This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/blYzCw0lr11MQyVkDVJDJoABgPs.roa File: blYzCw0lr11MQyVkDVJDJoABgPs.roa (raw, json) Hash identifier: ys10NCcrXfGwhiHHT/ZnxQtLe1U6HzPJvVqiQK4Stj8= Subject key identifier: 6E:56:33:0B:0D:25:AF:5D:4C:43:25:64:0D:52:43:26:80:01:80:FB Certificate issuer: /CN=db641fc903d5b4cc971649324a4b34e4f82422c5 Certificate serial: 019B78A23CD789488D660DEFBBEB0EA668AD Authority key identifier: DB:64:1F:C9:03:D5:B4:CC:97:16:49:32:4A:4B:34:E4:F8:24:22:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/22QfyQPVtMyXFkkySks05PgkIsU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/blYzCw0lr11MQyVkDVJDJoABgPs.roa Signing time: Thu 01 Jan 2026 08:17:36 +0000 ROA not before: Thu 01 Jan 2026 08:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5533 IP address blocks: 77.91.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.mft rsync://rpki.ripe.net/repository/DEFAULT/22QfyQPVtMyXFkkySks05PgkIsU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:3c:d7:89:48:8d:66:0d:ef:bb:eb:0e:a6:68:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db641fc903d5b4cc971649324a4b34e4f82422c5 Validity Not Before: Jan 1 08:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6e56330b0d25af5d4c4325640d524326800180fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1c:cf:fe:3f:c3:6d:bb:7e:7b:38:f9:79:e4: 60:d4:99:f6:6e:c9:6a:e5:38:e7:d6:6f:24:08:a6: ee:05:93:d7:92:9b:04:72:66:49:da:b2:77:bc:47: 41:c9:27:07:45:e7:2a:ea:40:ab:ec:68:2d:94:e3: e7:42:91:8e:11:e5:ab:90:8b:f2:36:98:65:b2:a4: e7:23:65:8d:a2:2f:df:0e:31:6f:90:76:9b:db:3b: 35:20:0c:4c:3c:8e:9c:10:b5:7f:dd:d2:8f:65:cd: a4:2d:6d:b7:09:1e:cf:19:10:61:ce:fa:71:36:1f: e2:0c:00:14:81:a8:2c:69:a1:99:9c:06:03:14:19: 2b:ae:4a:34:8c:8d:ff:d6:1f:3a:99:e0:f1:cf:f4: 6b:00:ec:03:9c:03:35:0c:5d:8a:b6:1e:ea:d9:49: a1:b9:97:d0:fb:b2:5f:88:bb:c9:09:a1:9e:68:79: a7:fe:f4:10:42:60:d0:f5:69:ff:41:11:33:92:51: 08:6e:a5:b4:17:db:06:6b:1a:35:fa:8f:68:bc:0d: fe:01:82:a7:85:f7:53:4f:03:a4:ff:49:51:d2:2f: 31:a1:2f:1c:d4:52:d3:95:8d:2e:cb:57:b5:40:43: bc:c1:59:f3:63:46:8a:77:68:87:3b:9d:db:8a:32: b1:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:56:33:0B:0D:25:AF:5D:4C:43:25:64:0D:52:43:26:80:01:80:FB X509v3 Authority Key Identifier: keyid:DB:64:1F:C9:03:D5:B4:CC:97:16:49:32:4A:4B:34:E4:F8:24:22:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/22QfyQPVtMyXFkkySks05PgkIsU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/blYzCw0lr11MQyVkDVJDJoABgPs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.91.200.0/21 