This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/D3le-9Zepc5Uop5oxhjFlsOirUQ.roa File: D3le-9Zepc5Uop5oxhjFlsOirUQ.roa (raw, json) Hash identifier: g81CkvrYUW+tZW4XshnvEajXoU3efm2RIHcZAMzczco= Subject key identifier: 0F:79:5E:FB:D6:5E:A5:CE:54:A2:9E:68:C6:18:C5:96:C3:A2:AD:44 Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Certificate serial: 019B77C69C43978334D219DA54CB80E77431 Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/D3le-9Zepc5Uop5oxhjFlsOirUQ.roa Signing time: Thu 01 Jan 2026 04:17:43 +0000 ROA not before: Thu 01 Jan 2026 04:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396588 IP address blocks: 81.19.195.30/32 maxlen: 32 81.19.195.31/32 maxlen: 32 185.100.0.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:9c:43:97:83:34:d2:19:da:54:cb:80:e7:74:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Validity Not Before: Jan 1 04:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0f795efbd65ea5ce54a29e68c618c596c3a2ad44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:19:cf:1c:49:8e:1a:bf:2b:16:c9:0e:d5:d4: 82:55:74:30:50:c6:af:39:14:b5:b7:76:d5:e5:53: 06:28:aa:b5:b6:2f:96:4c:e8:c1:29:06:c0:55:59: 63:aa:3e:78:6d:fa:ca:95:06:e7:df:4b:d1:94:ff: b5:06:b0:60:6e:6f:51:c3:8c:4a:01:25:db:03:f9: 31:72:2a:18:70:04:88:e7:29:66:33:c9:32:47:40: dd:c8:c4:5f:24:eb:e0:b3:a0:11:5e:fe:54:eb:91: 74:ff:4a:01:e7:92:42:e0:a1:62:dd:bc:51:f0:f1: c0:ee:be:e3:f4:3c:e0:2f:73:7c:9b:0c:1a:a0:2e: ef:75:0d:84:7a:db:ce:9c:9e:8b:24:34:2b:b6:13: ed:1d:7e:f6:c5:58:a6:07:82:38:05:66:33:4b:4b: f7:fe:b7:5d:3d:7a:fd:51:8c:52:b4:e1:d0:5d:32: 5f:af:46:c1:35:d1:82:71:6d:1b:29:a9:72:5d:bd: a2:a9:50:3b:34:e4:01:42:4f:eb:b4:e4:e8:7f:7b: de:1d:a0:02:89:6f:61:69:2b:17:e1:62:c7:cf:bb: 9f:a8:be:1a:26:52:1f:a8:67:98:78:94:35:ba:7f: 81:97:d2:a4:56:40:3d:3b:ee:ee:1a:99:e7:f4:95: 7f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:79:5E:FB:D6:5E:A5:CE:54:A2:9E:68:C6:18:C5:96:C3:A2:AD:44 X509v3 Authority Key Identifier: keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/D3le-9Zepc5Uop5oxhjFlsOirUQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.19.195.30/31 185.100.0.53/32 Signature Algorithm: sha256WithRSAEncryption 99:19:54:ef:4b:9b:cd:98:bb:f8:ea:5b:87:4e:0d:38:5b:c9: ff:ae:c0:bb:7a:42:94:9f:01:b7:5b:8e:75:45:d2:0f:9d:f7: 67:dc:e6:85:1d:1e:f0:ba:4f:c8:5e:fd:db:bb:2a:88:79:d6: f5:f2:e5:01:f3:da:23:b1:59:cb:a6:c8:70:d8:64:53:b2:85: 74:89:51:5a:c7:e0:f9:12:64:3e:01:2d:ac:af:ad:dd:06:a4: 87:f5:e0:b0:28:a0:ed:82:08:24:d3:4c:c8:74:3c:b5:98:f4: 1c:ed:e6:7f:e3:be:6d:a8:4b:5b:2f:d8:76:4b:d0:87:07:b2: ae:07:c1:2d:fa:dd:2a:ef:22:18:15:8a:23:f0:d9:17:39:c8: 26:d4:f3:88:e3:cd:7e:69:65:c8:0f:ea:58:07:52:3b:fc:01: 58:c6:27:8a:10:b2:39:e7:94:65:ad:e3:4c:2a:c3:3b:6b:11: a0:df:ea:da:77:1c:c7:ef:a8:36:8e:ac:35:5c:3a:b8:ab:b2: d7:c6:08:9d:69:b6:be:50:c3:bf:9e:bd:ce:04:64:dd:15:f6: 1f:ea:68:31:3d:ec:73:53:63:c8:bc:75:52:50:88:e7:06:0a: df:84:f5:35:06:45:ab:bb:78:91:88:96:9e:4d:53:ca:f3:c6: e8:69:25:a6 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3xpxDl4M00hnaVMuA53QxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl MDZkNTIwHhcNMjYwMTAxMDQxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZjc5NWVmYmQ2NWVhNWNlNTRhMjllNjhjNjE4YzU5NmMzYTJhZDQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRnPHEmOGr8rFskO1dSCVXQwUMav ORS1t3bV5VMGKKq1ti+WTOjBKQbAVVljqj54bfrKlQbn30vRlP+1BrBgbm9Rw4xK ASXbA/kxcioYcASI5ylmM8kyR0DdyMRfJOvgs6ARXv5U65F0/0oB55JC4KFi3bxR 8PHA7r7j9DzgL3N8mwwaoC7vdQ2EetvOnJ6LJDQrthPtHX72xVimB4I4BWYzS0v3 /rddPXr9UYxStOHQXTJfr0bBNdGCcW0bKalyXb2iqVA7NOQBQk/rtOTof3veHaAC iW9haSsX4WLHz7ufqL4aJlIfqGeYeJQ1un+Bl9KkVkA9O+7uGpnn9JV/MQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFA95XvvWXqXOVKKeaMYYxZbDoq1EMB8GA1UdIwQY MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt MzZjY2I1YTA2MTk1LzEvRDNsZS05WmVwYzVVb3A1b3hoakZsc09pclVRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1 LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUBURPDHgMF ALlkADUwDQYJKoZIhvcNAQELBQADggEBAJkZVO9Lm82Yu/jqW4dODThbyf+uwLt6 QpSfAbdbjnVF0g+d92fc5oUdHvC6T8he/du7Koh51vXy5QHz2iOxWcumyHDYZFOy hXSJUVrH4PkSZD4BLayvrd0GpIf14LAooO2CCCTTTMh0PLWY9Bzt5n/jvm2oS1sv 2HZL0IcHsq4HwS363SrvIhgViiPw2Rc5yCbU84jjzX5pZcgP6lgHUjv8AVjGJ4oQ sjnnlGWt40wqwztrEaDf6tp3HMfvqDaOrDVcOrirstfGCJ1ptr5Qw7+evc4EZN0V 9h/qaDE97HNTY8i8dVJQiOcGCt+E9TUGRau7eJGIlp5NU8rzxuhpJaY= -----END CERTIFICATE-----Generated at Mon Jan 26 03:27:31 2026 by rpki-client