This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/P5qDs3Urduh3Mkphq3n2rpzlW0U.roa File: P5qDs3Urduh3Mkphq3n2rpzlW0U.roa (raw, json) Hash identifier: 5KCDOyvVPbfT2xgYcnTvEVRdUX+OODv7REkfbl0wHmc= Subject key identifier: 3F:9A:83:B3:75:2B:76:E8:77:32:4A:61:AB:79:F6:AE:9C:E5:5B:45 Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Certificate serial: 019B77C67E3C4F24A77E5FA3FA24C091955E Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/P5qDs3Urduh3Mkphq3n2rpzlW0U.roa Signing time: Thu 01 Jan 2026 04:17:35 +0000 ROA not before: Thu 01 Jan 2026 04:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21313 IP address blocks: 81.19.195.30/32 maxlen: 32 81.19.195.31/32 maxlen: 32 185.100.0.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:7e:3c:4f:24:a7:7e:5f:a3:fa:24:c0:91:95:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Validity Not Before: Jan 1 04:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3f9a83b3752b76e877324a61ab79f6ae9ce55b45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:22:cf:5f:61:38:d0:de:db:7d:46:aa:89:9e: 85:7c:56:42:aa:a5:6d:ba:cf:39:2c:f8:70:6e:55: 2c:96:36:b2:14:a6:03:cb:9c:67:45:2d:17:e0:a3: fe:2d:8a:47:5a:59:9c:db:a2:69:46:ad:bf:e3:fd: 28:63:47:00:a6:bf:c8:07:7f:aa:38:96:36:84:09: cf:c2:e4:86:8d:c2:f0:7b:7e:4a:a1:fc:b9:21:69: bc:b9:a6:3e:97:0c:29:2d:49:90:08:6a:d9:6d:8e: 98:bb:22:93:00:bf:86:ce:f6:72:8c:1a:c4:85:80: 04:48:4a:f5:7e:fd:e9:aa:b9:a3:f5:3d:05:08:2f: 4a:e4:4c:bc:13:16:1d:f7:0b:c2:c8:29:aa:c8:1f: cd:86:50:ae:5c:40:1a:90:75:09:ed:ca:f9:cc:7b: d7:64:63:11:5d:59:4c:93:46:a7:e3:19:1b:3a:6b: d4:37:77:83:d7:32:da:8d:b4:40:f5:e7:93:04:05: a5:9f:d0:66:b4:36:89:0f:d0:d2:47:06:5f:19:95: 9a:62:69:2e:f2:4e:99:6f:ed:50:83:d3:b9:14:38: 7f:75:22:58:c6:21:47:0e:ad:13:37:3b:b5:57:b7: c2:eb:75:20:1e:7f:54:d8:fc:12:69:5f:4b:0f:6f: eb:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:9A:83:B3:75:2B:76:E8:77:32:4A:61:AB:79:F6:AE:9C:E5:5B:45 X509v3 Authority Key Identifier: keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/P5qDs3Urduh3Mkphq3n2rpzlW0U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.19.195.30/31 185.100.0.53/32 Signature Algorithm: sha256WithRSAEncryption 77:a1:b7:f4:c8:5a:99:8f:97:9a:fd:2c:c5:6b:c5:c4:a5:0d: 9d:d7:19:48:23:32:5d:fc:62:d2:fe:c7:6e:d6:98:8f:11:a0: a4:27:ae:81:74:84:dd:59:f0:36:59:90:6a:f3:a6:91:ab:94: d6:c9:24:2d:87:ca:5a:d8:86:9d:c8:3d:35:53:d1:8b:bd:69: 2c:71:98:93:f7:b2:62:5a:0b:29:6d:d5:e5:a4:15:a6:c9:7b: 52:c5:17:14:fb:36:a5:5c:1a:cb:ba:09:61:51:32:8c:10:57: 0e:c7:56:31:9e:be:c7:1c:a8:73:71:07:4c:f2:87:0c:d5:05: fb:9c:6f:70:84:25:f7:f2:24:8c:3b:66:36:5f:36:56:05:c0: 43:5c:e3:61:08:a7:f5:4f:11:cb:62:43:9c:78:e3:cb:b1:4b: cf:4f:61:12:a4:79:c4:68:b9:b6:6a:aa:a3:e4:5d:aa:82:d2: 4b:14:88:df:15:0c:fb:31:aa:07:0d:53:ff:70:3d:70:d2:68: c4:8d:85:3d:15:6d:55:a0:71:50:dc:c9:22:44:d7:87:11:4a: be:fb:fe:93:86:1a:f3:90:be:cd:a4:91:61:3e:45:dd:f8:e1: b0:f9:7c:c2:83:c4:c3:ef:b1:06:03:c8:b1:d5:74:b7:03:56: ed:b1:69:3f -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3xn48TySnfl+j+iTAkZVeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl MDZkNTIwHhcNMjYwMTAxMDQxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZjlhODNiMzc1MmI3NmU4NzczMjRhNjFhYjc5ZjZhZTljZTU1YjQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiLPX2E40N7bfUaqiZ6FfFZCqqVt us85LPhwblUsljayFKYDy5xnRS0X4KP+LYpHWlmc26JpRq2/4/0oY0cApr/IB3+q OJY2hAnPwuSGjcLwe35Kofy5IWm8uaY+lwwpLUmQCGrZbY6YuyKTAL+GzvZyjBrE hYAESEr1fv3pqrmj9T0FCC9K5Ey8ExYd9wvCyCmqyB/NhlCuXEAakHUJ7cr5zHvX ZGMRXVlMk0an4xkbOmvUN3eD1zLajbRA9eeTBAWln9BmtDaJD9DSRwZfGZWaYmku 8k6Zb+1Qg9O5FDh/dSJYxiFHDq0TNzu1V7fC63UgHn9U2PwSaV9LD2/rfwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFD+ag7N1K3bodzJKYat59q6c5VtFMB8GA1UdIwQY MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt MzZjY2I1YTA2MTk1LzEvUDVxRHMzVXJkdWgzTWtwaHEzbjJycHpsVzBVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1 LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUBURPDHgMF ALlkADUwDQYJKoZIhvcNAQELBQADggEBAHeht/TIWpmPl5r9LMVrxcSlDZ3XGUgj Ml38YtL+x27WmI8RoKQnroF0hN1Z8DZZkGrzppGrlNbJJC2HylrYhp3IPTVT0Yu9 aSxxmJP3smJaCylt1eWkFabJe1LFFxT7NqVcGsu6CWFRMowQVw7HVjGevsccqHNx B0zyhwzVBfucb3CEJffyJIw7ZjZfNlYFwENc42EIp/VPEctiQ5x448uxS89PYRKk ecRoubZqqqPkXaqC0ksUiN8VDPsxqgcNU/9wPXDSaMSNhT0VbVWgcVDcySJE14cR Sr77/pOGGvOQvs2kkWE+Rd344bD5fMKDxMPvsQYDyLHVdLcDVu2xaT8= -----END CERTIFICATE-----Generated at Sun Jan 25 23:03:43 2026 by rpki-client