This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/RUHJnmZ1hVRuzvHeAZX1IJOzCqA.roa File: RUHJnmZ1hVRuzvHeAZX1IJOzCqA.roa (raw, json) Hash identifier: XDINrDIH6zNzAf83REPOPeGXEeWWFOzqpderbFTDbEs= Subject key identifier: 45:41:C9:9E:66:75:85:54:6E:CE:F1:DE:01:95:F5:20:93:B3:0A:A0 Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Certificate serial: 019B77C69F868555419C4D873E14B3E4A228 Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/RUHJnmZ1hVRuzvHeAZX1IJOzCqA.roa Signing time: Thu 01 Jan 2026 04:17:44 +0000 ROA not before: Thu 01 Jan 2026 04:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396595 IP address blocks: 81.19.195.30/32 maxlen: 32 81.19.195.31/32 maxlen: 32 185.100.0.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:9f:86:85:55:41:9c:4d:87:3e:14:b3:e4:a2:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Validity Not Before: Jan 1 04:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4541c99e667585546ecef1de0195f52093b30aa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:08:0e:6d:83:d4:e8:13:37:fa:69:5c:7e:82: 5f:f6:7a:86:51:84:b5:92:c1:c8:1c:87:fe:68:72: bc:08:be:55:83:15:14:d9:aa:c7:0f:f0:ac:d9:8f: 04:29:9b:b9:0d:06:d4:25:26:9c:32:56:7f:bb:db: 34:eb:63:75:fb:dc:78:83:0c:3b:0e:50:15:36:ed: 22:35:59:06:c4:52:5c:3a:f7:81:a9:e3:12:41:d4: b3:c8:e7:fe:79:0e:9f:f2:5f:54:82:60:23:e2:71: 26:c0:3a:60:9b:07:5b:03:fb:0a:cb:30:b7:53:c5: c8:01:f7:2e:ea:0b:24:2c:67:31:f5:1b:34:9d:57: c0:1d:38:76:35:a5:ea:43:a0:a4:cb:0b:26:69:63: 7b:a9:11:73:1a:dc:c2:fe:9a:2a:69:2f:60:8e:6a: a8:b1:f1:6f:7d:54:76:df:df:08:28:d4:db:cc:fb: fb:4b:28:a9:3e:63:62:c3:e0:7f:be:ca:9c:bc:b8: 79:b3:a8:52:16:44:7f:03:5d:9e:42:aa:6d:0e:88: 4f:93:06:92:30:55:e8:14:b5:57:51:3c:68:16:95: 24:ec:60:38:85:8b:16:e2:b8:73:a3:15:76:46:3d: ba:8f:29:86:b1:ac:67:30:88:58:9a:0b:5f:56:d3: e5:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:41:C9:9E:66:75:85:54:6E:CE:F1:DE:01:95:F5:20:93:B3:0A:A0 X509v3 Authority Key Identifier: keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/RUHJnmZ1hVRuzvHeAZX1IJOzCqA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.19.195.30/31 185.100.0.53/32 Signature Algorithm: sha256WithRSAEncryption 96:07:18:1b:7a:a2:6f:e9:f7:0b:5d:1f:3b:79:97:30:23:b8: 51:49:4a:6e:cc:6d:e5:f2:02:7d:8f:34:d5:e5:4f:87:50:a4: 82:f7:5c:21:eb:e0:c5:40:38:e0:12:1f:cc:36:8e:ae:5a:db: ca:66:3f:14:f7:09:76:7d:22:83:d6:75:c2:5c:ab:4e:a0:e5: 38:f4:77:c4:5e:24:04:71:b4:a0:f9:63:d0:99:2b:13:cd:9b: 89:08:8c:b0:01:de:72:73:93:81:17:f1:2e:ac:d0:f9:80:a3: fe:bf:4e:c7:95:40:3d:1a:e4:08:f0:49:ba:51:33:5d:a9:51: fc:2e:83:0e:6c:54:9a:1d:aa:ed:ac:6f:04:51:e4:a9:c4:26: cd:c0:f3:ee:b6:e0:9d:b8:e8:e3:ea:b4:03:8e:18:f9:00:d2: c9:4a:91:26:99:28:f3:10:bf:7f:49:49:5f:49:d8:ee:d1:25: dc:ef:57:d3:1e:ea:5c:1d:9f:e4:2e:a8:e9:d5:25:5e:b5:da: ca:ee:9c:4e:9a:6a:f3:05:9b:1c:11:4a:23:59:ca:4e:e6:3d: 11:8d:23:8a:cf:93:73:ee:1d:75:84:e0:95:3f:a6:17:f4:c3: 88:31:af:b7:03:bc:cd:dc:6b:ac:19:fe:36:02:01:99:cc:b2: 38:1e:8c:6b -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3xp+GhVVBnE2HPhSz5KIoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl MDZkNTIwHhcNMjYwMTAxMDQxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NTQxYzk5ZTY2NzU4NTU0NmVjZWYxZGUwMTk1ZjUyMDkzYjMwYWEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1wgObYPU6BM3+mlcfoJf9nqGUYS1 ksHIHIf+aHK8CL5VgxUU2arHD/Cs2Y8EKZu5DQbUJSacMlZ/u9s062N1+9x4gww7 DlAVNu0iNVkGxFJcOveBqeMSQdSzyOf+eQ6f8l9UgmAj4nEmwDpgmwdbA/sKyzC3 U8XIAfcu6gskLGcx9Rs0nVfAHTh2NaXqQ6CkywsmaWN7qRFzGtzC/poqaS9gjmqo sfFvfVR2398IKNTbzPv7SyipPmNiw+B/vsqcvLh5s6hSFkR/A12eQqptDohPkwaS MFXoFLVXUTxoFpUk7GA4hYsW4rhzoxV2Rj26jymGsaxnMIhYmgtfVtPlwQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFEVByZ5mdYVUbs7x3gGV9SCTswqgMB8GA1UdIwQY MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt MzZjY2I1YTA2MTk1LzEvUlVISm5tWjFoVlJ1enZIZUFaWDFJSk96Q3FBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1 LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUBURPDHgMF ALlkADUwDQYJKoZIhvcNAQELBQADggEBAJYHGBt6om/p9wtdHzt5lzAjuFFJSm7M beXyAn2PNNXlT4dQpIL3XCHr4MVAOOASH8w2jq5a28pmPxT3CXZ9IoPWdcJcq06g 5Tj0d8ReJARxtKD5Y9CZKxPNm4kIjLAB3nJzk4EX8S6s0PmAo/6/TseVQD0a5Ajw SbpRM12pUfwugw5sVJodqu2sbwRR5KnEJs3A8+624J246OPqtAOOGPkA0slKkSaZ KPMQv39JSV9J2O7RJdzvV9Me6lwdn+QuqOnVJV612srunE6aavMFmxwRSiNZyk7m PRGNI4rPk3PuHXWE4JU/phf0w4gxr7cDvM3ca6wZ/jYCAZnMsjgejGs= -----END CERTIFICATE-----Generated at Mon Jan 26 02:07:43 2026 by rpki-client