This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/N4-9Aonl8jT-YceriQJGAStnk30.roa File: N4-9Aonl8jT-YceriQJGAStnk30.roa (raw, json) Hash identifier: bac2wPYzHL3t378xvbvN2dKXR6Tg3JxW5HAOKXTI3iQ= Subject key identifier: 37:8F:BD:02:89:E5:F2:34:FE:61:C7:AB:89:02:46:01:2B:67:93:7D Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Certificate serial: 019B77C68B8D3A55AF2F84B83B04F4377DDF Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/N4-9Aonl8jT-YceriQJGAStnk30.roa Signing time: Thu 01 Jan 2026 04:17:39 +0000 ROA not before: Thu 01 Jan 2026 04:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396546 IP address blocks: 81.19.195.30/32 maxlen: 32 81.19.195.31/32 maxlen: 32 185.100.0.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:8b:8d:3a:55:af:2f:84:b8:3b:04:f4:37:7d:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Validity Not Before: Jan 1 04:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=378fbd0289e5f234fe61c7ab890246012b67937d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:1a:f8:1e:56:85:47:1b:db:68:cc:15:eb:19: 76:0e:66:0c:bc:e9:ac:49:4d:f9:12:d3:99:9c:2d: 02:e7:69:03:19:7d:cd:24:bd:96:0a:f2:d1:17:76: 3d:a0:82:a3:67:d6:ea:41:75:92:0a:d4:90:62:a3: 32:d3:e2:4a:87:1e:42:5c:eb:d8:f0:75:92:b6:51: 22:7a:e6:a3:ea:be:8d:be:10:1a:d7:4d:08:11:f3: eb:e2:0e:08:d2:b6:8f:d3:89:aa:2b:9a:25:74:85: e6:b4:a3:00:1e:10:f6:4e:99:8b:f9:9c:d2:12:1e: 43:a9:af:3d:76:ab:89:24:6d:18:c7:08:64:97:e4: 2c:38:33:a0:bd:0c:23:de:73:be:6d:4c:35:9e:4d: 09:50:76:ed:e5:3c:9e:ed:fa:22:c5:e8:38:e2:f3: 66:56:b7:e4:1d:d6:67:25:9f:25:e3:f5:b4:b8:3c: 4c:4c:b2:93:02:eb:a7:1b:5a:d8:fa:4f:62:09:d0: 13:d3:10:9d:fd:44:13:84:5f:a4:6d:da:58:7a:8d: 95:66:d6:b0:f0:79:71:23:96:93:ad:f9:43:45:78: 1d:be:d8:1e:e1:04:ed:61:16:e2:6c:81:c2:ae:9a: 0a:0f:ec:37:7f:af:42:e0:4b:cb:66:59:04:ad:97: b8:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:8F:BD:02:89:E5:F2:34:FE:61:C7:AB:89:02:46:01:2B:67:93:7D X509v3 Authority Key Identifier: keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/N4-9Aonl8jT-YceriQJGAStnk30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.19.195.30/31 185.100.0.53/32 Signature Algorithm: sha256WithRSAEncryption 53:c8:86:7b:33:4d:91:22:6e:bf:fc:b8:ad:30:52:3c:7b:f1: b0:db:57:f2:f3:2b:41:e2:6b:79:bc:e2:74:82:56:ab:71:27: 9c:4f:b5:49:26:d8:84:5e:6b:5c:d7:36:7a:c9:fc:49:05:44: 5f:18:d0:a1:e9:fb:ff:d7:6a:b7:32:dd:c9:f2:74:9f:83:18: fe:58:a5:34:fd:48:4f:7d:73:05:4f:2c:09:c1:d9:72:5a:15: 5c:f9:35:5c:62:c9:f6:ee:ba:79:18:ff:51:55:d8:e4:fa:55: 8c:3e:18:a9:97:16:86:31:8a:69:68:2a:5a:ca:e5:7d:67:7b: 5f:62:20:48:a8:27:2e:47:7e:50:e9:45:e6:2b:b4:f6:00:a1: 36:00:db:58:31:e1:88:2d:84:a3:bc:f8:04:15:42:d9:b5:68: 07:75:5b:7b:83:da:31:88:03:62:eb:a2:9a:11:0a:7d:b3:71: 9e:d7:ef:ee:42:0c:4e:19:1d:2a:bc:a1:01:53:a0:84:cd:37: 88:d3:b7:02:6b:5d:0d:9d:96:08:04:4c:59:f3:d2:ee:65:26: 9f:57:4d:ab:51:3a:09:fd:da:b1:e5:65:b0:5b:34:6b:b2:1c: ed:c3:a0:03:8b:a3:84:92:00:f1:ed:f5:77:18:e0:16:86:99: 3c:10:01:4a -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3xouNOlWvL4S4OwT0N33fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl MDZkNTIwHhcNMjYwMTAxMDQxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNzhmYmQwMjg5ZTVmMjM0ZmU2MWM3YWI4OTAyNDYwMTJiNjc5MzdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRr4HlaFRxvbaMwV6xl2DmYMvOms SU35EtOZnC0C52kDGX3NJL2WCvLRF3Y9oIKjZ9bqQXWSCtSQYqMy0+JKhx5CXOvY 8HWStlEieuaj6r6NvhAa100IEfPr4g4I0raP04mqK5oldIXmtKMAHhD2TpmL+ZzS Eh5Dqa89dquJJG0Yxwhkl+QsODOgvQwj3nO+bUw1nk0JUHbt5Tye7foixeg44vNm VrfkHdZnJZ8l4/W0uDxMTLKTAuunG1rY+k9iCdAT0xCd/UQThF+kbdpYeo2VZtaw 8HlxI5aTrflDRXgdvtge4QTtYRbibIHCrpoKD+w3f69C4EvLZlkErZe4GQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFDePvQKJ5fI0/mHHq4kCRgErZ5N9MB8GA1UdIwQY MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt MzZjY2I1YTA2MTk1LzEvTjQtOUFvbmw4alQtWWNlcmlRSkdBU3RuazMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1 LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUBURPDHgMF ALlkADUwDQYJKoZIhvcNAQELBQADggEBAFPIhnszTZEibr/8uK0wUjx78bDbV/Lz K0Hia3m84nSCVqtxJ5xPtUkm2IRea1zXNnrJ/EkFRF8Y0KHp+//Xarcy3cnydJ+D GP5YpTT9SE99cwVPLAnB2XJaFVz5NVxiyfbuunkY/1FV2OT6VYw+GKmXFoYximlo KlrK5X1ne19iIEioJy5HflDpReYrtPYAoTYA21gx4YgthKO8+AQVQtm1aAd1W3uD 2jGIA2LropoRCn2zcZ7X7+5CDE4ZHSq8oQFToITNN4jTtwJrXQ2dlggETFnz0u5l Jp9XTatROgn92rHlZbBbNGuyHO3DoAOLo4SSAPHt9XcY4BaGmTwQAUo= -----END CERTIFICATE-----Generated at Mon Jan 26 02:01:35 2026 by rpki-client