This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/PmvZbaOdr0rUFQeYBHEc3p-06mI.roa File: PmvZbaOdr0rUFQeYBHEc3p-06mI.roa (raw, json) Hash identifier: zuExSrrUjRNq1hWU8zJNkFe7s/5U6slxoHATZ6zkwkM= Subject key identifier: 3E:6B:D9:6D:A3:9D:AF:4A:D4:15:07:98:04:71:1C:DE:9F:B4:EA:62 Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Certificate serial: 019B77C6893EF9BF073B8EBFA9AAD8C6CD45 Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/PmvZbaOdr0rUFQeYBHEc3p-06mI.roa Signing time: Thu 01 Jan 2026 04:17:38 +0000 ROA not before: Thu 01 Jan 2026 04:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211369 IP address blocks: 81.19.195.30/32 maxlen: 32 81.19.195.31/32 maxlen: 32 185.100.0.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:89:3e:f9:bf:07:3b:8e:bf:a9:aa:d8:c6:cd:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Validity Not Before: Jan 1 04:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3e6bd96da39daf4ad415079804711cde9fb4ea62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:6b:85:f7:1e:b0:f0:2c:8a:2d:f2:18:a5:c1: 30:0a:4a:d1:9d:cf:00:8c:29:00:fe:d2:14:2e:65: 2f:f3:0a:90:25:36:7b:ca:21:8f:95:c2:f2:f8:fd: 3f:55:6c:21:3f:b8:f9:79:48:09:a6:8b:56:be:db: 9c:72:e9:62:23:92:fc:08:41:31:c3:11:51:0c:f4: 53:e1:6e:1f:ed:e6:60:e2:d0:cf:b7:32:b6:dc:47: 4e:77:76:b2:16:2e:0d:0a:56:c6:76:ea:d4:99:94: c9:b4:0c:25:cd:55:cc:ab:33:9a:07:de:9d:70:f7: 8c:b7:37:65:37:66:ea:d1:fe:53:da:97:b2:2d:e3: 6a:62:e1:46:50:d8:39:1c:85:00:59:f5:d1:08:3a: c3:8b:5e:0a:78:8d:58:59:50:42:6a:66:dc:64:71: ff:33:6f:3a:f1:e3:9e:48:ed:25:14:ec:5a:8a:34: 0a:20:cf:c8:42:ac:82:79:19:c3:71:02:00:f8:71: 01:f1:0a:b9:14:6e:92:6b:24:db:dc:ba:83:ec:96: b8:6f:5b:e8:32:8b:66:a9:f5:93:a6:3d:6f:f1:f1: 6f:5e:5a:ed:fb:e0:b1:16:28:2f:80:7e:15:07:5f: 5a:54:e5:4c:ab:e8:6a:30:c2:f2:f3:59:a9:d7:97: fe:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:6B:D9:6D:A3:9D:AF:4A:D4:15:07:98:04:71:1C:DE:9F:B4:EA:62 X509v3 Authority Key Identifier: keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/PmvZbaOdr0rUFQeYBHEc3p-06mI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.19.195.30/31 185.100.0.53/32 Signature Algorithm: sha256WithRSAEncryption 3f:ed:3f:e8:7b:87:28:b9:b8:c4:c5:16:a3:d3:3e:b5:b2:66: f8:79:33:6e:c4:5f:56:df:3f:7b:8b:9b:42:c4:03:d6:08:93: 2a:3a:40:d7:01:25:e8:15:33:39:df:c2:3d:60:f3:bd:19:d6: 01:49:39:65:ed:0c:bd:1c:55:f8:5d:bf:0c:17:34:e8:c3:85: 38:9c:22:9a:e9:4a:fc:09:e0:8c:24:7b:70:de:8b:7a:ac:08: c1:f0:85:4a:50:83:8e:21:5f:f0:77:60:17:54:99:90:e7:07: 81:58:63:cf:d7:1d:e4:6b:55:d6:7f:60:6f:b7:4e:62:01:0e: d7:56:84:8c:de:b1:d4:e3:ef:ce:1b:7f:1f:74:80:02:5d:9a: 01:7e:cc:d8:25:1b:fa:bb:33:e2:2a:eb:f7:2c:4a:63:04:33: 13:b7:d3:15:59:b9:df:df:d5:62:40:b5:30:14:3d:ff:4d:78: 44:b3:33:bb:1f:b0:db:e0:35:50:84:c1:f9:20:20:ac:77:e5: 27:29:bd:18:13:68:e2:63:94:f4:68:3f:5a:f5:b0:76:4e:b4: 34:25:73:09:78:db:65:32:36:49:41:60:c0:8e:08:4d:6e:7b: a1:d3:c2:8f:99:13:a0:d3:50:7e:25:c2:50:7d:7b:c3:17:4c: 5d:5e:d1:74 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3xok++b8HO46/qarYxs1FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl MDZkNTIwHhcNMjYwMTAxMDQxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZTZiZDk2ZGEzOWRhZjRhZDQxNTA3OTgwNDcxMWNkZTlmYjRlYTYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmuF9x6w8CyKLfIYpcEwCkrRnc8A jCkA/tIULmUv8wqQJTZ7yiGPlcLy+P0/VWwhP7j5eUgJpotWvtucculiI5L8CEEx wxFRDPRT4W4f7eZg4tDPtzK23EdOd3ayFi4NClbGdurUmZTJtAwlzVXMqzOaB96d cPeMtzdlN2bq0f5T2peyLeNqYuFGUNg5HIUAWfXRCDrDi14KeI1YWVBCambcZHH/ M2868eOeSO0lFOxaijQKIM/IQqyCeRnDcQIA+HEB8Qq5FG6SayTb3LqD7Ja4b1vo MotmqfWTpj1v8fFvXlrt++CxFigvgH4VB19aVOVMq+hqMMLy81mp15f+5QIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFD5r2W2jna9K1BUHmARxHN6ftOpiMB8GA1UdIwQY MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt MzZjY2I1YTA2MTk1LzEvUG12WmJhT2RyMHJVRlFlWUJIRWMzcC0wNm1JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1 LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUBURPDHgMF ALlkADUwDQYJKoZIhvcNAQELBQADggEBAD/tP+h7hyi5uMTFFqPTPrWyZvh5M27E X1bfP3uLm0LEA9YIkyo6QNcBJegVMznfwj1g870Z1gFJOWXtDL0cVfhdvwwXNOjD hTicIprpSvwJ4Iwke3Dei3qsCMHwhUpQg44hX/B3YBdUmZDnB4FYY8/XHeRrVdZ/ YG+3TmIBDtdWhIzesdTj784bfx90gAJdmgF+zNglG/q7M+Iq6/csSmMEMxO30xVZ ud/f1WJAtTAUPf9NeESzM7sfsNvgNVCEwfkgIKx35ScpvRgTaOJjlPRoP1r1sHZO tDQlcwl422UyNklBYMCOCE1ue6HTwo+ZE6DTUH4lwlB9e8MXTF1e0XQ= -----END CERTIFICATE-----Generated at Mon Jan 26 00:37:38 2026 by rpki-client