This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/Bl5slAIXRPgWtIinsLCmL3-jbzk.roa File: Bl5slAIXRPgWtIinsLCmL3-jbzk.roa (raw, json) Hash identifier: i6BHS+hInLwE4GPTdlCdthLjEksUt9oFXu6hrkt0YCc= Subject key identifier: 06:5E:6C:94:02:17:44:F8:16:B4:88:A7:B0:B0:A6:2F:7F:A3:6F:39 Certificate issuer: /CN=1a4f8001c30cac546e3f92103b4b12732dfcbf52 Certificate serial: 019B77C6FF067F3405589B0F68D022505AED Authority key identifier: 1A:4F:80:01:C3:0C:AC:54:6E:3F:92:10:3B:4B:12:73:2D:FC:BF:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk-AAcMMrFRuP5IQO0sScy38v1I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/Bl5slAIXRPgWtIinsLCmL3-jbzk.roa Signing time: Thu 01 Jan 2026 04:18:08 +0000 ROA not before: Thu 01 Jan 2026 04:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34476 IP address blocks: 195.49.238.0/24 maxlen: 24 195.49.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/Gk-AAcMMrFRuP5IQO0sScy38v1I.crl rsync://rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/Gk-AAcMMrFRuP5IQO0sScy38v1I.mft rsync://rpki.ripe.net/repository/DEFAULT/Gk-AAcMMrFRuP5IQO0sScy38v1I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:ff:06:7f:34:05:58:9b:0f:68:d0:22:50:5a:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a4f8001c30cac546e3f92103b4b12732dfcbf52 Validity Not Before: Jan 1 04:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=065e6c94021744f816b488a7b0b0a62f7fa36f39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:52:13:0c:1b:0a:f3:1b:e9:7a:4e:b8:9f:2d: 58:d7:2c:e7:8c:16:f8:36:64:5d:3f:c2:b3:d4:b8: a1:69:64:f7:f4:be:c2:17:8c:36:9e:74:1e:6a:01: 7b:32:7b:16:64:8e:77:99:79:d1:ba:7e:fd:93:40: 93:2f:d8:c5:03:da:c7:fb:1a:65:f4:6b:24:ed:ac: 2f:56:63:04:cc:7d:06:3f:b6:bc:99:81:03:2e:2b: 22:46:9f:a6:83:b8:a5:2c:f0:34:4e:02:96:84:13: 09:20:25:bf:46:f3:0e:67:0d:aa:fd:3a:c5:38:7f: fb:5c:cd:c1:72:b2:b5:50:f3:7d:e9:ec:37:7d:22: bd:86:fa:b7:63:24:03:38:cc:f7:0b:a4:a8:24:a5: 4c:3d:d6:35:c4:0f:d6:9c:bf:c9:51:70:e8:8b:c6: af:fc:50:0e:8d:01:22:f7:10:86:f4:d5:52:cc:b3: 96:7e:37:9a:90:50:83:52:2e:5e:36:00:e5:0d:1f: 12:e0:a6:0e:3e:1c:5a:cb:f8:55:6a:57:31:69:dc: e2:3b:81:94:db:23:38:75:13:98:92:57:45:b9:27: 8e:d6:23:04:fc:e9:d9:a2:44:49:b3:b4:09:a9:d0: 3f:4a:f2:be:a5:2f:35:a4:a0:96:c1:3b:0c:6e:61: a0:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:5E:6C:94:02:17:44:F8:16:B4:88:A7:B0:B0:A6:2F:7F:A3:6F:39 X509v3 Authority Key Identifier: keyid:1A:4F:80:01:C3:0C:AC:54:6E:3F:92:10:3B:4B:12:73:2D:FC:BF:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk-AAcMMrFRuP5IQO0sScy38v1I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/Bl5slAIXRPgWtIinsLCmL3-jbzk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/Gk-AAcMMrFRuP5IQO0sScy38v1I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.49.238.0/23 