This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/9cBttLO2uv6i2WtyX_ETPQUSf54.roa File: 9cBttLO2uv6i2WtyX_ETPQUSf54.roa (raw, json) Hash identifier: RPaMNTT/PijuSLMwxTiUZmcQ1SxCj3KJhWypJQFsNpA= Subject key identifier: F5:C0:6D:B4:B3:B6:BA:FE:A2:D9:6B:72:5F:F1:13:3D:05:12:7F:9E Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Certificate serial: 019B77C68ED2C19CCEBFE684706FC4E38721 Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/9cBttLO2uv6i2WtyX_ETPQUSf54.roa Signing time: Thu 01 Jan 2026 04:17:39 +0000 ROA not before: Thu 01 Jan 2026 04:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396554 IP address blocks: 81.19.195.30/32 maxlen: 32 81.19.195.31/32 maxlen: 32 185.100.0.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:8e:d2:c1:9c:ce:bf:e6:84:70:6f:c4:e3:87:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Validity Not Before: Jan 1 04:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f5c06db4b3b6bafea2d96b725ff1133d05127f9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:b9:6f:6a:31:44:ab:3b:e9:00:1c:f6:41:da: b6:75:bf:3f:fa:3f:79:a5:32:ae:84:15:72:28:dc: e2:b7:10:e7:2b:65:63:85:4e:e0:75:fd:69:2e:2a: 92:b9:cc:b4:ea:6f:58:dc:14:d9:4b:06:74:38:64: b4:aa:86:f9:5a:ef:92:bc:cf:cb:af:1a:fb:98:ee: bf:c0:1a:0c:df:13:2c:7c:a4:40:29:7b:82:12:cf: 43:8a:c6:45:6d:ec:90:45:9f:7a:61:88:d6:46:d3: 50:12:2e:b8:99:67:3d:75:70:23:20:df:c7:2b:dd: 18:78:1b:a6:9e:1a:56:e6:fd:3a:01:ed:62:48:08: 89:52:06:3b:63:76:cd:da:c4:27:e3:98:2e:ab:cc: d0:dc:bb:df:c8:64:f1:a2:a1:aa:0f:1f:de:0b:a9: a4:37:83:e1:2f:3c:3b:b2:64:76:6e:d8:21:0c:e8: 02:75:27:1e:a8:20:8d:f6:17:5c:44:fb:21:f6:cb: ce:fa:db:4e:ea:37:9b:cc:3e:3e:be:b3:35:e9:03: 25:37:14:13:5c:1c:de:68:b9:45:bb:ab:c8:ef:a2: 80:2e:ac:2a:87:32:7b:14:51:e9:7c:88:16:55:9f: b6:82:dc:20:95:a4:b4:4a:e8:20:14:d0:1e:8a:dc: ea:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:C0:6D:B4:B3:B6:BA:FE:A2:D9:6B:72:5F:F1:13:3D:05:12:7F:9E X509v3 Authority Key Identifier: keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/9cBttLO2uv6i2WtyX_ETPQUSf54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.19.195.30/31 185.100.0.53/32 Signature Algorithm: sha256WithRSAEncryption 93:46:bf:10:9e:bc:6f:2c:d7:24:c0:e2:a9:2e:a6:fe:18:50: 27:e6:fa:2b:66:08:98:5c:4a:cc:0a:d4:e0:c8:50:eb:51:8d: 3f:ee:9d:e8:fb:b8:0e:3f:15:fc:dd:ae:71:db:f5:ad:c4:70: 46:e2:77:21:c8:8f:65:31:43:58:d2:8d:60:a7:cc:08:d3:a4: b6:d0:83:29:6e:82:2c:6e:f2:e2:07:bb:78:6d:81:00:29:22: 7f:2a:45:46:e1:e3:85:95:51:23:97:b8:e8:bb:ea:8a:ca:65: c4:b4:cc:bf:c6:0b:85:7a:7b:bc:9a:18:40:1f:b7:f5:02:44: 43:90:b0:3a:08:f9:45:ef:2f:0d:18:3c:f4:70:c5:f1:b6:da: c8:c1:44:1a:c9:03:f9:bb:50:44:68:1c:f9:84:5b:61:fc:a8: de:9a:67:2f:80:94:cc:33:05:2f:5d:73:07:2f:ff:f6:36:68: f8:ee:47:a9:37:72:b5:95:38:4e:aa:0e:fa:13:68:49:ac:8d: 59:0c:f0:a9:59:5f:01:dc:ee:5b:b0:78:35:af:09:f7:de:32: e5:d2:64:84:a0:83:02:cc:8a:2d:41:55:f2:e0:f7:fd:56:7c: 6b:84:77:0c:34:66:a8:17:88:b9:59:0f:81:47:01:c3:85:23: b3:58:be:67 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3xo7SwZzOv+aEcG/E44chMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl MDZkNTIwHhcNMjYwMTAxMDQxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNWMwNmRiNGIzYjZiYWZlYTJkOTZiNzI1ZmYxMTMzZDA1MTI3ZjllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7lvajFEqzvpABz2Qdq2db8/+j95 pTKuhBVyKNzitxDnK2VjhU7gdf1pLiqSucy06m9Y3BTZSwZ0OGS0qob5Wu+SvM/L rxr7mO6/wBoM3xMsfKRAKXuCEs9DisZFbeyQRZ96YYjWRtNQEi64mWc9dXAjIN/H K90YeBumnhpW5v06Ae1iSAiJUgY7Y3bN2sQn45guq8zQ3LvfyGTxoqGqDx/eC6mk N4PhLzw7smR2btghDOgCdSceqCCN9hdcRPsh9svO+ttO6jebzD4+vrM16QMlNxQT XBzeaLlFu6vI76KALqwqhzJ7FFHpfIgWVZ+2gtwglaS0SuggFNAeitzq2QIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFPXAbbSztrr+otlrcl/xEz0FEn+eMB8GA1UdIwQY MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt MzZjY2I1YTA2MTk1LzEvOWNCdHRMTzJ1djZpMld0eVhfRVRQUVVTZjU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1 LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUBURPDHgMF ALlkADUwDQYJKoZIhvcNAQELBQADggEBAJNGvxCevG8s1yTA4qkupv4YUCfm+itm CJhcSswK1ODIUOtRjT/unej7uA4/FfzdrnHb9a3EcEbidyHIj2UxQ1jSjWCnzAjT pLbQgylugixu8uIHu3htgQApIn8qRUbh44WVUSOXuOi76orKZcS0zL/GC4V6e7ya GEAft/UCREOQsDoI+UXvLw0YPPRwxfG22sjBRBrJA/m7UERoHPmEW2H8qN6aZy+A lMwzBS9dcwcv//Y2aPjuR6k3crWVOE6qDvoTaEmsjVkM8KlZXwHc7luweDWvCffe MuXSZISggwLMii1BVfLg9/1WfGuEdww0ZqgXiLlZD4FHAcOFI7NYvmc= -----END CERTIFICATE-----Generated at Mon Jan 26 05:03:05 2026 by rpki-client