This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/S8UiN28Rhs7FECEMX2rC_b1Dh4A.roa File: S8UiN28Rhs7FECEMX2rC_b1Dh4A.roa (raw, json) Hash identifier: suXvH9/ksEBPHRUaFj/ZWclVp1QqTUlGmqJY8+bGBSI= Subject key identifier: 4B:C5:22:37:6F:11:86:CE:C5:10:21:0C:5F:6A:C2:FD:BD:43:87:80 Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Certificate serial: 019B77C68DC756DDFB084EC21321D8800149 Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/S8UiN28Rhs7FECEMX2rC_b1Dh4A.roa Signing time: Thu 01 Jan 2026 04:17:39 +0000 ROA not before: Thu 01 Jan 2026 04:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396552 IP address blocks: 81.19.195.30/32 maxlen: 32 81.19.195.31/32 maxlen: 32 185.100.0.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:8d:c7:56:dd:fb:08:4e:c2:13:21:d8:80:01:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Validity Not Before: Jan 1 04:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4bc522376f1186cec510210c5f6ac2fdbd438780 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a1:76:84:51:01:d1:8c:d0:76:3f:e2:42:a8: df:7b:62:c6:d5:bf:8f:25:bb:31:08:b9:0b:a9:05: 9b:d9:81:e2:d4:a1:c3:a2:ee:e5:ba:ce:db:9e:13: 08:28:ba:d3:23:30:82:5d:b9:5d:51:a6:55:2f:75: 67:ab:ee:23:db:67:80:b2:03:be:67:a7:ce:30:f4: 4e:55:a4:77:8f:28:8c:e8:57:7d:df:e3:b5:72:e4: b3:50:a6:87:43:62:c7:19:bb:82:64:d3:d0:ed:43: 1b:30:cd:83:08:82:1a:a5:d1:ef:a2:0a:6f:34:27: ca:ba:4a:5b:44:fc:d4:10:73:60:4d:69:5e:d6:a9: 50:6d:79:29:d5:14:9b:a3:7b:6f:68:8d:2c:9e:a5: 7d:a8:ec:b5:f1:b2:3b:c4:0d:d6:ea:b1:3a:c6:77: 74:ef:fc:e4:d4:10:8c:9a:32:08:5f:e5:d1:04:fb: 67:88:6b:33:08:f7:5e:50:52:dc:de:fb:f6:e1:25: bf:81:f1:3c:72:17:0d:9a:20:e0:2a:05:4d:56:5c: e3:3a:b2:59:d2:7f:5c:76:3d:29:72:ac:18:8b:0e: 5f:db:0d:e8:bb:2c:3b:c1:58:64:e4:a8:b7:c9:39: 42:81:07:0c:db:ed:44:b4:dd:e6:91:ff:f1:4c:22: c2:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:C5:22:37:6F:11:86:CE:C5:10:21:0C:5F:6A:C2:FD:BD:43:87:80 X509v3 Authority Key Identifier: keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/S8UiN28Rhs7FECEMX2rC_b1Dh4A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.19.195.30/31 185.100.0.53/32 Signature Algorithm: sha256WithRSAEncryption 69:ed:b9:a8:5f:9e:13:e7:a5:c6:78:05:51:d7:79:2a:98:fb: cc:c7:99:9a:c0:20:f3:83:60:b3:e6:13:6d:15:05:59:d5:a7: 7e:f8:cf:93:73:7b:40:39:23:27:34:88:0c:3d:6f:63:57:ca: a1:e7:6c:16:68:f5:42:51:70:c0:fa:7a:a4:bf:ab:da:9b:c0: 35:6d:0e:c8:d9:cf:ee:cc:93:bd:1c:6a:91:30:e6:dc:3d:54: 5e:4f:bc:2b:98:f3:fb:8f:c9:45:82:b3:85:15:82:be:a5:75: 2b:e8:f2:ca:1b:38:7d:ab:e1:dd:09:74:6b:0f:41:8f:59:68: 51:66:fd:f7:19:80:d1:d8:bc:2e:5b:09:92:2c:db:46:52:da: 8a:2b:12:8b:3a:ad:76:21:d8:c2:04:47:a9:7e:86:1c:4e:5c: 65:00:6f:bd:d4:bd:4d:e0:ea:cc:75:db:28:af:a1:53:a6:ff: a3:a8:c4:73:72:99:10:73:de:86:aa:ff:bd:d6:8c:78:77:a3: 5f:21:c9:61:5b:b8:a6:2e:04:f6:1c:12:cc:5e:f7:03:0a:52: b8:03:30:58:6a:ca:38:26:8a:54:95:26:de:6c:90:ed:89:f0: 64:c7:c8:6f:a1:9d:40:a7:56:0e:ac:e1:c3:57:a6:ac:88:ae: 62:6a:55:ed -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3xo3HVt37CE7CEyHYgAFJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl MDZkNTIwHhcNMjYwMTAxMDQxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YmM1MjIzNzZmMTE4NmNlYzUxMDIxMGM1ZjZhYzJmZGJkNDM4NzgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6F2hFEB0YzQdj/iQqjfe2LG1b+P JbsxCLkLqQWb2YHi1KHDou7lus7bnhMIKLrTIzCCXbldUaZVL3Vnq+4j22eAsgO+ Z6fOMPROVaR3jyiM6Fd93+O1cuSzUKaHQ2LHGbuCZNPQ7UMbMM2DCIIapdHvogpv NCfKukpbRPzUEHNgTWle1qlQbXkp1RSbo3tvaI0snqV9qOy18bI7xA3W6rE6xnd0 7/zk1BCMmjIIX+XRBPtniGszCPdeUFLc3vv24SW/gfE8chcNmiDgKgVNVlzjOrJZ 0n9cdj0pcqwYiw5f2w3ouyw7wVhk5Ki3yTlCgQcM2+1EtN3mkf/xTCLCPQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFEvFIjdvEYbOxRAhDF9qwv29Q4eAMB8GA1UdIwQY MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt MzZjY2I1YTA2MTk1LzEvUzhVaU4yOFJoczdGRUNFTVgyckNfYjFEaDRBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1 LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUBURPDHgMF ALlkADUwDQYJKoZIhvcNAQELBQADggEBAGntuahfnhPnpcZ4BVHXeSqY+8zHmZrA IPODYLPmE20VBVnVp374z5Nze0A5Iyc0iAw9b2NXyqHnbBZo9UJRcMD6eqS/q9qb wDVtDsjZz+7Mk70capEw5tw9VF5PvCuY8/uPyUWCs4UVgr6ldSvo8sobOH2r4d0J dGsPQY9ZaFFm/fcZgNHYvC5bCZIs20ZS2oorEos6rXYh2MIER6l+hhxOXGUAb73U vU3g6sx12yivoVOm/6OoxHNymRBz3oaq/73WjHh3o18hyWFbuKYuBPYcEsxe9wMK UrgDMFhqyjgmilSVJt5skO2J8GTHyG+hnUCnVg6s4cNXpqyIrmJqVe0= -----END CERTIFICATE-----Generated at Mon Jan 26 05:03:11 2026 by rpki-client