This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/5L5jz64NONby2g_wm6YEUkGNuhA.roa File: 5L5jz64NONby2g_wm6YEUkGNuhA.roa (raw, json) Hash identifier: 5/IcJ7YamoUSo0BHCNA7H799f3n6Pa7ADVUUjFDkutI= Subject key identifier: E4:BE:63:CF:AE:0D:38:D6:F2:DA:0F:F0:9B:A6:04:52:41:8D:BA:10 Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Certificate serial: 019B77C6A21ABD41703837A2B63B04046D39 Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/5L5jz64NONby2g_wm6YEUkGNuhA.roa Signing time: Thu 01 Jan 2026 04:17:44 +0000 ROA not before: Thu 01 Jan 2026 04:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396600 IP address blocks: 81.19.195.30/32 maxlen: 32 81.19.195.31/32 maxlen: 32 185.100.0.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:a2:1a:bd:41:70:38:37:a2:b6:3b:04:04:6d:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Validity Not Before: Jan 1 04:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e4be63cfae0d38d6f2da0ff09ba60452418dba10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d0:b1:4b:d8:75:6f:5c:98:2e:d3:e1:a6:0a: 89:b3:ec:09:6b:98:c2:78:34:7f:73:1e:80:9b:8c: d2:de:ae:6a:0f:14:63:11:03:7b:c0:36:db:be:e5: 80:be:d5:9c:1c:c1:4c:f6:c7:9a:90:49:f0:4a:3d: fa:5a:6d:d5:05:7a:18:7f:23:7d:7d:c2:4d:33:e5: d2:01:85:ea:d9:cb:1c:72:0b:72:25:09:1e:29:34: da:68:29:0b:c2:32:42:74:6a:b2:c4:df:eb:a1:6c: 2b:45:93:a9:51:4a:83:ee:04:c2:24:db:56:01:4c: 7c:b0:2a:b5:5d:4c:ad:fa:bc:5b:3b:c0:05:0f:df: e7:ac:fd:82:0a:bd:19:10:bb:3b:3e:ac:08:8d:36: b6:88:8c:b8:cc:b1:ab:34:bc:84:4d:8c:f7:cd:0e: 2c:9b:3a:07:c3:a7:cd:1c:97:53:9d:b3:cf:ef:64: d6:65:55:13:72:23:b4:72:3f:96:21:e6:9d:6c:62: 90:61:01:71:44:c0:89:f5:b8:4e:c2:04:37:03:81: 51:19:c9:1a:12:c0:3d:bf:3a:05:0a:84:f3:4c:36: 94:0d:d3:99:32:54:93:e0:0e:5b:c7:bd:26:79:b6: 89:de:94:5d:88:a7:0f:d3:70:04:2b:e3:7d:f6:36: f3:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:BE:63:CF:AE:0D:38:D6:F2:DA:0F:F0:9B:A6:04:52:41:8D:BA:10 X509v3 Authority Key Identifier: keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/5L5jz64NONby2g_wm6YEUkGNuhA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.19.195.30/31 185.100.0.53/32 Signature Algorithm: sha256WithRSAEncryption 15:e4:3d:3c:95:ba:da:a0:43:15:5f:36:dd:3e:1e:99:57:d1: a2:4b:9e:d3:3d:31:07:88:8a:3b:80:d9:38:70:93:76:fd:d4: 98:32:94:65:94:ad:b6:81:02:6d:12:f1:cb:10:26:47:d7:cd: 79:ce:4f:96:60:74:a1:e2:a5:27:a6:9f:fb:67:9a:cb:82:29: f0:17:5b:e6:ba:5f:16:4a:b4:1f:f8:4b:a3:a0:89:0b:94:cf: b2:ad:0b:bc:b9:fc:c2:7a:7b:54:19:b3:4f:fc:31:04:7b:f0: bc:6b:87:bf:85:2c:f1:35:24:58:fa:ea:f1:7a:a4:67:d3:46: 54:9e:df:e0:46:3b:71:22:63:3d:64:7e:e3:06:25:bc:d1:bf: 07:cc:5e:39:97:ed:fa:90:36:4e:5f:52:96:af:1a:fe:c0:eb: 89:42:d1:09:b7:d5:bc:e0:e9:49:15:06:fa:34:1f:ec:7c:d3: 64:45:ff:92:85:b0:ba:d3:7b:ec:99:1e:91:67:23:f8:25:05: 49:b5:0d:35:8c:07:32:e5:a6:18:09:66:0a:83:67:91:01:59: 88:90:47:d7:a4:71:25:1a:6d:37:05:35:c8:b4:9c:88:b5:13: d8:b1:91:46:2b:bb:08:d3:f2:99:f0:af:a8:c8:0a:ac:0f:f4: 02:22:ff:ff -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3xqIavUFwODeitjsEBG05MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl MDZkNTIwHhcNMjYwMTAxMDQxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNGJlNjNjZmFlMGQzOGQ2ZjJkYTBmZjA5YmE2MDQ1MjQxOGRiYTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtCxS9h1b1yYLtPhpgqJs+wJa5jC eDR/cx6Am4zS3q5qDxRjEQN7wDbbvuWAvtWcHMFM9seakEnwSj36Wm3VBXoYfyN9 fcJNM+XSAYXq2csccgtyJQkeKTTaaCkLwjJCdGqyxN/roWwrRZOpUUqD7gTCJNtW AUx8sCq1XUyt+rxbO8AFD9/nrP2CCr0ZELs7PqwIjTa2iIy4zLGrNLyETYz3zQ4s mzoHw6fNHJdTnbPP72TWZVUTciO0cj+WIeadbGKQYQFxRMCJ9bhOwgQ3A4FRGcka EsA9vzoFCoTzTDaUDdOZMlST4A5bx70mebaJ3pRdiKcP03AEK+N99jbzMQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFOS+Y8+uDTjW8toP8JumBFJBjboQMB8GA1UdIwQY MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt MzZjY2I1YTA2MTk1LzEvNUw1ano2NE5PTmJ5Mmdfd202WUVVa0dOdWhBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1 LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUBURPDHgMF ALlkADUwDQYJKoZIhvcNAQELBQADggEBABXkPTyVutqgQxVfNt0+HplX0aJLntM9 MQeIijuA2Thwk3b91JgylGWUrbaBAm0S8csQJkfXzXnOT5ZgdKHipSemn/tnmsuC KfAXW+a6XxZKtB/4S6OgiQuUz7KtC7y5/MJ6e1QZs0/8MQR78Lxrh7+FLPE1JFj6 6vF6pGfTRlSe3+BGO3EiYz1kfuMGJbzRvwfMXjmX7fqQNk5fUpavGv7A64lC0Qm3 1bzg6UkVBvo0H+x802RF/5KFsLrTe+yZHpFnI/glBUm1DTWMBzLlphgJZgqDZ5EB WYiQR9ekcSUabTcFNci0nIi1E9ixkUYruwjT8pnwr6jICqwP9AIi//8= -----END CERTIFICATE-----Generated at Sun Jan 25 23:03:42 2026 by rpki-client