This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/BlQ7QLfD5x6iutqgeo_eVzPaVtk.roa File: BlQ7QLfD5x6iutqgeo_eVzPaVtk.roa (raw, json) Hash identifier: a6swOT7R/RX0SYVC7Z4btelSh4NSQ/SQytt7lytGyYw= Subject key identifier: 06:54:3B:40:B7:C3:E7:1E:A2:BA:DA:A0:7A:8F:DE:57:33:DA:56:D9 Certificate issuer: /CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823 Certificate serial: 019B7D5B47728089C2BD0395871769B2A273 Authority key identifier: 62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/BlQ7QLfD5x6iutqgeo_eVzPaVtk.roa Signing time: Fri 02 Jan 2026 06:18:12 +0000 ROA not before: Fri 02 Jan 2026 06:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12844 IP address blocks: 158.173.26.0/23 maxlen: 24 158.173.28.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 20:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:47:72:80:89:c2:bd:03:95:87:17:69:b2:a2:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823 Validity Not Before: Jan 2 06:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=06543b40b7c3e71ea2badaa07a8fde5733da56d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:8a:74:3f:40:9f:2d:cf:19:13:e9:4e:bf:9c: 06:55:5d:b2:5e:f5:bd:40:3c:38:15:3f:85:9e:1a: 7b:77:60:5d:d2:a9:20:96:b3:54:4e:3b:e3:13:74: d8:0a:d8:9e:14:04:b3:bb:2c:71:a4:ee:5d:a5:19: 0f:e7:7b:32:df:a0:af:4c:4d:76:e7:14:1e:f3:79: 44:00:0c:2c:1f:d1:13:f1:62:0d:1a:60:02:6a:82: 9c:f7:df:91:b5:b7:9f:17:ec:30:6d:0a:ed:2b:86: 68:cc:13:56:43:98:26:d3:b6:76:b8:72:f4:87:7a: 08:c9:ca:7a:19:2d:ab:56:32:2c:8d:97:16:bc:94: 79:fc:1f:a1:76:92:a8:4e:09:a5:06:0e:a3:a6:e7: d5:82:d7:63:6b:e9:62:5a:4c:e5:c1:98:d2:a8:31: cd:40:b6:67:ca:96:17:9a:b1:64:fc:33:b0:33:c0: df:1c:ca:69:47:19:20:b1:c1:66:e8:ef:cb:13:3a: 2d:8e:9d:6c:16:6d:54:ae:da:95:63:ee:17:20:8b: 36:b6:34:65:be:a4:4f:84:39:3d:0c:d2:0b:28:01: 4f:66:4e:80:a3:8d:a7:34:f6:f0:3d:56:f2:88:0f: 91:7c:26:06:e2:3e:78:a3:00:46:7c:21:db:a0:d9: 24:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:54:3B:40:B7:C3:E7:1E:A2:BA:DA:A0:7A:8F:DE:57:33:DA:56:D9 X509v3 Authority Key Identifier: keyid:62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/BlQ7QLfD5x6iutqgeo_eVzPaVtk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.173.26.0-158.173.31.255 Signature Algorithm: sha256WithRSAEncryption 39:30:7b:54:a1:b0:52:54:8b:6c:b4:6e:0a:19:5b:b3:45:ea: 84:ce:46:65:f4:f1:01:79:09:66:7a:b6:9b:69:3f:1b:60:6a: 