This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/AX8j2Y3vhHOb1C8XugdtayRDSJQ.roa File: AX8j2Y3vhHOb1C8XugdtayRDSJQ.roa (raw, json) Hash identifier: rq/O8bIrPfWaqAwSYzUnRz5ELxXJC2uD1Hb7ZSXqIPU= Subject key identifier: 01:7F:23:D9:8D:EF:84:73:9B:D4:2F:17:BA:07:6D:6B:24:43:48:94 Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Certificate serial: 019B77C686A150A4192B4A1B9936BD2C2115 Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/AX8j2Y3vhHOb1C8XugdtayRDSJQ.roa Signing time: Thu 01 Jan 2026 04:17:37 +0000 ROA not before: Thu 01 Jan 2026 04:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 36630 IP address blocks: 81.19.195.30/32 maxlen: 32 81.19.195.31/32 maxlen: 32 185.100.0.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:86:a1:50:a4:19:2b:4a:1b:99:36:bd:2c:21:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Validity Not Before: Jan 1 04:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=017f23d98def84739bd42f17ba076d6b24434894 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:92:d4:54:4f:a3:fa:e2:ac:43:1c:60:b6:38: b7:66:85:1d:1a:a6:a7:d2:5b:18:07:79:a9:8f:06: cb:c5:26:6f:e4:fa:7c:2e:b5:6e:df:d8:0c:4f:02: b6:b3:7c:20:21:f3:25:48:e8:7a:d5:fb:c6:c9:cd: 02:02:39:49:b8:5e:fc:38:91:7a:1b:14:8b:83:f9: d9:9b:a3:0d:8b:f4:8b:76:4d:3c:c1:23:90:a3:56: 93:9e:e4:c9:12:74:d7:12:c0:1b:1f:61:d7:15:71: 23:3a:9c:e6:d2:1d:60:04:49:0a:78:58:14:25:f8: 96:73:07:c5:9a:48:b3:4d:8c:85:c9:1b:65:dc:1c: fd:a7:93:fc:26:37:9b:e2:5b:2e:be:dd:a8:8d:87: 0b:d6:fd:f1:d7:e2:96:6e:99:8b:8f:02:82:79:b7: 4f:dd:f5:31:fe:cb:69:74:3a:62:bb:2b:a3:5e:78: 38:83:0e:27:11:ea:7f:bf:11:0a:1f:84:6e:bf:b2: 01:90:d7:0a:ef:5d:e4:66:54:d4:6f:9d:02:e6:3b: 0d:10:96:19:f1:65:22:7f:98:c5:8e:21:cd:8f:52: c1:72:c1:f2:7b:3d:0d:df:b5:71:b7:3e:a8:f7:5d: 7c:95:59:f3:46:a5:83:83:d4:31:34:40:a7:53:2e: a7:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:7F:23:D9:8D:EF:84:73:9B:D4:2F:17:BA:07:6D:6B:24:43:48:94 X509v3 Authority Key Identifier: keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/AX8j2Y3vhHOb1C8XugdtayRDSJQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.19.195.30/31 185.100.0.53/32 Signature Algorithm: sha256WithRSAEncryption 13:a1:10:18:81:d6:9f:96:67:a3:b8:de:47:7c:38:53:95:6f: cd:b5:78:a6:54:23:cb:09:14:f8:03:9e:cb:36:8a:7f:03:73: 5e:4d:38:2a:89:18:6f:e4:d2:35:82:a9:24:fb:62:57:58:36: f9:ac:89:f5:f1:d5:1f:16:20:ce:85:0b:25:11:f5:fa:e4:7c: 27:42:05:51:e3:bf:30:59:ef:5d:41:54:c2:eb:c7:05:bd:e8: 9f:38:0e:ea:14:5a:10:d9:d9:27:86:7c:25:fe:35:c9:4d:60: 96:d8:52:4a:89:e4:6c:de:8e:e2:84:c7:23:4a:77:17:ea:2e: 8c:cd:4d:15:3f:5c:b6:28:b3:4b:34:d3:8f:c5:7a:fb:3c:c7: 6b:cf:3f:ed:ce:fe:a3:87:e7:5c:49:d9:3b:c9:93:2e:66:bf: c5:9a:b1:26:53:36:10:b4:27:63:33:45:4e:5f:a1:20:48:e1: 80:b5:49:6a:5e:47:7c:87:e9:27:b4:d0:71:a6:6d:05:a0:9a: c3:cf:62:11:13:0c:20:a0:0f:1b:0d:cf:b1:8f:53:34:24:62: 20:dd:2e:cc:70:27:51:d6:63:58:fb:18:06:6a:17:4d:b0:7a: be:f2:16:5a:5b:bc:33:66:45:f5:86:da:95:23:71:a6:bb:98: 99:12:c0:42 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3xoahUKQZK0obmTa9LCEVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl MDZkNTIwHhcNMjYwMTAxMDQxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMTdmMjNkOThkZWY4NDczOWJkNDJmMTdiYTA3NmQ2YjI0NDM0ODk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpLUVE+j+uKsQxxgtji3ZoUdGqan 0lsYB3mpjwbLxSZv5Pp8LrVu39gMTwK2s3wgIfMlSOh61fvGyc0CAjlJuF78OJF6 GxSLg/nZm6MNi/SLdk08wSOQo1aTnuTJEnTXEsAbH2HXFXEjOpzm0h1gBEkKeFgU JfiWcwfFmkizTYyFyRtl3Bz9p5P8Jjeb4lsuvt2ojYcL1v3x1+KWbpmLjwKCebdP 3fUx/stpdDpiuyujXng4gw4nEep/vxEKH4Ruv7IBkNcK713kZlTUb50C5jsNEJYZ 8WUif5jFjiHNj1LBcsHyez0N37Vxtz6o9118lVnzRqWDg9QxNECnUy6nXQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFAF/I9mN74Rzm9QvF7oHbWskQ0iUMB8GA1UdIwQY MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt MzZjY2I1YTA2MTk1LzEvQVg4ajJZM3ZoSE9iMUM4WHVnZHRheVJEU0pRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1 LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUBURPDHgMF ALlkADUwDQYJKoZIhvcNAQELBQADggEBABOhEBiB1p+WZ6O43kd8OFOVb821eKZU I8sJFPgDnss2in8Dc15NOCqJGG/k0jWCqST7YldYNvmsifXx1R8WIM6FCyUR9frk fCdCBVHjvzBZ711BVMLrxwW96J84DuoUWhDZ2SeGfCX+NclNYJbYUkqJ5GzejuKE xyNKdxfqLozNTRU/XLYos0s004/Fevs8x2vPP+3O/qOH51xJ2TvJky5mv8WasSZT NhC0J2MzRU5foSBI4YC1SWpeR3yH6Se00HGmbQWgmsPPYhETDCCgDxsNz7GPUzQk YiDdLsxwJ1HWY1j7GAZqF02wer7yFlpbvDNmRfWG2pUjcaa7mJkSwEI= -----END CERTIFICATE-----Generated at Mon Jan 26 03:27:41 2026 by rpki-client