This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/bklYzzrT2LyqE_eolbd4uJqpn88.roa File: bklYzzrT2LyqE_eolbd4uJqpn88.roa (raw, json) Hash identifier: hL8JImvIqT8exdBOwwwQRZtRNMgq3QcD8ZDf3TXxPgc= Subject key identifier: 6E:49:58:CF:3A:D3:D8:BC:AA:13:F7:A8:95:B7:78:B8:9A:A9:9F:CF Certificate issuer: /CN=5cf56321eb7ea3ee45cded028668420e37fa2fac Certificate serial: 019B79ED55EF6586573703B9BFDF82FDD292 Authority key identifier: 5C:F5:63:21:EB:7E:A3:EE:45:CD:ED:02:86:68:42:0E:37:FA:2F:AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPVjIet-o-5Fze0ChmhCDjf6L6w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/bklYzzrT2LyqE_eolbd4uJqpn88.roa Signing time: Thu 01 Jan 2026 14:19:15 +0000 ROA not before: Thu 01 Jan 2026 14:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203526 IP address blocks: 194.76.122.0/23 maxlen: 24 2001:678:e28::/48 maxlen: 56 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.crl rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.mft rsync://rpki.ripe.net/repository/DEFAULT/XPVjIet-o-5Fze0ChmhCDjf6L6w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:55:ef:65:86:57:37:03:b9:bf:df:82:fd:d2:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cf56321eb7ea3ee45cded028668420e37fa2fac Validity Not Before: Jan 1 14:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6e4958cf3ad3d8bcaa13f7a895b778b89aa99fcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:89:fa:ab:c9:cb:db:66:73:6e:27:0e:89:f2: a7:12:30:a4:62:92:f4:3f:51:7a:8c:2b:3d:cd:a0: 1d:4a:78:a8:3f:ba:ee:ec:7b:75:31:f2:6c:0a:ee: 64:ee:16:ce:d6:8c:22:c1:26:2a:9b:01:fc:89:bb: 79:e9:29:63:f9:06:73:3b:6c:6f:1a:70:e0:72:4d: 5b:b7:52:0c:e8:d3:39:72:91:7a:90:be:74:43:07: 21:de:3f:a9:7f:18:5a:8e:c1:da:50:a5:cf:4d:9f: 34:83:a1:63:4b:6b:2d:90:50:e0:9f:3e:7b:4f:a6: 7f:f8:77:19:05:da:5f:8d:a2:fd:d6:f3:03:d3:85: c2:40:d7:9b:6e:04:08:b8:07:de:af:7b:3a:a9:c5: 35:a6:3d:35:21:45:ed:43:a8:fb:55:c8:35:8f:07: 02:1b:f0:df:20:da:d1:e8:2d:a5:16:d9:d0:b1:cb: d9:96:25:31:9e:75:cb:d4:45:40:2f:5b:99:a6:6c: 4a:ab:36:13:2b:d3:4c:a1:e9:8d:e1:75:39:20:77: fd:87:fc:24:f0:4e:f7:ad:63:b8:91:2d:62:69:d8: 1c:eb:a6:1d:39:6a:fa:c4:04:b9:c9:c6:76:bc:29: 1c:da:d0:0f:b7:06:b8:97:71:1a:48:9d:bb:3d:b8: 4d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:49:58:CF:3A:D3:D8:BC:AA:13:F7:A8:95:B7:78:B8:9A:A9:9F:CF X509v3 Authority Key Identifier: keyid:5C:F5:63:21:EB:7E:A3:EE:45:CD:ED:02:86:68:42:0E:37:FA:2F:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPVjIet-o-5Fze0ChmhCDjf6L6w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/bklYzzrT2LyqE_eolbd4uJqpn88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.76.122.0/23 