This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/APOjC_qWkJjOzEF9za1VsTy083w.roa File: APOjC_qWkJjOzEF9za1VsTy083w.roa (raw, json) Hash identifier: V5sL4DBT9Xyishirmxy9GebiKfsPtY9l8wjRaBEnKRc= Subject key identifier: 00:F3:A3:0B:FA:96:90:98:CE:CC:41:7D:CD:AD:55:B1:3C:B4:F3:7C Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Certificate serial: 019B77C6AE47636A42B5D0CADE58E145BF0B Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/APOjC_qWkJjOzEF9za1VsTy083w.roa Signing time: Thu 01 Jan 2026 04:17:48 +0000 ROA not before: Thu 01 Jan 2026 04:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 397196 IP address blocks: 81.19.195.30/32 maxlen: 32 81.19.195.31/32 maxlen: 32 185.100.0.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:ae:47:63:6a:42:b5:d0:ca:de:58:e1:45:bf:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Validity Not Before: Jan 1 04:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=00f3a30bfa969098cecc417dcdad55b13cb4f37c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:43:4e:eb:f2:4f:2b:20:19:90:01:7b:3e:f4: 81:9b:e0:7f:8f:14:0e:35:19:7b:2b:1e:c6:6d:ae: 6a:d8:94:d3:39:78:04:ef:18:d0:45:c4:2b:54:3a: a9:7a:49:05:1e:bf:26:fc:44:58:c3:cb:d8:34:67: dd:6d:4d:20:01:e7:66:ec:ab:2c:9c:93:f1:4f:d5: 9e:32:7e:76:c2:ea:9c:31:b8:5c:a9:75:13:78:df: bf:93:68:c6:a7:17:d7:e8:19:67:8b:0e:c4:e4:36: 1b:c5:36:7f:b6:ee:fb:86:03:8f:6b:6d:46:b5:67: 99:13:8b:0d:51:c3:da:cf:7c:2a:46:64:93:6e:fc: 78:50:53:df:f8:ad:6c:24:b8:1f:19:c8:c5:aa:5d: 68:39:81:38:fc:b3:df:11:50:7f:72:cc:fa:72:b8: 5b:28:0f:7c:61:2d:e4:f5:f0:f9:ae:ac:82:74:72: 27:d9:18:27:fa:27:d7:64:d0:08:e0:48:94:8d:68: 6a:1e:d4:44:b8:25:d4:81:34:bb:7e:f5:19:2d:31: f6:04:87:81:52:9a:b3:df:a1:a2:bd:69:b7:49:27: f1:18:e0:9c:d1:0e:ce:4f:9f:32:90:4a:b9:cf:c7: 47:61:24:00:b8:aa:f5:98:37:b9:3e:cb:25:06:ef: 97:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:F3:A3:0B:FA:96:90:98:CE:CC:41:7D:CD:AD:55:B1:3C:B4:F3:7C X509v3 Authority Key Identifier: keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/APOjC_qWkJjOzEF9za1VsTy083w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.19.195.30/31 185.100.0.53/32 Signature Algorithm: sha256WithRSAEncryption 9b:35:c4:9f:22:9e:a0:05:10:2c:93:0a:2e:5e:f1:cf:ba:05: 61:a6:24:1f:0e:b4:06:ee:c8:0f:0a:4b:f3:f3:9d:ef:e1:0b: 12:bc:32:be:41:fa:70:73:e8:2f:a1:84:c1:df:f8:63:88:0b: cd:6b:98:bd:ed:13:4d:09:7d:2c:75:e3:c3:18:05:c9:57:51: 21:9f:8f:8e:ea:1b:e7:95:20:7e:c5:bf:be:2b:27:25:90:76: 78:2b:43:df:e7:53:9a:d0:29:d2:4f:a2:7a:3d:a1:2e:b5:3f: 3b:30:a9:a2:82:10:5a:d2:64:fc:ef:a2:fd:c9:05:18:18:0c: 57:75:03:ea:07:33:69:13:7d:11:e4:e6:24:82:c1:f2:e6:6a: f1:64:7a:0b:ae:62:54:76:7f:fc:72:b7:e4:14:66:5b:6a:dd: 6d:58:71:1d:26:b4:f4:53:df:71:3d:d1:32:cc:26:6b:8f:0d: 15:39:2d:11:2d:fa:04:57:ad:10:12:45:d4:61:58:81:5c:8f: 63:b0:aa:6c:48:3f:8b:6a:89:cf:ab:7f:b8:04:ce:63:25:8a: 03:6c:2e:5b:4e:6f:8a:00:5e:79:dd:5a:b6:b7:71:da:5a:21: 32:6a:e8:1c:d0:99:c2:59:75:cc:db:f0:1f:7f:c8:8e:e4:50: 78:a9:29:5e -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3xq5HY2pCtdDK3ljhRb8LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl MDZkNTIwHhcNMjYwMTAxMDQxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMGYzYTMwYmZhOTY5MDk4Y2VjYzQxN2RjZGFkNTViMTNjYjRmMzdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUNO6/JPKyAZkAF7PvSBm+B/jxQO NRl7Kx7Gba5q2JTTOXgE7xjQRcQrVDqpekkFHr8m/ERYw8vYNGfdbU0gAedm7Kss nJPxT9WeMn52wuqcMbhcqXUTeN+/k2jGpxfX6Blniw7E5DYbxTZ/tu77hgOPa21G tWeZE4sNUcPaz3wqRmSTbvx4UFPf+K1sJLgfGcjFql1oOYE4/LPfEVB/csz6crhb KA98YS3k9fD5rqyCdHIn2Rgn+ifXZNAI4EiUjWhqHtREuCXUgTS7fvUZLTH2BIeB Upqz36GivWm3SSfxGOCc0Q7OT58ykEq5z8dHYSQAuKr1mDe5PsslBu+XsQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFADzowv6lpCYzsxBfc2tVbE8tPN8MB8GA1UdIwQY MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt MzZjY2I1YTA2MTk1LzEvQVBPakNfcVdrSmpPekVGOXphMVZzVHkwODN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1 LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUBURPDHgMF ALlkADUwDQYJKoZIhvcNAQELBQADggEBAJs1xJ8inqAFECyTCi5e8c+6BWGmJB8O tAbuyA8KS/Pzne/hCxK8Mr5B+nBz6C+hhMHf+GOIC81rmL3tE00JfSx148MYBclX USGfj47qG+eVIH7Fv74rJyWQdngrQ9/nU5rQKdJPono9oS61PzswqaKCEFrSZPzv ov3JBRgYDFd1A+oHM2kTfRHk5iSCwfLmavFkeguuYlR2f/xyt+QUZltq3W1YcR0m tPRT33E90TLMJmuPDRU5LREt+gRXrRASRdRhWIFcj2OwqmxIP4tqic+rf7gEzmMl igNsLltOb4oAXnndWra3cdpaITJq6BzQmcJZdczb8B9/yI7kUHipKV4= -----END CERTIFICATE-----Generated at Sun Jan 25 23:03:46 2026 by rpki-client