This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/KFoQDoWdn-qxF9ECfmX0M4eqf9s.roa File: KFoQDoWdn-qxF9ECfmX0M4eqf9s.roa (raw, json) Hash identifier: wogWf1EgIlpZ9iIb2w9K7S8Mqcy4iTBDu7yUKOj+snU= Subject key identifier: 28:5A:10:0E:85:9D:9F:EA:B1:17:D1:02:7E:65:F4:33:87:AA:7F:DB Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Certificate serial: 019B77C6AEB949FB77040152A48D3C1CF9C0 Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/KFoQDoWdn-qxF9ECfmX0M4eqf9s.roa Signing time: Thu 01 Jan 2026 04:17:48 +0000 ROA not before: Thu 01 Jan 2026 04:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 397198 IP address blocks: 81.19.195.30/32 maxlen: 32 81.19.195.31/32 maxlen: 32 185.100.0.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:ae:b9:49:fb:77:04:01:52:a4:8d:3c:1c:f9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Validity Not Before: Jan 1 04:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=285a100e859d9feab117d1027e65f43387aa7fdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:07:01:71:23:05:1f:7d:cd:e9:82:68:52:85: 70:7d:6b:7a:b3:78:47:fd:54:99:fe:a1:07:db:52: 20:dd:1f:e6:5e:3b:92:2b:93:db:8a:57:1e:e1:08: 24:7b:cc:b3:bb:2a:fb:64:61:7f:28:a6:e5:55:d9: 5a:6b:30:de:c8:4c:6a:ec:d1:65:a3:fb:f1:b0:86: 7d:14:d9:c8:69:54:4b:e5:d8:f7:df:94:7d:9b:ed: 8d:7d:92:e9:51:3c:ba:5b:ca:c2:c6:ac:7d:14:77: e9:75:d0:3a:d5:c1:fe:44:d0:c5:98:9c:53:d7:95: a7:b3:c9:04:b5:6b:1a:c6:e0:6e:48:45:a3:8c:ba: d3:47:aa:da:81:7f:d9:03:24:cb:a7:28:f0:f9:31: c1:61:3a:64:60:04:69:79:e8:80:13:d3:58:e0:a9: a8:37:77:c5:17:13:44:aa:4a:af:42:93:98:6f:f5: e0:53:60:49:8b:a9:be:f4:b2:b4:dc:b3:de:0c:eb: 35:4d:34:63:c2:9b:19:77:2d:34:20:6a:67:66:e1: 94:ef:ef:3d:0b:36:45:c6:60:eb:6b:29:00:18:b3: 23:9f:1d:44:6e:e7:02:48:70:2e:0e:29:4b:e3:d0: 7e:c8:f3:ef:86:be:e1:d7:29:17:e6:48:dd:2d:6e: b0:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:5A:10:0E:85:9D:9F:EA:B1:17:D1:02:7E:65:F4:33:87:AA:7F:DB X509v3 Authority Key Identifier: keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/KFoQDoWdn-qxF9ECfmX0M4eqf9s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.19.195.30/31 185.100.0.53/32 Signature Algorithm: sha256WithRSAEncryption 7f:2d:45:8d:7c:02:a8:f7:c2:b1:c9:7e:66:6f:ac:85:9b:cf: 84:e2:df:af:78:2c:11:ff:b5:01:2f:e3:5e:a0:c3:f9:3a:00: e8:c0:1e:7a:f7:33:f0:a1:fc:44:ad:3c:a2:a7:f1:4f:00:bd: 24:db:78:3a:f6:9a:17:ce:79:e3:8c:5c:15:43:1a:ec:36:9c: e3:35:6b:37:2c:bc:ac:a5:5a:42:f9:0d:65:47:ab:04:49:f7: 6a:94:b0:db:cd:9a:41:4c:e6:24:09:fa:80:4a:6f:26:2f:fd: ad:f3:27:85:e0:c8:f3:ff:58:37:e4:7a:5d:cc:7a:7f:b9:b4: c8:5b:0d:28:05:50:c2:b1:12:30:3a:b9:79:48:75:57:c4:48: 6b:3c:3b:49:68:fd:2c:bc:35:b1:0d:32:3a:97:91:97:5c:24: d9:ab:67:6a:bf:a0:7d:e8:3a:40:d4:de:5e:87:bb:22:2b:c1: f9:bf:2e:ab:fb:a9:fb:7b:fe:5f:37:b9:99:2b:53:86:a9:ab: 48:f4:93:99:6f:5a:64:9c:3c:50:9e:f2:dc:b5:87:ac:52:8b: 4e:59:4e:d2:aa:90:df:58:2b:95:d8:de:b7:79:04:ac:d1:8c: 84:25:6c:53:ba:af:c3:01:97:7a:40:13:e7:ce:82:0c:5f:4c: fb:5d:25:ab -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3xq65Sft3BAFSpI08HPnAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl MDZkNTIwHhcNMjYwMTAxMDQxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyODVhMTAwZTg1OWQ5ZmVhYjExN2QxMDI3ZTY1ZjQzMzg3YWE3ZmRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgcBcSMFH33N6YJoUoVwfWt6s3hH /VSZ/qEH21Ig3R/mXjuSK5Pbilce4Qgke8yzuyr7ZGF/KKblVdlaazDeyExq7NFl o/vxsIZ9FNnIaVRL5dj335R9m+2NfZLpUTy6W8rCxqx9FHfpddA61cH+RNDFmJxT 15Wns8kEtWsaxuBuSEWjjLrTR6ragX/ZAyTLpyjw+THBYTpkYARpeeiAE9NY4Kmo N3fFFxNEqkqvQpOYb/XgU2BJi6m+9LK03LPeDOs1TTRjwpsZdy00IGpnZuGU7+89 CzZFxmDraykAGLMjnx1EbucCSHAuDilL49B+yPPvhr7h1ykX5kjdLW6wDwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFChaEA6FnZ/qsRfRAn5l9DOHqn/bMB8GA1UdIwQY MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt MzZjY2I1YTA2MTk1LzEvS0ZvUURvV2RuLXF4RjlFQ2ZtWDBNNGVxZjlzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1 LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUBURPDHgMF ALlkADUwDQYJKoZIhvcNAQELBQADggEBAH8tRY18Aqj3wrHJfmZvrIWbz4Ti3694 LBH/tQEv416gw/k6AOjAHnr3M/Ch/EStPKKn8U8AvSTbeDr2mhfOeeOMXBVDGuw2 nOM1azcsvKylWkL5DWVHqwRJ92qUsNvNmkFM5iQJ+oBKbyYv/a3zJ4XgyPP/WDfk el3Men+5tMhbDSgFUMKxEjA6uXlIdVfESGs8O0lo/Sy8NbENMjqXkZdcJNmrZ2q/ oH3oOkDU3l6HuyIrwfm/Lqv7qft7/l83uZkrU4apq0j0k5lvWmScPFCe8ty1h6xS i05ZTtKqkN9YK5XY3rd5BKzRjIQlbFO6r8MBl3pAE+fOggxfTPtdJas= -----END CERTIFICATE-----Generated at Mon Jan 26 05:03:10 2026 by rpki-client