This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/SJpCDJ04Rn2o_v5jjC2o3jy7bjs.roa File: SJpCDJ04Rn2o_v5jjC2o3jy7bjs.roa (raw, json) Hash identifier: PsUspYStNPp9kofzYnZdEsFeay0W/mfhSDeLr8ZCY7Q= Subject key identifier: 48:9A:42:0C:9D:38:46:7D:A8:FE:FE:63:8C:2D:A8:DE:3C:BB:6E:3B Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Certificate serial: 019B77C681AD3463327B1518321E956E1B6B Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/SJpCDJ04Rn2o_v5jjC2o3jy7bjs.roa Signing time: Thu 01 Jan 2026 04:17:36 +0000 ROA not before: Thu 01 Jan 2026 04:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 36619 IP address blocks: 81.19.195.30/32 maxlen: 32 81.19.195.31/32 maxlen: 32 185.100.0.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:81:ad:34:63:32:7b:15:18:32:1e:95:6e:1b:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Validity Not Before: Jan 1 04:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=489a420c9d38467da8fefe638c2da8de3cbb6e3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:48:67:5d:39:d1:e2:1f:eb:48:47:aa:dc:c0: f1:db:12:8b:fb:51:a0:b3:eb:c9:3e:4b:a0:4b:e9: d1:55:0f:6a:fb:6f:05:df:de:83:71:84:5c:95:df: ff:bf:12:50:b3:cd:af:22:36:2b:96:6a:90:31:65: 6e:cf:60:38:8c:f7:03:26:e7:03:85:34:ab:ea:a5: 51:1f:51:b8:8f:cb:a2:b0:34:7d:3c:aa:92:c2:fa: c4:31:58:08:b8:98:a3:e7:70:2a:91:41:d5:ea:0e: 63:8c:f8:9e:20:77:bf:ca:4c:45:85:a6:8b:30:d7: ed:76:f5:47:6a:84:b3:ec:62:2c:91:f5:d5:d1:28: 81:35:b0:be:0c:f8:4b:1c:28:c7:4f:6e:bc:ea:4a: 95:bd:38:35:97:56:7d:ca:44:4a:89:9c:e7:98:68: af:a0:8e:7b:4b:3d:4d:ff:1b:23:c0:09:06:76:3b: 70:8e:b4:24:e2:96:4e:57:1a:25:71:f6:07:63:20: 77:2a:3e:04:46:20:3b:5f:94:cb:74:70:40:2a:59: 26:0b:19:f7:1e:26:8c:c4:ee:bc:70:7e:9f:a3:3f: 82:95:13:c7:fe:1f:a7:1c:7a:32:8f:d6:ff:ce:ce: 8e:c3:e2:1d:f7:5e:f7:b5:b6:81:fe:fe:10:97:a6: f7:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:9A:42:0C:9D:38:46:7D:A8:FE:FE:63:8C:2D:A8:DE:3C:BB:6E:3B X509v3 Authority Key Identifier: keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/SJpCDJ04Rn2o_v5jjC2o3jy7bjs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.19.195.30/31 185.100.0.53/32 Signature Algorithm: sha256WithRSAEncryption 48:6d:09:a5:7d:6e:53:04:5d:81:8a:05:75:d4:f0:33:5f:b5: d9:59:0f:25:6b:90:76:78:0a:69:1a:b9:a0:4b:cc:fd:96:f7: 71:a1:ca:0a:ea:98:be:eb:77:78:5d:11:9f:8f:ef:f8:a5:bf: 5c:b9:40:ab:04:80:9f:00:b4:01:fd:73:78:79:40:64:78:4e: 81:a9:b9:5b:0b:35:f1:bf:3a:ce:74:f4:01:bb:2d:16:c1:81: e1:78:90:0f:67:57:46:2d:07:ab:00:e1:4b:d9:aa:29:39:8a: a5:dd:bd:96:c5:68:e9:d7:ea:e2:de:62:58:8a:7f:45:de:b1: 48:cc:6d:cf:06:f6:60:e6:12:b3:26:e8:eb:cf:7d:59:89:18: 1c:cc:72:14:77:44:25:c6:6b:aa:61:47:65:45:14:3e:19:a1: de:3a:c6:6d:aa:01:2a:3b:23:cc:aa:a7:86:aa:7c:ab:e0:fa: 12:e1:9c:91:4a:0d:1c:af:a1:0c:ae:69:67:52:82:67:65:1b: 0b:84:4a:b8:83:11:70:73:8b:46:c9:66:21:68:1b:cc:96:52: 8a:1d:4a:ad:53:88:67:a9:d6:ac:3f:a2:cf:3e:90:57:6f:c0: b8:4c:40:c4:03:0f:42:83:88:ee:02:7e:72:5b:91:46:a0:79: f8:4b:65:f4 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3xoGtNGMyexUYMh6VbhtrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl MDZkNTIwHhcNMjYwMTAxMDQxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ODlhNDIwYzlkMzg0NjdkYThmZWZlNjM4YzJkYThkZTNjYmI2ZTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUhnXTnR4h/rSEeq3MDx2xKL+1Gg s+vJPkugS+nRVQ9q+28F396DcYRcld//vxJQs82vIjYrlmqQMWVuz2A4jPcDJucD hTSr6qVRH1G4j8uisDR9PKqSwvrEMVgIuJij53AqkUHV6g5jjPieIHe/ykxFhaaL MNftdvVHaoSz7GIskfXV0SiBNbC+DPhLHCjHT2686kqVvTg1l1Z9ykRKiZznmGiv oI57Sz1N/xsjwAkGdjtwjrQk4pZOVxolcfYHYyB3Kj4ERiA7X5TLdHBAKlkmCxn3 HiaMxO68cH6foz+ClRPH/h+nHHoyj9b/zs6Ow+Id9173tbaB/v4Ql6b3vwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFEiaQgydOEZ9qP7+Y4wtqN48u247MB8GA1UdIwQY MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt MzZjY2I1YTA2MTk1LzEvU0pwQ0RKMDRSbjJvX3Y1ampDMm8zank3YmpzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1 LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUBURPDHgMF ALlkADUwDQYJKoZIhvcNAQELBQADggEBAEhtCaV9blMEXYGKBXXU8DNftdlZDyVr kHZ4CmkauaBLzP2W93GhygrqmL7rd3hdEZ+P7/ilv1y5QKsEgJ8AtAH9c3h5QGR4 ToGpuVsLNfG/Os509AG7LRbBgeF4kA9nV0YtB6sA4UvZqik5iqXdvZbFaOnX6uLe YliKf0XesUjMbc8G9mDmErMm6OvPfVmJGBzMchR3RCXGa6phR2VFFD4Zod46xm2q ASo7I8yqp4aqfKvg+hLhnJFKDRyvoQyuaWdSgmdlGwuESriDEXBzi0bJZiFoG8yW UoodSq1TiGep1qw/os8+kFdvwLhMQMQDD0KDiO4CfnJbkUagefhLZfQ= -----END CERTIFICATE-----Generated at Mon Jan 26 03:27:28 2026 by rpki-client