This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/NqZQ3DdTROyd0czLFxs4CoWLzt8.roa File: NqZQ3DdTROyd0czLFxs4CoWLzt8.roa (raw, json) Hash identifier: RmNy6Tie/XM5NbI0BesVf4bs9yMsdreJZyMvnGsO68Q= Subject key identifier: 36:A6:50:DC:37:53:44:EC:9D:D1:CC:CB:17:1B:38:0A:85:8B:CE:DF Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Certificate serial: 019B77C6A336A73970B376E94C67B98C934E Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/NqZQ3DdTROyd0czLFxs4CoWLzt8.roa Signing time: Thu 01 Jan 2026 04:17:45 +0000 ROA not before: Thu 01 Jan 2026 04:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396604 IP address blocks: 81.19.195.30/32 maxlen: 32 81.19.195.31/32 maxlen: 32 185.100.0.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:a3:36:a7:39:70:b3:76:e9:4c:67:b9:8c:93:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Validity Not Before: Jan 1 04:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=36a650dc375344ec9dd1cccb171b380a858bcedf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:12:2d:93:f1:57:84:8e:c0:0f:ae:41:72:b6: 6f:5c:8c:12:d4:34:38:f9:4e:af:a7:c4:a4:b0:73: c0:7a:51:35:0d:3b:f9:90:de:40:33:d0:6d:5e:31: 07:73:e9:90:3b:3d:4c:03:4d:d4:bd:20:5c:fc:e4: 91:1b:56:f5:b8:75:3c:22:71:ff:87:ad:8e:c7:70: d5:35:2a:85:6d:ee:73:ac:17:21:e2:46:57:1a:b5: 08:e5:4c:dc:62:89:be:74:b4:4a:45:90:e8:a7:01: 0a:ee:3c:48:de:5f:f1:20:c3:4f:de:81:cc:3d:12: 08:c0:37:d0:9d:43:c4:bd:4c:3c:43:94:33:d4:8d: 1f:97:38:ae:00:df:a1:88:0a:d3:2e:01:8f:7c:62: 7e:e6:6f:d7:07:da:ef:1a:c4:79:e4:db:f5:90:49: 59:8b:65:aa:90:7c:32:77:f1:4e:15:6c:4f:ad:70: ea:6a:cd:35:e8:6b:8b:0b:bc:75:4a:e1:7f:b4:92: 40:ac:b4:20:3f:19:26:9e:b6:9e:13:f8:2e:b4:b1: 46:59:e4:59:22:19:6f:4f:c5:e4:e2:c3:6f:16:c7: f6:f9:bc:fc:b1:a2:c2:57:45:c5:00:89:68:e6:a9: 9d:ce:16:4b:49:05:79:c1:86:fa:37:7a:b8:0d:0e: 40:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:A6:50:DC:37:53:44:EC:9D:D1:CC:CB:17:1B:38:0A:85:8B:CE:DF X509v3 Authority Key Identifier: keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/NqZQ3DdTROyd0czLFxs4CoWLzt8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.19.195.30/31 185.100.0.53/32 Signature Algorithm: sha256WithRSAEncryption bf:a4:d3:c3:15:01:90:21:65:59:a5:34:4e:ec:67:26:06:1d: 46:c3:18:9c:68:80:09:4e:52:fb:38:e6:15:c6:66:d4:eb:fc: 1c:66:7a:b3:67:3a:1e:e6:b0:a8:84:a1:c5:59:b8:10:83:5b: 5b:64:cb:82:66:63:b2:2d:74:72:8e:75:c2:5c:20:60:b8:3c: e7:90:76:b3:c8:3c:ef:96:d0:48:10:3d:41:cb:6a:87:80:1f: 57:3b:c0:cd:bf:b7:6a:b6:8f:e1:07:4d:75:fa:ad:59:cb:2d: 9e:d7:b6:aa:23:34:c6:02:6c:06:87:b3:ad:1e:a0:66:cd:d8: a5:25:b9:d6:44:25:8e:4c:1f:a3:78:93:2e:18:2f:8d:14:0b: 97:42:f2:89:4c:96:67:ab:b6:29:0d:02:ad:1a:41:e1:4a:ff: 2b:21:da:19:10:2e:39:7a:e3:b4:4b:15:48:e4:47:bb:38:83: 8a:4f:97:a3:11:f5:04:ef:3c:41:ac:9b:45:fa:71:65:91:24: ca:77:0e:73:ee:da:7b:91:27:bc:ed:ee:c8:8f:db:93:09:1e: 46:bc:10:a9:03:95:98:3f:e0:3b:79:1c:47:ab:ce:4e:c6:e7: 37:60:35:e3:fb:cf:13:38:36:43:9b:09:3a:f8:2e:51:a2:da: 9c:be:ec:cd -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3xqM2pzlws3bpTGe5jJNOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl MDZkNTIwHhcNMjYwMTAxMDQxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNmE2NTBkYzM3NTM0NGVjOWRkMWNjY2IxNzFiMzgwYTg1OGJjZWRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRItk/FXhI7AD65BcrZvXIwS1DQ4 +U6vp8SksHPAelE1DTv5kN5AM9BtXjEHc+mQOz1MA03UvSBc/OSRG1b1uHU8InH/ h62Ox3DVNSqFbe5zrBch4kZXGrUI5UzcYom+dLRKRZDopwEK7jxI3l/xIMNP3oHM PRIIwDfQnUPEvUw8Q5Qz1I0flziuAN+hiArTLgGPfGJ+5m/XB9rvGsR55Nv1kElZ i2WqkHwyd/FOFWxPrXDqas016GuLC7x1SuF/tJJArLQgPxkmnraeE/gutLFGWeRZ IhlvT8Xk4sNvFsf2+bz8saLCV0XFAIlo5qmdzhZLSQV5wYb6N3q4DQ5A+QIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFDamUNw3U0TsndHMyxcbOAqFi87fMB8GA1UdIwQY MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt MzZjY2I1YTA2MTk1LzEvTnFaUTNEZFRST3lkMGN6TEZ4czRDb1dMenQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1 LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUBURPDHgMF ALlkADUwDQYJKoZIhvcNAQELBQADggEBAL+k08MVAZAhZVmlNE7sZyYGHUbDGJxo gAlOUvs45hXGZtTr/BxmerNnOh7msKiEocVZuBCDW1tky4JmY7ItdHKOdcJcIGC4 POeQdrPIPO+W0EgQPUHLaoeAH1c7wM2/t2q2j+EHTXX6rVnLLZ7XtqojNMYCbAaH s60eoGbN2KUludZEJY5MH6N4ky4YL40UC5dC8olMlmertikNAq0aQeFK/ysh2hkQ Ljl647RLFUjkR7s4g4pPl6MR9QTvPEGsm0X6cWWRJMp3DnPu2nuRJ7zt7siP25MJ Hka8EKkDlZg/4Dt5HEerzk7G5zdgNeP7zxM4NkObCTr4LlGi2py+7M0= -----END CERTIFICATE-----Generated at Mon Jan 26 02:01:21 2026 by rpki-client