This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/LY4Q9koM9lDvuxmJUk2ya4HFt3Q.roa File: LY4Q9koM9lDvuxmJUk2ya4HFt3Q.roa (raw, json) Hash identifier: QEgFWTKru0S2Zw/9125DdRzfJzeHqAwctQ/5Ei1T4rE= Subject key identifier: 2D:8E:10:F6:4A:0C:F6:50:EF:BB:19:89:52:4D:B2:6B:81:C5:B7:74 Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Certificate serial: 019B77C6A92702558E65E46E778DA9E9C5C8 Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/LY4Q9koM9lDvuxmJUk2ya4HFt3Q.roa Signing time: Thu 01 Jan 2026 04:17:46 +0000 ROA not before: Thu 01 Jan 2026 04:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396615 IP address blocks: 81.19.195.30/32 maxlen: 32 81.19.195.31/32 maxlen: 32 185.100.0.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:a9:27:02:55:8e:65:e4:6e:77:8d:a9:e9:c5:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Validity Not Before: Jan 1 04:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2d8e10f64a0cf650efbb1989524db26b81c5b774 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:99:ed:aa:3f:bb:06:c6:7c:49:4d:76:7a:b1: 1d:36:40:60:25:7c:bf:1c:3a:fb:03:55:a7:7f:06: ac:8e:53:5f:41:67:7b:3f:ae:f9:ee:4c:60:4a:ed: ef:c9:2e:18:ae:68:b5:ca:36:e1:cf:42:b1:73:b6: 24:47:bd:12:d8:d9:4c:0d:26:72:f3:f9:a4:96:dc: 26:15:0d:7d:e2:10:04:bb:93:81:55:8b:37:ea:e7: 48:98:5e:d8:fc:a4:98:e4:a3:c7:bc:43:49:3e:e2: f3:c3:ae:41:9d:41:43:7e:2b:75:93:2c:ba:98:5e: 33:fe:26:87:60:95:0f:cf:c2:50:fb:72:aa:a0:d8: bc:d9:ab:dd:5d:ab:d1:9f:2d:2e:5d:05:06:f2:02: 4e:b9:d4:f9:bc:bb:21:f8:07:52:5e:c7:8a:46:39: a9:a1:b7:5b:6c:b5:b6:c8:62:25:c3:b5:7b:64:1f: da:c5:5f:b6:8e:b7:a1:2e:78:90:ad:c8:58:55:a5: e2:3a:56:eb:a6:88:63:01:37:ee:9a:3a:cf:8a:00: da:0a:bf:cc:63:bd:44:4d:72:c7:52:f8:9e:5f:63: ac:f1:31:16:18:1c:ba:97:cf:d3:07:c5:91:78:14: 8d:42:2a:48:04:1b:01:31:b5:a3:da:93:6d:ee:70: ac:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:8E:10:F6:4A:0C:F6:50:EF:BB:19:89:52:4D:B2:6B:81:C5:B7:74 X509v3 Authority Key Identifier: keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/LY4Q9koM9lDvuxmJUk2ya4HFt3Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.19.195.30/31 185.100.0.53/32 Signature Algorithm: sha256WithRSAEncryption 84:1e:76:41:7e:a6:38:d5:3e:84:99:37:53:e4:c9:75:08:f4: 18:88:f9:45:da:60:fa:0f:63:00:9a:c8:6e:6a:00:28:e0:1c: 3c:42:80:69:40:67:7f:41:8d:34:cc:33:4a:37:5a:07:20:9d: b5:1e:71:d4:16:da:6c:48:4f:57:0f:2a:00:ce:30:40:d5:d4: a5:cf:fa:bc:30:86:00:3f:15:c2:5a:cb:64:16:fc:a2:0a:a9: 10:9a:94:50:d4:7d:18:1e:b3:99:30:b1:18:89:51:6d:83:1c: 92:fd:17:da:65:e8:56:7b:4f:c7:ca:2d:cf:b9:f4:6a:e8:69: 51:39:72:cb:e9:42:e9:42:19:ae:92:00:b9:72:de:ff:99:d2: 45:8d:5a:83:8d:df:ff:04:ff:21:9c:b5:fe:e5:91:3f:d4:75: c2:22:1e:26:32:29:5d:a2:bc:07:b6:ce:97:f2:75:0c:8c:6b: 7d:03:e6:e3:33:94:f9:21:a3:97:c1:8b:f1:95:e2:74:e8:10: f1:93:80:2e:bc:3a:06:c2:22:7b:ca:f5:64:5e:ce:b6:aa:2f: ad:59:f8:f0:94:48:97:5d:99:d2:18:88:2e:1f:08:f6:5d:9e: bc:b3:41:14:15:66:ca:2c:74:45:72:fd:27:48:64:e4:a8:46: 50:28:c6:13 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3xqknAlWOZeRud42p6cXIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl MDZkNTIwHhcNMjYwMTAxMDQxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZDhlMTBmNjRhMGNmNjUwZWZiYjE5ODk1MjRkYjI2YjgxYzViNzc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA55ntqj+7BsZ8SU12erEdNkBgJXy/ HDr7A1WnfwasjlNfQWd7P6757kxgSu3vyS4Yrmi1yjbhz0Kxc7YkR70S2NlMDSZy 8/mkltwmFQ194hAEu5OBVYs36udImF7Y/KSY5KPHvENJPuLzw65BnUFDfit1kyy6 mF4z/iaHYJUPz8JQ+3KqoNi82avdXavRny0uXQUG8gJOudT5vLsh+AdSXseKRjmp obdbbLW2yGIlw7V7ZB/axV+2jrehLniQrchYVaXiOlbrpohjATfumjrPigDaCr/M Y71ETXLHUvieX2Os8TEWGBy6l8/TB8WReBSNQipIBBsBMbWj2pNt7nCs0QIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFC2OEPZKDPZQ77sZiVJNsmuBxbd0MB8GA1UdIwQY MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt MzZjY2I1YTA2MTk1LzEvTFk0UTlrb005bER2dXhtSlVrMnlhNEhGdDNRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1 LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUBURPDHgMF ALlkADUwDQYJKoZIhvcNAQELBQADggEBAIQedkF+pjjVPoSZN1PkyXUI9BiI+UXa YPoPYwCayG5qACjgHDxCgGlAZ39BjTTMM0o3WgcgnbUecdQW2mxIT1cPKgDOMEDV 1KXP+rwwhgA/FcJay2QW/KIKqRCalFDUfRges5kwsRiJUW2DHJL9F9pl6FZ7T8fK Lc+59GroaVE5csvpQulCGa6SALly3v+Z0kWNWoON3/8E/yGctf7lkT/UdcIiHiYy KV2ivAe2zpfydQyMa30D5uMzlPkho5fBi/GV4nToEPGTgC68OgbCInvK9WRezraq L61Z+PCUSJddmdIYiC4fCPZdnryzQRQVZsosdEVy/SdIZOSoRlAoxhM= -----END CERTIFICATE-----Generated at Sun Jan 25 23:03:53 2026 by rpki-client