This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/5zVN6pTJ4aR_yZWhj8MAhILtZSw.roa File: 5zVN6pTJ4aR_yZWhj8MAhILtZSw.roa (raw, json) Hash identifier: YXldELnsIFUHbKeRa5VtYav3ZtvTS/ZyeKrVEM5rEt0= Subject key identifier: E7:35:4D:EA:94:C9:E1:A4:7F:C9:95:A1:8F:C3:00:84:82:ED:65:2C Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Certificate serial: 019B77C6AE1921DE5BAFD7B1F3B4885C670E Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/5zVN6pTJ4aR_yZWhj8MAhILtZSw.roa Signing time: Thu 01 Jan 2026 04:17:47 +0000 ROA not before: Thu 01 Jan 2026 04:17:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 397195 IP address blocks: 81.19.195.30/32 maxlen: 32 81.19.195.31/32 maxlen: 32 185.100.0.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:ae:19:21:de:5b:af:d7:b1:f3:b4:88:5c:67:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Validity Not Before: Jan 1 04:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e7354dea94c9e1a47fc995a18fc3008482ed652c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:2c:e7:3b:d4:05:ff:05:b7:3e:3e:c0:64:f4: b7:d0:79:1e:70:fd:31:92:8e:32:b9:88:32:c0:26: 6d:98:38:7a:db:67:88:d7:44:95:f6:07:83:49:ed: 72:dd:ca:ee:a7:ac:1e:be:9e:a2:ec:a8:c4:a1:99: 4a:38:d7:cb:83:4a:35:86:ec:7a:47:cd:a9:56:36: b9:1d:f6:27:8d:bf:b3:c1:40:c6:72:1a:2a:e1:87: 5e:b9:be:18:f1:fc:ac:c4:38:4b:2b:4f:8a:51:ca: 52:c6:8a:03:5d:69:a2:da:f6:99:22:28:3a:a2:8c: d0:87:9a:46:e1:93:0d:87:bc:b6:82:16:0a:5b:b4: fc:fd:ba:26:07:81:ae:0e:71:85:28:7a:f8:ca:2d: 07:61:98:81:0a:6c:64:29:dc:fc:bf:0f:4b:0f:d1: 34:23:fe:b2:25:94:76:a3:ef:8e:c4:16:b9:d6:a1: e9:6d:66:a1:ce:50:ed:46:51:a2:f2:77:d4:47:e4: f2:0e:1b:34:5b:e7:c9:a0:70:3a:e4:fb:b7:6d:67: 6e:6d:3d:31:be:39:ae:0f:96:f8:bb:1b:ab:8a:b3: 9e:3a:07:35:08:8a:76:8b:b3:60:33:07:d1:7f:3e: 9a:72:85:61:ad:3f:00:cb:c5:36:9a:76:69:bf:c8: 42:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:35:4D:EA:94:C9:E1:A4:7F:C9:95:A1:8F:C3:00:84:82:ED:65:2C X509v3 Authority Key Identifier: keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/5zVN6pTJ4aR_yZWhj8MAhILtZSw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.19.195.30/31 185.100.0.53/32 Signature Algorithm: sha256WithRSAEncryption 07:5a:bb:95:83:41:92:8e:fa:67:43:a4:3d:02:97:e7:cd:10: 91:e7:5b:0e:61:23:a7:e9:fd:37:30:0d:f8:85:0b:7b:22:51: 48:fe:32:ee:e2:d0:b9:24:6b:b1:a6:18:ce:00:aa:66:3e:ef: e2:a1:75:6e:4b:d8:50:56:e1:b6:55:55:6d:4c:57:52:ab:2e: a4:95:dd:b7:81:4a:bc:93:dd:db:a8:5b:a4:db:0c:e3:57:bf: b2:73:24:25:ec:8c:bc:51:54:00:69:29:51:c3:f7:e7:db:4c: 57:1a:ed:9f:14:83:81:59:e6:fd:65:bb:37:1f:26:13:84:cf: b6:78:f0:ef:69:f6:a3:af:23:f6:2e:1c:13:88:bc:64:ab:9b: f1:9c:59:2a:cf:71:e0:fe:30:1b:0c:1c:bf:99:e3:80:64:42: ba:fc:99:6d:aa:ac:d9:9b:b5:52:ec:0a:21:35:7f:16:bf:03: 9d:ed:e8:f6:9a:a5:bc:ce:3c:e4:11:79:e3:45:64:a9:37:03: 8a:b2:bc:ff:6d:06:51:94:1c:f0:69:f3:61:fa:c0:21:ab:7e: 9e:6f:65:5e:3d:79:35:b0:a3:83:e0:ba:a3:36:82:25:38:1f: 76:14:88:db:70:ff:0b:46:e1:a5:f2:28:b6:5f:71:9e:d4:59: 19:6c:85:b6 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3xq4ZId5br9ex87SIXGcOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl MDZkNTIwHhcNMjYwMTAxMDQxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNzM1NGRlYTk0YzllMWE0N2ZjOTk1YTE4ZmMzMDA4NDgyZWQ2NTJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCznO9QF/wW3Pj7AZPS30HkecP0x ko4yuYgywCZtmDh622eI10SV9geDSe1y3crup6wevp6i7KjEoZlKONfLg0o1hux6 R82pVja5HfYnjb+zwUDGchoq4Ydeub4Y8fysxDhLK0+KUcpSxooDXWmi2vaZIig6 oozQh5pG4ZMNh7y2ghYKW7T8/bomB4GuDnGFKHr4yi0HYZiBCmxkKdz8vw9LD9E0 I/6yJZR2o++OxBa51qHpbWahzlDtRlGi8nfUR+TyDhs0W+fJoHA65Pu3bWdubT0x vjmuD5b4uxurirOeOgc1CIp2i7NgMwfRfz6acoVhrT8Ay8U2mnZpv8hCtQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFOc1TeqUyeGkf8mVoY/DAISC7WUsMB8GA1UdIwQY MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt MzZjY2I1YTA2MTk1LzEvNXpWTjZwVEo0YVJfeVpXaGo4TUFoSUx0WlN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1 LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUBURPDHgMF ALlkADUwDQYJKoZIhvcNAQELBQADggEBAAdau5WDQZKO+mdDpD0Cl+fNEJHnWw5h I6fp/TcwDfiFC3siUUj+Mu7i0Lkka7GmGM4AqmY+7+KhdW5L2FBW4bZVVW1MV1Kr LqSV3beBSryT3duoW6TbDONXv7JzJCXsjLxRVABpKVHD9+fbTFca7Z8Ug4FZ5v1l uzcfJhOEz7Z48O9p9qOvI/YuHBOIvGSrm/GcWSrPceD+MBsMHL+Z44BkQrr8mW2q rNmbtVLsCiE1fxa/A53t6PaapbzOPOQReeNFZKk3A4qyvP9tBlGUHPBp82H6wCGr fp5vZV49eTWwo4PguqM2giU4H3YUiNtw/wtG4aXyKLZfcZ7UWRlshbY= -----END CERTIFICATE-----Generated at Mon Jan 26 00:37:29 2026 by rpki-client