This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/0fgKVNTZGexkwvA2ch5hocW3LCw.roa File: 0fgKVNTZGexkwvA2ch5hocW3LCw.roa (raw, json) Hash identifier: f1Y4oaLFAvRyg26jAGEddNNst0r9z2IwNml1fVou900= Subject key identifier: D1:F8:0A:54:D4:D9:19:EC:64:C2:F0:36:72:1E:61:A1:C5:B7:2C:2C Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Certificate serial: 019B77C6A3BB40F03B98784C25C2B60EEBB9 Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/0fgKVNTZGexkwvA2ch5hocW3LCw.roa Signing time: Thu 01 Jan 2026 04:17:45 +0000 ROA not before: Thu 01 Jan 2026 04:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396605 IP address blocks: 81.19.195.30/32 maxlen: 32 81.19.195.31/32 maxlen: 32 185.100.0.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:a3:bb:40:f0:3b:98:78:4c:25:c2:b6:0e:eb:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Validity Not Before: Jan 1 04:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d1f80a54d4d919ec64c2f036721e61a1c5b72c2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:5c:6a:fa:2a:a7:85:ee:f9:4f:78:d3:ff:c6: 6c:fb:a6:eb:4a:0f:e2:bc:b8:59:ab:f4:03:ef:80: 3e:15:76:90:7d:e1:76:ef:81:89:e3:59:b2:ae:32: ad:8e:de:a2:27:08:f8:69:3f:89:5e:af:88:8e:66: f0:ad:50:57:fe:2e:03:a0:e7:df:eb:da:1c:ee:4a: 4f:91:6e:35:59:69:71:3e:d4:95:92:f6:0f:de:ff: 74:2b:51:31:0d:71:3b:f0:57:97:71:bd:f5:12:34: 6f:2b:0b:7c:fe:da:0f:d5:4d:10:f2:47:88:a5:cf: ab:cf:d3:50:78:ad:55:2b:a0:02:e2:75:b5:96:1d: 59:ca:6f:61:ca:49:d6:dc:5c:ab:43:7e:72:8b:8a: f3:50:54:69:31:37:d6:9e:8d:7b:e5:de:16:1e:99: 48:71:91:ae:97:c0:9d:91:19:5c:c3:02:2e:97:46: 84:76:91:54:b8:f8:5d:ce:e4:a6:82:2b:1e:76:63: cd:c0:f4:ac:e1:61:dc:37:90:cc:1a:8b:20:3d:d0: 25:c7:b6:77:b9:78:51:0d:86:b7:0b:66:f6:31:96: 13:f5:be:e6:4d:2f:14:6a:50:4e:40:23:26:97:b6: c6:0f:f7:36:c4:52:48:d9:1a:2d:66:e3:bb:d3:8a: 46:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:F8:0A:54:D4:D9:19:EC:64:C2:F0:36:72:1E:61:A1:C5:B7:2C:2C X509v3 Authority Key Identifier: keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/0fgKVNTZGexkwvA2ch5hocW3LCw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.19.195.30/31 185.100.0.53/32 Signature Algorithm: sha256WithRSAEncryption 39:8e:80:bd:5a:39:a8:bc:11:d9:c5:b9:d6:3f:39:6e:6b:aa: ef:30:0d:cc:85:bc:8c:8e:68:c8:ce:d4:c4:b3:8c:9b:3f:8a: ce:60:b8:78:95:d0:df:9a:b1:7d:3d:eb:54:a0:3c:ec:4c:a9: a4:82:ff:7a:13:c8:c8:16:50:19:c3:46:c4:e2:c8:22:d2:87: 33:ef:78:1e:2d:af:25:40:b0:d4:83:94:50:ee:70:b0:fc:59: c2:06:88:f3:64:24:b2:3d:34:59:00:ca:70:19:17:e4:3e:cd: d1:04:b1:67:24:dc:99:05:9b:63:41:7b:72:4a:d2:ac:a8:eb: e5:9a:42:43:e7:f2:94:e7:1f:3b:ff:d0:7a:b1:e7:cb:52:fc: 63:8e:39:39:18:34:37:72:57:1d:72:3c:06:2f:45:3d:a6:f5: 98:e8:4b:b1:75:29:c3:c7:06:0f:cb:a3:e2:1a:a8:78:06:87: ab:d1:2a:0d:e7:7c:08:bd:3a:c4:23:0b:51:e4:26:df:b1:9d: 3e:6c:a7:1a:f2:7f:0e:f6:72:fd:89:3e:58:a7:84:08:bd:b9: fc:e2:73:c2:92:05:c5:cb:13:e6:8c:24:63:4f:f4:e9:c6:cc: f5:e5:07:c3:97:f5:ed:5f:25:bc:d4:75:70:2d:43:8a:80:3b: 11:e7:53:bf -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3xqO7QPA7mHhMJcK2Duu5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl MDZkNTIwHhcNMjYwMTAxMDQxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMWY4MGE1NGQ0ZDkxOWVjNjRjMmYwMzY3MjFlNjFhMWM1YjcyYzJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA01xq+iqnhe75T3jT/8Zs+6brSg/i vLhZq/QD74A+FXaQfeF274GJ41myrjKtjt6iJwj4aT+JXq+IjmbwrVBX/i4DoOff 69oc7kpPkW41WWlxPtSVkvYP3v90K1ExDXE78FeXcb31EjRvKwt8/toP1U0Q8keI pc+rz9NQeK1VK6AC4nW1lh1Zym9hyknW3FyrQ35yi4rzUFRpMTfWno175d4WHplI cZGul8CdkRlcwwIul0aEdpFUuPhdzuSmgisedmPNwPSs4WHcN5DMGosgPdAlx7Z3 uXhRDYa3C2b2MZYT9b7mTS8UalBOQCMml7bGD/c2xFJI2RotZuO704pGzwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFNH4ClTU2RnsZMLwNnIeYaHFtywsMB8GA1UdIwQY MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt MzZjY2I1YTA2MTk1LzEvMGZnS1ZOVFpHZXhrd3ZBMmNoNWhvY1czTEN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1 LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUBURPDHgMF ALlkADUwDQYJKoZIhvcNAQELBQADggEBADmOgL1aOai8EdnFudY/OW5rqu8wDcyF vIyOaMjO1MSzjJs/is5guHiV0N+asX0961SgPOxMqaSC/3oTyMgWUBnDRsTiyCLS hzPveB4tryVAsNSDlFDucLD8WcIGiPNkJLI9NFkAynAZF+Q+zdEEsWck3JkFm2NB e3JK0qyo6+WaQkPn8pTnHzv/0Hqx58tS/GOOOTkYNDdyVx1yPAYvRT2m9ZjoS7F1 KcPHBg/Lo+IaqHgGh6vRKg3nfAi9OsQjC1HkJt+xnT5spxryfw72cv2JPlinhAi9 ufzic8KSBcXLE+aMJGNP9OnGzPXlB8OX9e1fJbzUdXAtQ4qAOxHnU78= -----END CERTIFICATE-----Generated at Mon Jan 26 00:37:32 2026 by rpki-client