This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/bLv7pvLK6_7fvMuKuQZL0mXT-w4.roa File: bLv7pvLK6_7fvMuKuQZL0mXT-w4.roa (raw, json) Hash identifier: 8uNB/ILMFrq3sToFR+5ug40e8NIIul6S+LEO82VmTuM= Subject key identifier: 6C:BB:FB:A6:F2:CA:EB:FE:DF:BC:CB:8A:B9:06:4B:D2:65:D3:FB:0E Certificate issuer: /CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b Certificate serial: 019B7C808380FED3899FF25FCF9D48109B9F Authority key identifier: B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/bLv7pvLK6_7fvMuKuQZL0mXT-w4.roa Signing time: Fri 02 Jan 2026 02:19:15 +0000 ROA not before: Fri 02 Jan 2026 02:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208027 IP address blocks: 213.192.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.mft rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:83:80:fe:d3:89:9f:f2:5f:cf:9d:48:10:9b:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b Validity Not Before: Jan 2 02:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6cbbfba6f2caebfedfbccb8ab9064bd265d3fb0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b9:c4:24:e5:b4:e3:78:35:84:04:4c:d1:79: 07:b4:1b:b5:2b:81:e4:88:9c:4b:2a:c9:66:6c:fc: af:44:07:9d:85:19:81:bd:1f:b8:09:b4:0f:14:57: ed:53:9d:35:8a:45:26:5d:6b:5d:a4:62:09:b9:b8: fe:63:de:f8:ef:ec:ff:46:42:57:39:e0:c0:ae:22: b3:ad:86:bd:43:8e:47:cf:5d:18:19:13:c4:23:d1: b5:dc:ae:d8:5c:43:d1:8e:af:71:d7:71:97:b4:ec: ef:9e:a3:d4:f2:ab:92:75:63:03:01:ff:a4:3c:16: 19:8b:58:e8:bf:1d:fb:ea:2a:b1:7b:2a:67:87:37: 69:2f:4f:7b:b2:f7:dc:f9:b0:53:a3:51:4e:bd:55: 43:99:98:f3:0b:56:e3:27:dd:4f:f4:0c:21:3d:18: 2a:46:fd:99:22:b3:75:02:84:c8:23:bf:99:bb:a4: 44:79:87:30:f8:54:dc:ae:df:44:41:cc:d6:a1:35: 99:97:e7:ec:c9:5f:f2:30:1a:8c:4d:42:3e:19:11: 4c:d8:bb:08:c5:f9:8a:4e:b8:07:e3:7a:0c:7b:39: 83:ad:65:53:9c:31:a1:43:9c:1f:5b:17:62:fb:74: bd:8a:a3:ee:40:0e:37:ca:1a:f4:d0:b9:91:3a:cf: c3:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:BB:FB:A6:F2:CA:EB:FE:DF:BC:CB:8A:B9:06:4B:D2:65:D3:FB:0E X509v3 Authority Key Identifier: keyid:B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/bLv7pvLK6_7fvMuKuQZL0mXT-w4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.192.214.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:08:e9:c2:c9:88:a4:10:ea:e4:9f:29:b1:63:8f:ee:0d:95: 97:c9:ab:c7:69:e8:9f:31:a9:79:4c:37:92:11:22:f2:76:9e: eb:ce:f3:b4:08:6a:e0:21:72:cd:b3:e4:6b:cc:30:5a:c8:7e: 56:1f:e4:c0:2b:35:ba:3e:97:e2:bf:ee:9e:48:b7:70:ce:09: b8:df:c4:8a:09:3d:79:46:a1:0e:2b:4a:47:07:2a:25:f6:d1: 1c:4e:dd:61:80:ef:64:37:53:62:65:a0:fa:92:b7:56:05:10: 05:5c:b5:53:8f:5e:64:dd:82:e3:b9:a3:81:4a:20:b1:22:cd: 1f:3c:d9:4c:e6:c5:e2:3b:d0:af:94:71:43:d7:cb:f2:05:e3: d5:8c:6d:ce:84:01:6d:dc:b5:22:0d:0d:0f:8c:6d:6e:98:5e: df:23:98:71:fe:4a:98:3f:62:e9:1d:43:ed:95:4c:04:9f:ae: f5:8b:82:51:0a:f0:f4:33:2c:69:2d:03:af:ab:77:18:08:dc: 6b:2b:2f:6c:09:a0:38:40:54:4b:de:5f:e7:6a:91:5b:97:82: e6:37:5a:60:0a:34:a8:a9:23:5a:27:aa:d9:11:aa:ed:18:aa: 55:ee:10:f6:3b:06:45:ef:63:be:39:f4:1b:cb:9b:56:f5:bf: d9:56:a1:cb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gIOA/tOJn/Jfz51IEJufMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5MTQ5NjFmNjdmMjJjNjFlODRhNjZjOGFkOWMxYThjZTUx ZDA5OWIwHhcNMjYwMTAyMDIxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Y2JiZmJhNmYyY2FlYmZlZGZiY2NiOGFiOTA2NGJkMjY1ZDNmYjBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLnEJOW043g1hARM0XkHtBu1K4Hk iJxLKslmbPyvRAedhRmBvR+4CbQPFFftU501ikUmXWtdpGIJubj+Y9747+z/RkJX OeDAriKzrYa9Q45Hz10YGRPEI9G13K7YXEPRjq9x13GXtOzvnqPU8quSdWMDAf+k PBYZi1jovx376iqxeypnhzdpL097svfc+bBTo1FOvVVDmZjzC1bjJ91P9AwhPRgq Rv2ZIrN1AoTII7+Zu6REeYcw+FTcrt9EQczWoTWZl+fsyV/yMBqMTUI+GRFM2LsI xfmKTrgH43oMezmDrWVTnDGhQ5wfWxdi+3S9iqPuQA43yhr00LmROs/DHQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGy7+6byyuv+37zLirkGS9Jl0/sOMB8GA1UdIwQY MBaAFLkUlh9n8ixh6EpmyK2cGozlHQmbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVJTV0gyZnlMR0hvU21iSXJad2FqT1VkQ1pzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8wOTE3YTctOWViZC00NWI5LTlkZTIt Mjc0NzNjYTYxMmRlLzEvYkx2N3B2TEs2Xzdmdk11S3VRWkwwbVhULXc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi8wOTE3YTctOWViZC00NWI5LTlkZTItMjc0NzNjYTYxMmRl LzEvdVJTV0gyZnlMR0hvU21iSXJad2FqT1VkQ1pzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1cDWMA0G CSqGSIb3DQEBCwUAA4IBAQAMCOnCyYikEOrknymxY4/uDZWXyavHaeifMal5TDeS ESLydp7rzvO0CGrgIXLNs+RrzDBayH5WH+TAKzW6Ppfiv+6eSLdwzgm438SKCT15 RqEOK0pHByol9tEcTt1hgO9kN1NiZaD6krdWBRAFXLVTj15k3YLjuaOBSiCxIs0f PNlM5sXiO9CvlHFD18vyBePVjG3OhAFt3LUiDQ0PjG1umF7fI5hx/kqYP2LpHUPt lUwEn671i4JRCvD0MyxpLQOvq3cYCNxrKy9sCaA4QFRL3l/napFbl4LmN1pgCjSo qSNaJ6rZEartGKpV7hD2OwZF72O+OfQby5tW9b/ZVqHL -----END CERTIFICATE-----Generated at Sun Jan 25 16:17:43 2026 by rpki-client