This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/57548d-7096-45b0-8be8-00b7bf32ecf8/1/bLtqLTgyo3jayEk8nrvrKrCEoZ0.roa File: bLtqLTgyo3jayEk8nrvrKrCEoZ0.roa (raw, json) Hash identifier: NexaJDA35Gn2YwrlEltRLjOpLBsw+HT7zXIl0vhUiEU= Subject key identifier: 6C:BB:6A:2D:38:32:A3:78:DA:C8:49:3C:9E:BB:EB:2A:B0:84:A1:9D Certificate issuer: /CN=ea9ff91c6b1c7a8ed02842b25c9b0d0638a90424 Certificate serial: 019B78A2F120F1D7E4C901C4AC2A11A8D91D Authority key identifier: EA:9F:F9:1C:6B:1C:7A:8E:D0:28:42:B2:5C:9B:0D:06:38:A9:04:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6p_5HGsceo7QKEKyXJsNBjipBCQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/57548d-7096-45b0-8be8-00b7bf32ecf8/1/bLtqLTgyo3jayEk8nrvrKrCEoZ0.roa Signing time: Thu 01 Jan 2026 08:18:22 +0000 ROA not before: Thu 01 Jan 2026 08:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44934 IP address blocks: 83.138.62.0/24 maxlen: 24 2a05:5a41::/32 maxlen: 32 2a05:5a42::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/57548d-7096-45b0-8be8-00b7bf32ecf8/1/6p_5HGsceo7QKEKyXJsNBjipBCQ.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/57548d-7096-45b0-8be8-00b7bf32ecf8/1/6p_5HGsceo7QKEKyXJsNBjipBCQ.mft rsync://rpki.ripe.net/repository/DEFAULT/6p_5HGsceo7QKEKyXJsNBjipBCQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:f1:20:f1:d7:e4:c9:01:c4:ac:2a:11:a8:d9:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea9ff91c6b1c7a8ed02842b25c9b0d0638a90424 Validity Not Before: Jan 1 08:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6cbb6a2d3832a378dac8493c9ebbeb2ab084a19d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:c2:05:3a:c0:f2:a0:f3:1b:6d:2a:7a:4f:51: 84:90:c6:2a:86:43:23:eb:e7:15:3d:a0:bd:3a:61: 04:71:db:9a:66:e1:38:9b:8c:7e:88:22:30:99:53: e0:33:2e:95:b0:99:65:1d:79:c0:10:58:0c:88:d9: 97:67:1a:25:7a:d9:38:e3:a0:d7:c4:00:bf:a4:a9: 20:8f:fc:ad:49:84:ab:d8:1e:91:ea:3c:f2:68:91: cf:7e:aa:2d:ae:35:03:74:a8:12:34:81:61:dc:02: 42:d2:ef:98:a9:61:c6:71:a8:77:15:1a:fa:13:e6: 03:d4:ad:77:ef:12:b5:64:8c:62:e7:0d:6c:d3:ba: 36:ec:98:88:7b:50:b7:04:2e:36:79:ad:d5:56:67: 31:d2:60:c6:91:9c:64:b0:91:27:58:74:71:7d:07: 01:66:13:52:bf:69:4f:32:ed:b9:d1:2c:0b:e7:ef: c7:20:37:a4:c4:26:fb:85:d6:1c:9b:79:6f:b0:8d: 58:50:9a:1b:20:35:11:03:ee:49:65:d8:cb:a8:08: f2:44:b0:34:20:16:de:0b:c2:ed:67:a5:b5:4c:ba: ff:0a:01:72:10:1c:3f:21:b9:0b:c4:a5:94:1a:f2: e8:33:7b:6c:ff:f1:ec:48:39:33:27:ac:36:9f:8e: 09:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:BB:6A:2D:38:32:A3:78:DA:C8:49:3C:9E:BB:EB:2A:B0:84:A1:9D X509v3 Authority Key Identifier: keyid:EA:9F:F9:1C:6B:1C:7A:8E:D0:28:42:B2:5C:9B:0D:06:38:A9:04:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6p_5HGsceo7QKEKyXJsNBjipBCQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/57548d-7096-45b0-8be8-00b7bf32ecf8/1/bLtqLTgyo3jayEk8nrvrKrCEoZ0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/57548d-7096-45b0-8be8-00b7bf32ecf8/1/6p_5HGsceo7QKEKyXJsNBjipBCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.138.62.0/24 