This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/bhlKdXGmWCr9DFWjhc8P0wglZIc.roa File: bhlKdXGmWCr9DFWjhc8P0wglZIc.roa (raw, json) Hash identifier: jECjuduWw41GZ7hEmsgN93fP6SWVQcwry3yoxhpzbrA= Subject key identifier: 6E:19:4A:75:71:A6:58:2A:FD:0C:55:A3:85:CF:0F:D3:08:25:64:87 Certificate issuer: /CN=a9a28417c1e1b68f69be1d3ec812037097619ccd Certificate serial: 019B7D5CE2615A12DB13A234810FD24D779F Authority key identifier: A9:A2:84:17:C1:E1:B6:8F:69:BE:1D:3E:C8:12:03:70:97:61:9C:CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qaKEF8Hhto9pvh0-yBIDcJdhnM0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/bhlKdXGmWCr9DFWjhc8P0wglZIc.roa Signing time: Fri 02 Jan 2026 06:19:57 +0000 ROA not before: Fri 02 Jan 2026 06:19:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9050 IP address blocks: 91.201.82.0/24 maxlen: 24 91.201.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft rsync://rpki.ripe.net/repository/DEFAULT/qaKEF8Hhto9pvh0-yBIDcJdhnM0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:e2:61:5a:12:db:13:a2:34:81:0f:d2:4d:77:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9a28417c1e1b68f69be1d3ec812037097619ccd Validity Not Before: Jan 2 06:19:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6e194a7571a6582afd0c55a385cf0fd308256487 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e2:02:47:7e:64:3e:c7:ca:2e:d9:eb:be:1b: 7c:1a:a7:e7:42:7d:1a:8c:49:c2:58:d4:42:e9:2c: c7:95:48:4f:08:25:b5:fe:f8:f0:b3:15:19:c3:cb: f1:8f:ee:50:64:a5:49:93:65:6d:88:e8:74:c9:2e: ef:d3:da:c1:9b:26:6d:a6:4a:fd:26:04:05:b9:24: 94:87:4b:34:4b:ae:92:21:6b:ff:fa:e6:1b:6b:da: d7:ce:75:f1:a2:1d:1b:35:27:1e:e5:56:9c:02:e3: f2:78:12:2c:2d:c4:70:72:59:b1:bd:8c:0d:ad:10: 5f:52:83:9c:0c:40:f6:60:0d:19:50:bc:8d:78:e7: b7:d6:9c:bc:46:43:35:c2:d5:43:b1:5b:15:7f:bf: d6:25:af:91:c8:3f:c4:a7:c3:5e:41:f5:32:96:53: f5:ee:08:c9:59:72:02:37:29:e1:8d:6f:6e:96:ef: 71:90:fc:18:ff:4e:7d:c4:20:71:df:e1:dd:14:92: 99:a9:5e:c9:81:1f:b2:40:1e:8a:d9:89:8e:6c:53: 66:59:57:26:b2:85:c7:ac:a6:bb:6a:cc:36:e8:99: 57:aa:cf:72:44:bc:62:bc:93:6c:a1:5a:ca:09:39: cd:79:de:0e:ef:eb:70:da:1f:55:87:a2:08:32:bd: f9:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:19:4A:75:71:A6:58:2A:FD:0C:55:A3:85:CF:0F:D3:08:25:64:87 X509v3 Authority Key Identifier: keyid:A9:A2:84:17:C1:E1:B6:8F:69:BE:1D:3E:C8:12:03:70:97:61:9C:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qaKEF8Hhto9pvh0-yBIDcJdhnM0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/bhlKdXGmWCr9DFWjhc8P0wglZIc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.201.82.0/23 