This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/bLAwkpsQ7D6caU7zIeAaY5nux8E.roa File: bLAwkpsQ7D6caU7zIeAaY5nux8E.roa (raw, json) Hash identifier: KqLO/vffpcb+/IGfGAsD+PmTdmluxkrnPOhEPWZAu6E= Subject key identifier: 6C:B0:30:92:9B:10:EC:3E:9C:69:4E:F3:21:E0:1A:63:99:EE:C7:C1 Certificate issuer: /CN=a26855980b273e5ae57dc1b9eb22e9f5f3a7cdf7 Certificate serial: 019B7C1350B1167CC6F6816F3A05B958853B Authority key identifier: A2:68:55:98:0B:27:3E:5A:E5:7D:C1:B9:EB:22:E9:F5:F3:A7:CD:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/omhVmAsnPlrlfcG56yLp9fOnzfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/bLAwkpsQ7D6caU7zIeAaY5nux8E.roa Signing time: Fri 02 Jan 2026 00:19:59 +0000 ROA not before: Fri 02 Jan 2026 00:19:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 137 IP address blocks: 90.147.0.0/16 maxlen: 16 138.41.0.0/16 maxlen: 16 185.191.180.0/22 maxlen: 22 192.167.0.0/16 maxlen: 16 192.167.59.0/24 maxlen: 24 193.204.0.0/15 maxlen: 15 193.205.16.0/20 maxlen: 20 193.206.0.0/16 maxlen: 16 212.189.128.0/17 maxlen: 17 2001:760::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/omhVmAsnPlrlfcG56yLp9fOnzfc.crl rsync://rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/omhVmAsnPlrlfcG56yLp9fOnzfc.mft rsync://rpki.ripe.net/repository/DEFAULT/omhVmAsnPlrlfcG56yLp9fOnzfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 02:42:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:50:b1:16:7c:c6:f6:81:6f:3a:05:b9:58:85:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a26855980b273e5ae57dc1b9eb22e9f5f3a7cdf7 Validity Not Before: Jan 2 00:19:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6cb030929b10ec3e9c694ef321e01a6399eec7c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:47:b6:7f:38:4a:80:c2:f3:e3:8e:08:e7:14: 27:2d:4a:7f:5b:77:9e:fa:1f:a5:b2:5b:63:dd:34: 25:69:d6:0e:9f:b1:d7:39:c3:eb:2e:2a:aa:6f:a8: be:5e:ab:90:97:c3:6a:82:26:25:68:80:ae:f5:9d: 59:a0:ad:f5:20:53:ec:e0:ff:07:32:7d:b9:d7:65: c8:a6:8b:e0:ed:12:7c:21:c6:47:60:43:a5:c1:68: 82:d6:20:aa:72:fc:aa:57:29:1d:53:69:16:ef:1c: 82:26:fc:8c:e4:bd:12:6e:af:fe:04:d7:87:f8:5d: e0:1e:c3:7c:ba:7e:d0:65:60:ff:16:bb:01:70:a5: 22:17:dc:ef:db:3d:58:c6:e9:be:77:73:58:81:3d: a5:19:82:02:9e:41:15:29:9e:86:86:6f:b1:32:9d: 8a:8a:98:1b:31:24:90:6b:81:e5:8f:d7:20:a7:a1: 6c:4d:a8:47:5d:cd:bc:a0:48:a9:2a:6d:c4:f7:b4: 71:1a:3f:e3:ca:f5:15:bb:c6:58:f1:c4:38:af:bd: 52:6b:1a:ce:0a:cc:8e:57:f7:15:ef:67:c0:3b:56: 96:8e:00:33:58:32:29:c0:ef:7d:ae:5d:0d:de:23: a6:6f:e0:34:99:0c:cf:0a:38:f8:f2:68:a3:a4:7c: e3:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:B0:30:92:9B:10:EC:3E:9C:69:4E:F3:21:E0:1A:63:99:EE:C7:C1 X509v3 Authority Key Identifier: keyid:A2:68:55:98:0B:27:3E:5A:E5:7D:C1:B9:EB:22:E9:F5:F3:A7:CD:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/omhVmAsnPlrlfcG56yLp9fOnzfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/bLAwkpsQ7D6caU7zIeAaY5nux8E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/omhVmAsnPlrlfcG56yLp9fOnzfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 