This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/blJ-TZh-82zY8BmhlGXDYcWlXEM.roa File: blJ-TZh-82zY8BmhlGXDYcWlXEM.roa (raw, json) Hash identifier: Fd7qkgfgnAB5yGlcwTOLNMtcHfXu1EK11nyoGzaI4T8= Subject key identifier: 6E:52:7E:4D:98:7E:F3:6C:D8:F0:19:A1:94:65:C3:61:C5:A5:5C:43 Certificate issuer: /CN=843d1afcf13bd2117d47df683e40a63287004cfe Certificate serial: 019B7EA64FA7DA61F4DF925DED49F89A8551 Authority key identifier: 84:3D:1A:FC:F1:3B:D2:11:7D:47:DF:68:3E:40:A6:32:87:00:4C:FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hD0a_PE70hF9R99oPkCmMocATP4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/blJ-TZh-82zY8BmhlGXDYcWlXEM.roa Signing time: Fri 02 Jan 2026 12:19:47 +0000 ROA not before: Fri 02 Jan 2026 12:19:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43004 IP address blocks: 45.142.84.0/24 maxlen: 24 45.142.84.1/32 maxlen: 32 45.142.84.2/32 maxlen: 32 45.142.84.3/32 maxlen: 32 45.142.84.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.crl rsync://rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.mft rsync://rpki.ripe.net/repository/DEFAULT/hD0a_PE70hF9R99oPkCmMocATP4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:4f:a7:da:61:f4:df:92:5d:ed:49:f8:9a:85:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=843d1afcf13bd2117d47df683e40a63287004cfe Validity Not Before: Jan 2 12:19:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6e527e4d987ef36cd8f019a19465c361c5a55c43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:fb:0e:96:b9:b7:9a:89:46:d9:ce:2c:8c:07: 64:aa:cc:7f:d8:18:18:21:a6:e6:1b:36:f0:b3:e9: 2e:9c:0f:41:25:68:11:fa:8d:e6:e5:1f:83:3e:40: 73:69:ca:1d:a7:8c:d6:48:bf:97:93:75:8e:69:e1: ea:ff:eb:06:2a:08:22:e5:50:ae:fb:be:ec:9b:07: 69:de:cd:b9:81:54:b2:04:97:b8:1e:b9:f5:34:71: 6c:bb:4c:ec:5b:ac:bc:6d:14:9b:a2:20:d5:2a:13: 89:75:e5:56:71:aa:7b:3a:52:3d:86:28:2e:49:42: 33:d0:0f:44:ec:59:ed:26:e3:14:db:f4:1f:d3:92: 93:05:ac:28:81:99:29:30:5a:86:15:b4:be:46:be: e4:19:41:d6:d1:8b:e9:2a:5d:27:5a:22:70:49:51: 12:b8:af:de:f5:e2:7c:0a:f5:53:3b:ce:fd:24:b9: 24:29:cd:12:1c:9f:d8:f8:88:25:6c:a1:02:d6:be: 4e:5a:02:4e:b9:ea:22:db:46:06:59:a4:3f:02:a1: 6b:6a:07:0e:4b:29:dc:fe:6a:56:54:b0:ec:cb:7a: 80:86:00:6e:47:8a:42:5e:5c:4a:f9:72:c8:fb:4a: 7e:c6:ae:9c:25:99:a0:f2:38:53:b6:05:3b:c7:bb: 0f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:52:7E:4D:98:7E:F3:6C:D8:F0:19:A1:94:65:C3:61:C5:A5:5C:43 X509v3 Authority Key Identifier: keyid:84:3D:1A:FC:F1:3B:D2:11:7D:47:DF:68:3E:40:A6:32:87:00:4C:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hD0a_PE70hF9R99oPkCmMocATP4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/blJ-TZh-82zY8BmhlGXDYcWlXEM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.142.84.0/24 