This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/G3GpaRpsTLRuVLoaD0g79RKo4eU.roa File: G3GpaRpsTLRuVLoaD0g79RKo4eU.roa (raw, json) Hash identifier: 6yEKPNhTeZPF5cw/+dxT506qxUM0/nbbR9Z0yN1jsXs= Subject key identifier: 1B:71:A9:69:1A:6C:4C:B4:6E:54:BA:1A:0F:48:3B:F5:12:A8:E1:E5 Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Certificate serial: 019B77C68BB9CCE74FE2120A0E5EE29773D9 Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/G3GpaRpsTLRuVLoaD0g79RKo4eU.roa Signing time: Thu 01 Jan 2026 04:17:39 +0000 ROA not before: Thu 01 Jan 2026 04:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396547 IP address blocks: 81.19.195.30/32 maxlen: 32 81.19.195.31/32 maxlen: 32 185.100.0.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:8b:b9:cc:e7:4f:e2:12:0a:0e:5e:e2:97:73:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Validity Not Before: Jan 1 04:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1b71a9691a6c4cb46e54ba1a0f483bf512a8e1e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:fd:2d:32:ad:8a:4a:3f:6b:68:86:72:ed:ce: 21:c1:aa:48:c6:47:5b:bd:4b:fb:6d:8b:61:4b:47: 5d:41:d7:bb:aa:ea:8a:c9:e2:67:89:6f:09:1d:57: 33:69:52:9d:30:33:15:dd:55:cd:51:3a:72:12:af: 84:06:07:64:c6:82:67:ff:84:00:76:a7:0c:76:f8: 04:04:bc:42:7f:81:a9:2c:1f:64:ed:84:fd:b0:f2: d7:72:1a:29:f8:ca:5c:a8:18:74:fc:5e:05:4c:5f: c7:03:7b:69:ad:67:a6:84:64:c0:ae:fa:9e:a8:d2: 52:f3:90:47:b3:c8:dd:b5:9d:25:5b:06:6f:38:28: c4:67:58:3f:43:48:65:4b:26:ac:84:3a:5f:b1:eb: f3:12:f9:13:93:71:5d:e9:70:5f:2c:e6:e2:6b:36: 94:74:de:bf:4f:4b:54:10:b6:43:cb:c7:23:5d:e8: 39:2b:1c:aa:8a:05:6d:4e:c9:76:46:e6:61:f9:70: 11:fd:bc:67:f8:18:f5:9f:c4:e7:5c:52:d8:2e:1a: 87:ea:cc:07:ff:8c:7d:8b:d7:5b:66:3a:25:47:bf: a8:01:df:8a:b1:ca:df:93:60:22:00:d4:cd:7f:a4: 42:f6:e6:3d:f9:b5:bc:1a:bd:e7:b6:d5:c2:b5:78: 5c:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:71:A9:69:1A:6C:4C:B4:6E:54:BA:1A:0F:48:3B:F5:12:A8:E1:E5 X509v3 Authority Key Identifier: keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/G3GpaRpsTLRuVLoaD0g79RKo4eU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.19.195.30/31 185.100.0.53/32 Signature Algorithm: sha256WithRSAEncryption 91:da:77:ac:06:7b:fa:13:10:f9:82:8b:35:05:cf:3d:43:37: d6:2f:d7:69:18:a4:74:57:39:c7:db:f1:95:03:fb:d1:49:ef: 72:cf:df:30:85:5e:b4:63:ab:44:75:f3:dd:1f:17:6d:ce:ef: ef:4e:79:81:cb:94:34:5e:c3:0f:9c:66:3d:a4:27:9a:52:77: 9b:93:bf:66:cd:2a:b2:c7:09:55:1d:d0:6d:e4:99:fa:2d:fa: e4:0d:bd:a8:48:b4:32:0a:d9:1d:9f:b5:47:69:8d:d5:42:a9: 4c:55:4d:59:6b:de:c3:3b:75:70:6c:fa:4d:f5:1c:53:ed:e2: 6f:47:97:f9:08:a3:42:91:38:7c:f1:6b:66:56:af:e1:94:09: 1b:96:6c:d9:0d:37:e2:4a:ed:1d:33:6b:4e:d8:8a:a8:7e:4d: c6:c9:34:68:16:71:38:06:5a:87:1a:9d:71:1b:ef:74:bf:17: 48:9f:8b:55:55:ac:a4:04:15:7a:d9:c5:ae:cb:86:af:96:0a: 27:5f:1e:27:0b:98:48:51:98:ec:de:49:09:d1:e0:d1:83:dc: 64:f3:52:67:8a:95:37:bf:ec:11:25:56:c0:f0:5b:c9:bf:81: 2c:20:d6:8d:53:3c:58:f5:91:68:aa:fe:35:0c:3a:72:8c:f3: d3:6c:03:4f -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3xou5zOdP4hIKDl7il3PZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl MDZkNTIwHhcNMjYwMTAxMDQxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYjcxYTk2OTFhNmM0Y2I0NmU1NGJhMWEwZjQ4M2JmNTEyYThlMWU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApP0tMq2KSj9raIZy7c4hwapIxkdb vUv7bYthS0ddQde7quqKyeJniW8JHVczaVKdMDMV3VXNUTpyEq+EBgdkxoJn/4QA dqcMdvgEBLxCf4GpLB9k7YT9sPLXchop+MpcqBh0/F4FTF/HA3tprWemhGTArvqe qNJS85BHs8jdtZ0lWwZvOCjEZ1g/Q0hlSyashDpfsevzEvkTk3Fd6XBfLObiazaU dN6/T0tUELZDy8cjXeg5KxyqigVtTsl2RuZh+XAR/bxn+Bj1n8TnXFLYLhqH6swH /4x9i9dbZjolR7+oAd+Kscrfk2AiANTNf6RC9uY9+bW8Gr3nttXCtXhcgQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFBtxqWkabEy0blS6Gg9IO/USqOHlMB8GA1UdIwQY MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt MzZjY2I1YTA2MTk1LzEvRzNHcGFScHNUTFJ1VkxvYUQwZzc5UktvNGVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1 LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUBURPDHgMF ALlkADUwDQYJKoZIhvcNAQELBQADggEBAJHad6wGe/oTEPmCizUFzz1DN9Yv12kY pHRXOcfb8ZUD+9FJ73LP3zCFXrRjq0R1890fF23O7+9OeYHLlDReww+cZj2kJ5pS d5uTv2bNKrLHCVUd0G3kmfot+uQNvahItDIK2R2ftUdpjdVCqUxVTVlr3sM7dXBs +k31HFPt4m9Hl/kIo0KROHzxa2ZWr+GUCRuWbNkNN+JK7R0za07Yiqh+TcbJNGgW cTgGWocanXEb73S/F0ifi1VVrKQEFXrZxa7Lhq+WCidfHicLmEhRmOzeSQnR4NGD 3GTzUmeKlTe/7BElVsDwW8m/gSwg1o1TPFj1kWiq/jUMOnKM89NsA08= -----END CERTIFICATE-----Generated at Mon Jan 26 05:02:59 2026 by rpki-client