This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/BHlTz3-_hk0tMzZp-IRVezg5RNg.roa File: BHlTz3-_hk0tMzZp-IRVezg5RNg.roa (raw, json) Hash identifier: 3CAUKuO6yLGGc6BqD8YXI8xLV+Hesf2PBsRTTbbaRXY= Subject key identifier: 04:79:53:CF:7F:BF:86:4D:2D:33:36:69:F8:84:55:7B:38:39:44:D8 Certificate issuer: /CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250 Certificate serial: 019B7A5B59569798A6108717259AF5478326 Authority key identifier: 5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/BHlTz3-_hk0tMzZp-IRVezg5RNg.roa Signing time: Thu 01 Jan 2026 16:19:25 +0000 ROA not before: Thu 01 Jan 2026 16:19:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8274 IP address blocks: 31.133.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:59:56:97:98:a6:10:87:17:25:9a:f5:47:83:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250 Validity Not Before: Jan 1 16:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=047953cf7fbf864d2d333669f884557b383944d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:99:f2:18:ad:89:7f:a4:c9:38:c2:99:6c:2d: b4:d7:e2:99:4e:69:ec:47:6a:ad:08:1e:15:bc:b7: c6:7f:d3:a5:c9:a3:90:11:83:25:5e:88:8d:d0:cf: 88:39:84:36:9e:2a:9c:10:47:f0:34:1c:f5:7d:a2: cd:02:a9:b8:8a:34:81:96:88:88:81:8b:a2:43:67: 2f:de:69:cb:a5:ec:8f:74:a6:7c:ff:d3:22:8e:a8: 86:6e:db:84:8a:86:9e:5f:5c:a5:48:b4:4d:91:35: 6b:07:f5:88:65:8a:33:a3:1d:2b:2e:61:b8:e1:df: 8c:71:79:c5:e4:28:aa:7b:24:4e:6c:a7:06:0f:99: 8a:b4:8a:a4:24:a2:ce:39:32:8d:4b:4d:8e:b0:43: 1f:b9:c5:9e:3b:09:a3:b0:72:81:8d:4a:20:6f:6f: d6:00:95:12:1c:75:75:c5:f6:8b:a5:2c:79:0f:0f: cc:6d:e5:b9:d0:19:eb:03:9a:ff:3d:54:79:d3:2c: be:e4:28:c6:43:ab:33:18:59:43:92:94:17:ff:99: 14:da:8d:e1:84:68:7c:89:dd:7e:65:9f:63:98:6b: b3:65:be:67:b1:a7:4e:15:c5:eb:47:09:b6:e8:27: 4f:95:28:66:b7:b0:26:fa:d7:46:8f:cd:18:95:a5: a1:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:79:53:CF:7F:BF:86:4D:2D:33:36:69:F8:84:55:7B:38:39:44:D8 X509v3 Authority Key Identifier: keyid:5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/BHlTz3-_hk0tMzZp-IRVezg5RNg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.133.46.0/24 Signature Algorithm: sha256WithRSAEncryption ae:ea:57:b9:2e:d3:9f:a7:a8:87:09:43:91:e6:22:0c:c8:13: 51:3e:eb:67:57:72:97:7c:b7:22:03:99:07:b4:6f:68:e4:8f: 09:c5:c3:c1:9a:2b:ef:aa:f7:e2:51:5b:5a:5b:40:85:23:d8: 67:05:c7:66:60:ba:c7:6e:f6:69:a1:31:90:3f:cb:65:4e:3e: f7:44:4f:4e:35:ab:9f:e4:70:13:a3:04:d1:f3:c8:98:8c:a5: b7:aa:cc:26:cf:2f:86:a0:b2:22:08:d4:35:95:34:c3:01:71: da:36:c6:ff:f0:ba:1c:d7:a4:9e:fc:e3:d5:0b:c0:62:68:66: da:3d:a7:cb:68:31:00:c0:d6:5e:f6:3d:11:f3:bc:c5:6b:e4: c7:20:13:84:04:29:a8:86:36:6b:2d:78:92:4c:fc:d8:bd:fb: 0c:9b:7e:b5:2c:be:b8:17:fb:96:fd:82:a1:db:fa:b1:d2:6a: 7d:32:58:c8:a5:13:08:d7:d5:00:da:2c:6f:c3:b7:b8:23:6d: d9:fe:6b:1f:b5:5a:ab:47:44:32:18:f9:5a:5a:4b:32:3b:2a: 2d:d8:8e:39:54:e3:08:75:28:2c:ac:ca:7a:0b:fb:9a:cf:2c: 77:16:9c:9f:02:6f:67:5a:6e:b6:83:58:10:e7:fc:ff:0d:09: 36:ad:8c:17 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W1lWl5imEIcXJZr1R4MmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjNjRmOWQwNGVmZDVhOWZjMmUyM2I0MmQ1YjUxYWVmZDlh NTAyNTAwHhcNMjYwMTAxMTYxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNDc5NTNjZjdmYmY4NjRkMmQzMzM2NjlmODg0NTU3YjM4Mzk0NGQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5nyGK2Jf6TJOMKZbC201+KZTmns R2qtCB4VvLfGf9OlyaOQEYMlXoiN0M+IOYQ2niqcEEfwNBz1faLNAqm4ijSBloiI gYuiQ2cv3mnLpeyPdKZ8/9MijqiGbtuEioaeX1ylSLRNkTVrB/WIZYozox0rLmG4 4d+McXnF5CiqeyRObKcGD5mKtIqkJKLOOTKNS02OsEMfucWeOwmjsHKBjUogb2/W AJUSHHV1xfaLpSx5Dw/MbeW50BnrA5r/PVR50yy+5CjGQ6szGFlDkpQX/5kU2o3h hGh8id1+ZZ9jmGuzZb5nsadOFcXrRwm26CdPlShmt7Am+tdGj80YlaWhUwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAR5U89/v4ZNLTM2afiEVXs4OUTYMB8GA1UdIwQY MBaAFFxk+dBO/VqfwuI7QtW1Gu/ZpQJQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEdUNTBFNzlXcF9DNGp0QzFiVWE3OW1sQWxBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8xODQ5YTYtZjkyMS00YjUwLTkxNWUt YjY2ZmE0ZjQ3NjNhLzEvQkhsVHozLV9oazB0TXpacC1JUlZlemc1Uk5nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS8xODQ5YTYtZjkyMS00YjUwLTkxNWUtYjY2ZmE0ZjQ3NjNh LzEvWEdUNTBFNzlXcF9DNGp0QzFiVWE3OW1sQWxBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAH4UuMA0G CSqGSIb3DQEBCwUAA4IBAQCu6le5LtOfp6iHCUOR5iIMyBNRPutnV3KXfLciA5kH tG9o5I8JxcPBmivvqvfiUVtaW0CFI9hnBcdmYLrHbvZpoTGQP8tlTj73RE9ONauf 5HATowTR88iYjKW3qswmzy+GoLIiCNQ1lTTDAXHaNsb/8Loc16Se/OPVC8BiaGba PafLaDEAwNZe9j0R87zFa+THIBOEBCmohjZrLXiSTPzYvfsMm361LL64F/uW/YKh 2/qx0mp9MljIpRMI19UA2ixvw7e4I23Z/msftVqrR0QyGPlaWksyOyot2I45VOMI dSgsrMp6C/uazyx3FpyfAm9nWm62g1gQ5/z/DQk2rYwX -----END CERTIFICATE-----Generated at Mon Jan 26 01:45:00 2026 by rpki-client