This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/d568ed-1780-4d60-a6f7-5a8360dea3a3/1/bLRsbjwrHl85CS_7pV5-UUKmgDU.roa File: bLRsbjwrHl85CS_7pV5-UUKmgDU.roa (raw, json) Hash identifier: wRWPjMaqEtjkWAV9xCnB4Aq9mP2pz2n/Qg6SuBrxsSE= Subject key identifier: 6C:B4:6C:6E:3C:2B:1E:5F:39:09:2F:FB:A5:5E:7E:51:42:A6:80:35 Certificate issuer: /CN=b1d2e681ff23dddf3d517858e1c64a1dad298729 Certificate serial: 019B79108E0BBC3406416A1A76DE8F0211BA Authority key identifier: B1:D2:E6:81:FF:23:DD:DF:3D:51:78:58:E1:C6:4A:1D:AD:29:87:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sdLmgf8j3d89UXhY4cZKHa0phyk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/d568ed-1780-4d60-a6f7-5a8360dea3a3/1/bLRsbjwrHl85CS_7pV5-UUKmgDU.roa Signing time: Thu 01 Jan 2026 10:18:06 +0000 ROA not before: Thu 01 Jan 2026 10:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31180 IP address blocks: 217.144.112.0/24 maxlen: 24 217.144.113.0/24 maxlen: 24 217.144.114.0/24 maxlen: 24 217.144.115.0/24 maxlen: 24 217.144.116.0/24 maxlen: 24 217.144.117.0/24 maxlen: 24 217.144.118.0/24 maxlen: 24 217.144.119.0/24 maxlen: 24 217.144.120.0/24 maxlen: 24 217.144.121.0/24 maxlen: 24 217.144.122.0/24 maxlen: 24 217.144.123.0/24 maxlen: 24 217.144.124.0/24 maxlen: 24 217.144.125.0/24 maxlen: 24 217.144.126.0/24 maxlen: 24 217.144.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/d568ed-1780-4d60-a6f7-5a8360dea3a3/1/sdLmgf8j3d89UXhY4cZKHa0phyk.crl rsync://rpki.ripe.net/repository/DEFAULT/33/d568ed-1780-4d60-a6f7-5a8360dea3a3/1/sdLmgf8j3d89UXhY4cZKHa0phyk.mft rsync://rpki.ripe.net/repository/DEFAULT/sdLmgf8j3d89UXhY4cZKHa0phyk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:8e:0b:bc:34:06:41:6a:1a:76:de:8f:02:11:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1d2e681ff23dddf3d517858e1c64a1dad298729 Validity Not Before: Jan 1 10:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6cb46c6e3c2b1e5f39092ffba55e7e5142a68035 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:b3:e3:f3:4f:52:c5:24:9d:77:e7:e6:07:7e: 82:26:a2:80:c3:05:6c:3e:d2:8d:81:da:3e:9d:62: c6:63:1b:36:e3:93:45:bd:9d:2c:d2:58:84:db:f6: 12:f7:c0:7e:15:d2:13:0d:7d:a1:c0:70:b3:47:cb: d7:c9:de:7f:4f:a9:85:0c:f5:c6:a2:0b:e4:3d:8a: 51:9a:0f:30:47:d7:b6:c4:db:bd:6c:fe:b1:e9:17: 54:a6:40:19:63:b8:f8:e3:6a:64:6c:61:6d:22:69: ba:a0:b2:93:20:40:4e:ae:7b:40:94:ec:20:f1:2c: e7:b3:d7:87:69:0c:f8:9d:df:1c:97:5e:d6:3d:43: 72:e1:24:bd:48:b0:14:44:ae:12:80:37:62:da:76: a6:ac:87:86:52:cf:7a:5d:25:a0:ef:ee:98:5f:b5: ff:5d:58:ab:6c:7a:a3:0c:6a:93:b7:2d:af:52:59: 41:8c:76:56:e0:31:45:d2:ae:50:ea:15:54:e4:69: 1a:a1:0b:c5:d0:6f:35:82:40:94:5b:49:59:a2:68: 51:b4:c2:6c:70:64:58:d3:c2:8a:18:1e:4e:9d:5a: 82:e2:af:03:a3:35:c5:e2:13:1c:4e:72:6f:92:a2: 1c:b7:94:1f:cc:89:34:23:35:28:af:f7:2f:9a:1b: d9:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:B4:6C:6E:3C:2B:1E:5F:39:09:2F:FB:A5:5E:7E:51:42:A6:80:35 X509v3 Authority Key Identifier: keyid:B1:D2:E6:81:FF:23:DD:DF:3D:51:78:58:E1:C6:4A:1D:AD:29:87:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sdLmgf8j3d89UXhY4cZKHa0phyk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d568ed-1780-4d60-a6f7-5a8360dea3a3/1/bLRsbjwrHl85CS_7pV5-UUKmgDU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d568ed-1780-4d60-a6f7-5a8360dea3a3/1/sdLmgf8j3d89UXhY4cZKHa0phyk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.144.112.0/20 Signature Algorithm: sha256WithRSAEncryption 5e:d2:c9:a8:e2:d2:39:5d:b7:6f:5a:81:6b:4c:2d:73:8c:37: 0b:59:26:62:5c:f4:b1:d6:3c:16:ed:57:e5:e9:99:4d:ba:7a: 62:8d:ce:dc:6c:7f:ab:11:96:f7:60:05:95:df:47:3d:e2:06: 35:5f:02:c3:f5:ee:5c:41:27:81:d8:9a:85:d2:ef:da:83:28: 50:36:82:fc:a4:fa:52:36:45:a1:23:73:c0:70:16:5e:3a:c5: bb:2d:32:7c:c1:9e:96:f1:2a:95:b9:02:fa:d0:f2:e8:a1:b1: 69:6d:65:e5:47:76:50:a9:06:62:f7:83:9c:84:01:43:f7:78: ed:c1:ce:1b:52:fa:f6:7a:ae:17:ce:55:97:5d:9d:51:fb:12: aa:09:00:c9:8d:fe:3e:08:46:99:f7:c1:16:62:97:2c:1f:d9: c8:c4:a0:ae:19:87:a9:d7:6a:c8:d1:03:b9:c7:4a:72:bf:48: 9d:9c:d1:b0:6d:74:ce:d0:da:68:b5:54:82:31:e8:11:73:14: e9:99:c2:68:38:2c:4d:5f:a0:7f:28:8a:53:91:8c:ee:a6:47: 5c:9f:65:34:ec:bf:3d:de:67:d2:93:ed:a6:47:00:e0:69:73: dd:4a:90:68:d4:d8:e0:f8:64:64:e5:70:58:6b:36:b4:37:6f: 12:26:c0:aa -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EI4LvDQGQWoadt6PAhG6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxZDJlNjgxZmYyM2RkZGYzZDUxNzg1OGUxYzY0YTFkYWQy OTg3MjkwHhcNMjYwMTAxMTAxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Y2I0NmM2ZTNjMmIxZTVmMzkwOTJmZmJhNTVlN2U1MTQyYTY4MDM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirPj809SxSSdd+fmB36CJqKAwwVs PtKNgdo+nWLGYxs245NFvZ0s0liE2/YS98B+FdITDX2hwHCzR8vXyd5/T6mFDPXG ogvkPYpRmg8wR9e2xNu9bP6x6RdUpkAZY7j442pkbGFtImm6oLKTIEBOrntAlOwg 8Szns9eHaQz4nd8cl17WPUNy4SS9SLAURK4SgDdi2namrIeGUs96XSWg7+6YX7X/ XVirbHqjDGqTty2vUllBjHZW4DFF0q5Q6hVU5GkaoQvF0G81gkCUW0lZomhRtMJs cGRY08KKGB5OnVqC4q8DozXF4hMcTnJvkqIct5QfzIk0IzUor/cvmhvZjQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGy0bG48Kx5fOQkv+6VeflFCpoA1MB8GA1UdIwQY MBaAFLHS5oH/I93fPVF4WOHGSh2tKYcpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2RMbWdmOGozZDg5VVhoWTRjWktIYTBwaHlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9kNTY4ZWQtMTc4MC00ZDYwLWE2Zjct NWE4MzYwZGVhM2EzLzEvYkxSc2Jqd3JIbDg1Q1NfN3BWNS1VVUttZ0RVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy9kNTY4ZWQtMTc4MC00ZDYwLWE2ZjctNWE4MzYwZGVhM2Ez LzEvc2RMbWdmOGozZDg5VVhoWTRjWktIYTBwaHlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2ZBwMA0G CSqGSIb3DQEBCwUAA4IBAQBe0smo4tI5XbdvWoFrTC1zjDcLWSZiXPSx1jwW7Vfl 6ZlNunpijc7cbH+rEZb3YAWV30c94gY1XwLD9e5cQSeB2JqF0u/agyhQNoL8pPpS NkWhI3PAcBZeOsW7LTJ8wZ6W8SqVuQL60PLoobFpbWXlR3ZQqQZi94OchAFD93jt wc4bUvr2eq4XzlWXXZ1R+xKqCQDJjf4+CEaZ98EWYpcsH9nIxKCuGYep12rI0QO5 x0pyv0idnNGwbXTO0NpotVSCMegRcxTpmcJoOCxNX6B/KIpTkYzupkdcn2U07L89 3mfSk+2mRwDgaXPdSpBo1Njg+GRk5XBYaza0N28SJsCq -----END CERTIFICATE-----Generated at Mon Jan 26 01:01:55 2026 by rpki-client