This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/BLaNzJl6HSZD37zzCv-UbMmnHc8.roa File: BLaNzJl6HSZD37zzCv-UbMmnHc8.roa (raw, json) Hash identifier: WeDz1utxefjtl3Tsq+Zyrl8Ae3+EelPZ4TbbjIWK0ak= Subject key identifier: 04:B6:8D:CC:99:7A:1D:26:43:DF:BC:F3:0A:FF:94:6C:C9:A7:1D:CF Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d Certificate serial: 019AEEFB7BAAD6CC3BDB8405DFD8D63B91C0 Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/BLaNzJl6HSZD37zzCv-UbMmnHc8.roa Signing time: Fri 05 Dec 2025 14:47:29 +0000 ROA not before: Fri 05 Dec 2025 14:47:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 205023 IP address blocks: 45.148.51.0/24 maxlen: 24 45.152.37.0/24 maxlen: 24 45.154.237.0/24 maxlen: 24 185.208.211.0/24 maxlen: 24 185.232.85.0/24 maxlen: 24 193.57.9.0/24 maxlen: 24 195.60.177.0/24 maxlen: 24 195.88.210.0/24 maxlen: 24 213.185.92.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ee:fb:7b:aa:d6:cc:3b:db:84:05:df:d8:d6:3b:91:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d Validity Not Before: Dec 5 14:47:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=04b68dcc997a1d2643dfbcf30aff946cc9a71dcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1f:b2:a6:8d:61:0b:37:9f:28:32:51:76:5f: a7:6c:f3:a0:16:47:c8:ef:ba:60:9e:2c:d8:33:f0: 1a:8b:8f:51:41:50:d0:88:76:dd:6c:e4:90:78:78: 65:64:6e:39:59:89:6a:b8:06:a1:0b:55:e9:6e:b9: 7d:d4:2e:98:92:6f:38:c0:0f:e9:61:91:41:3a:c6: f0:0c:5d:b4:b2:46:69:59:5f:f4:da:b0:d0:e4:8a: 9e:1b:9a:cf:a3:73:23:47:7f:f7:67:58:8f:63:35: c5:f4:ba:a7:37:ce:bc:7c:a2:3c:ba:36:5b:5b:b2: 96:37:17:90:1d:d4:a0:3e:fd:27:89:93:81:36:49: 0a:9e:e7:c8:6d:4f:7c:f4:e4:03:8e:f9:2b:49:8e: 99:2a:62:1b:37:37:a0:fc:b0:57:be:1d:bd:d0:49: dd:dc:8a:1b:88:e3:e8:04:79:b9:2a:cd:ab:79:2d: bf:b4:c8:f7:5e:c1:20:08:7d:47:bd:45:3f:d6:10: 70:a3:92:f9:ce:92:00:c1:ed:6b:d3:bc:9b:d3:ab: 94:40:02:14:9d:b0:4e:4b:0b:90:93:a7:82:0c:c9: e4:a1:4f:2d:ff:ff:83:fe:2f:1a:a0:5c:89:be:75: d5:62:0f:32:85:3e:3e:5d:f3:b9:14:0c:e8:af:3a: bf:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:B6:8D:CC:99:7A:1D:26:43:DF:BC:F3:0A:FF:94:6C:C9:A7:1D:CF X509v3 Authority Key Identifier: keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/BLaNzJl6HSZD37zzCv-UbMmnHc8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.148.51.0/24 45.152.37.0/24 45.154.237.0/24 185.208.211.0/24 185.232.85.0/24 193.57.9.0/24 195.60.177.0/24 195.88.210.0/24 213.185.92.0/22 Signature