This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/1-CtLRtggU1qlJeC3K5K6foDj5KQ.roa File: 1-CtLRtggU1qlJeC3K5K6foDj5KQ.roa (raw, json) Hash identifier: eKnUZ/ub3oXoRv/eaGDSjllUx/Yab8z/Dz9glj+wXEs= Subject key identifier: F8:2B:4B:46:D8:20:53:5A:A5:25:E0:B7:2B:92:BA:7E:80:E3:E4:A4 Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Certificate serial: 019B77C6886014C2F0DFDB17F4A15D681844 Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/1-CtLRtggU1qlJeC3K5K6foDj5KQ.roa Signing time: Thu 01 Jan 2026 04:17:38 +0000 ROA not before: Thu 01 Jan 2026 04:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 40717 IP address blocks: 81.19.195.30/32 maxlen: 32 81.19.195.31/32 maxlen: 32 185.100.0.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:88:60:14:c2:f0:df:db:17:f4:a1:5d:68:18:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Validity Not Before: Jan 1 04:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f82b4b46d820535aa525e0b72b92ba7e80e3e4a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:6c:f0:5f:f6:54:f6:c0:bb:12:79:91:22:4e: 12:f4:de:d5:7e:e3:b1:fa:bd:1d:8b:9a:71:e9:af: 35:e8:3a:fd:c1:b6:56:e5:26:52:38:a5:3a:5e:f7: d4:70:aa:ef:aa:69:c9:7d:b5:60:f8:df:66:7b:c4: ec:26:00:86:ac:be:8d:c9:cd:cf:9e:ad:c2:85:fc: ad:a9:29:51:ce:53:43:86:c6:2e:ff:61:d2:e8:8e: f1:78:b3:dc:14:c9:7c:3a:33:08:8a:44:25:c6:ee: 0f:a8:34:a7:7a:c2:64:9a:55:9d:b2:80:79:cc:2d: bf:56:7d:7c:42:d1:66:2e:b1:80:26:aa:43:23:0d: 09:d4:3f:bc:41:11:7b:08:5a:34:bd:63:cb:51:31: 85:55:c6:a7:7e:4e:cf:df:6c:af:62:2a:85:a2:61: e3:99:1d:f6:f0:81:47:82:27:c8:f3:8e:f5:ae:11: 40:5b:9f:f4:35:b8:30:26:91:4d:68:65:bc:50:53: fa:44:cc:64:63:8a:99:cf:59:08:a0:3d:e5:8e:fe: 00:10:12:87:ae:66:31:ae:bf:db:6c:6d:99:25:b1: 16:87:23:f1:1e:5e:69:64:2a:9d:4b:1f:05:26:66: 14:20:0f:a7:56:e3:a8:a3:90:6a:ac:92:2f:7e:a2: 0f:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:2B:4B:46:D8:20:53:5A:A5:25:E0:B7:2B:92:BA:7E:80:E3:E4:A4 X509v3 Authority Key Identifier: keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/1-CtLRtggU1qlJeC3K5K6foDj5KQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.19.195.30/31 185.100.0.53/32 Signature Algorithm: sha256WithRSAEncryption 5c:ec:43:f0:d0:ba:05:a5:f4:2e:e9:f8:21:82:a2:c7:b3:d2: 21:1f:1d:90:fa:90:64:15:2c:60:2e:66:c9:ff:a0:4d:5c:35: 9b:5f:50:31:e6:d3:a8:5b:04:35:1f:64:6f:86:1a:92:04:cb: e6:0e:47:9e:e3:79:3a:bc:68:35:ab:d0:21:00:56:cf:cc:3d: 85:a6:7a:1b:59:0e:72:ec:7c:c1:57:af:54:51:cd:16:cd:63: 17:c3:8a:3f:c8:f5:2e:13:ce:ad:df:2b:4c:80:11:4b:0e:80: 58:64:64:ad:fd:d9:81:32:74:71:2e:53:51:13:d3:b5:96:1d: c1:c4:4c:bc:7f:a5:a5:65:b6:7b:1c:05:03:11:58:e7:3c:a1: b1:ce:a6:ac:6a:a5:ea:9f:10:5d:38:2f:09:05:6d:0b:1a:3a: cf:d3:5d:96:19:ab:f3:94:4e:b4:12:21:63:57:57:b0:c3:c0: 02:f2:e3:57:6d:b2:c6:28:3f:84:f5:25:c9:04:d8:74:87:99: b7:ba:36:a5:51:18:d4:7d:bf:84:2b:64:49:02:d0:c1:be:3d: 75:2a:e0:5f:2a:2f:63:be:78:e7:44:46:87:2d:62:5a:e8:03: 6a:dd:a6:00:e7:c0:02:57:c9:dc:ce:76:48:26:0c:9e:ae:40: 07:d4:c2:7d -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgISAZt3xohgFMLw39sX9KFdaBhEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl MDZkNTIwHhcNMjYwMTAxMDQxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmODJiNGI0NmQ4MjA1MzVhYTUyNWUwYjcyYjkyYmE3ZTgwZTNlNGE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGzwX/ZU9sC7EnmRIk4S9N7VfuOx +r0di5px6a816Dr9wbZW5SZSOKU6XvfUcKrvqmnJfbVg+N9me8TsJgCGrL6Nyc3P nq3ChfytqSlRzlNDhsYu/2HS6I7xeLPcFMl8OjMIikQlxu4PqDSnesJkmlWdsoB5 zC2/Vn18QtFmLrGAJqpDIw0J1D+8QRF7CFo0vWPLUTGFVcanfk7P32yvYiqFomHj mR328IFHgifI8471rhFAW5/0NbgwJpFNaGW8UFP6RMxkY4qZz1kIoD3ljv4AEBKH rmYxrr/bbG2ZJbEWhyPxHl5pZCqdSx8FJmYUIA+nVuOoo5BqrJIvfqIPkQIDAQAB o4ICEjCCAg4wHQYDVR0OBBYEFPgrS0bYIFNapSXgtyuSun6A4+SkMB8GA1UdIwQY MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt MzZjY2I1YTA2MTk1LzEvMS1DdExSdGdnVTFxbEplQzNLNUs2Zm9EajVLUS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZmEvYmM5MmU2LWM4ZWUtNDhmMC1hZTdmLTM2Y2NiNWEwNjE5 NS8xL3REZ0xtNHdIQkZmdFZMeEYwUzNkMGtUZ2JWSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAnBggrBgEFBQcBBwEB/wQYMBYwFAQCAAEwDgMFAVETwx4D BQC5ZAA1MA0GCSqGSIb3DQEBCwUAA4IBAQBc7EPw0LoFpfQu6fghgqLHs9IhHx2Q +pBkFSxgLmbJ/6BNXDWbX1Ax5tOoWwQ1H2RvhhqSBMvmDkee43k6vGg1q9AhAFbP zD2FpnobWQ5y7HzBV69UUc0WzWMXw4o/yPUuE86t3ytMgBFLDoBYZGSt/dmBMnRx LlNRE9O1lh3BxEy8f6WlZbZ7HAUDEVjnPKGxzqasaqXqnxBdOC8JBW0LGjrP012W GavzlE60EiFjV1eww8AC8uNXbbLGKD+E9SXJBNh0h5m3ujalURjUfb+EK2RJAtDB vj11KuBfKi9jvnjnREaHLWJa6ANq3aYA58ACV8ncznZIJgyerkAH1MJ9 -----END CERTIFICATE-----Generated at Sun Jan 25 23:03:55 2026 by rpki-client