This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/bLty7x4_bp6bJO68Cul62fRMxlU.roa File: bLty7x4_bp6bJO68Cul62fRMxlU.roa (raw, json) Hash identifier: kYiMfI9JDPevUGPZ1zVTj//0LProZnsEPqeHJe8gbiQ= Subject key identifier: 6C:BB:72:EF:1E:3F:6E:9E:9B:24:EE:BC:0A:E9:7A:D9:F4:4C:C6:55 Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9 Certificate serial: 019B79ED52E8F37CCC74DD4F84B32C831385 Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/bLty7x4_bp6bJO68Cul62fRMxlU.roa Signing time: Thu 01 Jan 2026 14:19:14 +0000 ROA not before: Thu 01 Jan 2026 14:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212238 IP address blocks: 193.68.92.0/24 maxlen: 24 213.21.226.0/24 maxlen: 24 213.21.230.0/24 maxlen: 24 213.21.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:52:e8:f3:7c:cc:74:dd:4f:84:b3:2c:83:13:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9 Validity Not Before: Jan 1 14:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6cbb72ef1e3f6e9e9b24eebc0ae97ad9f44cc655 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a5:e5:f7:a4:8a:29:45:3b:9d:68:7a:bb:21: 1d:e9:00:64:15:77:c4:5f:98:c0:3b:65:bc:05:14: 4d:03:94:79:cb:21:a4:b8:ce:f9:95:37:52:d2:d3: 23:f3:e3:ce:96:6d:c7:d1:c9:4c:c1:25:59:b2:e7: 36:26:f6:0e:16:16:20:c2:f0:81:fa:de:3e:9b:b8: 74:f6:b8:45:1a:53:da:d5:f0:14:ab:a5:fa:2d:d7: 63:13:bf:51:23:b5:51:b2:a5:2c:4c:9a:b2:20:af: f1:5d:16:ac:5c:0c:75:e6:69:8d:5f:b5:6d:11:e5: 8e:08:ae:d4:68:0a:2d:3e:0d:97:c9:de:83:7c:50: 78:d4:37:b5:ef:69:b3:81:aa:d5:d7:39:87:7d:70: c7:eb:33:a7:a6:e7:64:f7:d5:61:44:d0:73:67:b4: fa:d3:36:a0:52:f9:60:bc:6c:e0:81:45:dd:aa:0c: 8a:e4:54:33:ab:09:b7:72:6e:aa:76:5e:5c:a5:2e: 58:c9:e6:73:74:98:58:e6:e2:54:18:94:55:f3:5c: 91:eb:d4:e8:0d:27:60:f7:2e:79:4c:36:61:94:95: 31:c3:6f:34:16:bc:de:30:a6:05:bf:4a:48:ba:32: 97:07:97:21:9f:33:61:84:79:32:28:77:ec:bd:fc: 7a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:BB:72:EF:1E:3F:6E:9E:9B:24:EE:BC:0A:E9:7A:D9:F4:4C:C6:55 X509v3 Authority Key Identifier: keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/bLty7x4_bp6bJO68Cul62fRMxlU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.68.92.0/24 213.21.226.0/24 213.21.230.0/24 213.21.234.0/24 Signature Algorithm: sha256WithRSAEncryption 74:06:fe:68:1b:c3:dd:53:50:56:36:1d:7c:0b:4f:ab:f6:09: cb:50:81:a3:4f:6c:8c:1e:39:e1:4a:8d:68:3a:c6:b8:bf:69: 03:8e:dc:c4:1e:27:00:6e:e1:a3:78:f6:f5:d5:5d:e3:91:f2: cb:60:b7:5d:26:e2:96:5a:34:d2:fb:da:24:a4:42:af:c0:9b: 53:f5:40:81:2b:39:d6:1e:fd:f2:a9:21:03:04:2d:a0:df:ea: ea:db:d5:73:b5:8e:e6:b6:6e:1b:60:b4:0f:1e:27:91:ac:66: 51:6d:35:42:8f:f7:e2:e5:79:ba:f8:2d:81:eb:63:e7:2c:79: 21:d7:3e:f8:f5:f5:3a:90:11:f9:0c:ad:77:75:e0:04:0d:a8: 37:5b:59:1f:76:6f:9b:46:f7:62:cb:9f:68:5c:19:84:03:e0: 7a:76:89:24:18:95:75:eb:e9:fe:77:89:3b:28:f3:15:96:52: 69:98:3a:67:cc:3e:99:c7:ae:2e:98:b7:31:1b:1d:7a:6a:6c: 2f:b9:c8:63:3e:18:fc:07:b2:25:e7:3e:22:72:d6:06:0e:07: 11:b5:9c:d2:6e:b6:71:a2:bd:d8:e2:01:ed:3a:ce:9a:60:eb: a2:9e:80:0d:eb:13:5e:37:f7:78:44:78:7b:ea:8a:88:60:11: 20:88:aa:3f -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt57VLo83zMdN1PhLMsgxOFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjZmRmZTZkY2E4YWM3YmZhMWE5NDUwZWY5OWZkMzE1ZWQw MmFjZDkwHhcNMjYwMTAxMTQxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Y2JiNzJlZjFlM2Y2ZTllOWIyNGVlYmMwYWU5N2FkOWY0NGNjNjU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6Xl96SKKUU7nWh6uyEd6QBkFXfE X5jAO2W8BRRNA5R5yyGkuM75lTdS0tMj8+POlm3H0clMwSVZsuc2JvYOFhYgwvCB +t4+m7h09rhFGlPa1fAUq6X6LddjE79RI7VRsqUsTJqyIK/xXRasXAx15mmNX7Vt EeWOCK7UaAotPg2Xyd6DfFB41De172mzgarV1zmHfXDH6zOnpudk99VhRNBzZ7T6 0zagUvlgvGzggUXdqgyK5FQzqwm3cm6qdl5cpS5YyeZzdJhY5uJUGJRV81yR69To DSdg9y55TDZhlJUxw280FrzeMKYFv0pIujKXB5chnzNhhHkyKHfsvfx6/wIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFGy7cu8eP26emyTuvArpetn0TMZVMB8GA1UdIwQY MBaAFLz9/m3Kise/oalFDvmf0xXtAqzZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmIt MWFmMjQ2NWE4ZWVjLzEvYkx0eTd4NF9icDZiSk82OEN1bDYyZlJNeGxVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmItMWFmMjQ2NWE4ZWVj LzEvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAwURcAwQA 1RXiAwQA1RXmAwQA1RXqMA0GCSqGSIb3DQEBCwUAA4IBAQB0Bv5oG8PdU1BWNh18 C0+r9gnLUIGjT2yMHjnhSo1oOsa4v2kDjtzEHicAbuGjePb11V3jkfLLYLddJuKW WjTS+9okpEKvwJtT9UCBKznWHv3yqSEDBC2g3+rq29VztY7mtm4bYLQPHieRrGZR bTVCj/fi5Xm6+C2B62PnLHkh1z749fU6kBH5DK13deAEDag3W1kfdm+bRvdiy59o XBmEA+B6dokkGJV16+n+d4k7KPMVllJpmDpnzD6Zx64umLcxGx16amwvuchjPhj8 B7Il5z4ictYGDgcRtZzSbrZxor3Y4gHtOs6aYOuinoAN6xNeN/d4RHh76oqIYBEg iKo/ -----END CERTIFICATE-----Generated at Tue Jan 20 11:09:49 2026 by rpki-client