Signature Algorithm: sha256WithRSAEncryption 8c:3d:72:4b:04:e2:fb:aa:4e:6e:87:52:5b:5e:70:63:04:60: cc:ec:a0:50:17:02:c8:2f:a4:02:da:a5:1a:d3:f7:4e:97:27: 51:e5:3b:ba:42:73:35:4c:b8:9b:53:8d:cf:06:95:0e:27:af: 16:20:dc:19:88:70:b5:5c:84:8b:5c:e7:2c:aa:8e:78:77:6f: 2f:d5:74:bf:71:0a:88:c6:85:3f:d4:68:97:8e:f6:a8:fa:ae: df:19:e5:4f:6b:f9:51:60:6d:57:cd:a8:0e:ca:4a:69:6d:43: 64:b7:ea:93:f1:a6:50:64:3c:ff:c7:c5:48:cb:9d:56:80:3f: 4f:19:7a:66:e4:45:0b:aa:c6:77:41:39:ce:dd:1f:e7:94:15: fb:1e:32:76:11:7a:1c:a5:dc:1d:cb:a3:8c:7d:c3:9d:94:7c: f3:b8:0d:93:7f:50:a9:b1:8e:cf:18:a6:27:01:9b:a9:0a:03: e6:b5:d1:13:07:3a:8b:2e:16:96:b9:10:da:59:b0:4e:27:ca: 19:69:db:dc:48:0e:48:8a:2e:7a:c6:e6:76:50:17:4b:05:a4: 42:ab:93:cd:a5:f4:9a:01:bb:26:2e:6d:06:14:b9:d9:17:f1: 4c:9e:a4:f7:d8:b9:45:41:56:6b:58:77:e4:20:2d:65:d3:ef: d2:6c:e1:1e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4ojzXiUiNZg3vu+sOpmitMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiNjQxZmM5MDNkNWI0Y2M5NzE2NDkzMjRhNGIzNGU0Zjgy NDIyYzUwHhcNMjYwMTAxMDgxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZTU2MzMwYjBkMjVhZjVkNGM0MzI1NjQwZDUyNDMyNjgwMDE4MGZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhzP/j/Dbbt+ezj5eeRg1Jn2bslq 5Tjn1m8kCKbuBZPXkpsEcmZJ2rJ3vEdByScHRecq6kCr7GgtlOPnQpGOEeWrkIvy NphlsqTnI2WNoi/fDjFvkHab2zs1IAxMPI6cELV/3dKPZc2kLW23CR7PGRBhzvpx Nh/iDAAUgagsaaGZnAYDFBkrrko0jI3/1h86meDxz/RrAOwDnAM1DF2Kth7q2Umh uZfQ+7JfiLvJCaGeaHmn/vQQQmDQ9Wn/QREzklEIbqW0F9sGaxo1+o9ovA3+AYKn hfdTTwOk/0lR0i8xoS8c1FLTlY0uy1e1QEO8wVnzY0aKd2iHO53bijKxdwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG5WMwsNJa9dTEMlZA1SQyaAAYD7MB8GA1UdIwQY MBaAFNtkH8kD1bTMlxZJMkpLNOT4JCLFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjJRZnlRUFZ0TXlYRmtreVNrczA1UGdrSXNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8xMDA5NWYtZmQzNS00YTA2LThmMzkt N2ZlZTU5MWEyMDljLzEvYmxZekN3MGxyMTFNUXlWa0RWSkRKb0FCZ1BzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC8xMDA5NWYtZmQzNS00YTA2LThmMzktN2ZlZTU5MWEyMDlj LzEvMjJRZnlRUFZ0TXlYRmtreVNrczA1UGdrSXNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDTVvIMA0G CSqGSIb3DQEBCwUAA4IBAQCMPXJLBOL7qk5uh1JbXnBjBGDM7KBQFwLIL6QC2qUa 0/dOlydR5Tu6QnM1TLibU43PBpUOJ68WINwZiHC1XISLXOcsqo54d28v1XS/cQqI xoU/1GiXjvao+q7fGeVPa/lRYG1XzagOykppbUNkt+qT8aZQZDz/x8VIy51WgD9P GXpm5EULqsZ3QTnO3R/nlBX7HjJ2EXocpdwdy6OMfcOdlHzzuA2Tf1CpsY7PGKYn AZupCgPmtdETBzqLLhaWuRDaWbBOJ8oZadvcSA5Iii56xuZ2UBdLBaRCq5PNpfSa AbsmLm0GFLnZF/FMnqT32LlFQVZrWHfkIC1l0+/SbOEe -----END CERTIFICATE-----Generated at Sun Jan 25 20:29:50 2026 by rpki-client