This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/IdbE0E4IAD2jVi6WYUrFdsTtouo.roa File: IdbE0E4IAD2jVi6WYUrFdsTtouo.roa (raw, json) Hash identifier: d7QNVxjWAstgniAyrNk7c9z2zysbTukKpqt5Y0LwYJM= Subject key identifier: 21:D6:C4:D0:4E:08:00:3D:A3:56:2E:96:61:4A:C5:76:C4:ED:A2:EA Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Certificate serial: 019B77C68D198DE4D6FBA1A68E8BD60E2E22 Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/IdbE0E4IAD2jVi6WYUrFdsTtouo.roa Signing time: Thu 01 Jan 2026 04:17:39 +0000 ROA not before: Thu 01 Jan 2026 04:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396551 IP address blocks: 81.19.195.30/32 maxlen: 32 81.19.195.31/32 maxlen: 32 185.100.0.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:8d:19:8d:e4:d6:fb:a1:a6:8e:8b:d6:0e:2e:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Validity Not Before: Jan 1 04:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=21d6c4d04e08003da3562e96614ac576c4eda2ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:80:6a:0b:e0:ff:2f:19:43:ca:a6:7d:1c:c9: d1:f9:b0:be:82:f0:b4:90:7b:46:42:61:49:9f:fd: 2b:0d:99:51:aa:7a:59:4c:a6:b6:bf:26:0d:cc:28: 28:ca:ae:bf:96:fe:6d:96:3e:c4:91:ee:53:1a:53: 79:0a:69:27:8c:14:ed:a7:ef:70:8d:8c:e4:4b:37: be:af:f3:82:08:d7:60:54:f4:20:cd:f4:d4:b2:25: 52:a0:21:f5:e6:e0:95:c8:83:96:9c:99:ef:80:b4: 8a:1a:47:01:ab:91:ca:41:54:73:80:87:e7:30:ba: 64:ac:03:8e:9a:ea:14:f6:2e:c8:ad:5f:94:0f:d6: 42:cc:5c:a1:97:1b:11:6b:98:df:9e:b2:1b:3c:4a: 65:87:26:67:24:d4:6b:2c:9e:ab:a5:0b:55:14:9f: 75:54:2f:5b:a7:86:c5:d0:eb:23:b4:88:2d:2d:64: 6d:2b:48:e5:34:78:32:86:db:90:e9:d6:ef:05:76: 34:6e:db:ac:c6:fc:88:53:13:e9:9d:76:fa:2a:e9: 69:0c:07:52:11:40:87:2f:77:9b:fb:bc:ef:8d:0d: 28:0f:d2:a7:d4:43:88:07:28:03:46:ba:ec:4f:ce: fe:1e:30:62:d8:69:72:e8:c2:e0:46:86:4a:79:25: 5c:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:D6:C4:D0:4E:08:00:3D:A3:56:2E:96:61:4A:C5:76:C4:ED:A2:EA X509v3 Authority Key Identifier: keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/IdbE0E4IAD2jVi6WYUrFdsTtouo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.19.195.30/31 185.100.0.53/32 Signature Algorithm: sha256WithRSAEncryption 56:88:4a:31:51:0a:c8:2e:ac:0f:e9:26:71:87:c5:cd:8b:dc: 4b:b6:a9:14:cc:99:f1:ff:f3:2a:04:fe:c0:13:ff:02:31:4f: 9c:90:92:91:92:5c:fe:a2:b1:7a:5d:0f:1d:c6:ad:3e:d6:e3: 99:e7:65:9e:61:15:79:c2:9a:94:78:bf:2a:c7:97:58:01:f6: 4f:ce:4c:5f:59:34:e2:22:d5:a4:e5:bc:8d:9f:cc:53:43:c2: 8e:f1:12:c6:60:57:c0:39:36:70:d8:8a:49:7a:71:b9:91:f5: a8:93:c2:04:b2:87:63:6d:99:d4:be:ff:5b:8e:f6:4d:58:79: 9a:35:db:ba:21:d6:05:cf:b5:10:de:22:ab:81:95:11:c4:09: d2:3d:16:b6:ae:75:8e:26:c7:54:b4:07:de:ba:17:85:9d:6a: 67:07:ce:fc:b7:e6:46:c1:69:e2:b5:31:3c:26:ba:c4:ee:b5: af:72:36:a1:13:9a:22:93:00:b0:66:4e:bf:65:e9:94:be:6e: 36:5a:3d:8a:ac:b9:6e:af:07:d5:37:95:5a:05:8b:33:65:ca: 17:ba:73:df:af:e5:fe:d6:6a:40:ea:aa:c0:c3:52:df:48:9a: 2e:eb:d1:72:da:88:94:7b:88:d0:43:16:a8:bd:08:96:30:7a: 12:3e:ed:38 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3xo0ZjeTW+6GmjovWDi4iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl MDZkNTIwHhcNMjYwMTAxMDQxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMWQ2YzRkMDRlMDgwMDNkYTM1NjJlOTY2MTRhYzU3NmM0ZWRhMmVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4BqC+D/LxlDyqZ9HMnR+bC+gvC0 kHtGQmFJn/0rDZlRqnpZTKa2vyYNzCgoyq6/lv5tlj7Eke5TGlN5CmknjBTtp+9w jYzkSze+r/OCCNdgVPQgzfTUsiVSoCH15uCVyIOWnJnvgLSKGkcBq5HKQVRzgIfn MLpkrAOOmuoU9i7IrV+UD9ZCzFyhlxsRa5jfnrIbPEplhyZnJNRrLJ6rpQtVFJ91 VC9bp4bF0OsjtIgtLWRtK0jlNHgyhtuQ6dbvBXY0btusxvyIUxPpnXb6KulpDAdS EUCHL3eb+7zvjQ0oD9Kn1EOIBygDRrrsT87+HjBi2Gly6MLgRoZKeSVcowIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFCHWxNBOCAA9o1YulmFKxXbE7aLqMB8GA1UdIwQY MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt MzZjY2I1YTA2MTk1LzEvSWRiRTBFNElBRDJqVmk2V1lVckZkc1R0b3VvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1 LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUBURPDHgMF ALlkADUwDQYJKoZIhvcNAQELBQADggEBAFaISjFRCsgurA/pJnGHxc2L3Eu2qRTM mfH/8yoE/sAT/wIxT5yQkpGSXP6isXpdDx3GrT7W45nnZZ5hFXnCmpR4vyrHl1gB 9k/OTF9ZNOIi1aTlvI2fzFNDwo7xEsZgV8A5NnDYikl6cbmR9aiTwgSyh2NtmdS+ /1uO9k1YeZo127oh1gXPtRDeIquBlRHECdI9FraudY4mx1S0B966F4WdamcHzvy3 5kbBaeK1MTwmusTuta9yNqETmiKTALBmTr9l6ZS+bjZaPYqsuW6vB9U3lVoFizNl yhe6c9+v5f7WakDqqsDDUt9Imi7r0XLaiJR7iNBDFqi9CJYwehI+7Tg= -----END CERTIFICATE-----Generated at Mon Jan 26 03:27:45 2026 by rpki-client