This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/BltIltrPNtOVsknySdgzZNaUN_4.roa File: BltIltrPNtOVsknySdgzZNaUN_4.roa (raw, json) Hash identifier: WMYNT5I2vgtrILz6VHDUB+xIT43rEaNfRX33jCnS1HU= Subject key identifier: 06:5B:48:96:DA:CF:36:D3:95:B2:49:F2:49:D8:33:64:D6:94:37:FE Certificate issuer: /CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69 Certificate serial: 019AC6CCE5CACEE7F42AFAFF49A4D2F92562 Authority key identifier: 1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/BltIltrPNtOVsknySdgzZNaUN_4.roa Signing time: Thu 27 Nov 2025 19:31:48 +0000 ROA not before: Thu 27 Nov 2025 19:31:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 213541 IP address blocks: 45.88.100.0/24 maxlen: 24 45.95.129.0/24 maxlen: 24 185.238.88.0/24 maxlen: 24 185.238.91.0/24 maxlen: 24 185.253.24.0/24 maxlen: 24 194.113.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c6:cc:e5:ca:ce:e7:f4:2a:fa:ff:49:a4:d2:f9:25:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69 Validity Not Before: Nov 27 19:31:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=065b4896dacf36d395b249f249d83364d69437fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:39:55:cf:5b:08:70:6c:95:a7:f8:4e:53:34: 3e:03:63:68:64:d1:9a:25:41:bf:e3:36:da:3d:3a: b9:c0:7f:61:f6:ad:39:3e:46:d2:0e:91:ea:84:8c: 65:29:ee:82:e5:a4:0c:12:ff:a8:12:2d:9d:9c:af: de:27:a0:01:34:31:46:cd:87:49:67:74:0c:9b:68: 6d:1b:9b:e9:d8:f6:a8:b0:00:f3:c6:d0:e9:86:42: e6:45:30:d5:b2:ee:af:54:b5:8f:53:38:bb:c1:c1: d6:62:fc:eb:22:12:90:bc:0c:f8:65:ce:f4:a7:cf: d8:8f:3e:78:83:ba:4f:9e:72:2e:2e:4f:eb:3b:57: 38:ef:eb:a9:66:1f:98:5e:fb:2c:06:8a:4f:7c:f4: 13:44:24:0f:22:73:33:26:32:15:eb:eb:6b:2e:38: b4:78:14:40:99:b5:72:05:ae:6b:a5:0f:c3:98:60: 59:d3:28:de:c1:60:bd:bc:7c:5b:c4:e0:be:2a:79: 9a:87:a3:b3:f2:06:d0:81:61:d0:b4:17:89:83:1e: 11:00:33:ed:c9:cf:a2:dd:6f:ca:ff:87:21:da:f8: cc:77:c9:ff:97:bf:df:9c:27:66:a0:f4:41:1c:cf: 4a:42:6b:d7:e7:27:e9:41:42:f9:1c:51:5e:3f:03: f2:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:5B:48:96:DA:CF:36:D3:95:B2:49:F2:49:D8:33:64:D6:94:37:FE X509v3 Authority Key Identifier: keyid:1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/BltIltrPNtOVsknySdgzZNaUN_4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.88.100.0/24 45.95.129.0/24 185.238.88.0/24 185.238.91.0/24 185.253.24.0/24 194.113.238.0/24 Signature Algorithm: sha256WithRSAEncryption 18:a2:de:ad:b6:84:d0:36:cc:77:ab:bf:12:40:a0:c8:38:73: 