This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/DanH7mNHZKM5yKirlpSLSKXpD4Y.roa File: DanH7mNHZKM5yKirlpSLSKXpD4Y.roa (raw, json) Hash identifier: o4Or6bWmktuDHg65R12BlMvmRWrU8WJO8Zk+3+la+h8= Subject key identifier: 0D:A9:C7:EE:63:47:64:A3:39:C8:A8:AB:96:94:8B:48:A5:E9:0F:86 Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Certificate serial: 019B77C69061AA6F3A5452360BD2293AF473 Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/DanH7mNHZKM5yKirlpSLSKXpD4Y.roa Signing time: Thu 01 Jan 2026 04:17:40 +0000 ROA not before: Thu 01 Jan 2026 04:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396562 IP address blocks: 81.19.195.30/32 maxlen: 32 81.19.195.31/32 maxlen: 32 185.100.0.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:90:61:aa:6f:3a:54:52:36:0b:d2:29:3a:f4:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Validity Not Before: Jan 1 04:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0da9c7ee634764a339c8a8ab96948b48a5e90f86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:d4:07:52:94:aa:71:37:13:83:aa:b6:1b:01: 22:f2:69:6e:bc:dc:f7:ef:e1:af:7a:bd:70:ca:e8: 01:c1:a8:58:a4:57:80:e5:55:87:f9:b1:34:de:40: 65:97:96:2c:96:fd:fe:99:c3:7e:00:e0:b1:ee:9a: 9d:01:62:3a:2e:b9:fd:01:20:21:be:54:50:d0:ec: b7:91:54:10:26:32:26:37:90:36:c0:1e:12:73:99: eb:7f:e2:89:47:3b:3a:46:80:af:f0:31:c5:df:7f: ed:20:45:12:e9:3a:25:23:ca:fd:66:ec:4d:6e:50: 3b:ed:74:0c:a1:df:1f:80:d6:17:58:fa:63:50:25: 8b:b9:84:36:0f:2b:8c:b5:d7:67:a8:a8:9d:fc:3c: f4:67:4f:ca:6d:e9:30:8e:c5:50:45:15:e9:ca:af: a4:0c:52:6c:a6:57:83:11:ac:2b:6d:a7:27:48:4f: f9:fe:9a:e4:6b:2b:50:c3:3a:d2:aa:e7:c7:6a:5d: a9:92:1d:d7:05:12:6d:2a:6e:fa:1b:1c:29:31:09: f5:d4:b4:24:85:de:dd:d3:66:9f:82:5d:a1:24:e6: 99:3a:14:0c:af:72:2c:4d:3d:38:97:c8:ae:87:44: f4:33:23:5f:a6:d6:7e:24:7c:c3:4b:c6:f0:0c:3e: 8f:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:A9:C7:EE:63:47:64:A3:39:C8:A8:AB:96:94:8B:48:A5:E9:0F:86 X509v3 Authority Key Identifier: keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/DanH7mNHZKM5yKirlpSLSKXpD4Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.19.195.30/31 185.100.0.53/32 Signature Algorithm: sha256WithRSAEncryption 6b:cd:cf:1b:87:f5:83:55:52:af:8d:07:40:bd:eb:73:55:b6: 1c:51:78:d3:5c:c7:57:c2:4e:fb:1a:fe:99:dc:58:85:f5:34: b0:91:a3:2e:0a:74:f2:93:3b:56:3b:17:a7:ce:d2:dc:ef:c4: 93:d9:d4:ca:52:ab:c6:1f:af:af:b5:e9:36:d5:2e:34:2f:67: e0:0f:fe:85:5a:ec:e5:a6:9a:85:84:5a:19:53:db:74:ff:63: ac:e4:fa:09:32:fb:3a:f9:68:7a:0d:3f:f0:2c:3d:e0:0c:af: f8:40:54:09:7f:8a:16:9a:50:f9:7d:f8:40:2f:97:dd:f8:42: 9e:8f:1b:7d:99:51:01:45:24:4e:95:f1:d6:03:5e:43:f4:5d: 21:1d:8e:14:d5:4f:6a:9e:14:f0:8f:9d:b9:bb:2d:60:82:1d: 7c:1f:b9:80:f4:75:9f:e8:f5:9e:86:f0:75:ad:0b:7c:cc:c7: 75:6e:a7:ee:ad:68:7d:db:7f:74:7e:78:ac:7d:13:51:78:7e: c8:94:d3:01:ff:54:6c:3e:66:99:11:7d:0a:c4:c7:c7:eb:ae: 71:6d:1f:d4:94:69:f3:2c:54:f5:56:d9:d0:43:d3:a2:96:b0: 05:48:25:dd:cc:23:3f:2f:55:b0:64:82:1b:d4:fc:7a:e9:85: b8:74:33:a6 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3xpBhqm86VFI2C9IpOvRzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl MDZkNTIwHhcNMjYwMTAxMDQxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZGE5YzdlZTYzNDc2NGEzMzljOGE4YWI5Njk0OGI0OGE1ZTkwZjg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8tQHUpSqcTcTg6q2GwEi8mluvNz3 7+Gver1wyugBwahYpFeA5VWH+bE03kBll5Yslv3+mcN+AOCx7pqdAWI6Lrn9ASAh vlRQ0Oy3kVQQJjImN5A2wB4Sc5nrf+KJRzs6RoCv8DHF33/tIEUS6TolI8r9ZuxN blA77XQMod8fgNYXWPpjUCWLuYQ2DyuMtddnqKid/Dz0Z0/KbekwjsVQRRXpyq+k DFJspleDEawrbacnSE/5/prkaytQwzrSqufHal2pkh3XBRJtKm76GxwpMQn11LQk hd7d02afgl2hJOaZOhQMr3IsTT04l8iuh0T0MyNfptZ+JHzDS8bwDD6PxQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFA2px+5jR2SjOcioq5aUi0il6Q+GMB8GA1UdIwQY MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt MzZjY2I1YTA2MTk1LzEvRGFuSDdtTkhaS001eUtpcmxwU0xTS1hwRDRZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1 LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUBURPDHgMF ALlkADUwDQYJKoZIhvcNAQELBQADggEBAGvNzxuH9YNVUq+NB0C963NVthxReNNc x1fCTvsa/pncWIX1NLCRoy4KdPKTO1Y7F6fO0tzvxJPZ1MpSq8Yfr6+16TbVLjQv Z+AP/oVa7OWmmoWEWhlT23T/Y6zk+gky+zr5aHoNP/AsPeAMr/hAVAl/ihaaUPl9 +EAvl934Qp6PG32ZUQFFJE6V8dYDXkP0XSEdjhTVT2qeFPCPnbm7LWCCHXwfuYD0 dZ/o9Z6G8HWtC3zMx3Vup+6taH3bf3R+eKx9E1F4fsiU0wH/VGw+ZpkRfQrEx8fr rnFtH9SUafMsVPVW2dBD06KWsAVIJd3MIz8vVbBkghvU/Hrphbh0M6Y= -----END CERTIFICATE-----Generated at Mon Jan 26 03:27:51 2026 by rpki-client