This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/Ow1Ue0lDvsyzCEPt1whd5eJmD7g.roa File: Ow1Ue0lDvsyzCEPt1whd5eJmD7g.roa (raw, json) Hash identifier: 0e8HIitARUohgvgW8GtV509fcLjAQc5Q8Y26v1tBchc= Subject key identifier: 3B:0D:54:7B:49:43:BE:CC:B3:08:43:ED:D7:08:5D:E5:E2:66:0F:B8 Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Certificate serial: 019B77C69BFC0C94CA78F949F22A17093A55 Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/Ow1Ue0lDvsyzCEPt1whd5eJmD7g.roa Signing time: Thu 01 Jan 2026 04:17:43 +0000 ROA not before: Thu 01 Jan 2026 04:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396587 IP address blocks: 81.19.195.30/32 maxlen: 32 81.19.195.31/32 maxlen: 32 185.100.0.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:9b:fc:0c:94:ca:78:f9:49:f2:2a:17:09:3a:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Validity Not Before: Jan 1 04:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3b0d547b4943beccb30843edd7085de5e2660fb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:2c:42:ee:74:f4:e7:ce:2f:6e:9d:8d:ac:61: d0:cd:8e:98:55:16:4a:56:66:81:6f:98:8b:0b:80: bb:ec:61:0b:59:5b:d0:61:bd:89:cb:b4:53:f3:cc: 19:3d:4c:55:ba:b2:c7:a5:98:37:5e:5a:75:7b:ea: a4:fa:b1:cb:55:db:88:f7:df:3f:d8:cb:08:aa:d4: 0c:99:67:d2:cf:de:0d:44:04:87:6f:3d:5f:a7:35: b3:da:cf:49:f4:b4:ad:2d:c0:34:e5:53:18:70:77: af:1f:01:c4:7f:6b:e5:26:92:61:9c:9b:ab:0f:a5: a2:a6:ea:f5:7a:4b:cb:da:0b:e8:8b:92:44:56:fd: 1f:e6:bd:5f:6f:6f:fd:0b:64:19:33:ae:f6:49:e2: f6:5d:c5:cc:e0:52:9a:75:b1:a6:4a:f3:50:5f:75: 10:91:dd:3e:9a:34:02:68:3c:7d:8e:f2:a5:10:4b: 6e:d3:a9:2a:c5:27:7a:c7:08:07:a2:dc:82:7a:71: 17:b2:5d:1c:64:91:b2:53:d6:58:9b:86:c5:4b:fd: 2d:a0:7d:4f:7a:d7:0e:c1:4f:50:40:1c:ed:d6:b5: a1:cb:a5:50:47:8e:9d:f1:41:bd:af:e9:fd:ea:1b: a6:6e:42:0c:78:71:28:04:41:f2:6f:4e:fd:23:42: fd:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:0D:54:7B:49:43:BE:CC:B3:08:43:ED:D7:08:5D:E5:E2:66:0F:B8 X509v3 Authority Key Identifier: keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/Ow1Ue0lDvsyzCEPt1whd5eJmD7g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.19.195.30/31 185.100.0.53/32 Signature Algorithm: sha256WithRSAEncryption 69:09:7f:48:75:71:a3:53:2c:de:72:7e:aa:9f:41:7d:8a:39: 61:d8:9d:cd:82:b6:48:45:5a:b8:0d:95:c2:52:87:38:4e:1d: a9:7e:98:da:88:ca:0d:4f:a7:35:0d:9f:d8:82:a8:58:70:7a: c3:f4:89:56:4e:81:3b:8c:0f:af:9f:d9:ae:e3:1f:a2:52:3b: 63:5a:71:ee:ff:5b:1e:f5:27:a6:45:02:e7:07:59:55:74:db: f5:92:71:aa:db:d1:7b:d6:81:e6:a5:e2:54:7a:ff:b2:e0:01: 07:0e:f8:ba:12:ef:dd:71:f3:60:b8:74:6d:39:9c:51:c7:c4: ac:a5:4d:d0:c5:bb:c5:82:47:00:6f:64:09:34:ac:4e:38:97: b8:a9:0f:24:45:21:43:98:70:35:23:54:3b:50:01:5e:5f:0f: 04:41:32:fc:16:39:a9:45:7d:8d:90:1d:49:02:b3:8e:5c:cf: e8:81:75:79:cd:a8:8a:db:1b:b2:3a:52:b9:b7:96:30:e9:95: 41:f4:e1:e4:de:8b:d5:ee:e0:e6:84:60:8e:80:5c:89:8e:50: e2:73:9d:88:90:f3:f4:27:7c:bb:7d:75:f1:c8:bf:14:4c:5b: bf:d1:a1:97:14:72:0d:25:df:46:7a:2f:86:90:9f:1e:13:3d: 2f:93:9e:b0 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3xpv8DJTKePlJ8ioXCTpVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl MDZkNTIwHhcNMjYwMTAxMDQxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYjBkNTQ3YjQ5NDNiZWNjYjMwODQzZWRkNzA4NWRlNWUyNjYwZmI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlyxC7nT0584vbp2NrGHQzY6YVRZK VmaBb5iLC4C77GELWVvQYb2Jy7RT88wZPUxVurLHpZg3Xlp1e+qk+rHLVduI998/ 2MsIqtQMmWfSz94NRASHbz1fpzWz2s9J9LStLcA05VMYcHevHwHEf2vlJpJhnJur D6Wipur1ekvL2gvoi5JEVv0f5r1fb2/9C2QZM672SeL2XcXM4FKadbGmSvNQX3UQ kd0+mjQCaDx9jvKlEEtu06kqxSd6xwgHotyCenEXsl0cZJGyU9ZYm4bFS/0toH1P etcOwU9QQBzt1rWhy6VQR46d8UG9r+n96humbkIMeHEoBEHyb079I0L99QIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFDsNVHtJQ77MswhD7dcIXeXiZg+4MB8GA1UdIwQY MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt MzZjY2I1YTA2MTk1LzEvT3cxVWUwbER2c3l6Q0VQdDF3aGQ1ZUptRDdnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1 LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUBURPDHgMF ALlkADUwDQYJKoZIhvcNAQELBQADggEBAGkJf0h1caNTLN5yfqqfQX2KOWHYnc2C tkhFWrgNlcJShzhOHal+mNqIyg1PpzUNn9iCqFhwesP0iVZOgTuMD6+f2a7jH6JS O2Nace7/Wx71J6ZFAucHWVV02/WScarb0XvWgeal4lR6/7LgAQcO+LoS791x82C4 dG05nFHHxKylTdDFu8WCRwBvZAk0rE44l7ipDyRFIUOYcDUjVDtQAV5fDwRBMvwW OalFfY2QHUkCs45cz+iBdXnNqIrbG7I6Urm3ljDplUH04eTei9Xu4OaEYI6AXImO UOJznYiQ8/QnfLt9dfHIvxRMW7/RoZcUcg0l30Z6L4aQnx4TPS+TnrA= -----END CERTIFICATE-----Generated at Mon Jan 26 02:01:39 2026 by rpki-client