This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/auX3HuCeDaFdU4W4vLZHv6IgC7I.roa File: auX3HuCeDaFdU4W4vLZHv6IgC7I.roa (raw, json) Hash identifier: GDEkR5uExdnP44P87bYsCJVuwBU59ls/jV4SVEkloK4= Subject key identifier: 6A:E5:F7:1E:E0:9E:0D:A1:5D:53:85:B8:BC:B6:47:BF:A2:20:0B:B2 Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Certificate serial: 019B77C692BF9DE607917C7FB9445AC70057 Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/auX3HuCeDaFdU4W4vLZHv6IgC7I.roa Signing time: Thu 01 Jan 2026 04:17:40 +0000 ROA not before: Thu 01 Jan 2026 04:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396566 IP address blocks: 81.19.195.30/32 maxlen: 32 81.19.195.31/32 maxlen: 32 185.100.0.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:92:bf:9d:e6:07:91:7c:7f:b9:44:5a:c7:00:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Validity Not Before: Jan 1 04:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6ae5f71ee09e0da15d5385b8bcb647bfa2200bb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:00:41:ee:b0:f8:14:e3:4d:8f:38:bd:b9:eb: 45:b2:74:64:12:78:02:f7:1a:a0:74:28:2b:44:a9: 7d:cf:96:45:ce:11:3a:97:4c:f3:57:2b:38:80:49: 11:09:8a:2a:36:b6:81:cd:a1:df:8a:3c:3d:cd:f9: 8e:8e:b3:4a:a5:af:2c:ed:9f:e1:70:a7:0a:75:40: 57:2c:ca:57:db:bf:e9:6a:7c:25:8d:e9:a1:bc:95: 59:68:e2:9f:f8:29:02:5d:ce:37:bb:ce:8a:fa:c9: 6d:cf:1e:52:6a:da:35:68:08:ec:c1:6b:c9:5e:8e: b0:81:f1:f6:3b:ba:df:c9:1b:79:e4:b5:55:62:46: 47:f1:74:e5:ce:f8:45:94:00:d1:d1:9c:b2:43:b5: b6:5e:a6:7c:04:04:e9:11:c9:9e:3b:ab:54:b4:05: e8:60:50:4f:92:ba:88:44:04:d8:2f:d0:dc:b2:1d: 2f:b1:e9:ee:3f:be:24:cf:1c:63:8e:41:8c:71:6a: 50:d9:04:25:17:22:aa:b2:20:c1:a6:3f:09:1f:6d: 3c:6e:fc:bf:1f:64:8e:66:51:28:06:05:3e:76:fc: 0b:b1:79:9f:9f:52:b9:82:b4:eb:af:8d:e7:2e:93: e5:2e:ec:99:fb:f4:d7:b0:16:f5:29:62:7c:26:d8: 7e:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:E5:F7:1E:E0:9E:0D:A1:5D:53:85:B8:BC:B6:47:BF:A2:20:0B:B2 X509v3 Authority Key Identifier: keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/auX3HuCeDaFdU4W4vLZHv6IgC7I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.19.195.30/31 185.100.0.53/32 Signature Algorithm: sha256WithRSAEncryption 27:d4:ee:9b:af:96:7f:3d:b7:69:e9:d6:b1:c3:50:52:82:3b: 8c:74:5d:ac:5e:b6:8a:5c:09:f4:6d:34:35:b8:5f:93:8c:22: 15:13:d8:67:17:dd:42:88:86:28:93:a6:8d:b8:7c:68:70:a9: e0:41:8e:03:14:da:3d:4c:8a:8f:f2:f3:0f:fd:64:de:7b:ad: b9:c9:39:05:12:61:c1:c5:2b:20:5b:4b:5d:36:6d:67:f3:3f: 04:24:c4:e8:22:e2:fd:f5:3a:60:b2:dc:7e:49:cc:01:d9:86: 2c:40:a8:d8:ac:4e:60:ba:45:e1:31:4e:e3:f8:47:b2:b1:84: 81:6f:c8:c8:7b:3c:1f:e0:15:b1:75:67:c7:17:af:f2:20:f0: 21:82:07:ef:5e:94:27:68:97:e1:64:cc:8d:d7:b1:fd:5c:2c: 2b:51:83:ed:88:42:b8:9d:b5:68:45:7c:dd:0a:01:fa:a8:ea: 3b:7b:9e:fd:f6:17:9b:04:d3:0b:19:10:63:c9:a5:68:9d:2b: 52:55:6c:db:1c:e1:30:d9:e9:94:fd:7c:b4:c0:81:16:7e:65: df:1b:85:8f:a1:d5:d8:e0:df:06:ea:72:f4:c1:ef:43:78:c2: a7:5a:b0:8b:1f:a6:75:eb:b1:1b:d5:16:09:86:b1:68:4a:7d: cb:8e:5b:d1 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3xpK/neYHkXx/uURaxwBXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl MDZkNTIwHhcNMjYwMTAxMDQxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YWU1ZjcxZWUwOWUwZGExNWQ1Mzg1YjhiY2I2NDdiZmEyMjAwYmIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygBB7rD4FONNjzi9uetFsnRkEngC 9xqgdCgrRKl9z5ZFzhE6l0zzVys4gEkRCYoqNraBzaHfijw9zfmOjrNKpa8s7Z/h cKcKdUBXLMpX27/panwljemhvJVZaOKf+CkCXc43u86K+sltzx5Sato1aAjswWvJ Xo6wgfH2O7rfyRt55LVVYkZH8XTlzvhFlADR0ZyyQ7W2XqZ8BATpEcmeO6tUtAXo YFBPkrqIRATYL9Dcsh0vsenuP74kzxxjjkGMcWpQ2QQlFyKqsiDBpj8JH208bvy/ H2SOZlEoBgU+dvwLsXmfn1K5grTrr43nLpPlLuyZ+/TXsBb1KWJ8Jth+9wIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFGrl9x7gng2hXVOFuLy2R7+iIAuyMB8GA1UdIwQY MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt MzZjY2I1YTA2MTk1LzEvYXVYM0h1Q2VEYUZkVTRXNHZMWkh2NklnQzdJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1 LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUBURPDHgMF ALlkADUwDQYJKoZIhvcNAQELBQADggEBACfU7puvln89t2np1rHDUFKCO4x0Xaxe topcCfRtNDW4X5OMIhUT2GcX3UKIhiiTpo24fGhwqeBBjgMU2j1Mio/y8w/9ZN57 rbnJOQUSYcHFKyBbS102bWfzPwQkxOgi4v31OmCy3H5JzAHZhixAqNisTmC6ReEx TuP4R7KxhIFvyMh7PB/gFbF1Z8cXr/Ig8CGCB+9elCdol+FkzI3Xsf1cLCtRg+2I QridtWhFfN0KAfqo6jt7nv32F5sE0wsZEGPJpWidK1JVbNsc4TDZ6ZT9fLTAgRZ+ Zd8bhY+h1djg3wbqcvTB70N4wqdasIsfpnXrsRvVFgmGsWhKfcuOW9E= -----END CERTIFICATE-----Generated at Mon Jan 26 03:27:56 2026 by rpki-client