This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/BLLh5nNCz1s5if2pHYByIfYWqoE.roa File: BLLh5nNCz1s5if2pHYByIfYWqoE.roa (raw, json) Hash identifier: EPJ+RLaqu85xGvwiEKDRnHSjYD9ruTYxv3tR7VjbDJs= Subject key identifier: 04:B2:E1:E6:73:42:CF:5B:39:89:FD:A9:1D:80:72:21:F6:16:AA:81 Certificate issuer: /CN=ee8b27904d11bcf536774d541542082cfafe8eaa Certificate serial: 019B7CED3435C69AAE9E3641DA51F8B74032 Authority key identifier: EE:8B:27:90:4D:11:BC:F5:36:77:4D:54:15:42:08:2C:FA:FE:8E:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7osnkE0RvPU2d01UFUIILPr-jqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/BLLh5nNCz1s5if2pHYByIfYWqoE.roa Signing time: Fri 02 Jan 2026 04:17:58 +0000 ROA not before: Fri 02 Jan 2026 04:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16085 IP address blocks: 193.109.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.mft rsync://rpki.ripe.net/repository/DEFAULT/7osnkE0RvPU2d01UFUIILPr-jqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:34:35:c6:9a:ae:9e:36:41:da:51:f8:b7:40:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee8b27904d11bcf536774d541542082cfafe8eaa Validity Not Before: Jan 2 04:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=04b2e1e67342cf5b3989fda91d807221f616aa81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:61:c6:4f:de:61:b8:47:47:f1:8c:e4:48:cc: eb:85:70:04:cd:ec:7b:53:08:f9:f1:7d:23:3e:77: 71:62:37:a9:d9:c5:61:21:cd:28:df:81:eb:31:d8: 6d:55:f6:19:47:05:f9:e3:8f:4c:1c:00:cf:a1:26: 4b:eb:34:43:76:4e:c1:50:4e:cc:04:99:df:4f:13: d1:f8:4e:c7:58:4e:3f:c3:97:39:f6:52:91:07:12: 5f:5f:11:6a:ec:ba:6d:34:6e:98:83:0d:fb:66:74: 20:8c:f7:32:1a:6a:10:d5:57:ed:b2:51:37:cb:29: e1:e2:1d:0c:4e:0f:09:73:c5:33:c8:5d:cb:91:ad: de:8d:93:d5:3a:5c:f3:86:6e:39:1b:99:c8:a5:d9: 21:61:78:da:8b:fc:55:65:c0:33:49:6a:6f:94:83: 7e:0d:46:98:69:f7:6d:af:76:ef:6b:7c:3f:92:49: 72:0d:65:07:61:12:84:18:42:57:12:d1:00:0b:02: f7:7f:4c:4b:ef:d5:8a:1d:6d:0a:56:76:29:a8:9f: 10:ac:48:7a:ba:a1:40:43:8f:6c:60:ae:37:29:1b: 50:a8:92:80:35:d7:70:8e:22:74:9d:2c:c4:55:a6: 4d:70:67:d0:ad:c0:14:85:4a:aa:98:56:64:99:9e: 9b:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:B2:E1:E6:73:42:CF:5B:39:89:FD:A9:1D:80:72:21:F6:16:AA:81 X509v3 Authority Key Identifier: keyid:EE:8B:27:90:4D:11:BC:F5:36:77:4D:54:15:42:08:2C:FA:FE:8E:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7osnkE0RvPU2d01UFUIILPr-jqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/BLLh5nNCz1s5if2pHYByIfYWqoE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.109.229.0/24 