90.147.0.0/16 138.41.0.0/16 185.191.180.0/22 192.167.0.0/16 193.204.0.0-193.206.255.255 212.189.128.0/17 IPv6: 2001:760::/32 Signature Algorithm: sha256WithRSAEncryption 3c:89:49:26:b4:6d:c4:c2:d1:cc:c9:28:90:e0:3c:19:ca:1d: d0:fa:b6:41:ea:bf:20:b9:fd:9c:f6:70:54:1b:af:45:4f:2e: 3a:17:d3:c9:d7:ac:3f:aa:bb:e7:14:60:f2:00:d8:57:33:a3: 3c:92:3d:ed:3a:6b:71:c2:33:37:a0:5f:ea:b7:0f:84:73:44: b3:2d:67:c6:7b:49:28:1a:33:76:65:ed:65:72:08:4b:46:e8: 48:53:c9:87:0a:b8:25:21:cc:b7:3a:8f:94:41:5c:e7:9a:d0: ca:43:3c:a9:a2:45:53:f6:18:bb:ba:14:c5:46:8b:dc:ce:52: c7:cb:12:7f:0f:d3:9d:40:eb:2b:33:54:da:0b:5d:5c:0c:7f: f8:b9:50:14:92:8b:08:c8:67:3a:aa:e5:13:79:de:a4:19:73: f8:86:2e:26:72:f8:a0:db:d3:07:52:27:de:42:64:60:52:60: ab:4e:4e:48:28:1a:6a:be:aa:09:fb:b7:74:71:f1:5d:3f:16: 4c:68:45:c5:b0:f2:69:36:28:7d:e0:f4:04:82:66:bf:30:69: f0:77:15:cd:eb:cd:c6:6e:30:27:e0:60:18:e6:a8:b8:c1:f8: ce:2d:08:40:e0:a3:3c:84:15:3d:31:ee:9e:82:4a:36:79:fb: 24:cd:78:fa -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZt8E1CxFnzG9oFvOgW5WIU7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyNjg1NTk4MGIyNzNlNWFlNTdkYzFiOWViMjJlOWY1ZjNh N2NkZjcwHhcNMjYwMTAyMDAxOTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Y2IwMzA5MjliMTBlYzNlOWM2OTRlZjMyMWUwMWE2Mzk5ZWVjN2MxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEe2fzhKgMLz444I5xQnLUp/W3ee +h+lsltj3TQladYOn7HXOcPrLiqqb6i+XquQl8NqgiYlaICu9Z1ZoK31IFPs4P8H Mn2512XIpovg7RJ8IcZHYEOlwWiC1iCqcvyqVykdU2kW7xyCJvyM5L0Sbq/+BNeH +F3gHsN8un7QZWD/FrsBcKUiF9zv2z1Yxum+d3NYgT2lGYICnkEVKZ6Ghm+xMp2K ipgbMSSQa4Hlj9cgp6FsTahHXc28oEipKm3E97RxGj/jyvUVu8ZY8cQ4r71SaxrO CsyOV/cV72fAO1aWjgAzWDIpwO99rl0N3iOmb+A0mQzPCjj48mijpHzjswIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFGywMJKbEOw+nGlO8yHgGmOZ7sfBMB8GA1UdIwQY MBaAFKJoVZgLJz5a5X3Buesi6fXzp833MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb21oVm1Bc25QbHJsZmNHNTZ5THA5Zk9uemZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi84YWZkZGEtNmM2Yi00NTg3LThhMjEt ODFlYjYxZjViNzFlLzEvYkxBd2twc1E3RDZjYVU3ekllQWFZNW51eDhFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi84YWZkZGEtNmM2Yi00NTg3LThhMjEtODFlYjYxZjViNzFl LzEvb21oVm1Bc25QbHJsZmNHNTZ5THA5Zk9uemZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjAtBAIAATAnAwMAWpMDAwCK KQMEArm/tAMDAMCnMAoDAwLBzAMDAMHOAwQH1L2AMA0EAgACMAcDBQAgAQdgMA0G CSqGSIb3DQEBCwUAA4IBAQA8iUkmtG3EwtHMySiQ4DwZyh3Q+rZB6r8guf2c9nBU G69FTy46F9PJ16w/qrvnFGDyANhXM6M8kj3tOmtxwjM3oF/qtw+Ec0SzLWfGe0ko GjN2Ze1lcghLRuhIU8mHCrglIcy3Oo+UQVznmtDKQzypokVT9hi7uhTFRovczlLH yxJ/D9OdQOsrM1TaC11cDH/4uVAUkosIyGc6quUTed6kGXP4hi4mcvig29MHUife QmRgUmCrTk5IKBpqvqoJ+7d0cfFdPxZMaEXFsPJpNih94PQEgma/MGnwdxXN683G bjAn4GAY5qi4wfjOLQhA4KM8hBU9Me6egko2efskzXj6 -----END CERTIFICATE-----Generated at Mon Jan 12 06:44:48 2026 by rpki-client