This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/YpV2MFy_brL2jT0cKt8P8E1lfPc.roa File: YpV2MFy_brL2jT0cKt8P8E1lfPc.roa (raw, json) Hash identifier: frE/1vVLjdgubAioWKkEVwB/gLF7+hvpvF0A0Q8/CXM= Subject key identifier: 62:95:76:30:5C:BF:6E:B2:F6:8D:3D:1C:2A:DF:0F:F0:4D:65:7C:F7 Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Certificate serial: 019B77C686FD106C7914A93E9CFFB439BC52 Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/YpV2MFy_brL2jT0cKt8P8E1lfPc.roa Signing time: Thu 01 Jan 2026 04:17:37 +0000 ROA not before: Thu 01 Jan 2026 04:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 36631 IP address blocks: 81.19.195.30/32 maxlen: 32 81.19.195.31/32 maxlen: 32 185.100.0.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:86:fd:10:6c:79:14:a9:3e:9c:ff:b4:39:bc:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Validity Not Before: Jan 1 04:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=629576305cbf6eb2f68d3d1c2adf0ff04d657cf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c9:70:22:1a:e7:43:6a:b1:8c:7b:32:45:a8: ee:61:37:44:1c:24:8a:95:20:3d:76:14:78:e7:9d: 7a:24:f6:a4:96:39:93:74:9d:84:1f:2e:11:86:95: 37:14:b3:dd:f6:31:e6:d3:10:39:5c:35:f7:1a:bc: 90:cf:97:30:25:04:bc:e4:c2:ad:ae:87:cb:1c:87: eb:8d:79:1f:ab:2a:7e:cc:3b:b7:80:58:5d:5d:42: 85:8f:6e:3a:78:80:f4:8a:d8:a0:1f:4f:ac:55:4f: 8a:3f:b3:24:6a:6d:15:54:3c:ab:3e:48:9e:65:18: 0c:b3:fb:b0:dc:81:af:2d:59:59:89:71:b3:bf:4e: c4:d3:da:30:1d:8c:04:77:1e:5a:6b:8d:2e:8e:55: c9:45:6f:2d:11:4e:6a:9b:e9:b3:de:1e:66:21:38: 42:27:53:91:d4:09:c9:4d:17:63:09:1b:b1:f6:08: a7:23:55:4d:75:06:14:d9:cb:33:e6:0e:cc:cb:e3: 9f:d2:e8:da:95:d1:88:0e:56:4e:0e:4a:d8:44:00: 4b:39:85:10:6c:74:18:d5:4d:9a:5e:73:81:db:62: e8:c4:e1:2d:3c:9a:86:96:3f:c2:16:38:91:38:a4: 77:c5:7a:7b:6c:ae:97:32:72:fa:27:a8:78:2d:09: 7b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:95:76:30:5C:BF:6E:B2:F6:8D:3D:1C:2A:DF:0F:F0:4D:65:7C:F7 X509v3 Authority Key Identifier: keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/YpV2MFy_brL2jT0cKt8P8E1lfPc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.19.195.30/31 185.100.0.53/32 Signature Algorithm: sha256WithRSAEncryption 52:de:5f:a9:3c:8a:98:ec:f8:1b:cd:5d:c5:f4:42:e5:22:31: 87:2d:61:97:9e:d3:3f:1a:ef:2b:1d:d1:38:04:8d:f7:f1:02: ca:74:28:4c:d0:6c:0d:b2:1b:52:7d:4c:c6:0e:66:48:33:05: c3:ae:ef:94:bc:5c:e8:77:e9:71:24:c8:a5:91:22:14:a7:1b: 5f:53:af:02:46:93:a0:9d:e2:c5:c2:36:e4:32:d9:b5:64:97: d2:75:f7:09:e9:9f:99:2f:87:ae:f9:3f:45:45:dc:68:7b:05: 17:5f:30:ff:54:9f:65:5f:de:cf:f6:9a:d2:13:d6:17:b1:a2: 7e:a7:e4:18:c2:fb:62:58:78:26:58:bf:9f:2f:75:89:a0:95: 8b:d5:52:61:bc:46:bc:26:7a:e0:d7:16:13:f0:f4:01:8b:e0: 42:40:a2:fb:eb:47:e6:d0:59:15:0b:d1:c6:2c:ee:18:26:35: fa:f4:7b:f5:ab:b5:15:ec:aa:4f:e0:3f:b8:02:c9:8c:dd:41: 7b:27:c0:e1:89:9b:0a:2e:f8:e6:8c:e4:1a:27:a5:bf:cd:89: a6:ce:5c:f6:d3:43:e3:49:18:e0:b7:83:fe:91:c3:5c:f7:75: 59:ed:0e:d5:3a:4e:e9:92:3d:49:ad:06:93:c9:c9:0d:bc:37: 47:6d:52:82 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3xob9EGx5FKk+nP+0ObxSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl MDZkNTIwHhcNMjYwMTAxMDQxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Mjk1NzYzMDVjYmY2ZWIyZjY4ZDNkMWMyYWRmMGZmMDRkNjU3Y2Y3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8lwIhrnQ2qxjHsyRajuYTdEHCSK lSA9dhR45516JPakljmTdJ2EHy4RhpU3FLPd9jHm0xA5XDX3GryQz5cwJQS85MKt rofLHIfrjXkfqyp+zDu3gFhdXUKFj246eID0itigH0+sVU+KP7Mkam0VVDyrPkie ZRgMs/uw3IGvLVlZiXGzv07E09owHYwEdx5aa40ujlXJRW8tEU5qm+mz3h5mIThC J1OR1AnJTRdjCRux9ginI1VNdQYU2csz5g7My+Of0ujaldGIDlZODkrYRABLOYUQ bHQY1U2aXnOB22LoxOEtPJqGlj/CFjiROKR3xXp7bK6XMnL6J6h4LQl7+wIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFGKVdjBcv26y9o09HCrfD/BNZXz3MB8GA1UdIwQY MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt MzZjY2I1YTA2MTk1LzEvWXBWMk1GeV9ickwyalQwY0t0OFA4RTFsZlBjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1 LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUBURPDHgMF ALlkADUwDQYJKoZIhvcNAQELBQADggEBAFLeX6k8ipjs+BvNXcX0QuUiMYctYZee 0z8a7ysd0TgEjffxAsp0KEzQbA2yG1J9TMYOZkgzBcOu75S8XOh36XEkyKWRIhSn G19TrwJGk6Cd4sXCNuQy2bVkl9J19wnpn5kvh675P0VF3Gh7BRdfMP9Un2Vf3s/2 mtIT1hexon6n5BjC+2JYeCZYv58vdYmglYvVUmG8RrwmeuDXFhPw9AGL4EJAovvr R+bQWRUL0cYs7hgmNfr0e/WrtRXsqk/gP7gCyYzdQXsnwOGJmwou+OaM5Bonpb/N iabOXPbTQ+NJGOC3g/6Rw1z3dVntDtU6TumSPUmtBpPJyQ28N0dtUoI= -----END CERTIFICATE-----Generated at Mon Jan 26 03:27:45 2026 by rpki-client