This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/7NZQnV3mAzvaJOlcZ93a5_6XF2Q.roa File: 7NZQnV3mAzvaJOlcZ93a5_6XF2Q.roa (raw, json) Hash identifier: LNIdyyIepluTssfJYoOQiNhDZcqKwUo6Mw8dsZ/HQuM= Subject key identifier: EC:D6:50:9D:5D:E6:03:3B:DA:24:E9:5C:67:DD:DA:E7:FE:97:17:64 Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Certificate serial: 019B77C6AE8195A85C4E500F59F29A7AAD74 Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/7NZQnV3mAzvaJOlcZ93a5_6XF2Q.roa Signing time: Thu 01 Jan 2026 04:17:48 +0000 ROA not before: Thu 01 Jan 2026 04:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 397197 IP address blocks: 81.19.195.30/32 maxlen: 32 81.19.195.31/32 maxlen: 32 185.100.0.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:ae:81:95:a8:5c:4e:50:0f:59:f2:9a:7a:ad:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Validity Not Before: Jan 1 04:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ecd6509d5de6033bda24e95c67dddae7fe971764 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:fe:b3:f0:f1:28:0a:84:63:ad:93:f0:1a:a1: 5b:24:21:fd:50:da:7d:42:ba:58:04:e6:09:0d:68: 67:16:59:6e:79:99:44:7c:a4:f5:e2:6e:00:62:81: de:e5:3f:a7:25:7b:65:4f:c6:a3:be:f9:a7:68:c3: 8f:8a:59:b7:f6:bb:73:ce:ad:c8:f3:04:64:03:21: a0:3b:4f:59:e5:d3:95:15:36:9a:6f:75:5a:e6:7d: b9:b9:53:be:61:35:b2:69:4f:0b:07:6d:61:92:ab: 56:d5:71:30:de:f6:f2:1d:b5:da:78:01:35:7d:5f: ee:4f:b1:ca:20:16:0f:7e:ba:3b:89:02:d7:44:bc: b4:12:cf:de:8d:14:a6:1b:48:a5:10:35:89:9c:56: 42:47:4b:e8:e4:eb:b2:30:23:5c:04:78:e4:91:53: 54:6b:d5:a7:59:42:53:38:cd:27:c1:ef:42:ec:95: 1f:11:57:d6:2c:3f:c5:79:c0:45:d2:f4:82:d5:ba: 9b:38:bb:9f:2c:08:97:ce:2b:8d:5a:df:74:dc:75: 5d:a8:dc:ed:6c:2a:66:e8:70:91:55:9b:6e:4c:48: 77:b0:02:fb:21:fb:8d:37:f2:79:86:4e:78:39:fd: a1:55:ce:3a:71:1a:a1:bc:ba:2f:d8:4c:b0:8a:f0: 37:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:D6:50:9D:5D:E6:03:3B:DA:24:E9:5C:67:DD:DA:E7:FE:97:17:64 X509v3 Authority Key Identifier: keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/7NZQnV3mAzvaJOlcZ93a5_6XF2Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.19.195.30/31 185.100.0.53/32 Signature Algorithm: sha256WithRSAEncryption 8e:fa:86:a0:6b:b1:99:32:29:bc:ee:53:8f:8d:4d:82:af:87: b1:d0:12:12:3c:7f:7a:8f:fd:d0:18:71:26:6f:18:9b:45:94: f4:bb:aa:bf:ff:b9:85:00:52:3a:04:7d:ec:12:7d:6c:ab:1f: ab:a7:9d:74:6a:a8:63:49:6a:27:5c:b3:0c:31:4a:d3:d7:f3: d9:8a:4e:b9:81:08:53:8a:03:24:63:f0:21:43:c1:d4:57:a0: 36:f6:67:bf:82:83:0f:78:7e:e5:3a:ab:69:f2:ba:92:04:16: e6:65:2b:9e:2c:00:30:d0:96:62:fd:93:3d:63:45:15:ba:40: 2f:a8:da:85:1b:d1:ae:c8:56:85:c5:f0:68:34:3d:ac:a8:33: a0:90:7d:af:63:4a:9a:f5:03:0b:bc:4e:50:e5:bc:9c:9c:e9: 85:ec:83:cb:06:dc:40:76:62:ef:04:ec:02:bd:f1:66:03:f2: f8:ea:61:4c:69:60:df:73:28:cf:38:f2:fc:11:a1:09:b6:77: b6:84:7f:2a:3d:09:1e:5a:27:24:e4:24:23:cb:ad:c9:39:ac: 2d:61:ba:94:ac:3c:3c:cf:24:87:d0:07:09:c7:57:5e:5f:0c: a4:c5:92:2e:8c:19:30:39:eb:fb:11:9e:29:fe:25:4e:2a:c5: 22:74:9b:69 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3xq6BlahcTlAPWfKaeq10MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl MDZkNTIwHhcNMjYwMTAxMDQxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlY2Q2NTA5ZDVkZTYwMzNiZGEyNGU5NWM2N2RkZGFlN2ZlOTcxNzY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArv6z8PEoCoRjrZPwGqFbJCH9UNp9 QrpYBOYJDWhnFllueZlEfKT14m4AYoHe5T+nJXtlT8ajvvmnaMOPilm39rtzzq3I 8wRkAyGgO09Z5dOVFTaab3Va5n25uVO+YTWyaU8LB21hkqtW1XEw3vbyHbXaeAE1 fV/uT7HKIBYPfro7iQLXRLy0Es/ejRSmG0ilEDWJnFZCR0vo5OuyMCNcBHjkkVNU a9WnWUJTOM0nwe9C7JUfEVfWLD/FecBF0vSC1bqbOLufLAiXziuNWt903HVdqNzt bCpm6HCRVZtuTEh3sAL7IfuNN/J5hk54Of2hVc46cRqhvLov2EywivA3UwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFOzWUJ1d5gM72iTpXGfd2uf+lxdkMB8GA1UdIwQY MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt MzZjY2I1YTA2MTk1LzEvN05aUW5WM21BenZhSk9sY1o5M2E1XzZYRjJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1 LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUBURPDHgMF ALlkADUwDQYJKoZIhvcNAQELBQADggEBAI76hqBrsZkyKbzuU4+NTYKvh7HQEhI8 f3qP/dAYcSZvGJtFlPS7qr//uYUAUjoEfewSfWyrH6unnXRqqGNJaidcswwxStPX 89mKTrmBCFOKAyRj8CFDwdRXoDb2Z7+Cgw94fuU6q2nyupIEFuZlK54sADDQlmL9 kz1jRRW6QC+o2oUb0a7IVoXF8Gg0PayoM6CQfa9jSpr1Awu8TlDlvJyc6YXsg8sG 3EB2Yu8E7AK98WYD8vjqYUxpYN9zKM848vwRoQm2d7aEfyo9CR5aJyTkJCPLrck5 rC1hupSsPDzPJIfQBwnHV15fDKTFki6MGTA56/sRnin+JU4qxSJ0m2k= -----END CERTIFICATE-----Generated at Mon Jan 26 03:28:00 2026 by rpki-client