This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/Mqn8cFh9tw3TjiKFqkVl5VKYcwA.roa File: Mqn8cFh9tw3TjiKFqkVl5VKYcwA.roa (raw, json) Hash identifier: 61lljz595OLo9OfVV8k87EN3+EMSGPS1BFqg1pIoHhU= Subject key identifier: 32:A9:FC:70:58:7D:B7:0D:D3:8E:22:85:AA:45:65:E5:52:98:73:00 Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Certificate serial: 019B77C6944DFD732047A465903AABB0D167 Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/Mqn8cFh9tw3TjiKFqkVl5VKYcwA.roa Signing time: Thu 01 Jan 2026 04:17:41 +0000 ROA not before: Thu 01 Jan 2026 04:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396572 IP address blocks: 81.19.195.30/32 maxlen: 32 81.19.195.31/32 maxlen: 32 185.100.0.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:94:4d:fd:73:20:47:a4:65:90:3a:ab:b0:d1:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Validity Not Before: Jan 1 04:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=32a9fc70587db70dd38e2285aa4565e552987300 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:80:1b:3d:e7:e2:5e:f5:a9:c1:28:3b:c2:e0: 88:6c:76:6e:bf:61:69:e7:2e:97:f7:79:73:8e:c7: 6f:84:6b:f8:5f:97:85:93:82:6e:1c:59:0b:94:7b: 96:47:60:67:b9:bb:14:42:ee:14:a2:bf:89:c6:6a: 56:8b:92:13:b8:a5:75:fa:3c:af:9b:6e:e2:cc:24: f1:a9:76:bc:4d:8a:91:58:00:8f:89:40:18:e4:52: 33:13:2b:6c:0e:cc:f5:9f:22:28:36:fb:d0:d7:c6: bf:63:39:0b:da:96:34:3e:fc:26:6c:f2:37:e3:c3: 36:c2:1e:a5:ff:25:c7:1d:1e:f4:a1:26:e5:3c:b4: 79:28:66:2b:01:8d:84:8d:bb:91:19:59:b4:8d:a5: 49:85:b3:45:16:b6:7a:87:28:2e:03:6a:3e:c3:4a: 34:3a:a4:b0:99:f1:5a:da:4c:e9:0c:24:5e:18:5d: 31:78:21:f9:64:ee:a7:a6:fd:c2:4c:c7:01:aa:ff: ea:90:cd:b5:21:f0:9f:3c:14:7a:f6:05:2d:1b:16: 36:86:1e:7d:2c:03:b2:64:46:ac:35:45:d2:07:77: 31:77:cb:4f:3a:93:ae:dd:01:c7:cd:6c:2a:cf:9f: 58:00:b6:8a:2a:dc:03:8e:3d:27:7f:75:e7:d9:9e: af:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:A9:FC:70:58:7D:B7:0D:D3:8E:22:85:AA:45:65:E5:52:98:73:00 X509v3 Authority Key Identifier: keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/Mqn8cFh9tw3TjiKFqkVl5VKYcwA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.19.195.30/31 185.100.0.53/32 Signature Algorithm: sha256WithRSAEncryption 08:aa:cc:4f:72:65:d6:58:d2:2c:35:3e:29:cc:f0:d1:d0:c4: 8c:4f:1a:53:fc:c4:39:a8:ae:db:d2:3e:63:a1:74:c4:77:bd: 0c:6e:36:c5:7b:f7:fd:29:70:19:4b:d1:41:57:1f:65:44:e6: bf:bc:12:c4:a8:09:f4:fe:0c:48:7f:c4:8a:33:24:4c:23:54: 31:e2:67:aa:73:9c:71:f8:2f:86:62:e1:6f:90:e3:14:67:79: 80:d0:43:fa:a3:8e:72:4b:65:49:81:d0:77:3d:42:9b:bd:a1: a7:b8:85:0b:43:c5:02:f7:ea:43:c8:5d:d5:ef:ba:c7:04:f1: 6d:38:40:6c:43:c3:b1:68:75:6d:86:78:50:d8:d8:0d:f4:5b: f8:00:2c:00:3e:68:6e:a5:9e:32:a6:f5:db:ef:50:41:47:f6: 35:12:85:80:8e:ba:3f:d4:94:2f:68:cd:26:43:f5:95:58:5d: c1:a4:a7:58:ee:cc:01:0b:df:1c:07:42:a5:67:4e:4c:a5:a5: b7:c2:24:ef:51:86:8c:c5:05:a6:cf:56:63:46:1e:5a:c2:96: 47:b8:fd:5e:43:b6:19:90:de:32:9a:38:88:cd:9f:b7:21:4b: 97:af:21:c0:8e:8c:78:d9:5e:e8:db:2b:15:87:dd:12:bd:e3: 25:8f:eb:c6 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3xpRN/XMgR6RlkDqrsNFnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl MDZkNTIwHhcNMjYwMTAxMDQxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMmE5ZmM3MDU4N2RiNzBkZDM4ZTIyODVhYTQ1NjVlNTUyOTg3MzAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYAbPefiXvWpwSg7wuCIbHZuv2Fp 5y6X93lzjsdvhGv4X5eFk4JuHFkLlHuWR2BnubsUQu4Uor+JxmpWi5ITuKV1+jyv m27izCTxqXa8TYqRWACPiUAY5FIzEytsDsz1nyIoNvvQ18a/YzkL2pY0PvwmbPI3 48M2wh6l/yXHHR70oSblPLR5KGYrAY2EjbuRGVm0jaVJhbNFFrZ6hyguA2o+w0o0 OqSwmfFa2kzpDCReGF0xeCH5ZO6npv3CTMcBqv/qkM21IfCfPBR69gUtGxY2hh59 LAOyZEasNUXSB3cxd8tPOpOu3QHHzWwqz59YALaKKtwDjj0nf3Xn2Z6v2QIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFDKp/HBYfbcN044ihapFZeVSmHMAMB8GA1UdIwQY MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt MzZjY2I1YTA2MTk1LzEvTXFuOGNGaDl0dzNUamlLRnFrVmw1VktZY3dBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1 LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUBURPDHgMF ALlkADUwDQYJKoZIhvcNAQELBQADggEBAAiqzE9yZdZY0iw1PinM8NHQxIxPGlP8 xDmortvSPmOhdMR3vQxuNsV79/0pcBlL0UFXH2VE5r+8EsSoCfT+DEh/xIozJEwj VDHiZ6pznHH4L4Zi4W+Q4xRneYDQQ/qjjnJLZUmB0Hc9Qpu9oae4hQtDxQL36kPI XdXvuscE8W04QGxDw7FodW2GeFDY2A30W/gALAA+aG6lnjKm9dvvUEFH9jUShYCO uj/UlC9ozSZD9ZVYXcGkp1juzAEL3xwHQqVnTkylpbfCJO9RhozFBabPVmNGHlrC lke4/V5DthmQ3jKaOIjNn7chS5evIcCOjHjZXujbKxWH3RK94yWP68Y= -----END CERTIFICATE-----Generated at Mon Jan 26 07:57:54 2026 by rpki-client