Signature Algorithm: sha256WithRSAEncryption 40:aa:d8:b9:33:89:78:96:a8:44:89:85:d3:a6:58:4e:86:a7: bf:40:c2:72:de:c6:f5:9b:15:14:6c:2b:e0:28:15:be:8f:ac: a2:5e:7c:fd:74:25:70:fa:32:2e:6d:3c:5c:25:2d:47:8a:40: d0:49:ea:54:c1:78:57:9f:0b:41:67:e1:78:a1:87:cf:7a:4e: 8c:5c:df:65:3f:9e:90:be:b6:60:ba:36:ed:a6:8a:cc:70:48: ee:88:39:9c:76:d5:53:4c:eb:b7:2a:ad:41:47:40:f5:a1:e5: 0d:e7:25:3a:c7:18:8a:2a:a2:c1:7d:ac:9f:06:05:91:6b:6d: bb:0b:7a:68:d4:86:49:27:b3:6c:1c:3b:b8:83:9c:58:e9:ed: ed:57:10:5c:67:46:5f:45:65:da:55:98:2c:7b:63:f9:9e:99: 9e:7b:31:f9:8e:c4:ad:52:a5:16:72:fa:6e:dd:b6:6e:f8:fb: 68:7f:73:c9:0d:1b:e3:9d:81:2e:3d:d0:27:e6:f7:6d:62:bf: 61:f9:ba:7f:41:39:22:88:34:48:62:ce:48:24:6c:a3:e1:a0: 87:62:46:6c:ed:9f:11:41:97:12:63:0e:58:b5:1e:c2:07:01: ca:b7:d0:74:9f:d8:1b:57:4c:65:6d:bd:d3:2f:11:11:25:ab: 83:ae:50:0e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87TQ1xpqunjZB2lH4t0AyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlOGIyNzkwNGQxMWJjZjUzNjc3NGQ1NDE1NDIwODJjZmFm ZThlYWEwHhcNMjYwMTAyMDQxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNGIyZTFlNjczNDJjZjViMzk4OWZkYTkxZDgwNzIyMWY2MTZhYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWHGT95huEdH8YzkSMzrhXAEzex7 Uwj58X0jPndxYjep2cVhIc0o34HrMdhtVfYZRwX5449MHADPoSZL6zRDdk7BUE7M BJnfTxPR+E7HWE4/w5c59lKRBxJfXxFq7LptNG6Ygw37ZnQgjPcyGmoQ1VftslE3 yynh4h0MTg8Jc8UzyF3Lka3ejZPVOlzzhm45G5nIpdkhYXjai/xVZcAzSWpvlIN+ DUaYafdtr3bva3w/kklyDWUHYRKEGEJXEtEACwL3f0xL79WKHW0KVnYpqJ8QrEh6 uqFAQ49sYK43KRtQqJKANddwjiJ0nSzEVaZNcGfQrcAUhUqqmFZkmZ6b2QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFASy4eZzQs9bOYn9qR2AciH2FqqBMB8GA1UdIwQY MBaAFO6LJ5BNEbz1NndNVBVCCCz6/o6qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN29zbmtFMFJ2UFUyZDAxVUZVSUlMUHItanFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9kYjRkMzgtYTUxNC00MjdlLThkNzYt Y2M2NGQxM2E2MTJjLzEvQkxMaDVuTkN6MXM1aWYycEhZQnlJZllXcW9FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC9kYjRkMzgtYTUxNC00MjdlLThkNzYtY2M2NGQxM2E2MTJj LzEvN29zbmtFMFJ2UFUyZDAxVUZVSUlMUHItanFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwW3lMA0G CSqGSIb3DQEBCwUAA4IBAQBAqti5M4l4lqhEiYXTplhOhqe/QMJy3sb1mxUUbCvg KBW+j6yiXnz9dCVw+jIubTxcJS1HikDQSepUwXhXnwtBZ+F4oYfPek6MXN9lP56Q vrZgujbtporMcEjuiDmcdtVTTOu3Kq1BR0D1oeUN5yU6xxiKKqLBfayfBgWRa227 C3po1IZJJ7NsHDu4g5xY6e3tVxBcZ0ZfRWXaVZgse2P5npmeezH5jsStUqUWcvpu 3bZu+Ptof3PJDRvjnYEuPdAn5vdtYr9h+bp/QTkiiDRIYs5IJGyj4aCHYkZs7Z8R QZcSYw5YtR7CBwHKt9B0n9gbV0xlbb3TLxERJauDrlAO -----END CERTIFICATE-----Generated at Tue Jan 20 07:47:29 2026 by rpki-client