This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/C_-LThlr07iK9LZQW-IApOhdJ1g.roa File: C_-LThlr07iK9LZQW-IApOhdJ1g.roa (raw, json) Hash identifier: e4f85gtIJrp2r2C2AVikdp+KSvQpWuC4ya0Z0YMtNVw= Subject key identifier: 0B:FF:8B:4E:19:6B:D3:B8:8A:F4:B6:50:5B:E2:00:A4:E8:5D:27:58 Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Certificate serial: 019B77C6B44FCDEC674A1404D61CCCD44903 Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/C_-LThlr07iK9LZQW-IApOhdJ1g.roa Signing time: Thu 01 Jan 2026 04:17:49 +0000 ROA not before: Thu 01 Jan 2026 04:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 397210 IP address blocks: 81.19.195.30/32 maxlen: 32 81.19.195.31/32 maxlen: 32 185.100.0.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:b4:4f:cd:ec:67:4a:14:04:d6:1c:cc:d4:49:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Validity Not Before: Jan 1 04:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0bff8b4e196bd3b88af4b6505be200a4e85d2758 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:2e:71:a0:42:fb:4b:fb:00:ca:fa:3f:4f:72: f2:ad:56:2c:bf:e6:fb:4d:82:62:a5:dc:fd:be:03: 66:7a:d6:c2:94:c4:b7:6f:2e:0d:7f:c3:b1:38:3f: cf:40:53:e9:02:53:47:80:2f:42:e2:6c:41:8a:50: ca:82:56:0a:67:df:dd:2e:84:30:25:4f:8c:8c:27: 1c:d2:d4:cd:2a:9e:df:7d:b5:be:1b:60:28:58:93: fd:98:23:82:92:94:e6:8b:8b:98:97:e3:b0:6f:d8: 39:db:b9:2b:bf:4b:eb:ea:96:64:f1:9c:60:97:8f: b6:4d:02:f2:fe:4e:4b:7b:8d:34:e1:b3:87:93:82: 59:b5:0e:99:9a:6d:ca:66:4a:f8:6b:08:70:d7:e2: 9f:80:21:ea:c3:a7:74:83:71:64:68:87:b9:49:ef: de:e3:49:58:c1:12:e7:0b:32:5e:54:d9:78:dd:0e: ca:56:a6:e2:2d:ea:51:04:f8:51:db:f5:4a:7a:6c: 90:98:bf:73:58:01:e6:05:13:01:47:c9:d0:27:3f: 33:5b:b5:f3:d1:07:03:b7:a4:97:49:b9:d1:29:88: 43:98:d0:1c:2e:84:a9:9c:41:7b:45:95:2c:3d:83: fc:67:0e:95:ed:90:d6:36:f3:72:76:f5:8a:b1:2f: ba:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:FF:8B:4E:19:6B:D3:B8:8A:F4:B6:50:5B:E2:00:A4:E8:5D:27:58 X509v3 Authority Key Identifier: keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/C_-LThlr07iK9LZQW-IApOhdJ1g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.19.195.30/31 185.100.0.53/32 Signature Algorithm: sha256WithRSAEncryption 8b:97:11:7a:ad:92:97:e6:1f:eb:7d:80:6b:7a:c1:ff:4c:d1: e7:7c:f1:35:57:1b:cc:0a:fb:70:bf:d0:a2:1e:b7:a4:6d:7f: 8a:ba:a2:fc:74:a5:fe:62:6c:8e:2a:db:6f:00:39:b0:6a:51: 9e:90:5b:33:43:6e:1f:d6:e0:30:37:88:f9:35:be:c9:34:56: 8b:22:4e:8d:33:8c:ee:32:b7:64:31:27:24:d0:6e:53:06:2a: ad:49:64:e2:67:28:9e:43:52:de:01:08:76:1b:b2:bc:50:30: 9b:8b:0e:7b:c0:f5:fb:b8:03:2f:76:5c:b9:4b:65:7f:07:68: 84:64:74:4b:c0:10:44:ff:b9:4f:02:a7:ea:3c:ba:f8:45:5a: d7:99:c4:b1:a3:ad:71:f6:11:93:df:d8:7f:1c:42:a7:71:d0: 90:77:75:01:c8:50:f6:55:4b:e5:2d:47:cf:9b:36:0a:c6:d7: 41:3f:81:f0:5c:b8:fd:b2:36:54:8b:d0:8d:f9:30:26:80:f5: f6:ca:22:5b:3f:f7:aa:5d:51:07:d8:e4:5f:0f:87:9d:a0:63: b4:35:49:27:7a:73:78:e4:25:90:bc:82:3e:8e:37:1f:08:a7: b0:5f:1f:51:1a:24:f6:4c:eb:5b:4e:32:69:92:30:fa:b6:2f: 0f:c3:eb:5c -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3xrRPzexnShQE1hzM1EkDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl MDZkNTIwHhcNMjYwMTAxMDQxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYmZmOGI0ZTE5NmJkM2I4OGFmNGI2NTA1YmUyMDBhNGU4NWQyNzU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApC5xoEL7S/sAyvo/T3LyrVYsv+b7 TYJipdz9vgNmetbClMS3by4Nf8OxOD/PQFPpAlNHgC9C4mxBilDKglYKZ9/dLoQw JU+MjCcc0tTNKp7ffbW+G2AoWJP9mCOCkpTmi4uYl+Owb9g527krv0vr6pZk8Zxg l4+2TQLy/k5Le4004bOHk4JZtQ6Zmm3KZkr4awhw1+KfgCHqw6d0g3FkaIe5Se/e 40lYwRLnCzJeVNl43Q7KVqbiLepRBPhR2/VKemyQmL9zWAHmBRMBR8nQJz8zW7Xz 0QcDt6SXSbnRKYhDmNAcLoSpnEF7RZUsPYP8Zw6V7ZDWNvNydvWKsS+6JQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFAv/i04Za9O4ivS2UFviAKToXSdYMB8GA1UdIwQY MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt MzZjY2I1YTA2MTk1LzEvQ18tTFRobHIwN2lLOUxaUVctSUFwT2hkSjFnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1 LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUBURPDHgMF ALlkADUwDQYJKoZIhvcNAQELBQADggEBAIuXEXqtkpfmH+t9gGt6wf9M0ed88TVX G8wK+3C/0KIet6Rtf4q6ovx0pf5ibI4q228AObBqUZ6QWzNDbh/W4DA3iPk1vsk0 VosiTo0zjO4yt2QxJyTQblMGKq1JZOJnKJ5DUt4BCHYbsrxQMJuLDnvA9fu4Ay92 XLlLZX8HaIRkdEvAEET/uU8Cp+o8uvhFWteZxLGjrXH2EZPf2H8cQqdx0JB3dQHI UPZVS+UtR8+bNgrG10E/gfBcuP2yNlSL0I35MCaA9fbKIls/96pdUQfY5F8Ph52g Y7Q1SSd6c3jkJZC8gj6ONx8Ip7BfH1EaJPZM61tOMmmSMPq2Lw/D61w= -----END CERTIFICATE-----Generated at Sun Jan 25 23:03:55 2026 by rpki-client