This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/CvgsoYj7fiYFDz_jnJljujVeIkk.roa File: CvgsoYj7fiYFDz_jnJljujVeIkk.roa (raw, json) Hash identifier: xVDTt9eLC+oclV6p3PvMQLRwFNGz4z6SvPV7rigO/O4= Subject key identifier: 0A:F8:2C:A1:88:FB:7E:26:05:0F:3F:E3:9C:99:63:BA:35:5E:22:49 Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Certificate serial: 019B77C68A18439F78D733868BE21A9425E3 Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/CvgsoYj7fiYFDz_jnJljujVeIkk.roa Signing time: Thu 01 Jan 2026 04:17:38 +0000 ROA not before: Thu 01 Jan 2026 04:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396542 IP address blocks: 81.19.195.30/32 maxlen: 32 81.19.195.31/32 maxlen: 32 185.100.0.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:8a:18:43:9f:78:d7:33:86:8b:e2:1a:94:25:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Validity Not Before: Jan 1 04:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0af82ca188fb7e26050f3fe39c9963ba355e2249 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:2e:f3:0e:66:dc:e3:b0:4a:1f:6f:0f:ab:cc: 48:ca:5b:a3:f4:52:a7:b0:fe:23:81:a0:65:14:16: ec:50:95:b4:e2:97:d1:5b:74:c2:ff:98:94:3d:01: c4:d3:17:b7:bd:5b:fe:0c:f5:91:8f:f2:44:42:d0: 27:6a:f6:76:9d:53:92:b4:d0:47:75:93:74:9e:9d: bf:96:85:0a:15:8d:f9:9c:f9:8c:c3:fc:a2:51:04: 50:e1:15:cc:6d:27:97:21:c9:63:61:ec:dc:db:de: 68:10:5f:54:8d:53:18:dc:7c:5a:5c:96:43:ce:0a: 73:d8:06:2f:34:56:a3:c3:3b:63:ae:d9:f1:ec:19: 11:06:92:aa:d4:32:6b:b1:fb:46:e1:79:01:af:e4: a3:18:8d:c7:3e:88:3b:4c:fe:82:89:8a:63:eb:a6: 48:d6:15:f8:6a:75:ac:6d:5b:2c:22:d4:03:1a:56: cc:5d:a1:f0:59:64:9a:d8:db:12:73:ee:86:7a:a2: bd:a4:2b:80:b1:cb:c3:10:bc:00:88:ac:06:e0:a7: 47:33:8e:46:dc:19:87:d9:27:47:a0:6f:30:ca:f8: 86:b2:ab:e4:85:5a:40:b1:02:1e:36:24:af:10:5b: 6f:90:83:4c:eb:c7:7f:cd:e6:76:53:d9:2b:78:e8: 46:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:F8:2C:A1:88:FB:7E:26:05:0F:3F:E3:9C:99:63:BA:35:5E:22:49 X509v3 Authority Key Identifier: keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/CvgsoYj7fiYFDz_jnJljujVeIkk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.19.195.30/31 185.100.0.53/32 Signature Algorithm: sha256WithRSAEncryption a5:5d:ba:2d:4c:a2:30:be:1b:c0:00:ad:d2:73:f4:b0:34:8e: 12:92:5c:e5:d3:81:8b:f2:1d:60:3b:f1:5a:e0:9e:a1:6a:10: 39:d1:1b:39:76:59:39:f6:99:0d:9b:c3:e7:b0:2b:52:74:a5: f1:82:03:2c:f8:eb:56:cf:3c:e5:ee:13:a1:ce:5d:74:54:8f: cb:09:01:08:f7:57:e1:f5:b4:48:19:5a:ed:03:77:ed:94:dc: 7c:e7:68:da:e5:c1:50:80:de:92:60:dd:ec:1a:95:ab:cf:94: af:ab:ac:89:78:d2:36:9f:da:b5:a2:89:de:34:0b:e3:69:49: 7f:c8:f9:09:c2:86:4f:e6:1a:36:d5:91:3f:5d:1d:2e:7d:1e: bb:48:0c:d9:a8:1e:cc:1d:a8:2f:a7:4e:a5:a0:b7:48:f0:c0: 83:db:f4:cb:05:55:7b:f8:98:fb:6d:53:12:ea:66:34:0a:98: 41:14:f6:83:b8:34:db:74:b1:c5:29:24:38:81:03:a8:0a:67: 02:44:a3:f1:06:57:f1:21:29:ef:d9:e2:a6:75:af:ce:71:57: a4:ea:d4:80:6c:d9:88:c9:ed:6d:09:71:e2:c8:64:6f:f6:91: e3:12:9c:86:77:f2:3c:58:03:53:f4:91:56:9e:52:87:cd:99: c4:4a:a9:8f -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3xooYQ5941zOGi+IalCXjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl MDZkNTIwHhcNMjYwMTAxMDQxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYWY4MmNhMTg4ZmI3ZTI2MDUwZjNmZTM5Yzk5NjNiYTM1NWUyMjQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1i7zDmbc47BKH28Pq8xIyluj9FKn sP4jgaBlFBbsUJW04pfRW3TC/5iUPQHE0xe3vVv+DPWRj/JEQtAnavZ2nVOStNBH dZN0np2/loUKFY35nPmMw/yiUQRQ4RXMbSeXIcljYezc295oEF9UjVMY3HxaXJZD zgpz2AYvNFajwztjrtnx7BkRBpKq1DJrsftG4XkBr+SjGI3HPog7TP6CiYpj66ZI 1hX4anWsbVssItQDGlbMXaHwWWSa2NsSc+6GeqK9pCuAscvDELwAiKwG4KdHM45G 3BmH2SdHoG8wyviGsqvkhVpAsQIeNiSvEFtvkINM68d/zeZ2U9kreOhGPQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFAr4LKGI+34mBQ8/45yZY7o1XiJJMB8GA1UdIwQY MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt MzZjY2I1YTA2MTk1LzEvQ3Znc29ZajdmaVlGRHpfam5KbGp1alZlSWtrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1 LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUBURPDHgMF ALlkADUwDQYJKoZIhvcNAQELBQADggEBAKVdui1MojC+G8AArdJz9LA0jhKSXOXT gYvyHWA78VrgnqFqEDnRGzl2WTn2mQ2bw+ewK1J0pfGCAyz461bPPOXuE6HOXXRU j8sJAQj3V+H1tEgZWu0Dd+2U3HznaNrlwVCA3pJg3ewalavPlK+rrIl40jaf2rWi id40C+NpSX/I+QnChk/mGjbVkT9dHS59HrtIDNmoHswdqC+nTqWgt0jwwIPb9MsF VXv4mPttUxLqZjQKmEEU9oO4NNt0scUpJDiBA6gKZwJEo/EGV/EhKe/Z4qZ1r85x V6Tq1IBs2YjJ7W0JceLIZG/2keMSnIZ38jxYA1P0kVaeUofNmcRKqY8= -----END CERTIFICATE-----Generated at Sun Jan 25 21:39:43 2026 by rpki-client