IPv6: 2a05:5a41::-2a05:5a42:ffff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 59:fd:6b:1e:77:df:2b:e3:54:09:0c:7e:12:b1:0c:28:8d:27: e5:91:4c:a0:fd:1d:e6:9c:cf:47:08:02:e7:87:79:b1:70:be: 6b:0b:ce:e3:1a:41:af:67:eb:27:d1:a7:16:82:69:6c:67:a6: a5:a7:b1:84:14:5a:7f:3b:05:eb:a2:dd:4e:35:7c:ff:4b:7b: 53:1c:33:1b:5b:4c:ab:73:1f:7b:76:b5:b9:7b:4a:12:67:23: 67:e7:44:b7:f5:65:3e:fd:c0:66:2b:a5:44:4d:3c:f9:5c:3e: c3:77:c0:4c:87:da:44:9b:39:c2:10:41:95:0f:49:c0:48:d6: 23:87:87:49:88:02:f7:37:08:49:9f:bb:c5:9d:54:8e:e4:1b: 76:79:4b:7a:07:9a:59:64:d8:dc:1b:ea:12:20:c4:cb:8a:6a: ed:4b:aa:b3:ae:25:63:50:01:6e:7e:30:c8:39:a5:f3:86:be: 4e:29:b7:1d:de:06:3a:c4:28:ae:f7:48:fa:76:7b:ec:00:75: 0f:d4:5e:cf:4e:16:3b:21:23:9c:a1:72:6f:53:74:35:13:18: 30:29:36:88:b5:4e:0e:5d:7b:34:2f:af:ad:75:b2:44:d1:c6: 94:18:b5:76:52:c6:18:5f:35:e0:04:3c:7e:65:ef:97:de:a9: 06:9f:ff:d4 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt4ovEg8dfkyQHErCoRqNkdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhOWZmOTFjNmIxYzdhOGVkMDI4NDJiMjVjOWIwZDA2Mzhh OTA0MjQwHhcNMjYwMTAxMDgxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Y2JiNmEyZDM4MzJhMzc4ZGFjODQ5M2M5ZWJiZWIyYWIwODRhMTlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7MIFOsDyoPMbbSp6T1GEkMYqhkMj 6+cVPaC9OmEEcduaZuE4m4x+iCIwmVPgMy6VsJllHXnAEFgMiNmXZxoletk446DX xAC/pKkgj/ytSYSr2B6R6jzyaJHPfqotrjUDdKgSNIFh3AJC0u+YqWHGcah3FRr6 E+YD1K137xK1ZIxi5w1s07o27JiIe1C3BC42ea3VVmcx0mDGkZxksJEnWHRxfQcB ZhNSv2lPMu250SwL5+/HIDekxCb7hdYcm3lvsI1YUJobIDURA+5JZdjLqAjyRLA0 IBbeC8LtZ6W1TLr/CgFyEBw/IbkLxKWUGvLoM3ts//HsSDkzJ6w2n44J9QIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFGy7ai04MqN42shJPJ676yqwhKGdMB8GA1UdIwQY MBaAFOqf+RxrHHqO0ChCslybDQY4qQQkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnBfNUhHc2NlbzdRS0VLeVhKc05CamlwQkNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi81NzU0OGQtNzA5Ni00NWIwLThiZTgt MDBiN2JmMzJlY2Y4LzEvYkx0cUxUZ3lvM2pheUVrOG5ydnJLckNFb1owLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi81NzU0OGQtNzA5Ni00NWIwLThiZTgtMDBiN2JmMzJlY2Y4 LzEvNnBfNUhHc2NlbzdRS0VLeVhKc05CamlwQkNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAMBAIAATAGAwQAU4o+MBYE AgACMBAwDgMFACoFWkEDBQAqBVpCMA0GCSqGSIb3DQEBCwUAA4IBAQBZ/Wsed98r 41QJDH4SsQwojSflkUyg/R3mnM9HCALnh3mxcL5rC87jGkGvZ+sn0acWgmlsZ6al p7GEFFp/OwXrot1ONXz/S3tTHDMbW0yrcx97drW5e0oSZyNn50S39WU+/cBmK6VE TTz5XD7Dd8BMh9pEmznCEEGVD0nASNYjh4dJiAL3NwhJn7vFnVSO5Bt2eUt6B5pZ ZNjcG+oSIMTLimrtS6qzriVjUAFufjDIOaXzhr5OKbcd3gY6xCiu90j6dnvsAHUP 1F7PThY7ISOcoXJvU3Q1ExgwKTaItU4OXXs0L6+tdbJE0caUGLV2UsYYXzXgBDx+ Ze+X3qkGn//U -----END CERTIFICATE-----Generated at Mon Jan 26 07:57:48 2026 by rpki-client