This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/J3kBFl289Bshei0PwgJg4QcsZCA.roa File: J3kBFl289Bshei0PwgJg4QcsZCA.roa (raw, json) Hash identifier: wYg5p9ghxQXXRm/MqBrNvIx2o4Jcc9UnZOeUTUO1wks= Subject key identifier: 27:79:01:16:5D:BC:F4:1B:21:7A:2D:0F:C2:02:60:E1:07:2C:64:20 Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Certificate serial: 019B77C698CD74B6D03E14D9D5A6C4644000 Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/J3kBFl289Bshei0PwgJg4QcsZCA.roa Signing time: Thu 01 Jan 2026 04:17:42 +0000 ROA not before: Thu 01 Jan 2026 04:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396581 IP address blocks: 81.19.195.30/32 maxlen: 32 81.19.195.31/32 maxlen: 32 185.100.0.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:98:cd:74:b6:d0:3e:14:d9:d5:a6:c4:64:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Validity Not Before: Jan 1 04:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=277901165dbcf41b217a2d0fc20260e1072c6420 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:42:62:7e:7e:5c:14:3b:78:d8:6d:99:87:59: d5:38:4d:3c:49:05:ec:a3:6d:98:0a:cd:e6:d9:83: 3d:f2:96:5e:93:c9:e8:af:9b:10:94:d1:58:f6:e8: 2d:18:18:c7:35:55:eb:51:52:6d:44:48:51:d5:22: 8b:79:6c:3f:a5:d7:87:23:69:c5:07:7f:9c:b6:e5: dd:89:64:38:97:96:02:8f:ef:ad:0b:7d:06:68:f4: ba:19:ea:65:6a:20:9d:72:e4:be:4b:5b:78:70:f6: f2:9f:1d:6a:07:d7:81:7c:79:e0:83:9a:71:64:3b: f9:2b:3c:ee:82:a3:87:67:e0:05:aa:0e:59:08:85: 93:40:f8:4c:28:42:d7:ab:93:ff:1d:26:55:7f:e1: cc:2a:a9:b9:f5:b6:a2:08:cb:e7:d2:84:36:b2:3e: 18:52:93:1f:84:0a:2c:b8:c7:a9:ec:31:18:09:74: d7:ce:ae:28:ac:3a:01:b2:aa:26:c6:d9:52:77:5d: 6a:cb:fd:78:cc:9f:ca:9c:59:7a:5e:b3:11:5d:f5: b2:c1:b8:e1:3d:c0:05:87:27:21:0d:d3:a1:c8:87: 71:0d:c4:34:87:35:a5:d6:f4:e9:26:43:34:37:be: 75:6a:b1:57:94:17:41:87:7c:d7:79:0c:20:81:05: 71:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:79:01:16:5D:BC:F4:1B:21:7A:2D:0F:C2:02:60:E1:07:2C:64:20 X509v3 Authority Key Identifier: keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/J3kBFl289Bshei0PwgJg4QcsZCA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.19.195.30/31 185.100.0.53/32 Signature Algorithm: sha256WithRSAEncryption 88:f3:cd:b4:b4:b9:b3:32:44:c8:b6:68:d8:1d:34:b8:35:5e: c9:86:bd:63:62:75:b5:38:70:e5:5d:c0:b2:43:20:88:e1:7e: aa:8a:a7:23:fd:7e:e3:26:19:45:91:08:e9:88:59:00:34:4c: e7:71:99:74:17:03:9a:bf:84:65:7b:f5:5b:21:fc:37:e6:34: 15:9f:cf:59:4f:29:c9:29:47:76:19:c1:4f:d7:56:03:fa:84: b9:c0:00:4f:73:67:e9:da:dc:ec:9d:2b:33:89:f9:e3:b0:fe: 56:3f:61:98:23:a7:1f:0a:4e:f1:ac:36:a3:8d:8b:fc:11:d3: c3:85:5d:de:24:46:6b:a7:c4:ce:05:86:26:28:25:75:04:6e: d0:65:0d:1d:db:9f:70:49:34:57:b2:8d:8b:1a:59:5b:64:1d: 77:df:7b:49:cf:ce:45:d5:1f:b8:a1:6b:4d:30:b4:b9:ca:56: 71:b4:5b:eb:0b:cc:66:85:b0:3d:0e:68:3b:81:91:ed:b2:2a: 9c:5c:8f:ab:7c:31:91:2d:40:48:26:2a:f8:b2:41:81:5f:92: e2:4e:56:35:1c:44:6f:70:31:97:2c:bf:ad:d9:32:68:b9:ee: f5:b7:de:7c:ab:52:e5:d3:db:9c:77:40:c9:00:53:1a:aa:df: a5:70:d9:d6 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3xpjNdLbQPhTZ1abEZEAAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl MDZkNTIwHhcNMjYwMTAxMDQxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNzc5MDExNjVkYmNmNDFiMjE3YTJkMGZjMjAyNjBlMTA3MmM2NDIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6EJifn5cFDt42G2Zh1nVOE08SQXs o22YCs3m2YM98pZek8nor5sQlNFY9ugtGBjHNVXrUVJtREhR1SKLeWw/pdeHI2nF B3+ctuXdiWQ4l5YCj++tC30GaPS6GeplaiCdcuS+S1t4cPbynx1qB9eBfHngg5px ZDv5KzzugqOHZ+AFqg5ZCIWTQPhMKELXq5P/HSZVf+HMKqm59baiCMvn0oQ2sj4Y UpMfhAosuMep7DEYCXTXzq4orDoBsqomxtlSd11qy/14zJ/KnFl6XrMRXfWywbjh PcAFhychDdOhyIdxDcQ0hzWl1vTpJkM0N751arFXlBdBh3zXeQwggQVxHwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFCd5ARZdvPQbIXotD8ICYOEHLGQgMB8GA1UdIwQY MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt MzZjY2I1YTA2MTk1LzEvSjNrQkZsMjg5QnNoZWkwUHdnSmc0UWNzWkNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1 LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUBURPDHgMF ALlkADUwDQYJKoZIhvcNAQELBQADggEBAIjzzbS0ubMyRMi2aNgdNLg1XsmGvWNi dbU4cOVdwLJDIIjhfqqKpyP9fuMmGUWRCOmIWQA0TOdxmXQXA5q/hGV79Vsh/Dfm NBWfz1lPKckpR3YZwU/XVgP6hLnAAE9zZ+na3OydKzOJ+eOw/lY/YZgjpx8KTvGs NqONi/wR08OFXd4kRmunxM4FhiYoJXUEbtBlDR3bn3BJNFeyjYsaWVtkHXffe0nP zkXVH7iha00wtLnKVnG0W+sLzGaFsD0OaDuBke2yKpxcj6t8MZEtQEgmKviyQYFf kuJOVjUcRG9wMZcsv63ZMmi57vW33nyrUuXT25x3QMkAUxqq36Vw2dY= -----END CERTIFICATE-----Generated at Mon Jan 26 00:37:35 2026 by rpki-client