4b:d4:51:9f:b9:4a:e1:01:d1:c6:57:44:10:39:8a:20:9b: f9:88:6c:df:17:23:96:52:7d:1d:0e:79:e4:49:53:34:7c:09: 3d:cf:1a:f9:b5:e5:a3:c4:6b:47:3a:8a:94:1f:33:5f:bc:07: b7:83:06:c3:9f:3a:72:80:ae:f0:f2:df:c6:b2:79:00:01:3e: 9e:de:be:9a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WNKJq/BGWWqVsdgS2TLaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjM2EyNTJhOGZjY2EwMzYxZGEyMzRhNGYzZGRiOTU3Nzg5 ZDBlNTUwHhcNMjYwMTAxMDIxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZmE5N2RiZjUxMjUyNzdiYjJjNjQ0ZTg2YWRlNWEzNWNhZjNhOGViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNhGjeocDX+emXoFvdwcn/vihjdb S6jS+eMv+IMq9q2aO6Zu+AXNiNZ+CphQuOmubYCbmfO1BljEFn7IhMoqEaAFyFB/ zDHmtTAtHKKitYOutw9xHPPnQyLrdQXkZR4hr52dAooexoVZMdRYaNskcJWRX49K 1f1PB4/AS4cdjbfzXRfMll50L/glviikORtWMdm5miWRs7ZSxXU7YrtqQw7jyYNt /AibaXgP/3qX+Tih2LAt7KM4h2edFTGAjveAR1g77bSLtA2JUJ5cZrR3KXt5c7RG CZsc/dxn7R0/rQjOzFU4eqyYTOnNYlWXBuIo+NkjWsNUqhXxfqKlMeWUxQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG+pfb9RJSd7ssZE6GreWjXK86jrMB8GA1UdIwQY MBaAFLw6JSqPzKA2HaI0pPPduVd4nQ5VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkRvbEtvX01vRFlkb2pTazg5MjVWM2lkRGxVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8zMjRmMDUtOWEwNy00NGNiLTg3MDkt MGExOTUxOGY3MzU4LzEvYjZsOXYxRWxKM3V5eGtUb2F0NWFOY3J6cU9zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi8zMjRmMDUtOWEwNy00NGNiLTg3MDktMGExOTUxOGY3MzU4 LzEvdkRvbEtvX01vRFlkb2pTazg5MjVWM2lkRGxVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB1GCYMA0G CSqGSIb3DQEBCwUAA4IBAQBXJ44Tgac4EoL9waOF9g+ACb6P/6RCG6HA0G4ket1r nm2NGraGgebwXIKgkY2lR0qOAPKl+B6u9Rt0mwBc/4S5hjX8gS4nYEA6FojiLmYY VrKk/871qZ7pQT5BhiWvKO8INg83xPqPi+aZdt/aar72E+pA+JI47Xs4GTNenit4 0TrJo3K0Ct7inF5SkxqLiYghvXAeQJ9Q83rcU9m2g1/AP0hnrmugVWWHq4tBhqcN kVT4vfkSS9RRn7lK4QHRxldEEDmKIJv5iGzfFyOWUn0dDnnkSVM0fAk9zxr5teWj xGtHOoqUHzNfvAe3gwbDnzpygK7w8t/GsnkAAT6e3r6a -----END CERTIFICATE-----Generated at Sat Jan 10 20:51:00 2026 by rpki-client