This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/1vV7AiChR3iWHzSgOaJvunnomPk.roa File: 1vV7AiChR3iWHzSgOaJvunnomPk.roa (raw, json) Hash identifier: WBq4QnjMULYNuCsDYPJAJh+vSWIMGEZXZMFeCzkVMOc= Subject key identifier: D6:F5:7B:02:20:A1:47:78:96:1F:34:A0:39:A2:6F:BA:79:E8:98:F9 Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Certificate serial: 019B77C693545CDACF316C91276F61B70D6E Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/1vV7AiChR3iWHzSgOaJvunnomPk.roa Signing time: Thu 01 Jan 2026 04:17:41 +0000 ROA not before: Thu 01 Jan 2026 04:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396567 IP address blocks: 81.19.195.30/32 maxlen: 32 81.19.195.31/32 maxlen: 32 185.100.0.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:93:54:5c:da:cf:31:6c:91:27:6f:61:b7:0d:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Validity Not Before: Jan 1 04:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d6f57b0220a14778961f34a039a26fba79e898f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:41:09:37:ab:97:71:90:92:81:44:82:4b:7f: ad:53:29:7c:72:98:10:e8:9d:26:0d:09:41:ab:72: a6:d6:23:e1:74:a0:09:0d:17:71:63:89:02:c2:b5: 60:4e:1c:1a:f7:12:5e:4c:ca:25:60:78:5f:5b:88: a1:54:52:37:40:a5:ec:38:31:c8:9f:4c:c8:a3:5f: d0:b6:98:ae:4d:79:3e:2d:c8:de:a7:f6:70:e9:84: 73:7d:34:0f:ad:1c:0d:3b:06:3c:5a:35:e6:31:93: c3:7f:94:ca:40:45:a9:28:36:18:2d:ef:2d:fb:de: bc:2e:db:17:59:fe:16:a6:d6:b9:ea:20:8c:a2:58: 78:15:99:9d:43:6e:e4:45:bd:94:d0:7d:07:05:c2: 09:50:f2:24:92:19:06:46:4d:15:44:51:49:a1:a4: bc:68:78:5d:07:eb:1d:d8:33:42:55:89:39:a3:c9: 1e:0c:0f:ad:dc:56:f9:6b:23:41:7e:29:b4:40:67: b2:ff:b3:e3:37:4c:c3:f8:57:6e:b0:08:f1:f6:e0: ef:bd:f4:ce:f7:a0:ce:fc:f0:a5:24:37:f3:1e:95: e7:90:e0:9c:04:fe:2a:3b:ed:ab:6e:01:67:4f:36: 9d:f0:25:36:99:6b:1e:b9:ac:2a:9d:30:7b:77:e0: c0:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:F5:7B:02:20:A1:47:78:96:1F:34:A0:39:A2:6F:BA:79:E8:98:F9 X509v3 Authority Key Identifier: keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/1vV7AiChR3iWHzSgOaJvunnomPk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.19.195.30/31 185.100.0.53/32 Signature Algorithm: sha256WithRSAEncryption b3:b8:c4:66:30:9a:bc:97:04:ba:3e:3e:1f:23:04:7a:65:53: cd:99:e7:59:1c:f9:28:3b:f8:7d:ac:53:d1:48:ff:14:46:b7: 03:b4:43:30:7f:4e:7c:c6:dc:8b:1d:f6:51:4d:c4:39:19:5e: eb:de:3d:1e:f8:d6:6b:87:d2:17:ab:82:44:f2:22:d5:0c:87: 76:3c:eb:5b:08:05:4a:75:e8:e9:3f:5e:cf:7b:8d:e8:c9:b8: 1b:57:cc:77:3d:4c:84:20:94:bf:1c:e5:05:f7:b5:64:2b:cf: fb:6a:4c:a0:1d:89:60:2e:1a:3e:c4:95:7c:5c:38:ce:a2:88: 8d:55:09:f8:f9:e0:2b:0f:33:89:5f:56:0f:0d:7c:db:9a:93: 9e:18:ea:b5:6c:fc:30:8f:57:5d:7e:04:fb:09:25:8b:0f:7b: d4:3e:d0:70:61:d4:b6:51:db:8b:44:a2:19:de:7c:1d:14:b8: 51:39:15:1f:32:6c:be:16:0c:27:d4:2d:c1:47:b6:9a:55:c1: 3c:3d:5a:87:85:39:f6:79:43:91:8a:15:6a:0d:3a:b1:73:b0: 0e:e6:34:96:7c:e8:be:2b:03:06:9f:09:80:ac:d5:fd:1e:36: 86:fe:12:d5:eb:6b:1f:0f:89:3b:67:29:d6:ae:46:85:4a:8d: 23:61:92:b1 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3xpNUXNrPMWyRJ29htw1uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl MDZkNTIwHhcNMjYwMTAxMDQxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNmY1N2IwMjIwYTE0Nzc4OTYxZjM0YTAzOWEyNmZiYTc5ZTg5OGY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykEJN6uXcZCSgUSCS3+tUyl8cpgQ 6J0mDQlBq3Km1iPhdKAJDRdxY4kCwrVgThwa9xJeTMolYHhfW4ihVFI3QKXsODHI n0zIo1/QtpiuTXk+Lcjep/Zw6YRzfTQPrRwNOwY8WjXmMZPDf5TKQEWpKDYYLe8t +968LtsXWf4Wpta56iCMolh4FZmdQ27kRb2U0H0HBcIJUPIkkhkGRk0VRFFJoaS8 aHhdB+sd2DNCVYk5o8keDA+t3Fb5ayNBfim0QGey/7PjN0zD+FdusAjx9uDvvfTO 96DO/PClJDfzHpXnkOCcBP4qO+2rbgFnTzad8CU2mWseuawqnTB7d+DAewIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFNb1ewIgoUd4lh80oDmib7p56Jj5MB8GA1UdIwQY MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt MzZjY2I1YTA2MTk1LzEvMXZWN0FpQ2hSM2lXSHpTZ09hSnZ1bm5vbVBrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1 LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUBURPDHgMF ALlkADUwDQYJKoZIhvcNAQELBQADggEBALO4xGYwmryXBLo+Ph8jBHplU82Z51kc +Sg7+H2sU9FI/xRGtwO0QzB/TnzG3Isd9lFNxDkZXuvePR741muH0hergkTyItUM h3Y861sIBUp16Ok/Xs97jejJuBtXzHc9TIQglL8c5QX3tWQrz/tqTKAdiWAuGj7E lXxcOM6iiI1VCfj54CsPM4lfVg8NfNuak54Y6rVs/DCPV11+BPsJJYsPe9Q+0HBh 1LZR24tEohnefB0UuFE5FR8ybL4WDCfULcFHtppVwTw9WoeFOfZ5Q5GKFWoNOrFz sA7mNJZ86L4rAwafCYCs1f0eNob+EtXrax8PiTtnKdauRoVKjSNhkrE= -----END CERTIFICATE-----Generated at Mon Jan 26 05:03:06 2026 by rpki-client