This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/1x7WsHqpUBFJQtQYJpiQ4nrg7Y0.roa File: 1x7WsHqpUBFJQtQYJpiQ4nrg7Y0.roa (raw, json) Hash identifier: J92X7Ypj6hjlmn8CmRcT0xPWlSMRfnYVjDPGdwMs8cc= Subject key identifier: D7:1E:D6:B0:7A:A9:50:11:49:42:D4:18:26:98:90:E2:7A:E0:ED:8D Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Certificate serial: 019B77C6A598AC3A1F7D81375DC8BAC96216 Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/1x7WsHqpUBFJQtQYJpiQ4nrg7Y0.roa Signing time: Thu 01 Jan 2026 04:17:45 +0000 ROA not before: Thu 01 Jan 2026 04:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396610 IP address blocks: 81.19.195.30/32 maxlen: 32 81.19.195.31/32 maxlen: 32 185.100.0.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:a5:98:ac:3a:1f:7d:81:37:5d:c8:ba:c9:62:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Validity Not Before: Jan 1 04:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d71ed6b07aa950114942d418269890e27ae0ed8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f1:cd:8c:e6:a8:33:4d:82:28:d8:6e:07:fc: 57:7c:ae:d9:07:88:53:e6:20:a4:46:2c:66:9d:1e: 25:75:7c:c7:67:d8:a8:2b:f1:cb:d4:7e:b0:0e:6a: 82:e9:14:13:4d:da:71:a8:00:51:74:db:13:91:10: 20:4f:30:7a:f5:e1:f2:83:e5:04:00:a3:18:95:f2: 8a:70:11:cf:37:1e:4b:e6:11:42:88:fe:ce:12:80: 02:69:ba:6c:9b:e1:dd:16:14:ad:01:79:ca:63:38: 23:74:f1:3d:df:b1:62:80:54:a6:f6:a2:c0:96:59: cc:00:61:93:5c:f7:1a:f4:41:0c:bb:f7:76:c3:6b: d1:d2:c4:9c:37:d8:28:cf:0a:a3:62:05:10:37:fe: 09:04:5d:b0:46:ad:4e:3e:c9:e7:0b:98:0c:f9:55: 35:4c:b9:a2:40:13:1a:14:27:37:00:d2:87:b6:57: b6:c5:98:74:58:f9:99:3c:f2:72:c0:74:65:e9:da: 5b:4f:45:20:be:fb:a6:01:1c:6d:44:1c:17:c9:f3: 60:ac:da:7a:ae:a6:85:8c:2b:14:d7:8d:61:d2:b5: 5c:19:cc:aa:72:e7:9a:c5:a8:80:27:43:0d:da:ef: 83:ef:24:a8:cb:b2:6a:3e:46:55:1b:af:0d:55:5b: e9:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:1E:D6:B0:7A:A9:50:11:49:42:D4:18:26:98:90:E2:7A:E0:ED:8D X509v3 Authority Key Identifier: keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/1x7WsHqpUBFJQtQYJpiQ4nrg7Y0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.19.195.30/31 185.100.0.53/32 Signature Algorithm: sha256WithRSAEncryption 87:4d:98:cf:22:3a:8b:cd:23:5f:52:d8:b4:2e:1e:45:78:f5: 1d:34:d0:37:ee:ab:1d:98:e1:18:66:51:ed:a0:79:3f:f6:ec: da:ee:a6:98:0a:cb:42:0a:81:8c:31:32:a9:6c:58:24:f5:17: fe:3f:da:3f:63:1c:ad:fe:a1:c5:02:e8:ce:ec:1d:67:5a:fb: 61:04:7a:65:a2:65:26:96:f0:6f:6e:3c:4d:72:d6:e4:86:37: b2:07:d9:78:c3:a8:1c:1f:62:50:e4:e5:6d:0d:d7:03:5e:3e: a7:33:3e:03:dc:ee:84:42:c7:e9:18:a7:ec:5a:23:10:8d:2a: bf:da:89:1a:6a:7b:6d:e3:3a:d0:07:94:84:b4:9f:f1:7f:2c: 75:07:3c:a5:9a:04:3e:37:aa:db:96:06:18:74:bf:18:98:b7: 5f:58:e6:64:75:c9:5d:cd:8e:37:32:14:83:c6:3f:b7:cb:7a: 48:8a:3b:f9:5a:bd:68:9b:a3:ae:e8:fa:43:17:5f:88:5f:95: 13:9d:79:cf:37:3f:4b:72:75:07:91:24:6b:5c:96:69:cc:59: ac:ba:2a:ec:64:a1:3b:b7:85:6a:c0:df:ba:b6:0d:36:3a:1a: a9:de:27:d9:30:f7:7a:2f:22:91:65:14:e7:b1:87:d2:7f:40: 35:45:69:df -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3xqWYrDoffYE3Xci6yWIWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl MDZkNTIwHhcNMjYwMTAxMDQxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNzFlZDZiMDdhYTk1MDExNDk0MmQ0MTgyNjk4OTBlMjdhZTBlZDhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPHNjOaoM02CKNhuB/xXfK7ZB4hT 5iCkRixmnR4ldXzHZ9ioK/HL1H6wDmqC6RQTTdpxqABRdNsTkRAgTzB69eHyg+UE AKMYlfKKcBHPNx5L5hFCiP7OEoACabpsm+HdFhStAXnKYzgjdPE937FigFSm9qLA llnMAGGTXPca9EEMu/d2w2vR0sScN9gozwqjYgUQN/4JBF2wRq1OPsnnC5gM+VU1 TLmiQBMaFCc3ANKHtle2xZh0WPmZPPJywHRl6dpbT0UgvvumARxtRBwXyfNgrNp6 rqaFjCsU141h0rVcGcyqcueaxaiAJ0MN2u+D7ySoy7JqPkZVG68NVVvphQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFNce1rB6qVARSULUGCaYkOJ64O2NMB8GA1UdIwQY MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt MzZjY2I1YTA2MTk1LzEvMXg3V3NIcXBVQkZKUXRRWUpwaVE0bnJnN1kwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1 LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUBURPDHgMF ALlkADUwDQYJKoZIhvcNAQELBQADggEBAIdNmM8iOovNI19S2LQuHkV49R000Dfu qx2Y4RhmUe2geT/27NruppgKy0IKgYwxMqlsWCT1F/4/2j9jHK3+ocUC6M7sHWda +2EEemWiZSaW8G9uPE1y1uSGN7IH2XjDqBwfYlDk5W0N1wNePqczPgPc7oRCx+kY p+xaIxCNKr/aiRpqe23jOtAHlIS0n/F/LHUHPKWaBD43qtuWBhh0vxiYt19Y5mR1 yV3NjjcyFIPGP7fLekiKO/lavWibo67o+kMXX4hflROdec83P0tydQeRJGtclmnM Way6KuxkoTu3hWrA37q2DTY6GqneJ9kw93ovIpFlFOexh9J/QDVFad8= -----END CERTIFICATE-----Generated at Sun Jan 25 21:39:49 2026 by rpki-client