This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/CNoJRuvp9UCDUKmIxoImHa-rNFQ.roa File: CNoJRuvp9UCDUKmIxoImHa-rNFQ.roa (raw, json) Hash identifier: iXHDJ5mTllytjnYsI6SbO6V2f1aoUzxKVZfASH5LVsE= Subject key identifier: 08:DA:09:46:EB:E9:F5:40:83:50:A9:88:C6:82:26:1D:AF:AB:34:54 Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Certificate serial: 019B77C6A6561FF856FA46D95BD2D479C7EA Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/CNoJRuvp9UCDUKmIxoImHa-rNFQ.roa Signing time: Thu 01 Jan 2026 04:17:45 +0000 ROA not before: Thu 01 Jan 2026 04:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396612 IP address blocks: 81.19.195.30/32 maxlen: 32 81.19.195.31/32 maxlen: 32 185.100.0.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:a6:56:1f:f8:56:fa:46:d9:5b:d2:d4:79:c7:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Validity Not Before: Jan 1 04:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=08da0946ebe9f5408350a988c682261dafab3454 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:08:f7:f0:5a:cc:c6:a2:38:23:0c:7a:30:a7: 9f:70:15:40:f7:33:a2:e1:5d:bf:ef:2b:29:cc:8d: 8d:33:88:36:5f:6e:10:62:4f:66:de:f2:d6:70:0d: 38:7d:5d:88:2f:f0:45:5f:46:3b:2f:04:ad:0e:de: 6d:28:8d:53:eb:04:61:18:24:ff:38:2b:6a:1f:3d: 39:31:64:f2:35:bf:60:c7:53:f7:f4:5f:32:9e:27: 9d:98:a8:16:f7:79:6b:0e:e8:7a:5e:13:a4:f6:65: 3c:5c:4a:3a:20:f1:d2:b8:00:10:17:a7:30:ed:8e: ff:98:97:ee:9f:8a:17:d0:4e:6e:2f:bc:b5:25:b8: 8b:da:1a:6f:b8:0a:84:3f:1e:1f:40:03:04:38:4f: 34:c6:0c:5f:11:7e:20:9a:8c:d8:3c:7d:07:61:cb: 0f:88:66:e8:26:27:e0:e9:cf:1e:35:62:57:02:16: 8b:cf:a5:e0:b1:68:d2:b0:7e:fb:a8:ba:ec:e8:97: 0a:4c:b0:01:97:2f:82:e0:c7:a1:a2:32:94:e7:63: a1:f8:bd:58:bb:32:e7:f7:73:17:22:ff:48:d2:df: ab:de:b8:4d:75:60:bf:d0:b7:5f:05:ee:16:ee:7d: 68:02:7b:22:56:e8:d1:4a:68:4c:e4:d1:17:8c:dd: e8:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:DA:09:46:EB:E9:F5:40:83:50:A9:88:C6:82:26:1D:AF:AB:34:54 X509v3 Authority Key Identifier: keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/CNoJRuvp9UCDUKmIxoImHa-rNFQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.19.195.30/31 185.100.0.53/32 Signature Algorithm: sha256WithRSAEncryption 85:9e:80:85:69:cf:5b:19:5b:e8:fc:43:41:b7:cf:d2:16:e5: 2b:3c:7d:e0:68:95:8c:63:40:69:27:cb:84:22:94:a8:19:3d: 84:39:a1:d3:ef:1d:be:fc:a2:96:cb:f7:92:15:37:ec:1e:bb: 86:19:34:05:38:c9:f3:86:95:b7:32:dd:9b:c0:02:5f:f1:61: 85:58:d2:7c:7e:2a:f0:5a:83:4b:be:1a:41:38:ce:f4:e7:88: dd:a5:d8:8e:41:9a:6a:f5:a5:f6:48:d9:bc:ef:4e:19:b9:09: d6:78:c6:51:3d:71:b1:c2:7b:b8:40:76:a7:d5:cc:80:f8:6a: ae:cb:a1:c7:3c:ec:d6:2a:10:86:b5:c1:b9:5a:97:3a:c6:d9: 0f:20:91:37:74:39:40:de:eb:77:b2:2b:5f:de:af:41:c5:ab: d5:53:99:3c:b9:f4:2a:6d:d0:df:45:12:61:f1:b6:77:70:7d: eb:f4:a5:83:94:73:38:1a:32:40:c0:27:94:d7:94:d7:b1:86: e1:90:f2:ff:f9:78:9a:dc:9a:ec:43:29:fa:89:95:1c:b0:24: 75:32:55:86:08:9e:cd:5a:5b:f7:ef:57:e5:e8:48:3d:0e:ea: b3:21:5e:14:cb:b7:b2:46:12:51:4f:d0:f1:32:48:15:81:f6: ba:8b:cb:81 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3xqZWH/hW+kbZW9LUecfqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl MDZkNTIwHhcNMjYwMTAxMDQxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOGRhMDk0NmViZTlmNTQwODM1MGE5ODhjNjgyMjYxZGFmYWIzNDU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6gj38FrMxqI4Iwx6MKefcBVA9zOi 4V2/7yspzI2NM4g2X24QYk9m3vLWcA04fV2IL/BFX0Y7LwStDt5tKI1T6wRhGCT/ OCtqHz05MWTyNb9gx1P39F8yniedmKgW93lrDuh6XhOk9mU8XEo6IPHSuAAQF6cw 7Y7/mJfun4oX0E5uL7y1JbiL2hpvuAqEPx4fQAMEOE80xgxfEX4gmozYPH0HYcsP iGboJifg6c8eNWJXAhaLz6XgsWjSsH77qLrs6JcKTLABly+C4MehojKU52Oh+L1Y uzLn93MXIv9I0t+r3rhNdWC/0LdfBe4W7n1oAnsiVujRSmhM5NEXjN3oyQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFAjaCUbr6fVAg1CpiMaCJh2vqzRUMB8GA1UdIwQY MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt MzZjY2I1YTA2MTk1LzEvQ05vSlJ1dnA5VUNEVUttSXhvSW1IYS1yTkZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1 LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUBURPDHgMF ALlkADUwDQYJKoZIhvcNAQELBQADggEBAIWegIVpz1sZW+j8Q0G3z9IW5Ss8feBo lYxjQGkny4QilKgZPYQ5odPvHb78opbL95IVN+weu4YZNAU4yfOGlbcy3ZvAAl/x YYVY0nx+KvBag0u+GkE4zvTniN2l2I5Bmmr1pfZI2bzvThm5CdZ4xlE9cbHCe7hA dqfVzID4aq7Locc87NYqEIa1wblalzrG2Q8gkTd0OUDe63eyK1/er0HFq9VTmTy5 9Cpt0N9FEmHxtndwfev0pYOUczgaMkDAJ5TXlNexhuGQ8v/5eJrcmuxDKfqJlRyw JHUyVYYIns1aW/fvV+XoSD0O6rMhXhTLt7JGElFP0PEySBWB9rqLy4E= -----END CERTIFICATE-----Generated at Mon Jan 26 02:01:34 2026 by rpki-client