This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/XP7JRHl8Ff5BED_9-dZObjhIINw.roa File: XP7JRHl8Ff5BED_9-dZObjhIINw.roa (raw, json) Hash identifier: zV7AUe2dgwL1c4lTDdYd+c1RMdYW/LuEb930ILya9QM= Subject key identifier: 5C:FE:C9:44:79:7C:15:FE:41:10:3F:FD:F9:D6:4E:6E:38:48:20:DC Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Certificate serial: 019B77C68F433A340FA71456920677D0EF1C Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/XP7JRHl8Ff5BED_9-dZObjhIINw.roa Signing time: Thu 01 Jan 2026 04:17:40 +0000 ROA not before: Thu 01 Jan 2026 04:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396555 IP address blocks: 81.19.195.30/32 maxlen: 32 81.19.195.31/32 maxlen: 32 185.100.0.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:8f:43:3a:34:0f:a7:14:56:92:06:77:d0:ef:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Validity Not Before: Jan 1 04:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5cfec944797c15fe41103ffdf9d64e6e384820dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d5:65:3b:60:2b:75:2e:13:e3:3b:dd:49:04: cf:f2:17:8a:e7:4d:3d:bd:51:75:41:d5:11:60:f2: 7d:fd:e5:01:ae:71:a1:98:5c:b1:65:e5:67:d2:a0: 1a:2f:f7:9f:77:23:da:a3:85:60:b0:bf:33:fa:17: 8c:f7:ea:f7:5f:66:b7:32:c8:e1:d3:90:f4:5a:49: 8c:23:12:f8:5a:c4:c2:6c:aa:b3:12:81:0c:85:63: cc:45:65:ec:72:17:be:07:4d:41:fa:89:3d:ba:58: 08:9f:51:0b:79:3b:92:0d:bc:19:d4:fe:6f:8e:f9: 09:dc:60:6d:4e:18:a2:57:10:18:1a:0b:e7:42:3c: ba:4c:f9:bd:64:dc:9f:1b:e6:8b:13:81:77:02:d5: b2:9b:1b:57:10:1b:19:58:1d:6e:0c:01:45:60:88: ea:5a:c3:bd:e1:13:00:bc:10:40:51:e3:d3:22:09: 9d:bb:46:b7:6e:76:91:80:ab:1e:cf:1a:42:aa:08: 31:7f:2c:bc:dd:04:92:03:22:07:b7:d7:6e:2e:4e: 7f:89:9e:96:7e:46:56:7b:b1:8b:4b:d1:11:2c:50: ae:ac:55:5f:a8:ee:5d:c0:b3:c0:c3:b9:af:6c:eb: 15:d1:c5:a9:2f:25:54:f3:b7:79:32:a1:bc:1f:b7: 3d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:FE:C9:44:79:7C:15:FE:41:10:3F:FD:F9:D6:4E:6E:38:48:20:DC X509v3 Authority Key Identifier: keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/XP7JRHl8Ff5BED_9-dZObjhIINw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.19.195.30/31 185.100.0.53/32 Signature Algorithm: sha256WithRSAEncryption 2f:98:22:5c:b4:ac:61:02:43:55:4d:b5:30:88:63:11:0a:ea: d6:dd:f4:9a:ad:f5:ac:d9:e5:86:d4:f8:f5:d1:18:cf:a1:05: 06:26:94:d9:73:2a:e4:af:ad:b4:2f:0c:90:b8:9c:23:74:6a: ca:4d:c1:51:59:fd:d4:c2:85:05:d9:02:6f:10:e2:ba:7b:29: 7d:eb:2c:95:c4:5c:9d:df:c1:49:96:d2:ba:f1:4d:28:5e:49: 07:bd:dc:86:c2:00:fc:78:77:40:6b:ea:bd:23:16:d7:bb:76: e7:ea:86:10:a3:c6:0b:45:aa:a3:68:90:f5:14:e7:42:a7:1b: e4:9a:d0:fa:76:38:dd:54:11:9b:5b:58:8e:c9:06:8e:32:87: d5:dc:db:5c:63:83:cc:ee:d9:37:9e:0d:c5:a8:3b:2f:86:a7: d8:d9:04:9c:66:66:ac:18:7b:45:84:eb:7b:31:e6:c9:98:aa: 16:9b:7a:58:1c:04:c4:8d:73:bc:f3:d6:d2:67:f1:ae:d5:58: ba:89:1f:e7:cf:50:51:dc:50:d6:54:75:ad:85:a7:92:59:7d: 5a:80:31:f6:83:ad:07:54:8a:e5:d1:45:a2:c5:3a:c4:f8:a6: eb:88:db:eb:0d:33:cd:41:a8:4c:86:1b:5a:91:78:76:d2:9c: ff:82:41:e6 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3xo9DOjQPpxRWkgZ30O8cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl MDZkNTIwHhcNMjYwMTAxMDQxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Y2ZlYzk0NDc5N2MxNWZlNDExMDNmZmRmOWQ2NGU2ZTM4NDgyMGRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldVlO2ArdS4T4zvdSQTP8heK5009 vVF1QdURYPJ9/eUBrnGhmFyxZeVn0qAaL/efdyPao4VgsL8z+heM9+r3X2a3Msjh 05D0WkmMIxL4WsTCbKqzEoEMhWPMRWXsche+B01B+ok9ulgIn1ELeTuSDbwZ1P5v jvkJ3GBtThiiVxAYGgvnQjy6TPm9ZNyfG+aLE4F3AtWymxtXEBsZWB1uDAFFYIjq WsO94RMAvBBAUePTIgmdu0a3bnaRgKsezxpCqggxfyy83QSSAyIHt9duLk5/iZ6W fkZWe7GLS9ERLFCurFVfqO5dwLPAw7mvbOsV0cWpLyVU87d5MqG8H7c9+QIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFFz+yUR5fBX+QRA//fnWTm44SCDcMB8GA1UdIwQY MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt MzZjY2I1YTA2MTk1LzEvWFA3SlJIbDhGZjVCRURfOS1kWk9iamhJSU53LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1 LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUBURPDHgMF ALlkADUwDQYJKoZIhvcNAQELBQADggEBAC+YIly0rGECQ1VNtTCIYxEK6tbd9Jqt 9azZ5YbU+PXRGM+hBQYmlNlzKuSvrbQvDJC4nCN0aspNwVFZ/dTChQXZAm8Q4rp7 KX3rLJXEXJ3fwUmW0rrxTSheSQe93IbCAPx4d0Br6r0jFte7dufqhhCjxgtFqqNo kPUU50KnG+Sa0Pp2ON1UEZtbWI7JBo4yh9Xc21xjg8zu2TeeDcWoOy+Gp9jZBJxm ZqwYe0WE63sx5smYqhabelgcBMSNc7zz1tJn8a7VWLqJH+fPUFHcUNZUda2Fp5JZ fVqAMfaDrQdUiuXRRaLFOsT4puuI2+sNM81BqEyGG1qReHbSnP+CQeY= -----END CERTIFICATE-----Generated at Mon Jan 26 07:56:25 2026 by rpki-client