This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/VM65K3WrwNENiGbJk5J8Yijqm7I.roa File: VM65K3WrwNENiGbJk5J8Yijqm7I.roa (raw, json) Hash identifier: Wetv8rim0ysfdrX+uQFQbzqnGA/S4tS1Ua/YSiXBa5o= Subject key identifier: 54:CE:B9:2B:75:AB:C0:D1:0D:88:66:C9:93:92:7C:62:28:EA:9B:B2 Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Certificate serial: 019B77C694FAFBE09C610A5EBF3931AF9F5C Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/VM65K3WrwNENiGbJk5J8Yijqm7I.roa Signing time: Thu 01 Jan 2026 04:17:41 +0000 ROA not before: Thu 01 Jan 2026 04:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396573 IP address blocks: 81.19.195.30/32 maxlen: 32 81.19.195.31/32 maxlen: 32 185.100.0.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:94:fa:fb:e0:9c:61:0a:5e:bf:39:31:af:9f:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Validity Not Before: Jan 1 04:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=54ceb92b75abc0d10d8866c993927c6228ea9bb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c3:29:a5:cc:75:2c:f7:f2:a2:2c:7c:1b:df: 74:9e:55:10:c4:cf:62:6c:e7:8e:a7:57:a2:bb:56: 30:48:df:41:f1:10:87:e3:6f:0e:73:a7:8b:9a:88: 2f:1d:8e:ef:c4:8c:58:e3:c2:2a:94:63:7b:db:4b: ea:cb:bf:20:24:45:7a:07:48:3f:b4:15:f9:80:dc: 34:55:43:5d:37:ec:99:87:00:3a:3e:da:1a:ac:5d: 29:85:c6:f1:66:90:8d:b8:42:10:17:29:b8:db:96: b5:62:3a:f8:47:7f:56:11:1c:be:cc:94:9d:a2:b3: 8c:13:10:32:07:f6:f6:b4:28:9d:4d:6c:c8:30:e6: ee:f6:fd:b0:a2:41:0a:d1:2f:50:ba:36:4d:58:62: 0a:2b:cd:2e:ec:8c:a7:a3:b4:44:33:9a:a7:b3:41: 7f:75:85:90:02:71:4b:33:d9:58:d2:87:2d:93:04: 0f:05:58:e8:93:ab:cf:f6:b9:60:16:ad:2a:c7:1c: 84:da:af:41:ba:e9:0b:e7:02:e9:83:44:ab:27:ff: de:b2:34:b6:20:e0:fe:04:34:85:30:eb:20:0e:01: 08:17:5f:27:23:df:3e:5a:4a:0c:b4:d1:9c:26:40: c8:54:ef:e9:89:d9:69:7e:a5:70:92:8e:47:f3:84: 84:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:CE:B9:2B:75:AB:C0:D1:0D:88:66:C9:93:92:7C:62:28:EA:9B:B2 X509v3 Authority Key Identifier: keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/VM65K3WrwNENiGbJk5J8Yijqm7I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.19.195.30/31 185.100.0.53/32 Signature Algorithm: sha256WithRSAEncryption 60:a8:21:fc:f2:fb:18:6c:50:de:93:8b:2f:99:00:e9:2d:19: 98:49:d1:f8:eb:51:24:ca:21:d6:3d:ae:db:87:52:3c:29:d5: cd:60:f8:b8:01:f8:05:f2:5d:ff:9d:09:7a:ae:02:0d:45:fe: 49:ef:a8:f8:74:a3:23:fa:b5:01:0e:d5:96:ee:5d:ad:68:32: 1c:3e:b7:8d:44:63:a2:28:7d:21:3d:5e:7d:97:c3:38:35:24: 6d:c0:a0:39:ef:15:5c:b4:a4:a9:8c:a2:65:65:20:18:14:97: ca:3c:7d:1f:fb:d7:6b:5c:97:74:09:8a:e4:db:08:a4:86:94: 27:04:47:2e:8d:2a:ea:e3:8c:66:2c:83:dc:08:d6:6f:ba:15: 0a:19:19:fb:95:d6:57:b4:23:88:a3:33:cd:b1:fa:c5:1d:43: 47:4e:2a:0f:18:9b:d0:59:40:60:bf:ee:51:81:84:7c:c4:cc: 3f:e1:b6:25:de:f3:30:a6:c0:c2:b3:11:67:0d:d0:53:11:51: f1:97:da:0c:83:16:a5:93:f3:86:0f:22:dd:9b:64:4d:23:b8: ba:61:5c:f4:73:d1:5c:2b:bc:bb:b3:c2:a5:47:1c:ce:31:73: c0:fe:ca:b0:38:27:b4:c6:2e:9d:da:f6:00:fe:06:36:90:58: cf:04:4f:f8 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3xpT6++CcYQpevzkxr59cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl MDZkNTIwHhcNMjYwMTAxMDQxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NGNlYjkyYjc1YWJjMGQxMGQ4ODY2Yzk5MzkyN2M2MjI4ZWE5YmIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsMppcx1LPfyoix8G990nlUQxM9i bOeOp1eiu1YwSN9B8RCH428Oc6eLmogvHY7vxIxY48IqlGN720vqy78gJEV6B0g/ tBX5gNw0VUNdN+yZhwA6PtoarF0phcbxZpCNuEIQFym425a1Yjr4R39WERy+zJSd orOMExAyB/b2tCidTWzIMObu9v2wokEK0S9QujZNWGIKK80u7Iyno7REM5qns0F/ dYWQAnFLM9lY0octkwQPBVjok6vP9rlgFq0qxxyE2q9BuukL5wLpg0SrJ//esjS2 IOD+BDSFMOsgDgEIF18nI98+WkoMtNGcJkDIVO/pidlpfqVwko5H84SENQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFFTOuSt1q8DRDYhmyZOSfGIo6puyMB8GA1UdIwQY MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt MzZjY2I1YTA2MTk1LzEvVk02NUszV3J3TkVOaUdiSms1SjhZaWpxbTdJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1 LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUBURPDHgMF ALlkADUwDQYJKoZIhvcNAQELBQADggEBAGCoIfzy+xhsUN6Tiy+ZAOktGZhJ0fjr USTKIdY9rtuHUjwp1c1g+LgB+AXyXf+dCXquAg1F/knvqPh0oyP6tQEO1ZbuXa1o Mhw+t41EY6IofSE9Xn2Xwzg1JG3AoDnvFVy0pKmMomVlIBgUl8o8fR/712tcl3QJ iuTbCKSGlCcERy6NKurjjGYsg9wI1m+6FQoZGfuV1le0I4ijM82x+sUdQ0dOKg8Y m9BZQGC/7lGBhHzEzD/htiXe8zCmwMKzEWcN0FMRUfGX2gyDFqWT84YPIt2bZE0j uLphXPRz0VwrvLuzwqVHHM4xc8D+yrA4J7TGLp3a9gD+BjaQWM8ET/g= -----END CERTIFICATE-----Generated at Mon Jan 26 00:37:20 2026 by rpki-client