This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/bLQis5XKFb9ePmaCn3Xde03b5ww.roa File: bLQis5XKFb9ePmaCn3Xde03b5ww.roa (raw, json) Hash identifier: 7sPEt/kWbqDqCi2RTlX06DSMHs8kABLOqQ1zmeVq5Wg= Subject key identifier: 6C:B4:22:B3:95:CA:15:BF:5E:3E:66:82:9F:75:DD:7B:4D:DB:E7:0C Certificate issuer: /CN=05da7571c5eb13b1ae4f4417cefec2bd77902e2d Certificate serial: 019B7C8054FBB23E196F140563BAA88798CB Authority key identifier: 05:DA:75:71:C5:EB:13:B1:AE:4F:44:17:CE:FE:C2:BD:77:90:2E:2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/bLQis5XKFb9ePmaCn3Xde03b5ww.roa Signing time: Fri 02 Jan 2026 02:19:03 +0000 ROA not before: Fri 02 Jan 2026 02:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13335 IP address blocks: 185.112.244.0/24 maxlen: 24 185.112.245.0/24 maxlen: 24 185.112.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft rsync://rpki.ripe.net/repository/DEFAULT/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 05:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:54:fb:b2:3e:19:6f:14:05:63:ba:a8:87:98:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05da7571c5eb13b1ae4f4417cefec2bd77902e2d Validity Not Before: Jan 2 02:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6cb422b395ca15bf5e3e66829f75dd7b4ddbe70c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:07:7c:74:aa:36:fb:0d:bf:92:34:6f:3d:70: ad:e9:43:ac:64:bf:fa:0a:c9:da:28:63:b7:27:bd: fc:32:ac:68:61:02:a2:9e:14:64:93:a3:24:57:ee: 52:48:8b:2b:b3:86:25:78:5f:5e:7b:ad:87:6f:1a: 0c:12:69:ef:d0:4b:a1:ad:9c:07:99:6d:0f:d2:54: 3a:3d:ca:84:ef:20:64:e1:df:a6:41:a4:53:5d:5c: 12:64:29:8c:e1:53:81:e8:55:8a:4a:32:36:1b:83: 54:9e:6f:75:30:b5:34:b5:f2:f3:89:6a:d9:5e:a3: 6b:55:5b:5d:64:28:39:5c:97:e2:14:3c:82:26:70: dd:5d:a8:f8:41:c0:72:32:bf:9a:28:08:47:71:ba: 5f:e6:f2:a5:00:5f:c2:3f:b9:57:f8:21:38:9c:fd: 25:e7:40:f2:c0:5d:09:4e:86:06:74:79:fc:2d:9a: a1:f0:bc:1d:45:90:85:b2:cc:13:57:17:4f:7d:b6: c3:36:81:ae:13:4d:23:29:18:7c:f3:58:ec:08:9d: cd:a4:1d:96:1c:f2:76:03:2c:66:14:48:6a:7f:42: cf:ed:e9:b0:af:12:14:39:4f:4f:1a:8c:59:46:4e: 71:15:b4:69:83:c1:44:ab:12:34:8d:bb:d9:2b:95: b4:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:B4:22:B3:95:CA:15:BF:5E:3E:66:82:9F:75:DD:7B:4D:DB:E7:0C X509v3 Authority Key Identifier: keyid:05:DA:75:71:C5:EB:13:B1:AE:4F:44:17:CE:FE:C2:BD:77:90:2E:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/bLQis5XKFb9ePmaCn3Xde03b5ww.