This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/FWCwcLlm7VPZSgCmFrvjhKbZILM.roa File: FWCwcLlm7VPZSgCmFrvjhKbZILM.roa (raw, json) Hash identifier: s53RmhrU3uBl8WgbTHoZSXjRwDiR3mBZW8jlh9patAg= Subject key identifier: 15:60:B0:70:B9:66:ED:53:D9:4A:00:A6:16:BB:E3:84:A6:D9:20:B3 Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Certificate serial: 019B77C68102E798595D0A333633F0FD9793 Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/FWCwcLlm7VPZSgCmFrvjhKbZILM.roa Signing time: Thu 01 Jan 2026 04:17:36 +0000 ROA not before: Thu 01 Jan 2026 04:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 36617 IP address blocks: 81.19.195.30/32 maxlen: 32 81.19.195.31/32 maxlen: 32 185.100.0.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:81:02:e7:98:59:5d:0a:33:36:33:f0:fd:97:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Validity Not Before: Jan 1 04:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1560b070b966ed53d94a00a616bbe384a6d920b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:26:49:44:e3:12:cf:0a:74:8f:77:28:93:ba: 90:ad:96:d3:d3:3e:12:88:a0:60:1b:ff:d4:10:1d: 56:f2:fd:2e:9f:bc:c4:8d:8b:ac:1b:c9:ba:76:04: 43:3e:6b:57:2b:cb:e7:2e:4b:49:ba:66:3b:7c:3f: 5c:b7:18:d9:99:96:9f:cf:1f:c4:42:50:4f:4d:39: 6d:dd:d8:81:73:be:44:85:f9:7d:d2:f0:32:c3:8f: 20:9a:0b:0d:41:7b:c0:37:75:de:4f:30:cc:6e:c7: 3e:56:d7:f8:b8:97:9e:8f:2d:c4:1e:24:17:71:91: c6:a6:d7:5e:bc:a5:0a:dc:f4:92:78:43:8e:bd:42: ae:db:13:e9:a7:0e:f1:23:75:d6:66:91:f0:e9:4b: 35:6a:1a:e7:2e:fe:83:5f:1d:e1:d5:bf:77:3e:f3: c7:a6:d0:77:65:97:9d:85:ea:c9:4a:38:8e:c5:d3: 13:bb:6c:e0:30:17:66:85:8a:60:80:3f:2a:a5:d8: 53:69:78:bd:00:2b:4f:5b:48:e3:61:ba:94:6e:0e: 11:61:38:cb:45:51:74:65:ea:79:6e:42:be:fd:f7: 9f:e8:7a:11:cc:1b:84:a2:5d:98:81:13:0f:59:ea: a0:c1:02:08:35:d7:cc:5a:c0:0b:08:fc:06:f9:4f: d5:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:60:B0:70:B9:66:ED:53:D9:4A:00:A6:16:BB:E3:84:A6:D9:20:B3 X509v3 Authority Key Identifier: keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/FWCwcLlm7VPZSgCmFrvjhKbZILM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.19.195.30/31 185.100.0.53/32 Signature Algorithm: sha256WithRSAEncryption 37:ab:f9:cc:8c:68:aa:e3:28:10:f9:2a:9a:09:f5:31:81:d2: 25:6a:8d:51:15:e4:4e:69:82:e4:f5:dd:85:39:7c:5c:23:1b: 7b:fc:35:cd:c0:42:17:01:5b:44:82:f4:32:c1:d5:8d:5c:1a: c1:9f:02:62:dc:4b:5c:ea:72:c9:ac:10:ba:da:94:01:5a:05: 16:d9:e4:c2:45:93:52:77:b1:4b:ab:47:c7:c8:84:9b:d5:06: ac:a9:be:a1:46:5b:39:3e:41:ca:35:b3:ae:4a:0e:01:19:9b: b3:68:16:7f:bc:fe:1f:d2:2a:5a:b3:8b:3b:50:a7:ed:3a:5a: 45:c4:d8:9b:c6:2c:98:e4:90:b9:23:a9:01:fd:be:0a:ed:34: 3d:a4:38:bb:c8:6f:d1:37:d0:af:bf:45:39:6b:00:4e:3d:a3: 10:3e:4b:7f:6c:21:70:de:05:bf:f4:61:12:83:79:fc:ac:2f: ff:5b:f4:4b:78:b7:a6:fe:37:e3:80:89:cf:18:3d:de:02:c0: 47:7e:5a:eb:ec:99:9f:67:d1:d7:30:ab:d6:ec:ec:fe:96:27: fc:81:a2:f8:c6:26:47:1b:c9:94:60:d5:41:a7:4d:cb:d5:b7: 9c:85:25:ff:a8:7b:b3:76:f1:74:b2:91:26:b3:50:ce:2c:f9: ab:d3:aa:2c -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3xoEC55hZXQozNjPw/ZeTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl MDZkNTIwHhcNMjYwMTAxMDQxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNTYwYjA3MGI5NjZlZDUzZDk0YTAwYTYxNmJiZTM4NGE2ZDkyMGIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniZJROMSzwp0j3cok7qQrZbT0z4S iKBgG//UEB1W8v0un7zEjYusG8m6dgRDPmtXK8vnLktJumY7fD9ctxjZmZafzx/E QlBPTTlt3diBc75Ehfl90vAyw48gmgsNQXvAN3XeTzDMbsc+Vtf4uJeejy3EHiQX cZHGptdevKUK3PSSeEOOvUKu2xPppw7xI3XWZpHw6Us1ahrnLv6DXx3h1b93PvPH ptB3ZZedherJSjiOxdMTu2zgMBdmhYpggD8qpdhTaXi9ACtPW0jjYbqUbg4RYTjL RVF0Zep5bkK+/fef6HoRzBuEol2YgRMPWeqgwQIINdfMWsALCPwG+U/VQQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFBVgsHC5Zu1T2UoApha744Sm2SCzMB8GA1UdIwQY MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt MzZjY2I1YTA2MTk1LzEvRldDd2NMbG03VlBaU2dDbUZydmpoS2JaSUxNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1 LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUBURPDHgMF ALlkADUwDQYJKoZIhvcNAQELBQADggEBADer+cyMaKrjKBD5KpoJ9TGB0iVqjVEV 5E5pguT13YU5fFwjG3v8Nc3AQhcBW0SC9DLB1Y1cGsGfAmLcS1zqcsmsELralAFa BRbZ5MJFk1J3sUurR8fIhJvVBqypvqFGWzk+Qco1s65KDgEZm7NoFn+8/h/SKlqz iztQp+06WkXE2JvGLJjkkLkjqQH9vgrtND2kOLvIb9E30K+/RTlrAE49oxA+S39s IXDeBb/0YRKDefysL/9b9Et4t6b+N+OAic8YPd4CwEd+WuvsmZ9n0dcwq9bs7P6W J/yBovjGJkcbyZRg1UGnTcvVt5yFJf+oe7N28XSykSazUM4s+avTqiw= -----END CERTIFICATE-----Generated at Mon Jan 26 05:04:45 2026 by rpki-client