This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/UVqJZdNk8FZVTwP4DbDnfc38toc.roa File: UVqJZdNk8FZVTwP4DbDnfc38toc.roa (raw, json) Hash identifier: Mlns/OcIou8tHvaUAW9iBnaIAKXAvTtAs2GfY32L98o= Subject key identifier: 51:5A:89:65:D3:64:F0:56:55:4F:03:F8:0D:B0:E7:7D:CD:FC:B6:87 Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Certificate serial: 019B77C684F502351D30DF224CE8AA85F2A5 Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/UVqJZdNk8FZVTwP4DbDnfc38toc.roa Signing time: Thu 01 Jan 2026 04:17:37 +0000 ROA not before: Thu 01 Jan 2026 04:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 36625 IP address blocks: 81.19.195.30/32 maxlen: 32 81.19.195.31/32 maxlen: 32 185.100.0.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:84:f5:02:35:1d:30:df:22:4c:e8:aa:85:f2:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Validity Not Before: Jan 1 04:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=515a8965d364f056554f03f80db0e77dcdfcb687 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:2c:36:44:8a:32:74:c0:5e:55:30:16:be:6c: 4f:bb:7f:ba:c7:47:73:ec:84:c8:e8:af:27:7d:5d: bd:3b:18:dc:d3:67:93:d9:04:b3:82:77:5b:57:0e: 7e:7c:64:05:fe:29:0b:1d:16:78:b2:86:c1:45:e2: 21:7b:16:fa:c2:5c:92:b5:c2:45:c5:08:33:15:3b: b2:ab:00:5e:65:cf:67:d6:50:16:28:36:19:8f:7d: 30:5c:f4:8b:7f:1d:6c:d9:24:4b:28:10:7f:52:16: 5b:a0:09:73:59:53:8c:27:ee:b8:43:ae:1b:f6:5c: d7:1c:64:77:af:d7:73:73:57:57:5b:0f:b5:fb:65: ae:07:f3:ac:a0:e4:56:bd:01:27:b8:66:66:36:c5: f5:27:42:21:08:fd:05:fc:ba:2f:c4:de:da:65:a8: 7a:fb:f3:05:e8:2d:29:89:7e:66:bc:18:a3:13:9e: d7:05:5d:9d:5f:23:5a:03:9d:be:4f:74:4d:04:26: 23:22:86:2d:c2:e1:cb:8d:3d:ab:01:b1:21:6b:61: e1:f7:2e:f4:3c:01:04:e7:bd:4d:87:c1:4d:ed:17: 5e:b1:c9:48:f2:d6:8c:ca:a5:8f:81:65:ba:b6:e9: 44:91:f5:47:ba:79:a0:b4:ef:fe:20:12:bb:29:87: 23:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:5A:89:65:D3:64:F0:56:55:4F:03:F8:0D:B0:E7:7D:CD:FC:B6:87 X509v3 Authority Key Identifier: keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/UVqJZdNk8FZVTwP4DbDnfc38toc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.19.195.30/31 185.100.0.53/32 Signature Algorithm: sha256WithRSAEncryption 1a:f4:7f:07:51:e1:5d:36:91:18:3c:e8:c8:2a:db:d2:64:01: fa:3f:30:b9:ce:75:55:37:3c:c6:34:02:1e:dc:b7:08:02:27: 0c:17:8f:23:b4:44:1b:d9:9a:b6:48:54:ca:68:1d:dc:10:a8: fb:2d:ce:b2:5b:af:5e:6f:71:6a:ee:ee:f1:73:82:f4:e5:dc: f9:75:c8:88:bf:87:d1:a3:a6:e1:70:82:98:dd:9c:dc:62:1b: c4:85:b1:52:02:e9:76:9d:d8:fd:c5:8e:8c:ba:ac:7f:3e:79: 86:d3:4a:ca:e8:2c:10:3c:e3:91:bb:aa:48:34:f3:3a:1c:db: 84:17:7b:51:c1:48:b8:df:37:89:ab:5d:4d:14:71:d6:49:c8: e7:54:04:ed:d3:33:b8:02:49:41:ab:c0:0b:6a:0f:7a:f7:ee: 26:9b:d5:19:54:4f:26:d6:dd:15:98:0b:c9:ea:62:05:96:07: 0e:9a:ae:e3:14:b1:ce:dc:4a:40:2a:dc:f2:be:23:55:34:10: 74:23:98:02:19:b7:21:2a:0d:58:5e:d0:17:51:c6:b7:01:c9: 67:96:e6:82:8b:16:3e:ef:9e:66:c3:3f:cc:20:96:3e:fa:3e: f0:46:e6:b0:f3:3f:e2:a9:ff:4a:40:f7:dc:de:d9:89:21:b5: 12:3e:d5:c2 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3xoT1AjUdMN8iTOiqhfKlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl MDZkNTIwHhcNMjYwMTAxMDQxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MTVhODk2NWQzNjRmMDU2NTU0ZjAzZjgwZGIwZTc3ZGNkZmNiNjg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxiw2RIoydMBeVTAWvmxPu3+6x0dz 7ITI6K8nfV29Oxjc02eT2QSzgndbVw5+fGQF/ikLHRZ4sobBReIhexb6wlyStcJF xQgzFTuyqwBeZc9n1lAWKDYZj30wXPSLfx1s2SRLKBB/UhZboAlzWVOMJ+64Q64b 9lzXHGR3r9dzc1dXWw+1+2WuB/OsoORWvQEnuGZmNsX1J0IhCP0F/LovxN7aZah6 +/MF6C0piX5mvBijE57XBV2dXyNaA52+T3RNBCYjIoYtwuHLjT2rAbEha2Hh9y70 PAEE571Nh8FN7RdesclI8taMyqWPgWW6tulEkfVHunmgtO/+IBK7KYcjAwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFFFaiWXTZPBWVU8D+A2w533N/LaHMB8GA1UdIwQY MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt MzZjY2I1YTA2MTk1LzEvVVZxSlpkTms4RlpWVHdQNERiRG5mYzM4dG9jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1 LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUBURPDHgMF ALlkADUwDQYJKoZIhvcNAQELBQADggEBABr0fwdR4V02kRg86Mgq29JkAfo/MLnO dVU3PMY0Ah7ctwgCJwwXjyO0RBvZmrZIVMpoHdwQqPstzrJbr15vcWru7vFzgvTl 3Pl1yIi/h9GjpuFwgpjdnNxiG8SFsVIC6Xad2P3Fjoy6rH8+eYbTSsroLBA845G7 qkg08zoc24QXe1HBSLjfN4mrXU0UcdZJyOdUBO3TM7gCSUGrwAtqD3r37iab1RlU TybW3RWYC8nqYgWWBw6aruMUsc7cSkAq3PK+I1U0EHQjmAIZtyEqDVhe0BdRxrcB yWeW5oKLFj7vnmbDP8wglj76PvBG5rDzP+Kp/0pA99ze2YkhtRI+1cI= -----END CERTIFICATE-----Generated at Mon Jan 26 05:01:39 2026 by rpki-client