IPv6: 2001:678:e28::/48 Signature Algorithm: sha256WithRSAEncryption 28:76:7f:3d:85:1e:a3:8e:85:cc:c4:b6:1a:75:29:bc:bd:16: 9a:4f:09:af:f1:d9:e4:f6:65:5f:93:7e:f3:53:4a:e9:b8:f6: e8:11:24:9f:f2:e1:21:d1:4a:30:8e:54:8e:d0:d4:11:d3:33: 70:e3:ec:02:4d:47:6f:71:f9:1a:73:d7:6e:a8:41:75:3e:b0: 4d:bd:10:f9:ca:b2:ad:cb:3a:88:a3:6c:fe:1c:2b:be:e6:f0: c2:6f:f1:6d:d5:1f:b2:81:9b:a2:79:69:f7:7f:0e:dd:4e:a8: 5f:00:04:81:db:69:f6:d2:a0:b6:c7:31:0b:ee:0f:f4:fe:4c: 20:39:4c:ff:ea:24:9d:56:20:93:99:08:ca:48:6d:4e:ed:e3: 25:40:d6:a7:f9:93:bd:81:ad:9e:54:11:b5:60:58:91:11:bd: 13:ec:c8:d6:0f:2f:3b:35:c1:30:0d:04:f8:39:39:d7:7b:97: e4:04:ca:6d:af:53:1a:ce:0e:2e:8f:19:3c:39:00:6f:34:15: 11:5a:22:00:6c:3f:7b:4f:9c:1c:cd:89:6f:0c:28:a3:6b:8c: 3a:f4:63:40:b3:30:e4:6e:c7:76:d4:53:cf:77:88:2c:de:83: 85:57:55:66:20:2c:21:12:95:a9:fd:86:ca:b9:7b:1c:f0:ca: 68:4a:4b:50 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt57VXvZYZXNwO5v9+C/dKSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjZjU2MzIxZWI3ZWEzZWU0NWNkZWQwMjg2Njg0MjBlMzdm YTJmYWMwHhcNMjYwMTAxMTQxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZTQ5NThjZjNhZDNkOGJjYWExM2Y3YTg5NWI3NzhiODlhYTk5ZmNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYn6q8nL22ZzbicOifKnEjCkYpL0 P1F6jCs9zaAdSnioP7ru7Ht1MfJsCu5k7hbO1owiwSYqmwH8ibt56Slj+QZzO2xv GnDgck1bt1IM6NM5cpF6kL50Qwch3j+pfxhajsHaUKXPTZ80g6FjS2stkFDgnz57 T6Z/+HcZBdpfjaL91vMD04XCQNebbgQIuAfer3s6qcU1pj01IUXtQ6j7Vcg1jwcC G/DfINrR6C2lFtnQscvZliUxnnXL1EVAL1uZpmxKqzYTK9NMoemN4XU5IHf9h/wk 8E73rWO4kS1iadgc66YdOWr6xAS5ycZ2vCkc2tAPtwa4l3EaSJ27PbhNfwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFG5JWM8609i8qhP3qJW3eLiaqZ/PMB8GA1UdIwQY MBaAFFz1YyHrfqPuRc3tAoZoQg43+i+sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFBWaklldC1vLTVGemUwQ2htaENEamY2TDZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9kZmE0YTgtMzhiMC00NjFiLWEwODIt ODQzZTI2MmRkOGRjLzEvYmtsWXp6clQyTHlxRV9lb2xiZDR1SnFwbjg4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9kZmE0YTgtMzhiMC00NjFiLWEwODItODQzZTI2MmRkOGRj LzEvWFBWaklldC1vLTVGemUwQ2htaENEamY2TDZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBwkx6MA8E AgACMAkDBwAgAQZ4DigwDQYJKoZIhvcNAQELBQADggEBACh2fz2FHqOOhczEthp1 Kby9FppPCa/x2eT2ZV+TfvNTSum49ugRJJ/y4SHRSjCOVI7Q1BHTM3Dj7AJNR29x +Rpz126oQXU+sE29EPnKsq3LOoijbP4cK77m8MJv8W3VH7KBm6J5afd/Dt1OqF8A BIHbafbSoLbHMQvuD/T+TCA5TP/qJJ1WIJOZCMpIbU7t4yVA1qf5k72BrZ5UEbVg WJERvRPsyNYPLzs1wTANBPg5Odd7l+QEym2vUxrODi6PGTw5AG80FRFaIgBsP3tP nBzNiW8MKKNrjDr0Y0CzMORux3bUU893iCzeg4VXVWYgLCESlan9hsq5exzwymhK S1A= -----END CERTIFICATE-----Generated at Mon Jan 26 02:44:02 2026 by rpki-client