This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/PBblsv9QH860qSMrEcJEHYerBd0.roa File: PBblsv9QH860qSMrEcJEHYerBd0.roa (raw, json) Hash identifier: XCvxV795BJaa7Go4DAryKinIzd8fdOhiRH7vlxZVc3k= Subject key identifier: 3C:16:E5:B2:FF:50:1F:CE:B4:A9:23:2B:11:C2:44:1D:87:AB:05:DD Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47 Certificate serial: 019B7CEE0708C0D532F237E56C74800E1A42 Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/PBblsv9QH860qSMrEcJEHYerBd0.roa Signing time: Fri 02 Jan 2026 04:18:52 +0000 ROA not before: Fri 02 Jan 2026 04:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211955 IP address blocks: 81.29.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.mft rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:07:08:c0:d5:32:f2:37:e5:6c:74:80:0e:1a:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47 Validity Not Before: Jan 2 04:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3c16e5b2ff501fceb4a9232b11c2441d87ab05dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:2d:8a:ea:43:3c:0c:61:9e:2b:fc:27:f7:3a: 5f:3d:4c:a9:55:49:78:02:1d:14:bf:58:7f:9b:ec: 87:51:64:2c:7c:15:5d:8a:d0:8a:58:c5:7f:48:85: 3e:c5:a2:bf:4d:e1:e2:00:af:37:0f:0d:70:15:8e: 18:b6:9a:6b:41:7b:e1:f8:3c:fe:91:a5:c6:67:28: 84:8d:db:f8:7b:0f:a6:be:50:45:1e:0b:b3:37:fe: b6:8e:36:6c:d7:11:56:f3:e8:e1:ae:28:7b:47:e1: 7c:ec:fd:10:a9:4e:e1:e8:14:6a:b8:80:71:49:cc: dd:7f:52:05:d0:58:87:d0:4a:5f:7a:ab:6e:24:b5: 45:52:03:19:0b:21:ab:9e:00:01:35:cf:2b:ba:b7: 15:e4:37:4f:80:a4:c9:26:9d:cd:63:69:a8:61:b3: 29:72:fa:7b:70:7b:06:10:7d:fb:c8:1a:71:b4:cd: c1:4e:2a:57:49:be:a4:ac:9c:c3:6e:4f:d3:40:65: 79:37:84:ed:b3:b0:26:d5:6a:61:d5:a6:7d:74:76: c3:7f:4d:18:b0:f9:1c:25:5c:37:3d:fb:e6:cb:6b: 8a:c7:24:fe:1d:cd:9f:14:3d:62:6c:28:46:23:04: 4c:2a:04:07:bf:83:1c:8d:c7:c1:f0:4b:02:58:ec: 51:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:16:E5:B2:FF:50:1F:CE:B4:A9:23:2B:11:C2:44:1D:87:AB:05:DD X509v3 Authority Key Identifier: keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/PBblsv9QH860qSMrEcJEHYerBd0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.29.156.0/24 Signature Algorithm: sha256WithRSAEncryption 36:9f:f3:e9:b7:9f:40:dc:eb:03:ad:33:04:0b:58:70:91:8b: cd:d8:52:92:75:56:b4:34:db:c1:f1:22:4c:6b:64:57:5c:cb: f6:5b:1b:b5:a1:56:a6:4c:bf:e8:51:19:be:e4:00:19:f5:1c: c9:97:1e:50:e8:43:01:bd:94:7f:2b:b7:00:16:19:f3:a2:b4: d1:aa:72:29:3b:5d:43:7a:c2:da:70:bc:92:50:88:5d:19:a6: 98:77:72:5d:81:43:a0:8a:b1:8a:ba:49:c4:a3:55:eb:d7:b0: 43:af:97:c2:0f:13:1d:fc:58:1d:d3:b4:9b:0d:52:cf:86:93: 6c:74:9b:bf:ac:4c:24:95:f5:82:fb:81:d4:d6:28:b8:e4:72: 2d:52:b3:ea:a0:37:01:40:44:11:d4:32:13:8e:81:d5:31:17: 63:61:24:16:1b:af:2b:77:8d:ab:58:1a:c4:dd:47:85:14:99: e3:dc:45:4e:60:5c:5a:2b:04:f1:fb:92:9c:ba:e3:1f:f3:04: a7:99:83:64:0d:7c:e1:4b:e5:4b:92:fb:fd:48:55:d9:6e:06: 9e:19:27:bc:4d:10:cd:74:23:6d:3d:cc:58:ea:7f:d6:bc:3f: f3:62:68:1d:9c:2f:3e:43:31:2d:5c:d3:fc:90:5d:64:50:df: b8:91:bd:dc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87gcIwNUy8jflbHSADhpCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZTUxNjk0YzRkNDZiNGZjYzAyZmFlNzFlNWRiOTQyYTcx MDhlNDcwHhcNMjYwMTAyMDQxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYzE2ZTViMmZmNTAxZmNlYjRhOTIzMmIxMWMyNDQxZDg3YWIwNWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzS2K6kM8DGGeK/wn9zpfPUypVUl4 Ah0Uv1h/m+yHUWQsfBVditCKWMV/SIU+xaK/TeHiAK83Dw1wFY4YtpprQXvh+Dz+ kaXGZyiEjdv4ew+mvlBFHguzN/62jjZs1xFW8+jhrih7R+F87P0QqU7h6BRquIBx Sczdf1IF0FiH0EpfeqtuJLVFUgMZCyGrngABNc8rurcV5DdPgKTJJp3NY2moYbMp cvp7cHsGEH37yBpxtM3BTipXSb6krJzDbk/TQGV5N4Tts7Am1Wph1aZ9dHbDf00Y sPkcJVw3Pfvmy2uKxyT+Hc2fFD1ibChGIwRMKgQHv4McjcfB8EsCWOxRuQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDwW5bL/UB/OtKkjKxHCRB2HqwXdMB8GA1UdIwQY MBaAFEnlFpTE1GtPzAL65x5duUKnEI5HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQt MTkxODliM2M5YzdkLzEvUEJibHN2OVFIODYwcVNNckVjSkVIWWVyQmQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQtMTkxODliM2M5Yzdk LzEvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUR2cMA0G CSqGSIb3DQEBCwUAA4IBAQA2n/Ppt59A3OsDrTMEC1hwkYvN2FKSdVa0NNvB8SJM a2RXXMv2Wxu1oVamTL/oURm+5AAZ9RzJlx5Q6EMBvZR/K7cAFhnzorTRqnIpO11D esLacLySUIhdGaaYd3JdgUOgirGKuknEo1Xr17BDr5fCDxMd/Fgd07SbDVLPhpNs dJu/rEwklfWC+4HU1ii45HItUrPqoDcBQEQR1DITjoHVMRdjYSQWG68rd42rWBrE 3UeFFJnj3EVOYFxaKwTx+5KcuuMf8wSnmYNkDXzhS+VLkvv9SFXZbgaeGSe8TRDN dCNtPcxY6n/WvD/zYmgdnC8+QzEtXNP8kF1kUN+4kb3c -----END CERTIFICATE-----Generated at Sun Jan 25 14:04:45 2026 by rpki-client