This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/Y5g7UaTqDPVgRQHGYWQoSrCVVK4.roa File: Y5g7UaTqDPVgRQHGYWQoSrCVVK4.roa (raw, json) Hash identifier: wLlcr/fUU97JB+4qqyLtymB/KMNvnQo1Xp2q0Yb5lHU= Subject key identifier: 63:98:3B:51:A4:EA:0C:F5:60:45:01:C6:61:64:28:4A:B0:95:54:AE Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Certificate serial: 019B77C68777FFE62999DF8123A42D06DE44 Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/Y5g7UaTqDPVgRQHGYWQoSrCVVK4.roa Signing time: Thu 01 Jan 2026 04:17:38 +0000 ROA not before: Thu 01 Jan 2026 04:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 36632 IP address blocks: 81.19.195.30/32 maxlen: 32 81.19.195.31/32 maxlen: 32 185.100.0.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:87:77:ff:e6:29:99:df:81:23:a4:2d:06:de:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Validity Not Before: Jan 1 04:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=63983b51a4ea0cf5604501c66164284ab09554ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ae:f3:2b:ef:9f:78:7a:19:90:12:11:16:1a: 99:5d:3c:f4:bb:10:51:1a:98:32:49:83:3d:9e:70: 21:c1:af:69:50:95:bb:c9:32:74:22:fd:fa:87:0b: 16:ce:a4:b1:38:da:e0:d0:26:48:b2:34:69:7d:b9: f0:7f:d2:57:27:d2:64:4a:9b:5f:ca:90:73:e3:02: ad:c6:63:4e:15:48:7a:cb:9c:d4:c9:19:85:b9:78: 02:8e:12:85:db:49:6e:cb:f3:52:e7:76:4d:12:2c: b2:ba:63:ca:f5:b7:71:45:48:39:7d:e4:52:08:3a: 80:c9:61:c8:c1:5c:df:10:aa:df:df:cc:60:04:ae: de:f3:86:5c:bb:9f:20:0b:57:c8:8e:cc:83:52:8e: d9:f9:1d:9f:fc:2f:4f:e9:9e:29:04:59:87:d3:bc: b7:d9:19:f2:2d:c5:d0:23:d5:93:55:16:27:2b:2e: 03:ce:49:36:e6:f0:8c:38:23:10:32:6c:79:98:7a: b1:16:e6:f7:02:10:2a:af:8a:52:80:89:38:01:01: c4:ee:57:3d:28:4d:d9:23:5f:5f:48:82:d7:25:83: f7:eb:19:96:63:39:31:66:25:87:7f:37:98:89:e6: a0:32:2e:fa:d4:c0:17:25:f5:5d:f2:42:d5:14:9e: e9:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:98:3B:51:A4:EA:0C:F5:60:45:01:C6:61:64:28:4A:B0:95:54:AE X509v3 Authority Key Identifier: keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/Y5g7UaTqDPVgRQHGYWQoSrCVVK4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.19.195.30/31 185.100.0.53/32 Signature Algorithm: sha256WithRSAEncryption c6:7a:61:73:23:58:8e:0d:09:43:4a:83:b6:e2:3b:fe:46:c1: 2e:af:d6:c6:2c:bd:96:41:94:d6:00:f0:a5:b0:65:10:29:85: 73:43:88:e1:6e:b1:32:a1:14:fb:4a:bb:5e:4b:c0:a2:58:a0: 54:1b:c6:a9:53:88:4a:5c:4b:57:98:2b:c8:5c:cb:34:13:12: 2f:eb:51:f4:d7:2e:c0:43:90:14:0c:d4:8f:fb:02:da:c4:c9: 31:70:ec:25:95:fa:83:c9:0f:b1:d8:ef:43:0c:31:69:95:67: 07:d3:12:88:13:a9:58:41:59:ca:29:0a:33:16:2d:91:c2:5e: 22:a3:b5:5c:92:a5:e2:6c:a1:6d:aa:ee:55:77:6b:5c:1e:e0: 5e:98:dc:5b:3b:61:79:2b:0d:c3:a9:f6:4f:7a:b0:d4:85:58: cb:6a:7f:bf:ec:36:b8:1b:ca:db:7b:1c:3c:80:8d:6b:41:1a: f6:b1:9a:54:e8:27:4b:04:3a:79:8b:5d:85:0b:ac:0d:cb:a7: ed:f8:aa:21:73:d0:39:33:ae:10:1c:08:60:7b:20:b4:2b:f3: 24:7f:60:c7:13:a7:3b:66:f5:e4:28:dc:82:6e:1d:a4:29:2f: bd:62:75:42:9c:d6:d0:56:a1:52:2a:f0:8c:55:71:42:81:92: de:53:94:dd -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3xod3/+Ypmd+BI6QtBt5EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl MDZkNTIwHhcNMjYwMTAxMDQxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Mzk4M2I1MWE0ZWEwY2Y1NjA0NTAxYzY2MTY0Mjg0YWIwOTU1NGFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAya7zK++feHoZkBIRFhqZXTz0uxBR GpgySYM9nnAhwa9pUJW7yTJ0Iv36hwsWzqSxONrg0CZIsjRpfbnwf9JXJ9JkSptf ypBz4wKtxmNOFUh6y5zUyRmFuXgCjhKF20luy/NS53ZNEiyyumPK9bdxRUg5feRS CDqAyWHIwVzfEKrf38xgBK7e84Zcu58gC1fIjsyDUo7Z+R2f/C9P6Z4pBFmH07y3 2RnyLcXQI9WTVRYnKy4Dzkk25vCMOCMQMmx5mHqxFub3AhAqr4pSgIk4AQHE7lc9 KE3ZI19fSILXJYP36xmWYzkxZiWHfzeYieagMi761MAXJfVd8kLVFJ7p0QIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFGOYO1Gk6gz1YEUBxmFkKEqwlVSuMB8GA1UdIwQY MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt MzZjY2I1YTA2MTk1LzEvWTVnN1VhVHFEUFZnUlFIR1lXUW9TckNWVks0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1 LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUBURPDHgMF ALlkADUwDQYJKoZIhvcNAQELBQADggEBAMZ6YXMjWI4NCUNKg7biO/5GwS6v1sYs vZZBlNYA8KWwZRAphXNDiOFusTKhFPtKu15LwKJYoFQbxqlTiEpcS1eYK8hcyzQT Ei/rUfTXLsBDkBQM1I/7AtrEyTFw7CWV+oPJD7HY70MMMWmVZwfTEogTqVhBWcop CjMWLZHCXiKjtVySpeJsoW2q7lV3a1we4F6Y3Fs7YXkrDcOp9k96sNSFWMtqf7/s Nrgbytt7HDyAjWtBGvaxmlToJ0sEOnmLXYULrA3Lp+34qiFz0DkzrhAcCGB7ILQr 8yR/YMcTpztm9eQo3IJuHaQpL71idUKc1tBWoVIq8IxVcUKBkt5TlN0= -----END CERTIFICATE-----Generated at Mon Jan 26 03:27:26 2026 by rpki-client