Algorithm: sha256WithRSAEncryption 1e:b8:b0:67:3f:12:de:99:bf:18:5b:f8:1c:d0:c1:c8:ff:8e: a2:41:ff:40:4d:ec:4a:48:af:84:31:fa:09:b8:d6:62:12:25: 17:dc:43:f2:c5:ce:fe:67:5f:d4:d3:cc:eb:4d:0f:a3:45:4f: ca:3a:60:f0:63:4a:68:17:29:6d:7a:50:8b:6c:da:ba:db:10: c0:d5:0c:b0:da:6d:89:a1:56:e9:03:33:37:fe:26:2d:62:10: 93:90:0f:2a:8b:2a:5b:63:a3:b4:f0:e5:82:6f:42:d8:6f:04: 9a:55:b5:c3:66:36:85:bd:7e:36:f8:d7:d7:cb:5c:84:f3:4f: bc:1f:c4:eb:23:18:8b:a1:ff:9e:ef:46:d6:55:b7:ff:44:02: f8:ec:6a:88:9b:21:d4:29:62:b7:70:4a:ed:7f:5f:b7:56:49: 3e:67:46:5b:bc:08:35:c2:12:e9:05:24:3b:7d:ac:34:17:fd: ab:f2:c6:e8:e5:d9:94:64:04:98:17:35:ed:25:00:5b:63:03: f2:01:9c:ca:54:84:f9:57:ae:ae:d1:eb:69:6c:49:89:75:0c: b6:26:61:17:2c:3b:77:58:f2:56:56:db:60:1a:de:d0:0d:00: 0a:a4:14:a5:ed:b0:56:cd:87:fc:ab:5d:27:f0:97:65:2e:b8: 2b:de:22:5d -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZru+3uq1sw724QF39jWO5HAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NTdjY2Q0M2FmZTgxNmU0OTUzMjI4YmYxNGE3NWRjMjkw MTRiOGQwHhcNMjUxMjA1MTQ0NzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNGI2OGRjYzk5N2ExZDI2NDNkZmJjZjMwYWZmOTQ2Y2M5YTcxZGNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAux+ypo1hCzefKDJRdl+nbPOgFkfI 77pgnizYM/Aai49RQVDQiHbdbOSQeHhlZG45WYlquAahC1Xpbrl91C6Ykm84wA/p YZFBOsbwDF20skZpWV/02rDQ5IqeG5rPo3MjR3/3Z1iPYzXF9LqnN868fKI8ujZb W7KWNxeQHdSgPv0niZOBNkkKnufIbU989OQDjvkrSY6ZKmIbNzeg/LBXvh290End 3IobiOPoBHm5Ks2reS2/tMj3XsEgCH1HvUU/1hBwo5L5zpIAwe1r07yb06uUQAIU nbBOSwuQk6eCDMnkoU8t//+D/i8aoFyJvnXVYg8yhT4+XfO5FAzorzq/6QIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFAS2jcyZeh0mQ9+88wr/lGzJpx3PMB8GA1UdIwQY MBaAFLVXzNQ6/oFuSVMii/FKddwpAUuNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUt NmJjNzU1NzhiNGMzLzEvQkxhTnpKbDZIU1pEMzd6ekN2LVViTW1uSGM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUtNmJjNzU1NzhiNGMz LzEvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQALZQzAwQA LZglAwQALZrtAwQAudDTAwQAuehVAwQAwTkJAwQAwzyxAwQAw1jSAwQC1blcMA0G CSqGSIb3DQEBCwUAA4IBAQAeuLBnPxLemb8YW/gc0MHI/46iQf9ATexKSK+EMfoJ uNZiEiUX3EPyxc7+Z1/U08zrTQ+jRU/KOmDwY0poFyltelCLbNq62xDA1Qyw2m2J oVbpAzM3/iYtYhCTkA8qiypbY6O08OWCb0LYbwSaVbXDZjaFvX42+NfXy1yE80+8 H8TrIxiLof+e70bWVbf/RAL47GqImyHUKWK3cErtf1+3Vkk+Z0ZbvAg1whLpBSQ7 faw0F/2r8sbo5dmUZASYFzXtJQBbYwPyAZzKVIT5V66u0etpbEmJdQy2JmEXLDt3 WPJWVttgGt7QDQAKpBSl7bBWzYf8q10n8JdlLrgr3iJd -----END CERTIFICATE-----Generated at Sat Dec 6 16:52:21 2025 by rpki-client