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.112.244.0-185.112.246.255 Signature Algorithm: sha256WithRSAEncryption 40:ac:47:5c:53:d1:3f:4c:a0:a9:98:7f:d8:dc:b8:eb:87:7c: 62:78:f1:52:a6:bf:77:10:47:52:09:e2:78:ec:a7:4f:3f:24: 94:a3:ed:20:4a:c4:81:00:fd:dd:2b:88:af:d2:fe:87:9e:5c: 36:2f:6c:35:8d:3b:0b:99:f6:33:b4:b9:7e:31:aa:a0:9a:dd: 2d:28:12:d8:e7:d3:5c:4b:b5:79:a8:19:49:e0:ff:12:71:0f: 1a:da:e2:13:76:bc:f2:7a:f1:3b:ca:c2:de:2d:aa:50:67:4e: a2:0c:33:b3:54:f4:04:79:75:67:f3:6f:b2:1f:1d:48:df:88: fd:04:3b:78:9e:34:cb:6a:ab:67:6b:0f:07:03:5b:f3:d0:82: 6c:18:ba:a3:10:1d:ef:85:7b:63:42:c5:57:6d:68:2f:f3:44: bb:56:b6:6e:65:bd:9d:08:bf:4e:ac:83:a0:a5:d8:40:3f:52: 2d:17:c6:fd:63:08:b5:c5:79:33:7f:40:8a:37:9e:48:da:95: 0f:64:80:b0:9b:b9:71:ce:86:3f:2d:8b:ad:47:9e:31:c1:97: e3:64:f4:33:04:d0:bf:ed:63:e2:60:92:71:41:cb:d9:6f:bf: c7:9c:69:63:cf:d1:00:f7:25:d2:6e:ce:50:b0:fa:e3:bb:79: db:76:ad:5c -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt8gFT7sj4ZbxQFY7qoh5jLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ZGE3NTcxYzVlYjEzYjFhZTRmNDQxN2NlZmVjMmJkNzc5 MDJlMmQwHhcNMjYwMTAyMDIxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Y2I0MjJiMzk1Y2ExNWJmNWUzZTY2ODI5Zjc1ZGQ3YjRkZGJlNzBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwd8dKo2+w2/kjRvPXCt6UOsZL/6 CsnaKGO3J738MqxoYQKinhRkk6MkV+5SSIsrs4YleF9ee62HbxoMEmnv0EuhrZwH mW0P0lQ6PcqE7yBk4d+mQaRTXVwSZCmM4VOB6FWKSjI2G4NUnm91MLU0tfLziWrZ XqNrVVtdZCg5XJfiFDyCJnDdXaj4QcByMr+aKAhHcbpf5vKlAF/CP7lX+CE4nP0l 50DywF0JToYGdHn8LZqh8LwdRZCFsswTVxdPfbbDNoGuE00jKRh881jsCJ3NpB2W HPJ2AyxmFEhqf0LP7emwrxIUOU9PGoxZRk5xFbRpg8FEqxI0jbvZK5W0YQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFGy0IrOVyhW/Xj5mgp913XtN2+cMMB8GA1UdIwQY MBaAFAXadXHF6xOxrk9EF87+wr13kC4tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmRwMWNjWHJFN0d1VDBRWHp2N0N2WGVRTGkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9mNjRmODMtMzcwYS00OTAxLThiZmEt MzY1NTMwMmJmMDA1LzEvYkxRaXM1WEtGYjllUG1hQ24zWGRlMDNiNXd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9mNjRmODMtMzcwYS00OTAxLThiZmEtMzY1NTMwMmJmMDA1 LzEvQmRwMWNjWHJFN0d1VDBRWHp2N0N2WGVRTGkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAK5cPQD BAC5cPYwDQYJKoZIhvcNAQELBQADggEBAECsR1xT0T9MoKmYf9jcuOuHfGJ48VKm v3cQR1IJ4njsp08/JJSj7SBKxIEA/d0riK/S/oeeXDYvbDWNOwuZ9jO0uX4xqqCa 3S0oEtjn01xLtXmoGUng/xJxDxra4hN2vPJ68TvKwt4tqlBnTqIMM7NU9AR5dWfz b7IfHUjfiP0EO3ieNMtqq2drDwcDW/PQgmwYuqMQHe+Fe2NCxVdtaC/zRLtWtm5l vZ0Iv06sg6Cl2EA/Ui0Xxv1jCLXFeTN/QIo3nkjalQ9kgLCbuXHOhj8ti61HnjHB l+Nk9DME0L/tY+JgknFBy9lvv8ecaWPP0QD3JdJuzlCw+uO7edt2rVw= -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:17 2026 by rpki-client