This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/BlrqBtWblMfctvze6Z4e1h26Vg0.roa File: BlrqBtWblMfctvze6Z4e1h26Vg0.roa (raw, json) Hash identifier: mrpfN/u4KNrOk9l0nXYVVF7vi+rRmvUj9lVXmfONvc8= Subject key identifier: 06:5A:EA:06:D5:9B:94:C7:DC:B6:FC:DE:E9:9E:1E:D6:1D:BA:56:0D Certificate issuer: /CN=99fee7cbd8e78d1f14a453a04b916f7c1581d204 Certificate serial: 019B7C129C420C1E03454A724824284F2B9C Authority key identifier: 99:FE:E7:CB:D8:E7:8D:1F:14:A4:53:A0:4B:91:6F:7C:15:81:D2:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/BlrqBtWblMfctvze6Z4e1h26Vg0.roa Signing time: Fri 02 Jan 2026 00:19:12 +0000 ROA not before: Fri 02 Jan 2026 00:19:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213669 IP address blocks: 2a0e:3247:8001::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.crl rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:9c:42:0c:1e:03:45:4a:72:48:24:28:4f:2b:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99fee7cbd8e78d1f14a453a04b916f7c1581d204 Validity Not Before: Jan 2 00:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=065aea06d59b94c7dcb6fcdee99e1ed61dba560d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ed:63:2f:55:34:c0:13:f9:6b:85:b1:ae:8f: a3:8f:fe:3e:b8:e9:99:52:1d:8b:06:52:7a:15:de: 16:cf:e5:af:39:c8:f9:b9:05:4d:af:19:be:d3:90: b4:90:fc:6a:a2:49:2f:b4:ea:f7:54:83:ff:4c:cc: 20:21:bb:d3:ad:70:8d:51:68:0d:36:b0:c9:f1:e1: 5e:e7:77:d6:11:a2:79:00:a6:c5:58:6a:1d:96:2e: 87:91:e0:76:60:aa:b3:d4:41:84:a3:c5:ce:ef:0f: ef:46:48:63:4d:ae:10:73:5f:be:0c:64:a6:35:48: c9:43:b6:12:9d:41:9b:0c:fe:5c:7f:5b:f0:3d:3b: 6a:ba:a2:6b:87:a5:47:3d:7a:a2:6c:1a:6e:10:65: de:34:90:0a:5d:3b:e3:05:e7:cd:f2:43:81:70:bf: 47:62:60:84:d0:60:7e:86:c7:19:e8:7b:30:71:44: 66:c8:01:9d:3e:86:17:b5:36:7a:70:66:96:4a:da: 07:36:6d:1b:7e:f1:de:a3:65:94:24:64:db:d0:09: 76:b8:c9:87:c8:b0:8f:92:c9:99:07:79:47:57:3f: 01:a3:ea:52:90:02:62:86:5c:14:55:4d:9f:9d:e3: 23:21:c5:ba:29:28:a1:8c:a9:30:dd:11:ef:dd:34: fb:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:5A:EA:06:D5:9B:94:C7:DC:B6:FC:DE:E9:9E:1E:D6:1D:BA:56:0D X509v3 Authority Key Identifier: keyid:99:FE:E7:CB:D8:E7:8D:1F:14:A4:53:A0:4B:91:6F:7C:15:81:D2:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/BlrqBtWblMfctvze6Z4e1h26Vg0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:3247:8001::/48 Signature Algorithm: sha256WithRSAEncryption 77:3d:74:16:f1:2c:d0:13:84:b8:7e:8d:d9:d8:fc:94:0f:c3: 