Signature Algorithm: sha256WithRSAEncryption a5:10:9c:42:28:6c:da:b6:ea:87:82:ec:08:21:49:1b:0f:e3: 7a:89:98:e4:4f:e5:4a:1a:c2:b6:f2:6a:49:b9:d9:89:18:b1: 1b:03:3e:9f:40:95:74:f1:a8:cd:2a:e4:69:84:cb:a1:12:95: e4:90:62:5d:1c:a2:93:9c:08:85:bc:70:eb:b3:bc:53:fa:93: 91:cb:71:6b:48:c4:9c:7f:96:bd:ef:8f:7f:04:23:0c:43:1a: d2:42:12:ae:e1:99:fa:08:1a:92:3a:e5:9b:87:7b:5a:e8:7e: 09:db:b5:10:ee:92:a2:6f:0a:ab:9d:b9:23:3a:7f:a6:15:cf: 00:9e:1c:cb:af:a4:b8:a7:9e:c7:16:8a:d6:79:29:3d:ac:30: 96:1a:ed:f0:d9:4a:cc:74:69:43:e0:93:2c:d7:21:53:8e:1a: 54:cd:46:66:44:99:ef:ef:5a:85:9a:ee:a8:f8:91:c4:d1:c2: 96:c0:70:9d:d2:6f:1d:92:2d:a7:d3:c4:20:65:43:37:3e:b6: b5:b3:1d:a5:9f:35:8c:3c:3d:ca:2f:e6:87:3d:32:61:20:8e: aa:bc:c5:81:a5:d1:c0:57:38:cf:d9:f3:73:36:7e:c9:fd:df: cd:28:bd:d2:52:75:3a:3e:2a:c9:58:31:54:f0:60:71:d1:61: 47:1d:a0:16 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XOJhWhLbE6I0gQ/STXefMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5YTI4NDE3YzFlMWI2OGY2OWJlMWQzZWM4MTIwMzcwOTc2 MTljY2QwHhcNMjYwMTAyMDYxOTU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZTE5NGE3NTcxYTY1ODJhZmQwYzU1YTM4NWNmMGZkMzA4MjU2NDg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOICR35kPsfKLtnrvht8GqfnQn0a jEnCWNRC6SzHlUhPCCW1/vjwsxUZw8vxj+5QZKVJk2VtiOh0yS7v09rBmyZtpkr9 JgQFuSSUh0s0S66SIWv/+uYba9rXznXxoh0bNSce5VacAuPyeBIsLcRwclmxvYwN rRBfUoOcDED2YA0ZULyNeOe31py8RkM1wtVDsVsVf7/WJa+RyD/Ep8NeQfUyllP1 7gjJWXICNynhjW9ulu9xkPwY/059xCBx3+HdFJKZqV7JgR+yQB6K2YmObFNmWVcm soXHrKa7asw26JlXqs9yRLxivJNsoVrKCTnNed4O7+tw2h9Vh6IIMr35LQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG4ZSnVxplgq/QxVo4XPD9MIJWSHMB8GA1UdIwQY MBaAFKmihBfB4baPab4dPsgSA3CXYZzNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWFLRUY4SGh0bzlwdmgwLXlCSURjSmRobk0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8zMDljMzYtN2MxZC00YTMzLTljZjUt ZWQzNjQ3N2I5NDgwLzEvYmhsS2RYR21XQ3I5REZXamhjOFAwd2dsWkljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS8zMDljMzYtN2MxZC00YTMzLTljZjUtZWQzNjQ3N2I5NDgw LzEvcWFLRUY4SGh0bzlwdmgwLXlCSURjSmRobk0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW8lSMA0G CSqGSIb3DQEBCwUAA4IBAQClEJxCKGzatuqHguwIIUkbD+N6iZjkT+VKGsK28mpJ udmJGLEbAz6fQJV08ajNKuRphMuhEpXkkGJdHKKTnAiFvHDrs7xT+pORy3FrSMSc f5a9749/BCMMQxrSQhKu4Zn6CBqSOuWbh3ta6H4J27UQ7pKibwqrnbkjOn+mFc8A nhzLr6S4p57HForWeSk9rDCWGu3w2UrMdGlD4JMs1yFTjhpUzUZmRJnv71qFmu6o +JHE0cKWwHCd0m8dki2n08QgZUM3Pra1sx2lnzWMPD3KL+aHPTJhII6qvMWBpdHA VzjP2fNzNn7J/d/NKL3SUnU6PirJWDFU8GBx0WFHHaAW -----END CERTIFICATE-----Generated at Sun Jan 25 21:03:11 2026 by rpki-client