This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/IMm9L4QHQzZkuw_qclqfvbBhiiU.roa File: IMm9L4QHQzZkuw_qclqfvbBhiiU.roa (raw, json) Hash identifier: TZVtj3PHtQlGIuSU+FRfhpz/REqRz5c8zJ6gZ/m56Tk= Subject key identifier: 20:C9:BD:2F:84:07:43:36:64:BB:0F:EA:72:5A:9F:BD:B0:61:8A:25 Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Certificate serial: 019B77C6A3F881F14347759A55E8C9967F51 Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/IMm9L4QHQzZkuw_qclqfvbBhiiU.roa Signing time: Thu 01 Jan 2026 04:17:45 +0000 ROA not before: Thu 01 Jan 2026 04:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396606 IP address blocks: 81.19.195.30/32 maxlen: 32 81.19.195.31/32 maxlen: 32 185.100.0.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:a3:f8:81:f1:43:47:75:9a:55:e8:c9:96:7f:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Validity Not Before: Jan 1 04:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=20c9bd2f8407433664bb0fea725a9fbdb0618a25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:94:ea:fa:63:25:4e:18:74:1c:4c:b1:46:49: 22:95:21:f7:31:23:cb:4d:e4:a0:5b:e4:48:c1:d0: 88:60:42:67:55:6b:d8:f9:30:88:f9:57:4f:bf:e5: 1a:49:b9:c0:80:c3:0b:15:f0:c6:68:a3:46:37:62: 8d:b6:5f:5c:2d:10:28:99:2f:7a:aa:23:a4:eb:2f: 8a:a8:d2:a2:c1:3e:bd:be:2a:86:e7:c6:62:ea:18: ed:0c:fe:3c:e5:a7:8e:55:1e:cb:28:cd:80:90:12: 56:b6:c5:64:0d:8a:d7:ff:7a:b7:30:1a:0d:ef:de: 8e:f2:20:b1:68:60:fa:1d:82:5e:9d:95:71:85:09: 7d:16:e0:cd:08:64:83:49:46:81:0e:1e:51:d7:23: 28:be:95:24:c0:12:8f:b8:50:92:f5:96:de:eb:1e: 30:43:31:ab:1c:67:09:35:99:32:53:74:da:26:08: 46:00:2c:ab:11:c4:f7:c0:03:07:12:f4:66:f8:4e: 95:82:e7:d5:45:d0:db:b8:d3:3b:2d:f8:b7:47:bd: 6b:23:30:ba:dd:39:a9:94:cf:ae:8e:b8:12:57:62: 73:db:aa:2b:56:84:f0:8e:a8:05:0c:2e:df:f8:71: 19:a4:18:bc:f0:58:0c:8b:73:f5:7e:f8:19:52:dc: a1:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:C9:BD:2F:84:07:43:36:64:BB:0F:EA:72:5A:9F:BD:B0:61:8A:25 X509v3 Authority Key Identifier: keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/IMm9L4QHQzZkuw_qclqfvbBhiiU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.19.195.30/31 185.100.0.53/32 Signature Algorithm: sha256WithRSAEncryption 19:2f:5a:4f:6a:fb:fb:df:6f:05:cb:6c:54:28:4d:e2:34:7d: 20:01:04:1f:8d:84:9b:8e:ef:bb:5c:34:da:6e:e1:39:05:c1: fb:50:e6:ee:d8:88:56:c8:ca:d0:9d:e6:38:7f:ad:8e:35:9b: a9:6d:05:ae:f4:91:5f:fa:13:3d:8b:19:1b:f4:0f:95:6c:d9: d2:f9:58:4e:71:57:e0:48:c9:2b:70:c8:f1:31:31:45:60:13: ec:c6:a0:68:f7:90:e2:61:1f:ac:33:2d:11:d1:09:ae:84:10: c5:76:e9:c6:a3:85:6b:68:44:9d:d4:be:e2:dc:3d:51:89:55: c8:e9:6a:3d:df:f8:19:d7:b3:d3:e0:8b:cb:0a:b5:f2:0f:f0: af:28:54:3c:58:73:b4:f5:48:a4:d0:36:68:f4:28:94:ae:a7: d1:44:60:eb:1e:2e:c6:b7:7a:6a:00:1d:61:e5:7a:b4:3e:62: 24:40:a8:59:e7:7d:39:e3:e9:4c:f1:9a:05:7d:b1:58:c5:f9: 9c:17:c7:77:57:4b:a6:20:19:93:02:13:da:de:3a:00:b3:f7: cd:44:27:f7:8b:4c:31:10:c8:b0:16:ae:dc:89:6c:fc:80:65: 0a:e7:e8:7e:1d:8e:83:1a:19:a1:1b:17:71:a4:9d:b9:36:f2: 2a:27:da:f1 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3xqP4gfFDR3WaVejJln9RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl MDZkNTIwHhcNMjYwMTAxMDQxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMGM5YmQyZjg0MDc0MzM2NjRiYjBmZWE3MjVhOWZiZGIwNjE4YTI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJTq+mMlThh0HEyxRkkilSH3MSPL TeSgW+RIwdCIYEJnVWvY+TCI+VdPv+UaSbnAgMMLFfDGaKNGN2KNtl9cLRAomS96 qiOk6y+KqNKiwT69viqG58Zi6hjtDP485aeOVR7LKM2AkBJWtsVkDYrX/3q3MBoN 796O8iCxaGD6HYJenZVxhQl9FuDNCGSDSUaBDh5R1yMovpUkwBKPuFCS9Zbe6x4w QzGrHGcJNZkyU3TaJghGACyrEcT3wAMHEvRm+E6VgufVRdDbuNM7Lfi3R71rIzC6 3TmplM+ujrgSV2Jz26orVoTwjqgFDC7f+HEZpBi88FgMi3P1fvgZUtyhPwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFCDJvS+EB0M2ZLsP6nJan72wYYolMB8GA1UdIwQY MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt MzZjY2I1YTA2MTk1LzEvSU1tOUw0UUhRelprdXdfcWNscWZ2YkJoaWlVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1 LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUBURPDHgMF ALlkADUwDQYJKoZIhvcNAQELBQADggEBABkvWk9q+/vfbwXLbFQoTeI0fSABBB+N hJuO77tcNNpu4TkFwftQ5u7YiFbIytCd5jh/rY41m6ltBa70kV/6Ez2LGRv0D5Vs 2dL5WE5xV+BIyStwyPExMUVgE+zGoGj3kOJhH6wzLRHRCa6EEMV26cajhWtoRJ3U vuLcPVGJVcjpaj3f+BnXs9Pgi8sKtfIP8K8oVDxYc7T1SKTQNmj0KJSup9FEYOse Lsa3emoAHWHlerQ+YiRAqFnnfTnj6UzxmgV9sVjF+ZwXx3dXS6YgGZMCE9reOgCz 981EJ/eLTDEQyLAWrtyJbPyAZQrn6H4djoMaGaEbF3Gknbk28ion2vE= -----END CERTIFICATE-----Generated at Mon Jan 26 11:04:52 2026 by rpki-client