This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/_twSRxvnmJaHtF0TkP8ZdzsEPUw.roa File: _twSRxvnmJaHtF0TkP8ZdzsEPUw.roa (raw, json) Hash identifier: 4Me5w1iBLvsAxUU+kJFd2NRA7iojDWERTVlh6pMYHvg= Subject key identifier: FE:DC:12:47:1B:E7:98:96:87:B4:5D:13:90:FF:19:77:3B:04:3D:4C Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Certificate serial: 019B77C6967FC9442442A34712A411F68B06 Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/_twSRxvnmJaHtF0TkP8ZdzsEPUw.roa Signing time: Thu 01 Jan 2026 04:17:41 +0000 ROA not before: Thu 01 Jan 2026 04:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396575 IP address blocks: 81.19.195.30/32 maxlen: 32 81.19.195.31/32 maxlen: 32 185.100.0.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:96:7f:c9:44:24:42:a3:47:12:a4:11:f6:8b:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Validity Not Before: Jan 1 04:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fedc12471be7989687b45d1390ff19773b043d4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:69:58:27:71:20:23:9b:6a:91:d4:5f:35:82: 7e:bd:04:db:1e:b5:17:1f:7e:00:51:ed:9d:4b:62: 4e:51:9f:09:48:5b:18:de:20:b6:8c:eb:8e:41:5a: 48:1a:16:54:4e:54:ca:d3:6f:68:9e:89:2d:96:a5: b8:7d:2d:9d:39:7f:2b:86:51:fc:ae:83:10:b2:4f: 9f:e9:16:6f:c9:3a:52:2e:6b:5d:dd:cb:f3:e9:a7: cd:a9:7e:52:4a:6e:bb:24:8f:3c:ba:d8:10:0a:03: 7c:39:75:d7:93:a3:44:94:d7:e9:64:d2:a3:2d:d4: c0:62:5e:df:89:0e:c1:36:28:a3:a2:3d:71:d6:d1: d8:c5:70:ae:86:60:86:57:6e:d1:ef:85:ff:de:16: cc:08:3a:53:29:56:d2:b6:d8:f3:60:19:fe:14:50: bc:be:94:85:d3:b1:98:1d:77:45:6e:95:03:33:85: f9:e9:a3:e6:79:8c:6f:6b:64:41:17:37:b6:6e:40: ea:f7:55:d9:bb:25:2c:85:27:0e:a9:87:e6:ee:ef: fe:10:6b:14:43:62:2f:84:16:5f:c2:52:b0:b9:05: eb:b5:0f:08:d5:d1:a7:e6:18:0e:3b:b1:6d:3f:fd: d6:f4:19:2a:f9:7d:43:41:f0:23:31:1a:23:8a:0d: 65:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:DC:12:47:1B:E7:98:96:87:B4:5D:13:90:FF:19:77:3B:04:3D:4C X509v3 Authority Key Identifier: keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/_twSRxvnmJaHtF0TkP8ZdzsEPUw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.19.195.30/31 185.100.0.53/32 Signature Algorithm: sha256WithRSAEncryption 91:43:f7:de:dd:5f:b5:93:9d:57:c8:e2:51:f5:7a:fb:36:d4: 12:38:ab:1d:b7:c8:30:03:8a:e5:42:17:cf:14:1d:bd:6a:7c: 4f:17:45:59:9d:d1:87:cc:7c:37:8f:e5:10:f4:64:20:8e:1e: 06:56:7c:a9:3d:40:af:f4:13:32:23:f5:65:57:fa:d3:44:81: 2f:3a:d3:06:a1:9a:08:05:a8:46:1d:99:f0:f9:42:e9:c8:b5: f7:57:81:9d:66:26:ef:42:2b:c3:ae:5d:40:3c:66:9d:7b:dd: ee:a6:80:2d:d7:bf:20:d4:d2:39:b3:79:16:d3:7d:39:fb:dd: 01:aa:2a:c2:64:83:6e:ba:ba:eb:a2:bb:a0:18:ae:34:7b:c7: fc:b1:6b:b6:68:15:2e:ec:83:e1:10:0d:bb:30:d1:8f:37:64: 9d:80:e6:c6:ff:d5:66:80:72:02:8f:c5:e7:2f:e6:a7:ea:6a: 3f:de:0b:e8:02:1a:c6:9c:b7:5e:1f:59:5a:8b:3e:0f:ac:80: c6:8f:b1:80:42:bc:77:16:1e:61:20:49:04:e1:17:ff:a9:dc: ce:5f:3d:ad:2d:a9:88:36:8e:95:22:98:56:a5:10:9a:15:f1: 45:b7:28:4e:e9:58:42:d6:9c:c1:07:15:6f:0d:4f:d6:59:fe: 4d:16:4b:3f -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3xpZ/yUQkQqNHEqQR9osGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl MDZkNTIwHhcNMjYwMTAxMDQxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZWRjMTI0NzFiZTc5ODk2ODdiNDVkMTM5MGZmMTk3NzNiMDQzZDRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGlYJ3EgI5tqkdRfNYJ+vQTbHrUX H34AUe2dS2JOUZ8JSFsY3iC2jOuOQVpIGhZUTlTK029onoktlqW4fS2dOX8rhlH8 roMQsk+f6RZvyTpSLmtd3cvz6afNqX5SSm67JI88utgQCgN8OXXXk6NElNfpZNKj LdTAYl7fiQ7BNiijoj1x1tHYxXCuhmCGV27R74X/3hbMCDpTKVbSttjzYBn+FFC8 vpSF07GYHXdFbpUDM4X56aPmeYxva2RBFze2bkDq91XZuyUshScOqYfm7u/+EGsU Q2IvhBZfwlKwuQXrtQ8I1dGn5hgOO7FtP/3W9Bkq+X1DQfAjMRojig1l+wIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFP7cEkcb55iWh7RdE5D/GXc7BD1MMB8GA1UdIwQY MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt MzZjY2I1YTA2MTk1LzEvX3R3U1J4dm5tSmFIdEYwVGtQOFpkenNFUFV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1 LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUBURPDHgMF ALlkADUwDQYJKoZIhvcNAQELBQADggEBAJFD997dX7WTnVfI4lH1evs21BI4qx23 yDADiuVCF88UHb1qfE8XRVmd0YfMfDeP5RD0ZCCOHgZWfKk9QK/0EzIj9WVX+tNE gS860wahmggFqEYdmfD5QunItfdXgZ1mJu9CK8OuXUA8Zp173e6mgC3XvyDU0jmz eRbTfTn73QGqKsJkg266uuuiu6AYrjR7x/yxa7ZoFS7sg+EQDbsw0Y83ZJ2A5sb/ 1WaAcgKPxecv5qfqaj/eC+gCGsact14fWVqLPg+sgMaPsYBCvHcWHmEgSQThF/+p 3M5fPa0tqYg2jpUimFalEJoV8UW3KE7pWELWnMEHFW8NT9ZZ/k0WSz8= -----END CERTIFICATE-----Generated at Mon Jan 26 00:37:32 2026 by rpki-client