73:61:7b:67:ff:61:bf:57:9e:99:60:64:7a:f5:f5:9a:71:78: 22:52:1a:7c:29:88:92:c0:e6:da:a7:30:5b:92:92:71:45:de: 8f:ae:74:2f:de:42:fc:b2:1d:64:dc:72:54:6d:de:63:ae:2d: 4e:32:39:58:c2:58:e9:20:78:9f:a0:b2:63:5f:1e:0e:8c:7d: 8f:d8:fa:16:83:31:f8:7d:63:df:00:ee:1c:72:5d:a3:e1:4f: 0a:13:dd:1b:cb:5a:d3:cf:0d:b5:b5:2c:62:a7:5a:7b:cb:1b: 02:48:19:63:f9:76:e3:e7:6d:5f:3f:02:29:16:5d:1a:f9:4f: 32:4c:41:24:2f:1f:bc:1b:e0:c9:bc:f1:8c:55:d4:2b:ac:12: 32:51:79:4a:e4:d8:8c:59:d8:3e:6e:8e:5b:f4:f0:bb:19:82: 11:4d:2e:b2:3e:c9:e8:de:04:1c:e3:d0:4f:5b:d9:f5:23:4d: 46:79:b6:0f:f2:5f:57:dc:25:bf:55:5c:de:68:08:48:27:bc: 12:c9:ed:2a:78:85:04:be:3d:8d:73:96:95:40:b4:15:86:33: cf:fb:70:ad -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt9W0dygInCvQOVhxdpsqJzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyNmEyOGI3YzYzZWY2YWIyMTRhNTJjZmE3YzNlNzhkYjlh NDA4MjMwHhcNMjYwMTAyMDYxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNjU0M2I0MGI3YzNlNzFlYTJiYWRhYTA3YThmZGU1NzMzZGE1NmQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4p0P0CfLc8ZE+lOv5wGVV2yXvW9 QDw4FT+Fnhp7d2Bd0qkglrNUTjvjE3TYCtieFASzuyxxpO5dpRkP53sy36CvTE12 5xQe83lEAAwsH9ET8WINGmACaoKc99+RtbefF+wwbQrtK4ZozBNWQ5gm07Z2uHL0 h3oIycp6GS2rVjIsjZcWvJR5/B+hdpKoTgmlBg6jpufVgtdja+liWkzlwZjSqDHN QLZnypYXmrFk/DOwM8DfHMppRxkgscFm6O/LEzotjp1sFm1UrtqVY+4XIIs2tjRl vqRPhDk9DNILKAFPZk6Ao42nNPbwPVbyiA+RfCYG4j54owBGfCHboNkk0wIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFAZUO0C3w+ceorraoHqP3lcz2lbZMB8GA1UdIwQY MBaAFGJqKLfGPvarIUpSz6fD5425pAgjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWW1vb3Q4WS05cXNoU2xMUHA4UG5qYm1rQ0NNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8zYzA3ODUtYjI3My00MDcyLWE2MzUt ZDJjZDI2YjY5ZGYxLzEvQmxRN1FMZkQ1eDZpdXRxZ2VvX2VWelBhVnRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS8zYzA3ODUtYjI3My00MDcyLWE2MzUtZDJjZDI2YjY5ZGYx LzEvWW1vb3Q4WS05cXNoU2xMUHA4UG5qYm1rQ0NNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAGerRoD BAWerQAwDQYJKoZIhvcNAQELBQADggEBADkwe1ShsFJUi2y0bgoZW7NF6oTORmX0 8QF5CWZ6tptpPxtganNhe2f/Yb9XnplgZHr19ZpxeCJSGnwpiJLA5tqnMFuSknFF 3o+udC/eQvyyHWTcclRt3mOuLU4yOVjCWOkgeJ+gsmNfHg6MfY/Y+haDMfh9Y98A 7hxyXaPhTwoT3RvLWtPPDbW1LGKnWnvLGwJIGWP5duPnbV8/AikWXRr5TzJMQSQv H7wb4Mm88YxV1CusEjJReUrk2IxZ2D5ujlv08LsZghFNLrI+yejeBBzj0E9b2fUj TUZ5tg/yX1fcJb9VXN5oCEgnvBLJ7Sp4hQS+PY1zlpVAtBWGM8/7cK0= -----END CERTIFICATE-----Generated at Sun Jan 25 07:17:52 2026 by rpki-client