This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/BLM9s6E3uNgLbo5hUAJYzpxbAgk.roa File: BLM9s6E3uNgLbo5hUAJYzpxbAgk.roa (raw, json) Hash identifier: 5Ht0651estCzoETFmaG2dTMoJGv16B5IZmwbZaHDuac= Subject key identifier: 04:B3:3D:B3:A1:37:B8:D8:0B:6E:8E:61:50:02:58:CE:9C:5B:02:09 Certificate issuer: /CN=51f4b0b0469eb0d071994cd8238f34bef00c6fbe Certificate serial: 019B7F138EC8CFAAA1EF43E9806E5FE73029 Authority key identifier: 51:F4:B0:B0:46:9E:B0:D0:71:99:4C:D8:23:8F:34:BE:F0:0C:6F:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UfSwsEaesNBxmUzYI480vvAMb74.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/BLM9s6E3uNgLbo5hUAJYzpxbAgk.roa Signing time: Fri 02 Jan 2026 14:19:06 +0000 ROA not before: Fri 02 Jan 2026 14:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207685 IP address blocks: 91.234.10.0/24 maxlen: 24 91.234.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.mft rsync://rpki.ripe.net/repository/DEFAULT/UfSwsEaesNBxmUzYI480vvAMb74.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:8e:c8:cf:aa:a1:ef:43:e9:80:6e:5f:e7:30:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51f4b0b0469eb0d071994cd8238f34bef00c6fbe Validity Not Before: Jan 2 14:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=04b33db3a137b8d80b6e8e61500258ce9c5b0209 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b5:b6:47:df:07:a1:f1:0a:3d:3e:ff:c0:f8: 0b:a8:9d:b4:5c:64:e1:b2:89:71:e1:11:27:9a:3c: df:e1:b3:49:86:2f:45:58:0d:98:29:0f:e5:f0:40: dc:d1:57:d8:1f:a9:13:08:50:c4:2c:20:1c:a2:90: 7a:91:71:b3:03:67:d1:71:d5:2f:d4:28:b1:dc:19: 46:82:ba:ae:8b:4a:0b:63:9a:dc:07:e6:6f:38:f5: 10:6b:4f:20:d7:2d:ea:0a:dc:6a:41:36:30:1d:15: 4a:ea:1e:88:58:bc:84:a7:79:c7:54:cd:9a:1b:e8: 44:39:5a:e5:5d:e1:21:c2:b6:52:9b:83:01:9c:6b: 01:dd:47:61:7c:9b:c2:91:a0:b4:09:1e:b3:5e:99: cb:5f:7a:7a:01:ba:8b:41:3f:6a:ad:a7:e9:71:5f: 28:88:15:9b:e6:ca:5e:d1:c9:ee:09:71:2c:98:0a: 35:57:e9:32:2e:da:58:f9:32:4e:5d:37:cb:8f:2e: b8:da:ec:30:6b:62:d9:9e:ac:bc:99:35:6d:e0:3a: 31:9f:48:06:85:a3:cf:bb:39:96:66:02:8b:62:9d: 3c:ba:74:30:d7:59:cd:3a:07:9a:c6:1b:82:5b:1b: 6b:80:29:15:bf:cc:8e:c3:bc:db:e2:f4:5d:fb:0a: 56:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:B3:3D:B3:A1:37:B8:D8:0B:6E:8E:61:50:02:58:CE:9C:5B:02:09 X509v3 Authority Key Identifier: keyid:51:F4:B0:B0:46:9E:B0:D0:71:99:4C:D8:23:8F:34:BE:F0:0C:6F:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UfSwsEaesNBxmUzYI480vvAMb74.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/BLM9s6E3uNgLbo5hUAJYzpxbAgk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.234.10.0/24 91.234.20.