This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/1E0elQ9BgWOBfHm2ALjsxLxLsPQ.roa File: 1E0elQ9BgWOBfHm2ALjsxLxLsPQ.roa (raw, json) Hash identifier: Mg91YlvyM4UxqqaPJDNERcYj10IKUt2EzHWBF5Dds98= Subject key identifier: D4:4D:1E:95:0F:41:81:63:81:7C:79:B6:00:B8:EC:C4:BC:4B:B0:F4 Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Certificate serial: 019B77C69801FE823A2F35D0D4A121EAC7D7 Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/1E0elQ9BgWOBfHm2ALjsxLxLsPQ.roa Signing time: Thu 01 Jan 2026 04:17:42 +0000 ROA not before: Thu 01 Jan 2026 04:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396579 IP address blocks: 81.19.195.30/32 maxlen: 32 81.19.195.31/32 maxlen: 32 185.100.0.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:98:01:fe:82:3a:2f:35:d0:d4:a1:21:ea:c7:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Validity Not Before: Jan 1 04:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d44d1e950f418163817c79b600b8ecc4bc4bb0f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:78:32:0d:e5:ef:b9:a4:9b:63:e9:cf:96:76: 22:5c:0b:99:6e:12:03:fa:ba:28:ae:96:4d:cd:24: 9b:69:27:49:9a:2a:9f:0d:1b:77:98:79:e9:77:43: be:54:91:32:87:77:71:dd:d6:a8:1d:46:cb:80:2f: 39:17:81:9c:83:2f:95:61:e3:7c:d9:9d:a0:65:67: cc:98:a0:14:c7:a8:26:d8:22:85:1e:32:82:67:24: a3:7f:b8:88:78:ea:21:c8:1e:ca:8d:48:fb:47:f3: e6:8d:04:1a:b2:8f:68:11:7a:64:ba:77:23:37:69: 4e:2e:7a:5f:a5:e2:25:11:19:10:8a:eb:ec:cd:6c: 71:e1:a8:83:b5:54:ef:2f:8c:ce:49:8f:6d:a1:99: 18:22:82:b2:47:b0:77:db:16:4d:99:47:29:d1:c5: ec:ce:9f:b6:a7:e3:b1:6b:0d:68:a1:70:b3:9a:eb: c4:9d:33:30:1a:9d:02:67:8b:20:6c:64:e0:c9:77: 5a:48:10:13:7a:7e:38:d5:ec:46:ce:b1:f6:77:9f: 0e:ee:20:1e:d5:b5:81:96:ce:5f:4b:b0:f1:5f:93: 48:5a:fd:75:b7:a0:7f:d5:ed:a6:1c:a0:76:16:13: 33:7c:01:2f:79:37:7f:e7:c0:da:1d:0b:b8:7b:20: 7c:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:4D:1E:95:0F:41:81:63:81:7C:79:B6:00:B8:EC:C4:BC:4B:B0:F4 X509v3 Authority Key Identifier: keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/1E0elQ9BgWOBfHm2ALjsxLxLsPQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.19.195.30/31 185.100.0.53/32 Signature Algorithm: sha256WithRSAEncryption 3d:b7:9a:bc:b9:80:79:b1:2a:3f:e4:57:e5:92:80:5b:03:85: 97:6b:ef:85:e2:e3:79:1d:be:f1:f1:69:1c:52:f5:88:03:21: 24:63:6d:52:e4:84:d0:50:08:d7:88:76:71:89:fe:1a:56:10: b0:d3:9a:cb:8d:2f:43:a1:86:6f:3e:41:e5:62:c8:66:60:2a: fb:53:3f:92:f7:f7:77:36:32:32:6e:c6:db:e0:c0:81:77:12: d2:02:df:1d:13:b1:b8:e6:51:a6:fe:e0:70:ad:c7:b8:df:75: 51:7d:fd:9c:83:06:46:96:87:4c:4c:39:37:48:9d:58:6c:aa: 02:12:fe:a5:30:99:3d:de:1f:07:f8:3e:d1:e3:cc:bf:7d:fc: 2a:22:a2:c9:0d:0f:4f:da:6f:4f:fe:b4:f7:8d:8e:b3:dc:c2: 07:15:63:d8:4c:b7:64:b8:b6:f0:ae:19:12:2f:00:19:9e:f8: f2:31:69:ca:fb:cc:ad:e6:c4:c8:81:d0:3a:d1:e2:84:f2:6b: d4:4d:2a:65:53:ca:bd:a6:d3:6f:1d:26:d7:1d:56:7f:78:84: bd:a4:a0:bf:ec:c4:0e:8e:b2:93:a2:61:17:de:89:f5:06:67: 52:f6:0d:57:18:2b:00:3f:00:75:5d:ce:1d:49:69:15:91:82: 21:79:8e:51 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3xpgB/oI6LzXQ1KEh6sfXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl MDZkNTIwHhcNMjYwMTAxMDQxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNDRkMWU5NTBmNDE4MTYzODE3Yzc5YjYwMGI4ZWNjNGJjNGJiMGY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyngyDeXvuaSbY+nPlnYiXAuZbhID +roorpZNzSSbaSdJmiqfDRt3mHnpd0O+VJEyh3dx3daoHUbLgC85F4Gcgy+VYeN8 2Z2gZWfMmKAUx6gm2CKFHjKCZySjf7iIeOohyB7KjUj7R/PmjQQaso9oEXpkuncj N2lOLnpfpeIlERkQiuvszWxx4aiDtVTvL4zOSY9toZkYIoKyR7B32xZNmUcp0cXs zp+2p+Oxaw1ooXCzmuvEnTMwGp0CZ4sgbGTgyXdaSBATen441exGzrH2d58O7iAe 1bWBls5fS7DxX5NIWv11t6B/1e2mHKB2FhMzfAEveTd/58DaHQu4eyB8ewIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFNRNHpUPQYFjgXx5tgC47MS8S7D0MB8GA1UdIwQY MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt MzZjY2I1YTA2MTk1LzEvMUUwZWxROUJnV09CZkhtMkFManN4THhMc1BRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1 LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUBURPDHgMF ALlkADUwDQYJKoZIhvcNAQELBQADggEBAD23mry5gHmxKj/kV+WSgFsDhZdr74Xi 43kdvvHxaRxS9YgDISRjbVLkhNBQCNeIdnGJ/hpWELDTmsuNL0Ohhm8+QeViyGZg KvtTP5L393c2MjJuxtvgwIF3EtIC3x0TsbjmUab+4HCtx7jfdVF9/ZyDBkaWh0xM OTdInVhsqgIS/qUwmT3eHwf4PtHjzL99/CoioskND0/ab0/+tPeNjrPcwgcVY9hM t2S4tvCuGRIvABme+PIxacr7zK3mxMiB0DrR4oTya9RNKmVTyr2m028dJtcdVn94 hL2koL/sxA6OspOiYRfeifUGZ1L2DVcYKwA/AHVdzh1JaRWRgiF5jlE= -----END CERTIFICATE-----Generated at Mon Jan 26 07:56:16 2026 by rpki-client