This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/MTdRtJLySnhChiLfRuqJH_plFoI.roa File: MTdRtJLySnhChiLfRuqJH_plFoI.roa (raw, json) Hash identifier: xKa0c2+c3IL5tpgQfprJ9vzwrQTC9p8QrE0KlEDUNJk= Subject key identifier: 31:37:51:B4:92:F2:4A:78:42:86:22:DF:46:EA:89:1F:FA:65:16:82 Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Certificate serial: 019B77C6A5D32F0FE83A31CD9A562C87E78B Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/MTdRtJLySnhChiLfRuqJH_plFoI.roa Signing time: Thu 01 Jan 2026 04:17:45 +0000 ROA not before: Thu 01 Jan 2026 04:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396611 IP address blocks: 81.19.195.30/32 maxlen: 32 81.19.195.31/32 maxlen: 32 185.100.0.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:a5:d3:2f:0f:e8:3a:31:cd:9a:56:2c:87:e7:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Validity Not Before: Jan 1 04:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=313751b492f24a78428622df46ea891ffa651682 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e9:9e:76:a8:a4:2c:01:7e:05:f9:eb:c9:ba: a8:68:f4:fc:03:7b:43:4f:18:c4:70:94:ce:68:3a: 63:6f:5f:d8:32:b6:a9:a9:f4:32:55:87:4a:2a:7e: 11:e3:6a:82:30:f7:a4:e7:a0:43:ea:ee:55:3b:db: 8e:d1:35:9a:55:10:59:1c:59:d8:cf:44:fa:f0:93: f6:5d:1b:e6:74:2a:55:05:99:f7:4d:99:78:e3:af: 8e:4c:ea:d4:80:a1:40:98:1c:ed:64:56:31:72:12: f1:52:9c:7d:cd:62:38:8d:52:cc:3a:13:a4:d6:9f: 1a:9e:55:eb:7a:c1:c9:9e:f7:ba:d9:70:39:cd:4a: f9:4b:36:5e:89:f5:58:e8:bc:e5:ba:7c:9b:d7:3e: c3:fa:2d:84:42:bb:c8:68:fc:49:da:d3:e9:e5:36: 3a:38:3d:fe:fa:76:5d:4c:a4:be:63:1c:10:22:5c: 28:a9:46:25:c6:d9:b4:53:42:4e:ac:e1:6f:c3:43: da:12:b8:87:97:b9:02:3a:e0:1d:d1:fb:78:6d:4f: 19:81:86:2b:48:89:64:64:56:48:c7:9a:2c:da:8f: 84:da:8f:83:75:67:a5:ec:75:cb:bb:4a:d6:39:df: 7a:5d:5f:19:ea:f9:cd:0d:8c:78:4e:dd:92:0a:26: 3b:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:37:51:B4:92:F2:4A:78:42:86:22:DF:46:EA:89:1F:FA:65:16:82 X509v3 Authority Key Identifier: keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/MTdRtJLySnhChiLfRuqJH_plFoI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.19.195.30/31 185.100.0.53/32 Signature Algorithm: sha256WithRSAEncryption 52:00:58:0f:3c:fe:79:1b:43:a0:af:0c:64:8e:57:c9:a1:c1: 53:af:cf:84:ef:a8:a2:b5:da:d4:62:f0:ab:30:67:04:08:14: 86:de:db:21:83:25:a8:31:45:4a:23:83:b4:3d:cc:ac:9a:fb: 4e:f0:e7:de:b9:dd:f6:34:d3:4d:2f:4e:1c:63:71:fb:bd:0b: 7e:ef:0f:e9:b6:c1:68:21:72:7c:ee:e9:1c:17:73:30:57:2b: 3e:cb:a5:0b:cc:66:7f:4c:18:73:ea:5e:ac:67:da:ac:a2:07: 58:a8:0e:69:1e:81:b2:07:a9:42:e7:4f:d0:61:c2:34:9e:d6: 83:2b:95:eb:c2:ef:4e:b9:bb:8b:25:94:bb:9b:e9:40:be:d0: d0:06:5e:26:bb:62:af:49:cb:8f:22:55:b5:07:2a:b4:16:cf: 38:c3:c2:38:a2:d7:de:55:ae:c2:a4:2f:ba:97:10:44:40:39: 54:d6:6c:ed:6b:fa:7c:82:a8:23:05:42:6b:23:c2:9a:27:82: 89:ae:15:80:0b:7f:81:bf:36:31:2d:86:08:57:13:d3:40:9b: 85:ac:11:0a:9a:54:d0:a7:0d:4d:e9:b7:cb:d5:b8:7c:8c:03: a8:5d:ba:d2:a1:e7:27:ab:59:4f:b2:15:50:f0:a9:8c:68:4c: e8:aa:ba:3e -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3xqXTLw/oOjHNmlYsh+eLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl MDZkNTIwHhcNMjYwMTAxMDQxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMTM3NTFiNDkyZjI0YTc4NDI4NjIyZGY0NmVhODkxZmZhNjUxNjgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+medqikLAF+BfnrybqoaPT8A3tD TxjEcJTOaDpjb1/YMrapqfQyVYdKKn4R42qCMPek56BD6u5VO9uO0TWaVRBZHFnY z0T68JP2XRvmdCpVBZn3TZl446+OTOrUgKFAmBztZFYxchLxUpx9zWI4jVLMOhOk 1p8anlXresHJnve62XA5zUr5SzZeifVY6Lzlunyb1z7D+i2EQrvIaPxJ2tPp5TY6 OD3++nZdTKS+YxwQIlwoqUYlxtm0U0JOrOFvw0PaEriHl7kCOuAd0ft4bU8ZgYYr SIlkZFZIx5os2o+E2o+DdWel7HXLu0rWOd96XV8Z6vnNDYx4Tt2SCiY7vQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFDE3UbSS8kp4QoYi30bqiR/6ZRaCMB8GA1UdIwQY MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt MzZjY2I1YTA2MTk1LzEvTVRkUnRKTHlTbmhDaGlMZlJ1cUpIX3BsRm9JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1 LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUBURPDHgMF ALlkADUwDQYJKoZIhvcNAQELBQADggEBAFIAWA88/nkbQ6CvDGSOV8mhwVOvz4Tv qKK12tRi8KswZwQIFIbe2yGDJagxRUojg7Q9zKya+07w59653fY0000vThxjcfu9 C37vD+m2wWghcnzu6RwXczBXKz7LpQvMZn9MGHPqXqxn2qyiB1ioDmkegbIHqULn T9BhwjSe1oMrlevC7065u4sllLub6UC+0NAGXia7Yq9Jy48iVbUHKrQWzzjDwjii 195VrsKkL7qXEERAOVTWbO1r+nyCqCMFQmsjwpongomuFYALf4G/NjEthghXE9NA m4WsEQqaVNCnDU3pt8vVuHyMA6hdutKh5yerWU+yFVDwqYxoTOiquj4= -----END CERTIFICATE-----Generated at Mon Jan 26 03:27:53 2026 by rpki-client