41:5e:35:1d:b3:43:76:f7:65:7c:c0:57:ac:bf:e9:56:3b:db: 4b:a3:69:c1:2e:d6:0d:85:99:5a:23:1c:51:9b:61:15:ff:44: b7:64:42:aa:e8:d5:d0:8e:17:fa:30:f9:24:5b:16:c8:4b:8f: 62:80:77:c6:57:ce:0f:70:45:4f:ca:ff:53:92:0c:98:0c:04: e6:dd:0c:49:7b:d2:1d:e6:99:4c:ee:ee:f6:0e:42:7a:3c:85: 2f:8d:e5:df:7e:52:6f:79:e6:81:85:79:6e:c5:d0:5b:cd:44: 71:57:eb:0f:35:de:34:04:22:81:28:d7:18:3b:b7:0c:e0:7b: 25:2a:8a:69:55:e2:2c:57:07:c7:39:3f:17:df:77:4c:b5:d6: 79:ac:9f:76:2a:c2:d3:a6:2e:6d:e8:60:71:a9:af:89:9a:39: 0d:63:9a:59:24:af:27:8c:3f:93:81:94:89:96:05:a0:02:15: e6:b8:74:d6:5b:cc:6e:ec:ab:ee:5d:1b:c1:c0:84:22:9e:24: 05:94:49:15:cc:34:cc:2e:27:a5:5a:a1:39:e6:c2:a1:93:f8: c1:ef:92:aa:ce:db:21:5b:d7:66:13:d7:51:b7:28:72:95:5e: 3a:ec:61:2a -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZrGzOXKzuf0Kvr/SaTS+SViMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlOWZkYzdmYjM5ZWJiYmVkNGVlNTRmNzAzZDNhYzYxNTNk ZGVlNjkwHhcNMjUxMTI3MTkzMTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNjViNDg5NmRhY2YzNmQzOTViMjQ5ZjI0OWQ4MzM2NGQ2OTQzN2ZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDlVz1sIcGyVp/hOUzQ+A2NoZNGa JUG/4zbaPTq5wH9h9q05PkbSDpHqhIxlKe6C5aQMEv+oEi2dnK/eJ6ABNDFGzYdJ Z3QMm2htG5vp2PaosADzxtDphkLmRTDVsu6vVLWPUzi7wcHWYvzrIhKQvAz4Zc70 p8/Yjz54g7pPnnIuLk/rO1c47+upZh+YXvssBopPfPQTRCQPInMzJjIV6+trLji0 eBRAmbVyBa5rpQ/DmGBZ0yjewWC9vHxbxOC+Knmah6Oz8gbQgWHQtBeJgx4RADPt yc+i3W/K/4ch2vjMd8n/l7/fnCdmoPRBHM9KQmvX5yfpQUL5HFFePwPyBQIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFAZbSJbazzbTlbJJ8knYM2TWlDf+MB8GA1UdIwQY MBaAFB6f3H+znru+1O5U9wPTrGFT3e5pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHBfY2Y3T2V1NzdVN2xUM0E5T3NZVlBkN21rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS80MGZkZDEtMTA5Mi00ZjY5LWI2NDgt NjkxZmY1YjQ0YjAxLzEvQmx0SWx0clBOdE9Wc2tueVNkZ3paTmFVTl80LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS80MGZkZDEtMTA5Mi00ZjY5LWI2NDgtNjkxZmY1YjQ0YjAx LzEvSHBfY2Y3T2V1NzdVN2xUM0E5T3NZVlBkN21rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQALVhkAwQA LV+BAwQAue5YAwQAue5bAwQAuf0YAwQAwnHuMA0GCSqGSIb3DQEBCwUAA4IBAQAY ot6ttoTQNsx3q78SQKDIOHNBXjUds0N292V8wFesv+lWO9tLo2nBLtYNhZlaIxxR m2EV/0S3ZEKq6NXQjhf6MPkkWxbIS49igHfGV84PcEVPyv9TkgyYDATm3QxJe9Id 5plM7u72DkJ6PIUvjeXfflJveeaBhXluxdBbzURxV+sPNd40BCKBKNcYO7cM4Hsl KoppVeIsVwfHOT8X33dMtdZ5rJ92KsLTpi5t6GBxqa+JmjkNY5pZJK8njD+TgZSJ lgWgAhXmuHTWW8xu7KvuXRvBwIQiniQFlEkVzDTMLielWqE55sKhk/jB75Kqztsh W9dmE9dRtyhylV467GEq -----END CERTIFICATE-----Generated at Sat Dec 6 14:05:43 2025 by rpki-client