Signature Algorithm: sha256WithRSAEncryption f3:5d:0a:d4:6d:23:b7:30:1f:9c:d8:5a:ec:96:6a:e5:65:51: 8c:41:57:e0:b8:ba:92:8e:65:84:a5:b7:a9:23:0c:33:41:62: 0c:2d:af:94:c4:57:24:ee:1c:1f:79:37:75:9c:3d:46:d9:30: d9:93:92:db:d7:16:d5:f6:13:59:ac:bb:22:9f:fa:17:3b:17: 23:2d:15:19:f8:e5:6c:5c:f3:28:2d:10:2f:25:62:52:4e:fe: 3d:6c:d6:98:27:6c:90:38:ca:04:5e:4c:9a:1e:fe:cf:cd:68: fc:04:42:d2:bf:ca:8a:fe:24:d4:06:a9:7e:69:35:88:2c:46: 04:73:27:9b:8f:65:63:8c:b8:1e:59:cd:80:66:d2:b1:b5:ec: 3f:ee:23:71:10:46:85:35:23:98:96:53:ec:44:4a:67:16:10: bd:32:b5:94:53:96:16:67:f3:90:21:f4:1b:5d:4d:74:1a:66: 7d:88:e5:39:77:54:fd:4d:ec:d8:30:d4:34:04:eb:15:74:1e: cd:eb:13:17:81:04:31:41:0b:e9:12:16:32:b9:2f:56:c8:d9: b1:e0:ad:7f:bf:ea:ae:9d:32:94:42:5f:f4:d5:b7:65:a5:8e: ef:33:9a:01:6d:cf:56:0a:98:52:3d:5f:e3:4e:fa:50:9b:d1: 2f:ca:98:e8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pk+n2mH035Jd7Un4moVRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0M2QxYWZjZjEzYmQyMTE3ZDQ3ZGY2ODNlNDBhNjMyODcw MDRjZmUwHhcNMjYwMTAyMTIxOTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZTUyN2U0ZDk4N2VmMzZjZDhmMDE5YTE5NDY1YzM2MWM1YTU1YzQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfsOlrm3molG2c4sjAdkqsx/2BgY IabmGzbws+kunA9BJWgR+o3m5R+DPkBzacodp4zWSL+Xk3WOaeHq/+sGKggi5VCu +77smwdp3s25gVSyBJe4Hrn1NHFsu0zsW6y8bRSboiDVKhOJdeVWcap7OlI9higu SUIz0A9E7FntJuMU2/Qf05KTBawogZkpMFqGFbS+Rr7kGUHW0YvpKl0nWiJwSVES uK/e9eJ8CvVTO879JLkkKc0SHJ/Y+IglbKEC1r5OWgJOueoi20YGWaQ/AqFragcO Sync/mpWVLDsy3qAhgBuR4pCXlxK+XLI+0p+xq6cJZmg8jhTtgU7x7sPVwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG5Sfk2YfvNs2PAZoZRlw2HFpVxDMB8GA1UdIwQY MBaAFIQ9GvzxO9IRfUffaD5ApjKHAEz+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEQwYV9QRTcwaEY5Ujk5b1BrQ21Nb2NBVFA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS8xNzMzMDYtMmRiZC00YWQ4LWJkNTEt YjFmM2JjYzY3YWFlLzEvYmxKLVRaaC04MnpZOEJtaGxHWERZY1dsWEVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS8xNzMzMDYtMmRiZC00YWQ4LWJkNTEtYjFmM2JjYzY3YWFl LzEvaEQwYV9QRTcwaEY5Ujk5b1BrQ21Nb2NBVFA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALY5UMA0G CSqGSIb3DQEBCwUAA4IBAQDzXQrUbSO3MB+c2FrslmrlZVGMQVfguLqSjmWEpbep IwwzQWIMLa+UxFck7hwfeTd1nD1G2TDZk5Lb1xbV9hNZrLsin/oXOxcjLRUZ+OVs XPMoLRAvJWJSTv49bNaYJ2yQOMoEXkyaHv7PzWj8BELSv8qK/iTUBql+aTWILEYE cyebj2VjjLgeWc2AZtKxtew/7iNxEEaFNSOYllPsREpnFhC9MrWUU5YWZ/OQIfQb XU10GmZ9iOU5d1T9TezYMNQ0BOsVdB7N6xMXgQQxQQvpEhYyuS9WyNmx4K1/v+qu nTKUQl/01bdlpY7vM5oBbc9WCphSPV/jTvpQm9Evypjo -----END CERTIFICATE-----Generated at Mon Jan 26 06:20:10 2026 by rpki-client