This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/I6oRlL0aTjeX47uEfApE340CVr8.roa File: I6oRlL0aTjeX47uEfApE340CVr8.roa (raw, json) Hash identifier: kGE5dYI5NFrduwLELN5lRDTI4cIZka4SEsewXpmCeaQ= Subject key identifier: 23:AA:11:94:BD:1A:4E:37:97:E3:BB:84:7C:0A:44:DF:8D:02:56:BF Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Certificate serial: 019B77C68CCA2D37EB5F20D4FCDE5730C07E Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/I6oRlL0aTjeX47uEfApE340CVr8.roa Signing time: Thu 01 Jan 2026 04:17:39 +0000 ROA not before: Thu 01 Jan 2026 04:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396550 IP address blocks: 81.19.195.30/32 maxlen: 32 81.19.195.31/32 maxlen: 32 185.100.0.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:8c:ca:2d:37:eb:5f:20:d4:fc:de:57:30:c0:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Validity Not Before: Jan 1 04:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=23aa1194bd1a4e3797e3bb847c0a44df8d0256bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:a8:ae:a4:9c:eb:c4:6b:04:25:ae:8e:cf:d8: 15:59:39:76:c8:84:61:6e:09:19:90:a2:9f:5c:4b: 54:7a:ae:98:67:19:c6:29:34:39:eb:73:c1:ce:f8: 9d:2c:c6:ad:89:b6:aa:71:98:10:b4:be:b5:a1:62: 1e:a1:b9:d0:d2:45:5e:50:92:1d:c7:68:26:f7:d9: 3a:a9:a8:3f:e8:ab:be:bb:6d:33:a1:89:c0:4a:cc: be:31:0c:a9:e9:dc:5d:54:74:6d:b5:c1:47:0c:e4: 2a:47:12:07:ed:1f:c6:98:00:71:db:25:8a:44:17: ad:86:0d:07:ce:1c:ee:6f:52:02:d3:a2:eb:b2:75: a6:27:32:12:a9:ec:1d:4a:8d:5c:e2:14:9c:a9:a2: be:5b:3d:13:bd:95:78:5d:7b:85:2f:fe:b9:3f:31: 01:b7:33:d8:2c:bc:c0:57:e4:61:8b:5e:08:39:50: 9b:4e:83:bd:89:68:1c:98:ae:13:c7:fc:e9:e0:a4: c6:76:85:2c:00:bb:dd:80:f7:0b:cd:e2:af:40:8c: 3a:59:ee:97:38:0a:5b:87:42:7e:5b:e0:e5:d2:55: bc:99:07:59:d4:b0:d8:6a:27:cc:87:ea:b4:64:0d: 54:ba:4c:a0:15:86:1c:16:ee:04:e6:b9:6a:91:38: f1:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:AA:11:94:BD:1A:4E:37:97:E3:BB:84:7C:0A:44:DF:8D:02:56:BF X509v3 Authority Key Identifier: keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/I6oRlL0aTjeX47uEfApE340CVr8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.19.195.30/31 185.100.0.53/32 Signature Algorithm: sha256WithRSAEncryption 5f:85:11:92:9b:bd:d4:b8:f7:29:1d:ef:41:8d:88:c4:c4:b6: 1b:2d:86:5e:7f:41:37:e4:85:8b:05:bc:62:db:cc:9e:f8:9f: 6c:f2:06:56:e9:36:f7:d8:95:e7:11:89:24:26:2f:4e:69:82: 9e:f1:45:e1:2f:28:9a:3e:c4:fb:98:96:5b:95:6d:40:08:53: 87:75:f7:c4:3b:61:a7:4d:fe:1e:fc:74:f2:51:ab:70:ad:b9: f1:2d:ad:0a:89:a6:b8:47:f4:0e:c7:86:a6:03:84:9b:9a:f3: 63:50:83:c4:05:63:fa:a5:6d:da:f8:4d:8b:3b:fb:8a:6d:86: 74:83:fc:07:94:0d:36:17:fd:f5:03:06:b4:7b:74:76:f0:c1: d5:e4:72:72:42:44:80:17:1f:8e:6d:72:4b:97:37:ed:d4:73: 66:8e:06:b0:7b:da:07:54:d3:6b:73:55:af:e5:a4:10:0f:e3: 04:20:cc:83:4a:ee:8e:d4:28:1f:b8:5e:ab:ec:d8:33:62:3a: 03:27:9e:c5:0d:7a:82:88:73:dc:b1:a1:c4:2a:9c:a8:a0:01: 59:64:49:a0:67:43:67:03:5f:00:cc:fd:5c:c5:65:57:6b:1c: 83:20:ed:e0:45:e4:05:bb:e7:2d:11:de:54:fe:24:d6:12:66: bd:91:5e:17 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3xozKLTfrXyDU/N5XMMB+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl MDZkNTIwHhcNMjYwMTAxMDQxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyM2FhMTE5NGJkMWE0ZTM3OTdlM2JiODQ3YzBhNDRkZjhkMDI1NmJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqiupJzrxGsEJa6Oz9gVWTl2yIRh bgkZkKKfXEtUeq6YZxnGKTQ563PBzvidLMatibaqcZgQtL61oWIeobnQ0kVeUJId x2gm99k6qag/6Ku+u20zoYnASsy+MQyp6dxdVHRttcFHDOQqRxIH7R/GmABx2yWK RBethg0Hzhzub1IC06LrsnWmJzISqewdSo1c4hScqaK+Wz0TvZV4XXuFL/65PzEB tzPYLLzAV+Rhi14IOVCbToO9iWgcmK4Tx/zp4KTGdoUsALvdgPcLzeKvQIw6We6X OApbh0J+W+Dl0lW8mQdZ1LDYaifMh+q0ZA1UukygFYYcFu4E5rlqkTjxAQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFCOqEZS9Gk43l+O7hHwKRN+NAla/MB8GA1UdIwQY MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt MzZjY2I1YTA2MTk1LzEvSTZvUmxMMGFUamVYNDd1RWZBcEUzNDBDVnI4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1 LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUBURPDHgMF ALlkADUwDQYJKoZIhvcNAQELBQADggEBAF+FEZKbvdS49ykd70GNiMTEthsthl5/ QTfkhYsFvGLbzJ74n2zyBlbpNvfYlecRiSQmL05pgp7xReEvKJo+xPuYlluVbUAI U4d198Q7YadN/h78dPJRq3CtufEtrQqJprhH9A7HhqYDhJua82NQg8QFY/qlbdr4 TYs7+4pthnSD/AeUDTYX/fUDBrR7dHbwwdXkcnJCRIAXH45tckuXN+3Uc2aOBrB7 2gdU02tzVa/lpBAP4wQgzINK7o7UKB+4Xqvs2DNiOgMnnsUNeoKIc9yxocQqnKig AVlkSaBnQ2cDXwDM/VzFZVdrHIMg7eBF5AW75y0R3lT+JNYSZr2RXhc= -----END CERTIFICATE-----Generated at Mon Jan 26 03:27:41 2026 by rpki-client