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:1d:75:a9:99:06:22:ef:69:72:45:e1:c0:af:58:2b:98:54: a4:5c:37:04:f3:d8:6d:61:5d:5d:6d:af:ca:18:5f:df:6c:35: f6:6a:4f:49:ba:85:6d:5a:92:6a:43:23:cc:3a:1e:9f:87:9d: 43:40:5c:8e:85:ba:61:f5:9f:10:18:82:75:36:23:72:28:45: 44:b2:d0:6b:21:aa:46:2f:b6:b8:42:ea:84:9a:ad:89:ab:62: 01:2b:ca:5b:67:99:a0:b4:b1:d7:d3:d7:42:d3:6c:2e:d3:bf: ed:f9:96:3e:dc:f2:97:66:fe:75:09:a5:b6:25:53:6f:f5:90: d4:6a:ef:bf:a1:28:48:bc:f8:0e:b4:3f:3c:2d:aa:71:ca:8c: 62:1e:dc:05:52:d8:be:e2:3a:bf:9e:a5:42:39:96:dd:3a:fb: 19:fb:d2:1d:aa:ec:4b:26:80:51:4e:ba:43:76:51:47:6a:2f: e8:26:e4:e2:9d:1e:67:42:8b:97:93:19:5a:08:f7:c9:1b:65: 8e:df:3c:3d:da:51:6c:7d:09:39:94:2c:dc:b0:43:7b:f9:6d: 6c:df:7f:65:46:be:1f:17:ce:e5:ab:73:7d:06:b2:39:f7:c0: 26:13:32:c4:e6:c0:b2:3e:a5:f8:2f:c7:aa:ac:ee:a5:3e:46: fc:7d:03:d2 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/E47Iz6qh70PpgG5f5zApMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxZjRiMGIwNDY5ZWIwZDA3MTk5NGNkODIzOGYzNGJlZjAw YzZmYmUwHhcNMjYwMTAyMTQxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNGIzM2RiM2ExMzdiOGQ4MGI2ZThlNjE1MDAyNThjZTljNWIwMjA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7W2R98HofEKPT7/wPgLqJ20XGTh solx4REnmjzf4bNJhi9FWA2YKQ/l8EDc0VfYH6kTCFDELCAcopB6kXGzA2fRcdUv 1Cix3BlGgrqui0oLY5rcB+ZvOPUQa08g1y3qCtxqQTYwHRVK6h6IWLyEp3nHVM2a G+hEOVrlXeEhwrZSm4MBnGsB3UdhfJvCkaC0CR6zXpnLX3p6AbqLQT9qrafpcV8o iBWb5spe0cnuCXEsmAo1V+kyLtpY+TJOXTfLjy642uwwa2LZnqy8mTVt4Doxn0gG haPPuzmWZgKLYp08unQw11nNOgeaxhuCWxtrgCkVv8yOw7zb4vRd+wpWcQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFASzPbOhN7jYC26OYVACWM6cWwIJMB8GA1UdIwQY MBaAFFH0sLBGnrDQcZlM2COPNL7wDG++MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWZTd3NFYWVzTkJ4bVV6WUk0ODB2dkFNYjc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9kM2FiMjgtN2Y0Ny00MWYzLWIyMzEt Nzg4NDRlMTAxMTMzLzEvQkxNOXM2RTN1TmdMYm81aFVBSll6cHhiQWdrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi9kM2FiMjgtN2Y0Ny00MWYzLWIyMzEtNzg4NDRlMTAxMTMz LzEvVWZTd3NFYWVzTkJ4bVV6WUk0ODB2dkFNYjc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW+oKAwQA W+oUMA0GCSqGSIb3DQEBCwUAA4IBAQB8HXWpmQYi72lyReHAr1grmFSkXDcE89ht YV1dba/KGF/fbDX2ak9JuoVtWpJqQyPMOh6fh51DQFyOhbph9Z8QGIJ1NiNyKEVE stBrIapGL7a4QuqEmq2Jq2IBK8pbZ5mgtLHX09dC02wu07/t+ZY+3PKXZv51CaW2 JVNv9ZDUau+/oShIvPgOtD88LapxyoxiHtwFUti+4jq/nqVCOZbdOvsZ+9IdquxL JoBRTrpDdlFHai/oJuTinR5nQouXkxlaCPfJG2WO3zw92lFsfQk5lCzcsEN7+W1s 339lRr4fF87lq3N9BrI598AmEzLE5sCyPqX4L8eqrO6lPkb8fQPS -----END CERTIFICATE-----Generated at Sun Jan 25 20:31:30 2026 by rpki-client