Signature Algorithm: sha256WithRSAEncryption 35:5e:4f:b3:bf:11:34:d1:08:45:d8:9a:9d:47:2b:82:e5:ed: 03:3f:cc:02:1a:be:00:51:33:90:a7:78:26:a4:dc:ad:e4:c1: 71:d5:24:33:a5:47:da:4e:f5:75:22:50:aa:ea:d6:82:e8:88: f1:a7:d2:67:5b:8c:e2:cb:56:2f:55:71:eb:5f:94:e0:b7:c7: c1:0b:3a:33:d1:8e:87:ed:fc:49:d4:23:bc:e6:b3:49:64:2d: 01:55:6e:8e:10:a7:23:63:0e:d1:0b:48:12:2f:98:a1:9f:b5: 55:08:c5:46:2b:2a:42:d7:66:02:fc:2c:1c:59:0f:b8:81:87: 67:e3:45:59:b0:d4:a0:55:6f:8f:e6:67:5c:d4:92:a7:96:2c: 4d:6e:6f:01:16:63:b3:bf:cd:31:9a:e8:9a:37:b9:1c:17:2d: ce:8d:dc:3f:5a:c8:27:e9:a6:43:8b:da:81:ad:d5:1b:ed:15: 35:54:84:6b:16:81:d0:84:b3:c8:cf:43:15:f4:ca:3d:dc:d6: 8b:c7:4c:f5:9b:4c:cc:9c:a6:9f:d9:1f:14:d0:b7:5d:50:c7: 88:8c:7a:df:7b:5d:10:50:6a:26:25:fe:b2:35:73:e5:e9:cf: 9a:35:ca:bb:11:8d:ab:8f:37:01:d6:93:34:03:7f:5b:3f:f0: cf:cb:ca:0d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xv8GfzQFWJsPaNAiUFrtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhNGY4MDAxYzMwY2FjNTQ2ZTNmOTIxMDNiNGIxMjczMmRm Y2JmNTIwHhcNMjYwMTAxMDQxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNjVlNmM5NDAyMTc0NGY4MTZiNDg4YTdiMGIwYTYyZjdmYTM2ZjM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVITDBsK8xvpek64ny1Y1yznjBb4 NmRdP8Kz1LihaWT39L7CF4w2nnQeagF7MnsWZI53mXnRun79k0CTL9jFA9rH+xpl 9Gsk7awvVmMEzH0GP7a8mYEDLisiRp+mg7ilLPA0TgKWhBMJICW/RvMOZw2q/TrF OH/7XM3BcrK1UPN96ew3fSK9hvq3YyQDOMz3C6SoJKVMPdY1xA/WnL/JUXDoi8av /FAOjQEi9xCG9NVSzLOWfjeakFCDUi5eNgDlDR8S4KYOPhxay/hValcxadziO4GU 2yM4dROYkldFuSeO1iME/OnZokRJs7QJqdA/SvK+pS81pKCWwTsMbmGgeQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAZebJQCF0T4FrSIp7Cwpi9/o285MB8GA1UdIwQY MBaAFBpPgAHDDKxUbj+SEDtLEnMt/L9SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2stQUFjTU1yRlJ1UDVJUU8wc1NjeTM4djFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9kNmM4NmQtNmM2NS00YTI1LWE4ZmEt MzhkNGYzMjExODk2LzEvQmw1c2xBSVhSUGdXdElpbnNMQ21MMy1qYnprLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9kNmM4NmQtNmM2NS00YTI1LWE4ZmEtMzhkNGYzMjExODk2 LzEvR2stQUFjTU1yRlJ1UDVJUU8wc1NjeTM4djFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwzHuMA0G CSqGSIb3DQEBCwUAA4IBAQA1Xk+zvxE00QhF2JqdRyuC5e0DP8wCGr4AUTOQp3gm pNyt5MFx1SQzpUfaTvV1IlCq6taC6Ijxp9JnW4ziy1YvVXHrX5Tgt8fBCzoz0Y6H 7fxJ1CO85rNJZC0BVW6OEKcjYw7RC0gSL5ihn7VVCMVGKypC12YC/CwcWQ+4gYdn 40VZsNSgVW+P5mdc1JKnlixNbm8BFmOzv80xmuiaN7kcFy3Ojdw/Wsgn6aZDi9qB rdUb7RU1VIRrFoHQhLPIz0MV9Mo93NaLx0z1m0zMnKaf2R8U0LddUMeIjHrfe10Q UGomJf6yNXPl6c+aNcq7EY2rjzcB1pM0A39bP/DPy8oN -----END CERTIFICATE-----Generated at Sun Jan 25 19:36:48 2026 by rpki-client