17:2f:27:53:51:08:81:1b:5a:15:39:10:f4:a5:1e:ec:aa:49: 6a:61:06:ee:81:5d:b2:eb:df:29:b3:1c:22:c1:f3:85:db:5c: 7d:27:3e:bf:86:fb:47:8f:e8:91:33:15:f5:3a:8a:2c:ff:6b: 08:19:c3:c7:61:fd:e1:0c:27:8a:7d:45:32:15:db:38:c3:cd: 61:42:f7:81:88:f2:85:d5:74:2d:f2:49:d4:a2:3b:c1:fe:76: b6:89:58:4a:d9:83:06:be:ad:29:dd:1d:b2:1c:cf:c5:de:70: 8a:d7:98:7a:47:58:77:d8:7e:52:24:5d:70:8f:8c:0c:c7:05: ad:a9:57:65:62:e9:b1:b6:b9:4d:ba:ba:a7:eb:65:4d:4c:7e: f9:3b:8e:fb:d8:1e:9f:38:e0:0d:9d:61:91:45:b2:d2:65:8f: 52:1c:75:d2:14:0a:70:d8:e0:66:85:7b:d5:dc:bb:ac:d6:2f: 54:b6:f3:2c:cd:d0:e0:0c:ca:3d:f0:0a:1e:98:dc:c9:b9:55: 54:2a:7c:e8:6b:57:78:46:16:1d:5c:bc:d7:0e:47:59:a9:7d: 22:a9:e4:61:fd:3c:b4:18:0c:c7:f1:73:8a:a2:b0:e0:9e:d8: 82:37:b2:34 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt8EpxCDB4DRUpySCQoTyucMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5ZmVlN2NiZDhlNzhkMWYxNGE0NTNhMDRiOTE2ZjdjMTU4 MWQyMDQwHhcNMjYwMTAyMDAxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNjVhZWEwNmQ1OWI5NGM3ZGNiNmZjZGVlOTllMWVkNjFkYmE1NjBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuu1jL1U0wBP5a4Wxro+jj/4+uOmZ Uh2LBlJ6Fd4Wz+WvOcj5uQVNrxm+05C0kPxqokkvtOr3VIP/TMwgIbvTrXCNUWgN NrDJ8eFe53fWEaJ5AKbFWGodli6HkeB2YKqz1EGEo8XO7w/vRkhjTa4Qc1++DGSm NUjJQ7YSnUGbDP5cf1vwPTtquqJrh6VHPXqibBpuEGXeNJAKXTvjBefN8kOBcL9H YmCE0GB+hscZ6HswcURmyAGdPoYXtTZ6cGaWStoHNm0bfvHeo2WUJGTb0Al2uMmH yLCPksmZB3lHVz8Bo+pSkAJihlwUVU2fneMjIcW6KSihjKkw3RHv3TT7rwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFAZa6gbVm5TH3Lb83umeHtYdulYNMB8GA1UdIwQY MBaAFJn+58vY540fFKRToEuRb3wVgdIEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWY3bnk5am5qUjhVcEZPZ1M1RnZmQldCMGdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8wZGQ0Y2ItMWY3Mi00MGVkLWE2NTct MWMyMmVmZjcyODE4LzEvQmxycUJ0V2JsTWZjdHZ6ZTZaNGUxaDI2VmcwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8wZGQ0Y2ItMWY3Mi00MGVkLWE2NTctMWMyMmVmZjcyODE4 LzEvbWY3bnk5am5qUjhVcEZPZ1M1RnZmQldCMGdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg4yR4AB MA0GCSqGSIb3DQEBCwUAA4IBAQB3PXQW8SzQE4S4fo3Z2PyUD8MXLydTUQiBG1oV ORD0pR7sqklqYQbugV2y698psxwiwfOF21x9Jz6/hvtHj+iRMxX1Ooos/2sIGcPH Yf3hDCeKfUUyFds4w81hQveBiPKF1XQt8knUojvB/na2iVhK2YMGvq0p3R2yHM/F 3nCK15h6R1h32H5SJF1wj4wMxwWtqVdlYumxtrlNurqn62VNTH75O4772B6fOOAN nWGRRbLSZY9SHHXSFApw2OBmhXvV3Lus1i9UtvMszdDgDMo98AoemNzJuVVUKnzo a1d4RhYdXLzXDkdZqX0iqeRh/Ty0GAzH8XOKorDgntiCN7I0 -----END CERTIFICATE-----Generated at Sun Jan 25 23:42:53 2026 by rpki-client