This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/1-LMKznmI2o1CuqKnA77QllsKMN4.roa File: 1-LMKznmI2o1CuqKnA77QllsKMN4.roa (raw, json) Hash identifier: YHVLWSM+xXHu5eHWO/2k1Q1e9rhO+OsEySGIPRLfmlw= Subject key identifier: F8:B3:0A:CE:79:88:DA:8D:42:BA:A2:A7:03:BE:D0:96:5B:0A:30:DE Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Certificate serial: 019B77C67C18655E79F8614DF43A77FFBAB2 Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/1-LMKznmI2o1CuqKnA77QllsKMN4.roa Signing time: Thu 01 Jan 2026 04:17:35 +0000 ROA not before: Thu 01 Jan 2026 04:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19836 IP address blocks: 81.19.195.30/32 maxlen: 32 81.19.195.31/32 maxlen: 32 185.100.0.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:7c:18:65:5e:79:f8:61:4d:f4:3a:77:ff:ba:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Validity Not Before: Jan 1 04:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f8b30ace7988da8d42baa2a703bed0965b0a30de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a1:e3:da:ec:79:26:d0:01:7f:93:e0:81:3e: da:b6:3d:39:42:8c:62:58:78:cc:aa:81:db:7e:e2: 06:22:c9:09:d0:4b:e4:80:80:2c:bf:6e:3f:67:ab: 9d:5d:e4:21:8a:87:24:80:b0:ac:d3:77:94:f4:0f: 70:8e:c7:3f:48:f0:69:f6:a8:9f:a3:ed:2d:d9:10: 3d:44:64:36:08:9a:c6:52:03:8f:85:45:90:9d:d6: b0:f6:46:99:05:2e:f6:63:65:fc:d2:95:2f:43:68: b8:c0:1e:01:52:7e:46:1e:04:b8:41:3a:5c:dd:1d: 6f:46:43:45:44:ab:24:98:88:10:2a:04:01:f4:f6: b9:83:c7:5f:08:12:17:29:e7:5a:97:34:ee:b0:a2: 0e:6a:a2:2d:c3:ac:f2:7c:c6:ff:58:20:e6:82:d5: c0:62:b4:c8:18:6d:cc:b4:bb:50:71:9d:5d:ea:56: 99:d3:67:05:2a:0e:d1:0d:21:57:8f:6e:ef:1d:dc: e9:d8:25:c0:77:49:eb:29:4c:65:96:a7:49:b5:d1: 3a:98:d2:ef:ed:1d:b8:94:29:be:91:fe:72:a2:f2: d5:ea:0b:24:74:20:e4:66:91:36:6b:4d:99:67:2c: 79:38:11:cd:ea:65:d3:5a:01:ce:1c:0e:8f:b3:10: ed:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:B3:0A:CE:79:88:DA:8D:42:BA:A2:A7:03:BE:D0:96:5B:0A:30:DE X509v3 Authority Key Identifier: keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/1-LMKznmI2o1CuqKnA77QllsKMN4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.19.195.30/31 185.100.0.53/32 Signature Algorithm: sha256WithRSAEncryption 01:f4:d7:4d:9f:8b:04:46:70:89:62:a9:81:5c:d9:b2:80:ad: 12:2a:ab:19:1c:0a:c8:96:2f:80:cd:b8:e9:73:d0:24:bb:38: 1d:aa:30:cd:b4:13:01:67:f5:3e:36:0a:5d:80:03:04:49:53: a5:9c:e6:5f:d3:23:cc:6b:fb:84:17:2c:3d:58:ae:30:a2:eb: 32:d1:65:ff:c6:6c:d5:92:20:b7:03:6c:8a:a2:bb:17:79:91: 6f:4d:e6:a7:96:39:3f:e4:18:b6:7a:03:f4:69:fd:65:a8:e5: de:88:f2:13:d8:cb:26:f7:ad:e6:48:05:e8:19:55:28:fc:37: b2:3c:9e:3f:33:81:4e:e8:20:e1:dd:81:bd:05:c8:94:35:97: 91:73:80:12:3a:42:bd:07:65:24:02:6b:50:07:2a:f6:79:93: 11:3b:be:0c:a5:98:44:7b:92:45:a6:ba:c1:c5:aa:64:1c:fa: 54:4d:3a:1e:2f:2c:dd:4b:67:6b:0f:71:5e:bf:3f:e3:63:f4: 0e:b8:b9:e2:8d:72:48:b9:aa:e9:d3:dc:44:a9:a6:88:20:43: b4:1c:69:d2:2f:5b:bc:0f:21:ea:49:3d:cc:44:11:e5:3e:51: d9:b0:fc:01:90:e9:cd:85:ad:70:8d:80:f3:12:a9:a5:74:8f: d9:9a:3b:93 -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgISAZt3xnwYZV55+GFN9Dp3/7qyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl MDZkNTIwHhcNMjYwMTAxMDQxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOGIzMGFjZTc5ODhkYThkNDJiYWEyYTcwM2JlZDA5NjViMGEzMGRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6Hj2ux5JtABf5PggT7atj05Qoxi WHjMqoHbfuIGIskJ0EvkgIAsv24/Z6udXeQhiockgLCs03eU9A9wjsc/SPBp9qif o+0t2RA9RGQ2CJrGUgOPhUWQndaw9kaZBS72Y2X80pUvQ2i4wB4BUn5GHgS4QTpc 3R1vRkNFRKskmIgQKgQB9Pa5g8dfCBIXKedalzTusKIOaqItw6zyfMb/WCDmgtXA YrTIGG3MtLtQcZ1d6laZ02cFKg7RDSFXj27vHdzp2CXAd0nrKUxllqdJtdE6mNLv 7R24lCm+kf5yovLV6gskdCDkZpE2a02ZZyx5OBHN6mXTWgHOHA6PsxDtSQIDAQAB o4ICEjCCAg4wHQYDVR0OBBYEFPizCs55iNqNQrqipwO+0JZbCjDeMB8GA1UdIwQY MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt MzZjY2I1YTA2MTk1LzEvMS1MTUt6bm1JMm8xQ3VxS25BNzdRbGxzS01ONC5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZmEvYmM5MmU2LWM4ZWUtNDhmMC1hZTdmLTM2Y2NiNWEwNjE5 NS8xL3REZ0xtNHdIQkZmdFZMeEYwUzNkMGtUZ2JWSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAnBggrBgEFBQcBBwEB/wQYMBYwFAQCAAEwDgMFAVETwx4D BQC5ZAA1MA0GCSqGSIb3DQEBCwUAA4IBAQAB9NdNn4sERnCJYqmBXNmygK0SKqsZ HArIli+Azbjpc9AkuzgdqjDNtBMBZ/U+NgpdgAMESVOlnOZf0yPMa/uEFyw9WK4w ousy0WX/xmzVkiC3A2yKorsXeZFvTeanljk/5Bi2egP0af1lqOXeiPIT2Msm963m SAXoGVUo/DeyPJ4/M4FO6CDh3YG9BciUNZeRc4ASOkK9B2UkAmtQByr2eZMRO74M pZhEe5JFprrBxapkHPpUTToeLyzdS2drD3Fevz/jY/QOuLnijXJIuarp09xEqaaI IEO0HGnSL1u8DyHqST3MRBHlPlHZsPwBkOnNha1wjYDzEqmldI/ZmjuT -----END CERTIFICATE-----Generated at Mon Jan 26 00:37:17 2026 by rpki-client