This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/J0g-8ZkZ42H_pQ2mZH7M0SFjtIY.roa File: J0g-8ZkZ42H_pQ2mZH7M0SFjtIY.roa (raw, json) Hash identifier: yB0iTvrPHm8+rJzEaQ/R7FVHmZwZ6JbyI3ijxkPS49Y= Subject key identifier: 27:48:3E:F1:99:19:E3:61:FF:A5:0D:A6:64:7E:CC:D1:21:63:B4:86 Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Certificate serial: 019B77C6A25C57BA59D2B14A3435D2DDED83 Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/J0g-8ZkZ42H_pQ2mZH7M0SFjtIY.roa Signing time: Thu 01 Jan 2026 04:17:45 +0000 ROA not before: Thu 01 Jan 2026 04:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396602 IP address blocks: 81.19.195.30/32 maxlen: 32 81.19.195.31/32 maxlen: 32 185.100.0.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:a2:5c:57:ba:59:d2:b1:4a:34:35:d2:dd:ed:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Validity Not Before: Jan 1 04:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=27483ef19919e361ffa50da6647eccd12163b486 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:3f:75:5f:95:5a:70:97:91:70:91:09:e1:b2: 9c:08:83:99:65:74:a9:c3:ac:e7:77:ae:fd:ce:65: 7b:6f:3a:fe:0f:f9:d5:6a:54:41:6e:f3:18:ec:8f: ca:e2:5a:34:f6:13:2a:86:68:9a:c6:22:1f:49:9b: 71:4f:06:94:85:0a:15:c0:a0:d9:2c:3f:8f:99:47: eb:96:64:76:b4:62:17:0c:7d:61:23:ef:53:c0:fc: 2d:16:4e:4e:31:bd:aa:3a:7a:10:bc:6c:7f:ad:ae: aa:be:a8:cb:ad:a7:b5:33:1b:0e:84:ba:cf:42:39: d0:56:27:37:04:10:21:35:7d:e5:bd:94:cc:ae:87: b1:21:96:81:80:fa:d7:84:5b:31:2d:41:b3:5d:03: 15:71:aa:9e:ca:51:32:a5:3c:d7:a1:4d:69:ce:0f: dd:1f:c0:c5:c9:ad:7b:75:c9:7f:f4:97:72:5b:10: 9b:46:60:82:55:88:2b:87:16:09:cc:39:69:87:72: ec:08:40:da:a5:02:15:64:fc:61:88:db:ee:4e:1b: 8a:b3:e1:4b:a5:b1:eb:38:69:ee:00:cf:bf:20:e8: 71:a4:5b:97:67:85:df:10:fe:5c:e6:34:4e:a3:90: e3:17:bf:38:c1:7b:ee:b0:34:4d:8b:64:97:bc:07: 74:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:48:3E:F1:99:19:E3:61:FF:A5:0D:A6:64:7E:CC:D1:21:63:B4:86 X509v3 Authority Key Identifier: keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/J0g-8ZkZ42H_pQ2mZH7M0SFjtIY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.19.195.30/31 185.100.0.53/32 Signature Algorithm: sha256WithRSAEncryption c0:a0:0a:b5:f7:94:ac:7d:7a:0a:d2:04:b0:df:f5:93:e8:24: 57:7e:a9:19:0a:a4:5a:8b:3f:6c:46:53:bb:10:6d:f4:0e:49: 11:84:39:7a:b0:67:f7:89:8c:1a:63:d9:cc:2c:34:e0:42:16: 38:0d:e8:23:b0:4f:ec:f6:12:51:ec:19:72:20:0c:5e:5e:b9: d6:15:76:a2:06:15:98:18:10:24:1e:d4:de:1a:c5:c7:8e:1a: 9f:c1:ba:e6:5e:9e:83:77:da:c8:2e:fa:e4:99:7a:ea:43:56: 8e:8f:b2:59:f3:8d:d6:7f:86:f8:a6:b8:62:f0:0a:4f:b6:f8: f3:58:2a:2f:fb:5d:dd:2b:5b:e5:0b:7d:0f:24:b1:24:b8:4c: 72:f1:48:29:7b:d5:02:79:7e:f0:7d:a7:98:1e:aa:c4:e0:81: dd:1f:5d:56:05:9d:bc:e6:06:0a:90:64:3f:b1:d4:30:79:42: 01:f3:01:9c:2b:af:80:30:65:dc:cd:1d:e7:f2:d8:af:ce:8e: 94:e6:1f:b3:e0:2d:09:f4:a4:ca:d9:a0:4c:33:91:20:dd:51: e5:68:58:45:ab:51:d5:d7:52:7b:4f:fc:e5:a3:d1:bf:1b:f1: 9a:66:7a:8e:63:34:40:c9:9b:29:ee:9e:35:ef:e3:cd:3f:d8: 52:03:4a:65 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3xqJcV7pZ0rFKNDXS3e2DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl MDZkNTIwHhcNMjYwMTAxMDQxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNzQ4M2VmMTk5MTllMzYxZmZhNTBkYTY2NDdlY2NkMTIxNjNiNDg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1z91X5VacJeRcJEJ4bKcCIOZZXSp w6znd679zmV7bzr+D/nValRBbvMY7I/K4lo09hMqhmiaxiIfSZtxTwaUhQoVwKDZ LD+PmUfrlmR2tGIXDH1hI+9TwPwtFk5OMb2qOnoQvGx/ra6qvqjLrae1MxsOhLrP QjnQVic3BBAhNX3lvZTMroexIZaBgPrXhFsxLUGzXQMVcaqeylEypTzXoU1pzg/d H8DFya17dcl/9JdyWxCbRmCCVYgrhxYJzDlph3LsCEDapQIVZPxhiNvuThuKs+FL pbHrOGnuAM+/IOhxpFuXZ4XfEP5c5jROo5DjF784wXvusDRNi2SXvAd0UQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFCdIPvGZGeNh/6UNpmR+zNEhY7SGMB8GA1UdIwQY MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt MzZjY2I1YTA2MTk1LzEvSjBnLThaa1o0MkhfcFEybVpIN00wU0ZqdElZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1 LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUBURPDHgMF ALlkADUwDQYJKoZIhvcNAQELBQADggEBAMCgCrX3lKx9egrSBLDf9ZPoJFd+qRkK pFqLP2xGU7sQbfQOSRGEOXqwZ/eJjBpj2cwsNOBCFjgN6COwT+z2ElHsGXIgDF5e udYVdqIGFZgYECQe1N4axceOGp/BuuZenoN32sgu+uSZeupDVo6PslnzjdZ/hvim uGLwCk+2+PNYKi/7Xd0rW+ULfQ8ksSS4THLxSCl71QJ5fvB9p5geqsTggd0fXVYF nbzmBgqQZD+x1DB5QgHzAZwrr4AwZdzNHefy2K/OjpTmH7PgLQn0pMrZoEwzkSDd UeVoWEWrUdXXUntP/OWj0b8b8Zpmeo5jNEDJmynunjXv480/2FIDSmU= -----END CERTIFICATE-----Generated at Mon Jan 26 00:37:18 2026 by rpki-client